GGateTest

Terms of Service

Effective date: September 10, 2026

These Terms explain what you can expect from GateTest and what we ask of you when you use the GateTest scanning service, CLI, GitHub App, Gluecron integration, and MCP server. Questions: support@gatetest.io.

1. Agreement to Terms

These Terms of Service (Terms) are a binding agreement between you and GateTest (GateTest, we, us, our). They govern your use of the website at gatetest.io, the hosted scanning service, the GateTest GitHub App and GitHub Action, the Gluecron integration, the hosted MCP endpoint, our APIs, and any related software and documentation (together, the Service).

By creating an account, installing the GitHub App, connecting a Gluecron repository, starting a scan, buying a Plan, or otherwise using the Service, you agree to these Terms and to our Privacy Policy, Acceptable Use Policy and Refund Policy, each of which forms part of these Terms. If you do not agree, do not use the Service.

If you use the Service on behalf of a company or other organisation, you accept these Terms for that organisation and confirm you have authority to bind it. You and your then refer to that organisation and to every person it allows to use the Service through its account.

Please read [Dispute Resolution and Arbitration](#dispute-resolution-and-arbitration) carefully. It requires most disputes to be resolved by individual arbitration rather than in court, waives class actions and jury trials where the law allows, and explains how to opt out within 30 days.

2. Definitions

Capitalised terms have the meanings below, or the meaning given where they first appear in bold.

  • Account — the record we hold for you, created when you sign in through a supported identity provider.
  • AI Features — any part of the Service that sends content to a large-language-model provider: AI code review, finding explanations, auto-fix, pair-review, architecture annotation, Forensic diagnosis, and the AI tools of the MCP server.
  • Beta Features — features labelled beta, preview, experimental, early access, or similar.
  • CLI — the GateTest command-line tool and local MCP server distributed as open source under the MIT License.
  • Customer Content — repositories, source code, configuration, live URLs, and any other material you submit to the Service or allow it to fetch, including changes it writes back to your repository at your request.
  • Findings — the results a scan produces: the finding message, rule and module name, file path, line number, severity, and verdict.
  • Output — Findings, reports, scores, badges, explanations, and code changes the Service generates for you.
  • Git Host — a service that hosts your repositories and that the Service integrates with, currently GitHub and Gluecron.
  • Plan — a one-time scan tier or a monthly subscription listed in Plans, Fees and Billing.
  • Fees — the amounts payable for a Plan, as displayed at checkout.
  • Report — the Output a scan delivers through the website, e-mail, a pull-request comment, a commit status, or an API response.

3. Eligibility and Accounts

You must be at least 18 years old, or the age of legal majority where you live if that is higher, and able to form a binding contract. You must not be a person or entity barred from using the Service under Export Controls and Sanctions.

You sign in through a supported identity provider rather than a password we hold. Signed-in sessions last up to 30 days. You are responsible for everything done through your Account, for keeping your session, tokens and API keys confidential, and for the people you allow to use the Service. Tell us at support@gatetest.io as soon as you become aware of unauthorised use.

Keep the information on your Account accurate. We may rely on the e-mail address associated with your Account for notices, receipts, API keys, and security messages.

Automated or scripted account creation, sharing one Account across unrelated organisations, and circumventing Plan limits are not permitted.

4. The Service

Hosted scans

You give us a repository URL or connect a Git Host, and we fetch the repository into memory and a temporary workspace on our servers for the duration of the scan, run the scan engine and any AI Features your Plan includes, deliver the Report, and delete the working copy.

We do not execute your code. Modules that would run customer-controlled code (mutation, chaos, unitTests, integrationTests, e2e, lint) are skipped on our infrastructure. They run only where you choose to run them: in your own CI through the GitHub Action, or on your own machine through the CLI.

Open-source CLI

The CLI is free and licensed under the MIT License. It runs on your machine, with your own credentials and AI keys, and nothing in these Terms narrows the rights the MIT License gives you in that software. These Terms still govern any hosted part of the Service the CLI calls, such as a hosted scan or the telemetry endpoint. The CLI sends anonymised telemetry (module names and counts, never code, file paths or Findings); opt out with the GATETEST_NO_TELEMETRY environment variable or "telemetry": false in .gatetest.json.

