Terms of Service

These Terms of Service (the Terms) define the conditions for using Code Misogi (the Service). By using the Service, you agree to these Terms and the Privacy Policy.

This English text is provided for convenience. If there is any conflict or inconsistency, the Japanese text will prevail.

1. Scope

These Terms apply to all relationships between you and the operator regarding the use of the Service. Any rules posted separately by the operator form a part of these Terms.

2. Definitions

• User: an individual or entity using the Service.
• Content: text, UI, logos, software, and other materials provided through the Service.
• Scan Target: local projects, directories, files, or similar items selected by the user for analysis by the Service.
• Findings: information about potential issues detected by scanning (e.g., sensitive data, dependencies, code patterns).
• DAST: web site scanning (dynamic testing) that performs network requests to user-specified URLs/hosts.

3. Registration and Account

You may use the Service by authenticating via methods specified by the operator (e.g., Google sign-in). Starting or continuing to use the Service requires consent to these Terms and the Privacy Policy.

4. Closing Account (Account Deletion)

You may request deletion of your account using the account-closing feature available on the My Page screen. After deletion, you will no longer be able to sign in to the Service.

Account deletion does not substitute for cancellation of a paid plan. You must cancel separately using the method specified by the operator or the payment provider.

5. Fees and Payment

Paid plans are provided through a payment provider designated by the operator (e.g., Stripe). Fees, billing cycles, plan scope, and refund policy follow the purchase screen or in-service display. If inconsistent, the purchase screen controls.

Refunds are generally not provided. Exceptions may be considered on a case-by-case basis for duplicate charges, clear fraud, or major service outages.

6. Service Overview

The Service is an informational tool intended to help reduce development risk. Findings are for reference only, and we do not guarantee accuracy, completeness, timeliness, or fitness for a particular purpose. You are responsible for reviewing findings and deciding necessary actions.

7. Local Execution and Communications

The Service runs on your device, and most scanning is performed locally. However, network communications occur in the following cases:

• Authentication (sign-in) and session maintenance
• Billing/contract status checks, license/entitlement control, and usage management
• Updates (checking, downloading, and applying updates)
• DAST and similar features that access user-specified URLs/hosts to perform scanning
• Optional features such as support and feedback submission

The Service does not transmit your source code contents, full repositories, or the actual values of secrets (such as API keys) to the operator servers, and it does not provide any feature to transmit those contents or secret values. However, only when you use the report submission feature to help improve the Service, the Service may transmit the findings (e.g., rule IDs, finding types, counts) to the operator servers. Even in such cases, your source code contents and the actual values of secrets are not transmitted. The scope and handling of transmitted information are defined in the Privacy Policy.

8. Prohibited Conduct

You must not:

• Violate laws, public policy, or third-party rights (including copyright and trade secrets).
• Attempt unauthorized access, vulnerability probing, interference, or excessive load against the Service or related systems.
• Decompile, reverse engineer, or otherwise analyze the Service beyond what applicable law permits.
• Misuse, redistribute, resell, or use the Service to provide competing equivalent services.
• Run DAST or similar features against targets without proper authorization.
• Engage in any other conduct the operator reasonably determines to be inappropriate.

9. DAST Special Terms

You represent and warrant that you have lawful and proper authorization to scan the selected targets (URL/host/systems), including owner permission, contractual authorization, or internal approvals.

You acknowledge that DAST performs network requests and may increase load, trigger rate limits, logging, alerts, or blocking (e.g., WAF). You use DAST at your own risk and responsibility.

The operator is not liable for disputes with third parties, regulatory procedures, or any damages (including indirect or lost profits) arising from DAST usage.

10. Distribution Channels

The Service may be distributed through channels designated by the operator (e.g., the website, Microsoft Store). Depending on the channel, additional terms/policies may apply to installation and updates. These Terms apply to the extent they do not conflict with such channel terms.

11. Open Source Software (OSS)

The Service may use or bundle OSS and related tools provided by third parties. Rights in OSS belong to their respective owners. OSS license terms govern the use of OSS. These Terms do not restrict any rights granted under applicable OSS licenses. OSS lists, full license texts, and notices are provided within the app (e.g., Help / Licenses).

12. Intellectual Property

Intellectual property rights in the Service and related content belong to the operator or rightful owners. You receive only a non-exclusive right to use the Service under these Terms.

13. Disclaimer and Limitation of Liability

To the maximum extent permitted by law, the operator is not liable for any damages arising from your use of the Service (including lost profits, indirect, incidental, and special damages), except where caused by the operator intentional misconduct or gross negligence.

Reports generated by the Service (HTML/JSON, etc.) may contain sensitive information such as URLs, paths, and excerpts of detection locations. You are responsible for deciding whether to store/share/publish such reports and for managing them appropriately.

14. Service Changes and Suspension

The operator may modify, add, suspend, or terminate the Service. Prior notice will be provided where reasonably possible, but this may not be possible in urgent cases.

15. Changes to the Terms

The operator may update these Terms. For material changes, notice will be provided through reasonable means and renewed consent may be required.

16. Governing Law and Jurisdiction

These Terms are governed by the laws of Japan. Any dispute related to the Service shall be submitted to the court with jurisdiction over the operator principal office as the court of first instance by exclusive agreement.

17. Contact

Please see Commercial Transactions Act Disclosure for contact details.