Terms of Service
These Terms of Service ("Terms") are a binding agreement between you and DeeBoys LLC d/b/a Validash ("Validash," "we," "us"). Upon formation of a corporate entity, this agreement may be assigned to that entity without further action (see Section 17). By clicking the payment or acceptance button referencing these Terms, you agree to them and to our Privacy Policy and Guarantee & Refund Policy, which are incorporated by reference.
§ 1The Service
Validash provides an automated, AI-assisted code analysis service. You submit source code; multiple independent large-language-model engines analyze it; a separate judge model synthesizes their reports into a scored written report (the "Report").
What the Report is: an automated, point-in-time, informational analysis of the code you submitted, produced substantially by artificial-intelligence systems.
What the Report is not: it is not a security certification, penetration test, professional audit, compliance attestation, or legal, financial, or professional advice; it is not a substitute for review by qualified professionals or for roles requiring a professional license; and it is not a guarantee, warranty, or endorsement of the security, quality, or fitness of any code.
§ 2The Audit Methodology
Each audit is performed according to our published Audit Methodology (available at validash.com/methodology, versioned and incorporated by reference, the version in effect at the time of your purchase applies). The Methodology defines what an audit examines and what it does not examine (including, without limitation, size limits, excluded file types and directories, excluded vulnerability classes, and analysis depth by tier). Our obligations extend only to what the applicable Methodology version covers.
Each Report identifies the exact commit or submission snapshot analyzed (the "Audited Snapshot"). Findings speak only to the Audited Snapshot as of the Report date. We have no duty to update, monitor, re-test, or correct any Report after delivery.
§ 3Acknowledgments About AI-Assisted Analysis
You acknowledge and agree that:
(a) No analysis can identify all defects or vulnerabilities. We do not guarantee that any audit will identify any or all vulnerabilities, defects, or issues in submitted code, and the absence of a finding is not a determination that no issue exists. A favorable score or clean Report does not mean your code is secure.
(b) AI-generated output is probabilistic and may contain errors, omissions, false positives, and false negatives, and may include observations that are not reproducible or fully explainable. Except as expressly provided in the Guarantee & Refund Policy, we are not liable for findings incorrectly identified or for issues not identified.
(c) Adversarial, obfuscated, machine-generated, or unusual code increases the risk of both missed issues and incorrect findings.
(d) You are responsible for independently verifying any finding before acting on it, and all decisions based on the Service are solely yours. You will inform any person who uses a Report on your behalf of the limitations in this Section.
§ 4Eligibility; Your Representations
You represent and warrant that: (a) you are at least 18 years old and have the legal capacity to enter these Terms; (b) if you accept on behalf of an organization, you have authority to bind it (and "you" includes it); (c) you are purchasing the Service for business purposes and not primarily for personal, family, or household use; (d) you are not located in, or ordinarily resident in, any jurisdiction subject to comprehensive U.S. sanctions, are not on any U.S. denied-party list, and will not use the Service in violation of U.S. export control or sanctions laws.
§ 5Code Submissions; Authorization
You represent and warrant that, for every repository or file you submit: (a) you own it or hold all rights, licenses, and permissions necessary to submit it for automated analysis by us and our subprocessors, including any required consent of employers, clients, licensors, or other third parties; (b) your submission and our processing of it will not violate any law or any agreement binding you; and (c) it does not contain data whose submission is prohibited under Section 11 (regulated and sensitive data).
We are entitled to rely on these representations and will not independently verify your ownership of, or authority over, submitted code, beyond any technical access checks we choose to perform. You are solely responsible for the accuracy and completeness of your submissions; access restrictions or omissions in what you submit may prevent identification of issues and are your responsibility.
§ 6Fees; Payment
Audit fees are one-time charges for the tier selected, payable at checkout through our payment processor. Prices may change at any time but not retroactively. Fees are exclusive of taxes, which are your responsibility where applicable. The Service involves no subscription and no automatic renewal. Refunds are governed exclusively by the Guarantee & Refund Policy.
§ 7Guarantees; Sole Remedies
We offer two distinct commitments, each defined in full in the Guarantee & Refund Policy: (a) the 14-Day Money-Back Guarantee, and (b) the False-Finding Refund. If an audit fails to complete for technical reasons, you are not charged (or your audit token is not consumed).
These commitments are your sole and exclusive remedies for dissatisfaction with the Service and for any claimed error, omission, false positive, false negative, inaccuracy, or incompleteness in a Report, respectively, to the maximum extent permitted by law.
§ 8Your Code: Ownership, License, Confidentiality
(a) You retain all right, title, and interest in and to submitted code. We claim no ownership of it.
(b) You grant us a limited, non-exclusive license to access, transmit, temporarily store, reproduce, and process submitted code solely to provide the Service (including transmission to the subprocessors listed at validash.com/subprocessors) and to administer guarantee claims. We acquire no other rights in your code.
(c) Submitted code is your Confidential Information. We will not disclose it except to subprocessors as necessary to provide the Service, and we will not use it for any other purpose. We do not use your code to train any AI model, and our model providers are contractually prohibited from using API inputs to train their models.
(d) Retention: extracted code payloads are automatically deleted within 24 hours after processing. Reports are retained for the access period stated at purchase (or until the expiry shown on the Report) and then deleted. Deletion timelines and subprocessor details appear in the Privacy Policy.
§ 9Reports: Ownership, Use, Sharing
(a) As between you and us, you own your Report. To the extent any intellectual-property rights subsist in a Report, we assign them to you upon full payment. We retain all rights in the Validash platform, prompts, templates, scoring methodology, and formats, and in aggregated, de-identified operational data that does not contain or reveal your code.