GitHub App and GitHub Action

The GitHub App receives push and pull-request events, reads repository contents to scan them, and writes commit statuses and pull-request comments. On Plans that include auto-fix it pushes a branch and opens a pull request; it never merges. The permissions it requests are shown by GitHub when you install it, and uninstalling it ends our access. The GitHub Action runs inside your own CI runner under your control and can run the modules the hosted engine skips.

Gluecron

When you connect a Gluecron repository, Gluecron sends us push events, we read the repository to scan it, and we write the verdict and Findings back to Gluecron. Disconnecting the repository on Gluecron ends our access.

MCP server

The local MCP server ships with the CLI, is free, and runs entirely on your machine. The GateTest MCP Plan adds a hosted MCP endpoint and hosted scan history, accessed with an API key we e-mail you after checkout. Keep that key confidential; anything done with it is done on your Account.

Changes to the Service

We improve the Service continuously and may add, change, or remove features, modules, rules, models, and limits. Where a change materially removes a capability you are paying for, we will give reasonable notice by e-mail or on the website where practicable. If we discontinue a subscription Plan, we will refund any prepaid Fees for the period after discontinuation.

5. Plans, Fees and Billing

The Plans and their prices at the effective date of these Terms are set out below. Prices are in US dollars and exclude taxes. The price shown at checkout is the price for that purchase.

PlanPriceBilling
Quick ScanUS$29One-time, charged in full at checkout
Full ScanUS$99One-time, charged in full at checkout
Scan + FixUS$199One-time, charged in full at checkout
Forensic ScanUS$399One-time, charged in full at checkout
ContinuousUS$49 per monthMonthly subscription covering every repository under one Git Host owner or organisation; renews until cancelled
GateTest MCPUS$29 per monthMonthly subscription; renews until cancelled
EnterpriseBy agreementNegotiated per customer; contact support@gatetest.io

Payment

Payments are processed by Stripe, Inc. through a checkout page Stripe hosts. Your card details are entered on Stripe's pages and never touch our servers; we receive a payment identifier, your e-mail address, the Plan, and the repository the purchase is for. By paying you confirm you are authorised to use the payment method. We accept the payment methods Stripe offers at checkout.

One-time Plans and delivery

One-time Plans are charged in full at checkout. The Service is delivered when the scan completes and a Report is made available to you. Delivery means the purchased modules ran and produced Output. It does not mean the scan found any particular number of issues, found every issue, that every Finding is correct, or that your code is free of defects. The Report is the service; its contents are not a warranty.

Subscriptions

The Continuous and GateTest MCP Plans are billed monthly in advance and renew automatically each month until you cancel. Cancel at any time through the billing portal; cancellation takes effect at the end of the current billing period and you keep access until then. The Continuous Plan includes a monthly allowance of AI review; deterministic scans are not metered. Fix pull requests are not part of the Continuous Plan and are bought as one-time Plans.

Taxes

Fees exclude GST, VAT, sales tax, withholding tax and similar charges. Where we are required to collect a tax, it is added at checkout. Where you are required to withhold, you pay us the amount that leaves us with the full Fee.

Price changes

We may change Fees. For subscriptions we will give at least 30 days' notice by e-mail before a new price applies to your next renewal; if you do not want to pay the new price, cancel before it takes effect. One-time Plans are always charged at the price displayed when you buy.

Failed payments and chargebacks

If a subscription payment fails we may retry it and will notify you. While it remains unpaid we may suspend the Plan, including scanning on push. We do not delete your Findings for non-payment alone. If you believe a charge is wrong, contact support@gatetest.io before disputing it with your card issuer; a chargeback on a delivered scan may lead to suspension under Suspension and Termination.

Refunds

Refunds are governed by our Refund Policy, which forms part of these Terms and does not limit any right you have under law that cannot be excluded.

6. Your Content and Repositories

You own your Customer Content. These Terms do not transfer any right in it to us. You grant us a limited, non-exclusive, worldwide, royalty-free licence to fetch, store temporarily, copy, analyse, transmit to the sub-processors listed in our Sub-processors page, and display Customer Content solely to provide, secure, support, and improve the Service for you as described in these Terms and the Privacy Policy. The licence ends when the scan finishes, except for the Findings we keep.

