Terms of service
The agreement, in plain words
Last updated 7 September 2026.
These terms apply when you use GitGraf. They are written to be read rather than skimmed past, and they say what GitGraf will do, what it will not, and what happens when either of us wants to stop.
What GitGraf is
GitGraf reads a repository you give it access to, draws a map of the application inside it, and reports what it believes is wrong, each finding with the evidence it is based on and a task an agent or a person can work from. On the Pro plan it also runs browser checks against your preview deployments.
Your account
- You need an account, and you are responsible for what happens under it.
- You must have the right to grant GitGraf access to any repository you connect. Connecting an employer's or a client's code without permission is not something we can check, and it is on you.
- You must be old enough to enter a contract where you live.
What GitGraf will not do to your repository
The GitHub App holds read permissions only. GitGraf does not commit, push, merge, open pull requests, change settings, or delete anything in your repository, and it is not able to: the permissions were never requested. If a change lands in your code, a person or an agent on your side made it.
What GitGraf does not promise
A clean board is not a guarantee that your code is safe. GitGraf reads a sample of your files rather than all of them, checks dependency advisories for npm lockfiles only, and can be wrong. It tells you what it looked at, and you should read that as carefully as you read the findings. It is a tool that helps you look, not an audit, a penetration test, or a certification.
The service is provided as it is. We do not promise it will be uninterrupted or free of errors, that every problem in your repository will be found, or that everything it reports is correct. To the fullest extent the law allows, we exclude implied warranties, and our total liability to you for any claim is limited to what you paid us in the twelve months before it arose. Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited.
Acceptable use
- Do not use GitGraf to look for weaknesses in code you have no right to.
- Do not attempt to reach another customer's data, or to work around the limits of your plan.
- Do not use it to break the law, and do not resell it as your own product without an agreement.
Plans and payment
The Free plan costs nothing. Pro is currently switched on account by account rather than through a checkout, and its price is agreed in writing before it starts. Lead is not available yet. If self-serve billing arrives, the terms of it will be published here before anyone is charged through it.
Your code stays yours
You keep every right in your repository and in everything GitGraf derives from it: the map, the findings and the task packets belong to you. We use them to run the service for you and for nothing else. GitGraf keeps the rights in its own software, its interface and its brand.
Ending it
You can stop at any time by deleting your projects, deleting your account, or removing the GitGraf App from GitHub, which cuts off access immediately without needing us. We may suspend or close an account that breaks these terms, or that puts the service or another customer at risk, and we will say why unless we are prevented from doing so.
Changes
These terms may change. Anything that materially affects you will be published here with a new date and sent to account holders before it takes effect, and continuing to use GitGraf after that is how you accept it.
Law
These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from them.
Getting hold of us
hello@gitgraf.com. A person reads it.