Terms

The service

SecureYet scans the code repositories you connect for committed secrets, vulnerable packages, licence risks, end-of-life runtimes and the AI models the code calls, and turns what it finds into work you can track, there or in Jira. By creating an account or using SecureYet, you agree to these terms on behalf of yourself and the organisation you use it for.

SecureYet is in beta, run from Copenhagen, Denmark. When it leaves beta, a company will take over the service and these terms, and this page will name it.

Beta

Features may change, move between plans or be removed, and the service may be unavailable at times. SecureYet aims to give notice of changes that take something away from a paid plan.

Your account and your organisation

• Keep your sign-in safe. You are responsible for what happens under your account.
• Admins of an organisation decide who joins it, what is connected to it, and when it is deleted.
• Only connect what you are allowed to. Connect repositories, code hosts and Jira sites only when you, or the client you work for, have the right to have them scanned and to share the results with the people in your organisation.

Acceptable use

Do not use SecureYet to:

• scan code you have no right to scan, or look for secrets in order to use them;
• break, overload or probe SecureYet itself, or get around its plan limits;
• reach another organisation's data;
• break the law, or the terms of the code hosts and trackers you connect.

An account that does may be suspended.

Your data

Your code, and what SecureYet finds in it, stays yours. SecureYet uses it only to provide the service to your organisation, as the privacy page describes. It does not keep your code after a scan, and never stores a secret's value. You can export your organisation's data, and deleting the organisation deletes it.

Plans and billing

• The Free plan costs nothing. Paid plans are billed in advance for the period you choose, at the prices shown when you subscribe.
• Payment is handled by Clerk and Stripe. SecureYet never sees your card.
• You can cancel at any time. The plan runs to the end of the period you have paid for and is not refunded for the rest of it.
• A price change applies from your next period, with notice before it starts.

No guarantee

SecureYet helps you find problems; it cannot promise to find all of them. A clean result does not mean the code is secure, and keeping your systems secure stays your responsibility. The service is provided as it is, without warranties beyond what the law requires.

Liability

As far as the law allows, SecureYet is not liable for indirect or consequential loss, such as lost profits, lost data or a breach it did not find. Its total liability is limited to what your organisation paid for SecureYet in the 12 months before the claim. Nothing here limits liability that cannot be limited by law.

Ending

You can stop using SecureYet and delete your organisation at any time; its data is deleted 30 days later. SecureYet may end or suspend an account that breaks these terms, and will give notice before closing the service as a whole, with time to export your data.

Changes and law

These terms may change. The date at the top says when they last did, and a change that matters is announced in the app or by email before it applies. Danish law governs these terms, and disputes go to the courts of Copenhagen.

Questions: [email protected].