What we keep. Source code is not retained after a scan: the working copy is deleted when the scan finishes. Findings (message, module, file path, line number, severity) are retained so that you can see scan history, trends and badges, until you ask us to delete them by e-mail to support@gatetest.io. There is no automatic purge. Where an AI Feature ran, the file contents it reviewed were also sent to Anthropic, PBC, subject to that provider's 30-day retention; see AI Features.

Authority. You represent and warrant that for every repository, URL, or other content you submit: you own it or have permission from its owner to have it scanned and, on Plans that include auto-fix, to have branches and pull requests written to it; scanning it does not breach any law, agreement, or third-party right; and it does not contain material designed to attack, probe, or exfiltrate data from the Service, its providers, or other customers. Scanning code you are not authorised to scan is a breach of these Terms and of the Acceptable Use Policy.

What you merge is yours. Code changes we propose become part of your repository only when you merge them. You are responsible for reviewing, testing, and approving every change before it reaches your codebase.

We do not review Customer Content manually except to provide support you ask for, to investigate a suspected breach of these Terms, or where the law requires. We may refuse or stop a scan that we reasonably believe breaches these Terms.

7. Our Intellectual Property

The Service — including the scan engine, modules, rules, detection logic, prompts, models and model configuration, report formats, website, documentation, and the GateTest name and logos — is owned by GateTest and its licensors and is protected by intellectual-property law. Subject to these Terms we grant you a limited, non-exclusive, non-transferable, revocable right to use the Service for your internal business or personal purposes during the term. No other right is granted, by implication or otherwise.

Output is yours to use. We claim no ownership of Output. To the extent we hold any right in code changes generated for your repository, we assign it to you when the Output is delivered. You may use Reports and Findings for any lawful purpose, including sharing them inside your organisation and with your advisers. You may not offer Reports to third parties as a scanning or auditing service of your own.

You may not copy, modify, or create derivative works of the hosted Service; reverse-engineer, decompile, or otherwise attempt to extract its rules, prompts, or source, except to the extent a law that cannot be excluded allows it; remove any proprietary notice; or use the Service to build or train a competing product. None of this restricts your rights in the CLI under the MIT License.

We may use aggregated, de-identified data about how the Service is used, including which modules fire and how often, to operate and improve the Service. That data never contains your code, file paths, or Findings.

8. Acceptable Use

The full rules are in the Acceptable Use Policy, which forms part of these Terms. In summary, you must not:

  • scan repositories, sites, or systems you are not authorised to scan, or use Findings to exploit vulnerabilities in anyone's systems;
  • submit content designed to compromise, probe, overload, or exfiltrate data from the Service, its providers, or other customers;
  • probe, stress-test, or penetration-test the Service itself without our prior written permission;
  • bypass authentication, rate limits, billing, or Plan limits, or share API keys outside your organisation;
  • scrape, crawl, or bulk-download the website, API, or Output beyond documented use;
  • resell, sublicense, or white-label the Service or its Output;
  • use the Service to break any law, including export-control, sanctions, privacy, and intellectual-property law.

We may investigate suspected breaches, suspend access while we do, remove content, and cooperate with lawful requests from authorities.

9. Third-party Services

The Service depends on services we do not control: Git Hosts (GitHub, Gluecron), our payment processor (Stripe), and our AI providers (Anthropic; OpenAI only when you opt in to a second opinion on a Forensic Scan scan). Your use of each is governed by that provider's own terms and privacy policy, and by the permissions you grant it. The GitHub App's permissions are set and shown by GitHub, not by us.

We are not responsible for third-party services, for their availability, or for what they do with data you give them directly. If a third-party service fails or changes in a way that affects the Service, we will use reasonable efforts to work around it, but that failure is outside our control for the purposes of Force Majeure. The complete list of providers that process your data, and what each receives, is on our Sub-processors page.

Links from the website at gatetest.io to other sites are provided for convenience; we do not endorse or take responsibility for them.

10. AI Features

The deterministic scan engine uses no AI: its modules are rule-based and produce the same Findings for the same input. AI Features run only on Plans and paths that include them, or when you invoke them yourself through the CLI or MCP server.

What AI Features send. When an AI Feature runs, the complete contents of the files being reviewed or fixed, their paths, and the related Finding text are sent to Anthropic, PBC, our AI provider, together with our prompts. Anthropic retains API inputs and outputs for a standard 30 days and does not use them to train its models under its commercial terms. If you opt in to a second-opinion review on a Forensic Scan scan, the same material is also sent to OpenAI, L.L.C.. Details are in the Privacy Policy and on the Sub-processors page.