(b) Given the nature of AI generation, similar or identical findings, text, or scores may be produced for other customers; no exclusivity is promised.
(c) You may share your Report (including via share links we provide). However, Reports are prepared solely for your use. Any third party who receives or relies on a Report acquires no rights against us, relies at its own risk, and is owed no duty by us. You may not represent a Report as a certification or endorsement by us, and any use of Validash names, marks, scores, or badges in marketing requires our prior written consent or a then-current published badge program's terms.
§ 10Acceptable Use
You will not: (a) submit code you lack rights to submit; (b) use the Service to develop a competing product, or benchmark it for publication without our consent; (c) resell, sublicense, or operate the Service for third parties as a service bureau without our written agreement; (d) probe, disrupt, overload, or circumvent usage, rate, or size limits or security controls; (e) reverse engineer the Service except as law permits; (f) submit content designed to manipulate, mislead, or corrupt analysis (including prompt-injection payloads targeting our or our providers' systems), except code whose subject matter is legitimately security-related; or (g) use the Service in violation of law.
§ 11Regulated and Sensitive Data
The Service is not designed for regulated data. Do not submit code or files containing protected health information, payment-card data, government identifiers, consumer credit data, or special categories of personal data under GDPR or similar laws. We may skip, redact, or refuse files that appear to contain secrets or sensitive data, but we assume no obligation to detect or protect such data beyond the commitments in Section 8.
§ 12Indemnification
You will defend, indemnify, and hold harmless Validash and its personnel from and against any third-party claim, demand, or proceeding (including reasonable attorneys' fees) arising out of: (a) code you submitted, including any claim that its submission or our processing of it infringes or violates any right or agreement; (b) your breach of Sections 4, 5, 10, or 11; or (c) any third party's receipt of, or reliance on, your Report.
§ 13Warranty Disclaimer
EXCEPT FOR THE EXPRESS COMMITMENTS IN SECTION 7 AND THE GUARANTEE & REFUND POLICY, THE SERVICE, THE PLATFORM, AND ALL REPORTS ARE PROVIDED "AS IS" AND "AS AVAILABLE," AND WE DISCLAIM ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, COMPLETENESS, RELIABILITY, AND UNINTERRUPTED OR ERROR-FREE OPERATION. NO ADVICE OR INFORMATION OBTAINED FROM US CREATES ANY WARRANTY NOT EXPRESSLY STATED HERE. SOME JURISDICTIONS DO NOT ALLOW CERTAIN WARRANTY DISCLAIMERS, SO PARTS OF THIS SECTION MAY NOT APPLY TO YOU.
§ 14Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) NEITHER PARTY IS LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST DATA, BUSINESS INTERRUPTION, COST OF SUBSTITUTE SERVICES, OR COSTS OF SECURITY-BREACH REMEDIATION, EVEN IF ADVISED OF THE POSSIBILITY; AND (b) EACH PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE IS LIMITED TO THE FEES YOU PAID FOR THE AUDIT(S) GIVING RISE TO THE CLAIM.
The foregoing limitations do not apply to: (i) a party's fraud, gross negligence, or willful misconduct; (ii) your indemnification obligations or payment obligations; or (iii) liability that cannot be limited by law. These limitations apply even if a limited remedy fails of its essential purpose, and the parties agree they are a reasonable allocation of risk reflected in the price of the Service.
§ 15Suspension; Termination
We may suspend or refuse Service, or terminate your account, for breach of these Terms, suspected fraud or abuse, legal compliance, or risk to the Service or other customers. You may stop using the Service at any time. Sections 3, 5, 7-9, and 12-18 survive termination. Upon account deletion, undelivered prepaid audits are refunded; delivered Reports remain governed by these Terms.
§ 16Dispute Resolution
(a) Talk to us first. Before filing any claim, you agree to send a written description of the dispute to hello@validash.com and give us 30 days to resolve it informally. We agree to the same before filing against you.
(b) Small claims. Either party may bring an individual claim in small-claims court in New Castle County, Delaware or, if you are a consumer, in your county of residence.
(c) Courts; governing law. Except as above, all disputes will be resolved exclusively in the state or federal courts located in New Castle County, Delaware, and each party consents to their jurisdiction. These Terms are governed by the laws of the State of Delaware, excluding conflict-of-law rules and the CISG. Nothing in these Terms deprives you of mandatory protections of the law of your place of residence.
(d) Waivers. To the maximum extent permitted by law, each party waives trial by jury, and all claims must be brought in the parties' individual capacity, not as a plaintiff or class member in any purported class, collective, or representative proceeding. This paragraph does not waive any non-waivable right to seek public injunctive relief where such waiver is prohibited; if the class waiver is held unenforceable as to a claim, it is severed only as to that claim.
§ 17General
Severability: if any provision is held unenforceable, it will be modified to the minimum extent necessary or severed, and the remainder stays in effect. Entire agreement: these Terms, the Guarantee & Refund Policy, the Privacy Policy, and the applicable Audit Methodology version are the entire agreement for each purchase. Assignment: you may not assign these Terms without our consent; we may assign them to a successor entity or acquirer (including the entity formed to operate Validash), and such assignment novates this agreement without further action. Force majeure: neither party is liable for delay or failure caused by events beyond reasonable control, including outages or degradation of third-party AI model providers, cloud infrastructure, or payment processors. No waiver: failure to enforce is not waiver. Notices: to us at hello@validash.com; to you at your account email. Changes: we may update these Terms with the "Last Updated" date revised; material changes will be notified on the site or by email; changes never apply retroactively to a completed purchase.
§ 18Contact
DeeBoys LLC d/b/a Validash · Address available on request · hello@validash.com