AI output can be wrong. Large language models are probabilistic. AI review, explanations, and generated fixes may be inaccurate, incomplete, out of date, insecure, or unsuitable for your codebase; they may flag non-issues, miss real ones, invent references, or introduce new bugs. You must review and test every AI-generated change before you merge it. We never merge changes for you, and you are solely responsible for the code you ship.

Bring your own key. Where the Service lets you supply your own AI provider API key, that key is used only for the request you attach it to and is never stored, logged, or echoed back. You are responsible for the key, for the spend it incurs, and for complying with your provider's terms. The CLI and local MCP server always use your own key and never ours. Where you choose a model, the request is billed to whichever key funded it.

AI Features and their Output are information, not advice. They are not a substitute for a qualified engineer, a security professional, or legal counsel, and we are not liable for actions you take or decline to take on the basis of them.

11. No Guarantee of Detection

A passing scan is not a warranty. GateTest is an automated analysis tool. A pass, a score, a badge, or an empty Findings list means the modules that ran did not report an issue; it does not mean, and we do not represent, that your code is free of defects, vulnerabilities, licence problems, accessibility failures, or any other issue, or that it complies with any law, standard, or certification.

No automated tool finds every issue. Coverage depends on which modules ran, what your Plan includes, what the hosted engine can safely run, the languages and frameworks in your repository, and the state of the rules and models on the day of the scan. Findings may be false positives, may be mis-classified in severity, and may not apply to your context.

The Service supplements, and does not replace, code review, testing, professional security assessment, penetration testing, and compliance audit. Nothing the Service produces is legal, security, engineering, financial, or other professional advice. You are responsible for verifying Findings, for deciding what to do about them, and for the security and quality of what you deploy.

Without limiting the rest of these Terms, we are not liable for any defect, vulnerability, breach, outage, or loss in code that the Service scanned, whether the scan passed or failed, or for any consequence of merging a proposed fix.

12. Beta Features

We may offer Beta Features. They are provided for evaluation, may be incomplete, may change or be withdrawn at any time without notice, and may not be subject to the same support, availability, or security commitments as the rest of the Service.

Beta Features are provided as is and are excluded from any warranty, indemnity, or service commitment in these Terms to the fullest extent the law allows. Use them at your own risk, and do not rely on them for production decisions unless you have verified the Output yourself.

13. Confidentiality

Confidential Information is non-public information one party discloses to the other that is marked confidential or that a reasonable person would understand to be confidential. Your Customer Content, Findings, and Reports are your Confidential Information. Our non-public features, roadmap, pricing offers, and API keys are ours.

Each party will use the other's Confidential Information only to perform under these Terms, will protect it with at least reasonable care, and will disclose it only to employees, contractors, and providers who need it and are bound by obligations at least as protective. We disclose your Confidential Information only to the providers on our Sub-processors page, to the extent needed to provide the Service.

These obligations do not cover information that is or becomes public without breach, was already known to the recipient, is independently developed, or is received from a third party without restriction. A party may disclose Confidential Information where the law or a court requires, after giving the other party notice where lawful and reasonable help to contest or limit the disclosure.

Confidentiality obligations last for three years after they are disclosed, and for as long as the information remains a trade secret.

14. Privacy and Data Protection

Our Privacy Policy explains what personal information we collect, why, how long we keep it, and the rights you have. Our Cookie Policy lists every cookie and browser-storage key the Service sets.

Where you are subject to the GDPR, the UK GDPR, or similar law and we process personal data in Customer Content on your behalf, our Data Processing Addendum applies and forms part of these Terms. The providers we use to process your data, and what each receives, are listed on our Sub-processors page.

Requests to access, correct, export, or delete your personal information or Findings are handled by e-mail to support@gatetest.io. We will verify the request and respond within the time the applicable law allows.

You are responsible for having a lawful basis to submit any personal data contained in your Customer Content, and for telling the people it concerns where the law requires it.

15. Feedback

If you send us ideas, suggestions, bug reports, or other feedback about the Service, you grant us a perpetual, irrevocable, worldwide, royalty-free licence to use it for any purpose without obligation to you. Feedback is not Confidential Information, and we do not claim any right in your Customer Content by receiving it.

16. Suspension and Termination

By you. You may stop using the Service at any time. Cancel subscriptions through the billing portal, uninstall the GitHub App or disconnect your Gluecron repositories to end our access, and e-mail support@gatetest.io to close your Account.

By us. We may suspend or terminate your access to all or part of the Service, with notice where practicable, if: you materially breach these Terms or the Acceptable Use Policy; a Fee is overdue; your use creates a security, legal, or operational risk to the Service, our providers, or other customers; we are required to by law or by a Git Host or payment provider; or you dispute a charge for a delivered scan with your card issuer rather than with us.

Where a breach can be cured, we will normally give you notice and a reasonable period to cure before terminating. Where immediate action is needed to protect the Service or others, or where the law requires it, we may act without prior notice and will notify you afterwards.

We may also stop providing the Service, or any Plan, on at least 30 days' notice; see The Service for what happens to prepaid Fees.

17. Effect of Termination

When these Terms end: your right to use the Service ends; subscriptions are cancelled and no further renewal is charged; Fees already due remain payable; and any API keys are revoked. Fees paid for scans that were delivered are not refunded, except as the Refund Policy or a law that cannot be excluded provides.

We keep your Account record and Findings after termination so that you can return and see your history, and we delete them when you ask by e-mail to support@gatetest.io. Records we are required to keep for tax, accounting, fraud-prevention, or legal purposes, including payment records and the audit log, are kept for the period the law requires, up to 7 years, and then deleted.

Termination does not affect your rights in the CLI under the MIT License, which continues to apply to any copy you already have.

The sections that by their nature should survive do so, including Your Content and Repositories as to Findings, Our Intellectual Property, No Guarantee of Detection, Confidentiality, Disclaimer of Warranties, Limitation of Liability, Indemnification, Governing Law and Venue, and Dispute Resolution and Arbitration.

18. Disclaimer of Warranties

TO THE FULLEST EXTENT PERMITTED BY LAW, THE SERVICE AND ALL OUTPUT ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY OF ANY KIND, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, OR THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE. We do not warrant that the Service will detect any particular issue, that Findings or AI Output are correct, or that any defect will be fixed.

We target high availability but do not guarantee it and do not offer service credits. We may take the Service down for maintenance, and will announce planned maintenance in advance where practicable.

Consumer rights. Some laws imply guarantees that cannot be excluded. Nothing in these Terms excludes, restricts, or modifies any right or remedy you have under the New Zealand Consumer Guarantees Act 1993 or Fair Trading Act 1986, or under any other law that cannot be excluded by agreement. If you acquire the Service for the purposes of a business, you agree that the Consumer Guarantees Act 1993 does not apply, as that Act permits, and that these Terms are fair and reasonable given the nature of the Service and its price.

The CLI is licensed under the MIT License, which contains its own disclaimer of warranty.

19. Limitation of Liability

Exclusions. TO THE FULLEST EXTENT PERMITTED BY LAW, GATETEST AND ITS OWNERS, DIRECTORS, EMPLOYEES, CONTRACTORS, LICENSORS, AND PROVIDERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, DATA, OR COST OF SUBSTITUTE SERVICES, ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, UNDER ANY THEORY OF LIABILITY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

The cap. TO THE FULLEST EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, IN AGGREGATE, WILL NOT EXCEED THE GREATER OF US$100 AND THE TOTAL FEES YOU PAID TO GATETEST IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. This cap applies across all claims and causes of action together and is not increased by bringing more than one.

Without limiting the above, we are not liable for: defects, vulnerabilities, breaches, or losses in code the Service scanned, whether the scan passed or failed; the consequences of merging a proposed fix; actions taken on the basis of Findings or AI Output; the acts or omissions of Git Hosts, payment providers, AI providers, or other third parties; or loss arising from your use of the CLI, which is provided under the MIT License without warranty.

What is not limited. Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for your obligation to pay Fees, for your indemnification obligations, or for any liability that the law does not allow to be excluded or limited, including under the Consumer Guarantees Act 1993 and Fair Trading Act 1986 where they apply. Where liability under such a law can be limited, it is limited to the greatest extent the law permits, including, at our option, resupplying the Service or paying the cost of resupply.

These limitations are an essential part of the bargain between you and us and reflect the Service's price. They apply even if a remedy fails of its essential purpose.

20. Indemnification

By you. You will defend, indemnify, and hold harmless GateTest and its owners, directors, employees, and contractors from and against any third-party claim, and the resulting losses, damages, liabilities, costs, and reasonable legal fees, arising out of or related to: your Customer Content; your breach of these Terms or the Acceptable Use Policy; your scanning of, or writing to, any repository, site, or system you were not authorised to scan or modify; your violation of any law or third-party right; or your use of Output, including merging a proposed fix.

By us. We will defend you against any third-party claim alleging that the hosted Service, as provided by us and used in accordance with these Terms, infringes that third party's patent, copyright, or trade mark, and will pay the damages and costs finally awarded or agreed in settlement. This does not apply to claims arising from Customer Content, Output, third-party services, open-source components including the CLI, your modifications, combination of the Service with anything we did not supply, or use after we told you to stop. If such a claim arises or seems likely, we may procure the right for you to keep using the Service, modify or replace it so that it does not infringe, or terminate the affected part and refund prepaid Fees for the period after termination. This section states your exclusive remedy for infringement claims.

Conditions. The indemnified party must notify the indemnifying party promptly of the claim, give it sole control of the defence and settlement, and provide reasonable help at the indemnifying party's expense. The indemnifying party may not settle a claim in a way that admits fault by, or imposes an obligation on, the indemnified party without its written consent, which will not be unreasonably withheld.

21. Governing Law and Venue

These Terms, and any dispute or claim arising out of or relating to them or the Service, are governed by the laws of New Zealand, without regard to conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Subject to Dispute Resolution and Arbitration, any dispute that is not arbitrated will be brought exclusively in the courts of Auckland, New Zealand, and each party submits to the jurisdiction of those courts. Either party may seek interim or injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.

If you are a consumer, this section does not deprive you of the protection of mandatory consumer law in the country where you live, or of the right to bring proceedings in your local courts where that law gives you one.

22. Dispute Resolution and Arbitration

Talk to us first. Before starting any formal proceeding, e-mail support@gatetest.io with your Account e-mail, a description of the dispute, and the outcome you want. We will do the same if we have a claim against you, using the e-mail on your Account. Both parties will try in good faith to resolve the dispute for at least 30 days from that notice before doing anything else.

Agreement to arbitrate. If we cannot resolve it informally, you and GateTest agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Service, including its formation, interpretation, or enforceability, will be resolved by binding individual arbitration and not in court, except as this section provides. This covers claims in contract, tort, statute, or any other theory.

Rules and seat. If you reside in the United States, the arbitration will be administered by the American Arbitration Association under its Consumer Arbitration Rules (or, for business customers, its Commercial Arbitration Rules). Otherwise it will be administered by the New Zealand International Arbitration Centre under its Arbitration Rules. The seat of arbitration is Auckland, New Zealand; hearings may be held by video, or in a location the parties agree, and the arbitration may proceed on documents alone if both parties agree. The arbitrator may award any relief a court could award to an individual party.

Individual basis only. TO THE EXTENT THE LAW ALLOWS, EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING, AND EACH PARTY WAIVES ANY RIGHT TO A JURY TRIAL. The arbitrator may not consolidate claims of more than one person or preside over any form of representative proceeding. If a court finds this paragraph unenforceable for a particular claim, that claim alone will be heard in the courts named in Governing Law and Venue and the rest will remain in arbitration.

Exceptions. Either party may bring an individual claim in a small-claims court or tribunal that has jurisdiction over it, and either party may seek interim or injunctive relief in court to protect intellectual property, Confidential Information, or the integrity of the Service. Nothing in this section prevents you from raising a complaint with a consumer-protection or data-protection authority.

Opt-out. You may opt out of this arbitration agreement by e-mailing support@gatetest.io with the subject line "Arbitration Opt-Out", your name, and the e-mail on your Account, within 30 days of first accepting these Terms. Opting out does not affect any other part of these Terms, and disputes will then be resolved in the courts named in Governing Law and Venue.

Delegation, fees, and confidentiality. The arbitrator, not a court, decides any question about the scope, applicability, or enforceability of this section, except that a court decides whether the individual-basis paragraph is enforceable. Fees and costs are allocated under the applicable rules; where the rules allow, the arbitrator may award costs and reasonable legal fees to the prevailing party. The arbitration and its outcome are confidential except as needed to enforce an award or as the law requires.

Changes. If we change this section after you accept these Terms, the change does not apply to a dispute you notified us of before the change took effect, and you may reject the change by opting out within 30 days of notice.

23. Export Controls and Sanctions

The Service and its Output may be subject to the export-control and sanctions laws of New Zealand, the United States, the European Union, the United Kingdom, and other jurisdictions. You will comply with them. You represent that you are not located in, organised under the laws of, or ordinarily resident in a country or territory subject to comprehensive sanctions by any of those jurisdictions, and that you are not listed on, or owned or controlled by anyone listed on, any government restricted-party list.

You will not export, re-export, or transfer the Service or Output to any such country, territory, or person, or use it for any purpose those laws prohibit. We may decline to provide, or may suspend, the Service where we reasonably believe doing otherwise would breach those laws.

24. Government Users

If you are a government body, you will use the Service only as permitted by the laws that apply to you, and you represent that you have the authority to accept these Terms, including its dispute-resolution and indemnity provisions, or have told us in writing which provisions you cannot accept before using the Service.

If you are a United States federal government end user, the Service and its documentation are commercial computer software and commercial computer software documentation, and your rights in them are those granted to all other users under these Terms, consistent with FAR 12.212 and DFARS 227.7202.

25. Changes to These Terms

We may update these Terms as the Service, the law, or our business changes. For material changes we will give at least 30 days' notice before they take effect, by e-mail to your Account address, by a notice on the website, or both, and we will update the effective date at the top of this page. Changes that do not materially reduce your rights or increase your obligations, such as corrections and clarifications, may take effect when posted.

If you continue to use the Service after a change takes effect, you accept the changed Terms. If you do not agree, stop using the Service and cancel any subscription before the change takes effect; prepaid Fees for the period after you cancel will be refunded where the change materially reduced what you paid for.

26. Assignment

You may not assign or transfer these Terms, or any right or obligation under them, without our prior written consent, except to a successor in a merger, acquisition, or sale of substantially all of your assets on notice to us. We may assign these Terms to an affiliate or to a successor in a merger, acquisition, reorganisation, or sale of assets, on notice to you. Any other attempted assignment is void.

27. Force Majeure

Neither party is liable for delay or failure to perform, other than a failure to pay Fees, caused by events beyond its reasonable control, including natural disaster, epidemic, war, terrorism, civil unrest, government action, labour dispute, power or telecommunications failure, denial-of-service or other attack, or the failure of a Git Host, payment provider, AI provider, or hosting provider. The affected party will use reasonable efforts to resume performance. If a scan cannot be completed because of such an event, it is treated as not delivered under the Refund Policy.

28. General

  • Entire agreement. These Terms, with the policies they incorporate and any order or enterprise agreement we sign with you, are the entire agreement between you and us about the Service and replace all earlier discussions and agreements. If a signed enterprise agreement conflicts with these Terms, the signed agreement prevails for that customer.
  • Severability. If any provision is held unenforceable, it will be enforced to the maximum extent permitted and the rest of these Terms remain in effect.
  • Waiver. A failure or delay in enforcing a provision is not a waiver of it. A waiver is effective only in writing.
  • No third-party beneficiaries. These Terms create no rights for anyone other than you and us, except that the disclaimers, limitations, and indemnities in our favour also protect the people and entities they name.
  • Relationship. The parties are independent contractors. Nothing here creates a partnership, joint venture, agency, or employment relationship.
  • Interpretation. Headings are for convenience only. "Including" means "including without limitation". Section links refer to sections of these Terms. The English-language version controls over any translation.
  • Open source. The Service includes open-source components licensed under their own terms, which apply to those components instead of these Terms to the extent they conflict.

29. Notices

Notices to you are sent to the e-mail address on your Account, or posted on the website at gatetest.io, and are effective when sent or posted. You agree to receive notices, receipts, and other communications about the Service electronically, and that electronic notices satisfy any requirement that a communication be in writing.

Notices to us must be sent by e-mail to support@gatetest.io and are effective when we acknowledge receipt. Legal process may be served by the same route.

30. Contact

The Service is provided by GateTest. For questions about these Terms, notices, billing, privacy requests, or anything else, e-mail support@gatetest.io.

The current version of these Terms is always at gatetest.io/legal/terms.