Terms of Service

1.Who these Terms are for

Appfora is built for professional and business use. You must be 18 or over and able to form a contract. We offer the Service globally. Mandatory consumer, privacy, and other protections in your country still apply and are not waived. Where those laws give you rights we cannot exclude, those rights win.

2.What Appfora is

You connect a repository (GitHub, GitLab, Bitbucket, Azure DevOps, or a local path we support). We scan it and, depending on the pillars you subscribe to, generate:

• Legal: draft policies and related documents grounded in that scan and stated legal frameworks;
• Support: an assistant trained on your product;
• Growth: suggested experiments and conversion work from the scan;
• Test: generated end-to-end journeys run on our infrastructure.

Current prices, included usage, overages, and bundle discounts are on appfora.io and form part of these Terms. A 14-day trial is available with no card required. Scanning for a preview is free.

We are a software company. We are not a law firm, solicitors, barristers, or a regulated legal practice in any country. Using Appfora does not create a solicitor-client or attorney-client relationship. Section 8 sets out what we do stand behind on Legal outputs.

3.Our promises (this is on us)

We will:

• provide the Service with reasonable skill and care;
• not store your raw source code after analysis, and not store API keys, secrets, credentials, or environment variables we detect in that analysis (we keep a one-way structural digest, a Code Fingerprint, and the Generated Outputs you ask us to keep);
• run each Product in isolated infrastructure as described on the site;
• encrypt data in transit and at rest using industry-standard methods;
• not sell your customer data;
• not use your source, fingerprints, or Generated Outputs to train our models or a third party’s models, and require the same of processors we use for the Service;
• remain responsible for our sub-processors as if their acts were ours, for the work they do for us;
• charge only the prices we showed you, plus lawful tax, and correct billing errors we cause;
• let you cancel at any time, with access to paid features until the end of the period you have already paid for;
• delete a Product’s Generated Outputs, models, and related metadata within 30 days of a deletion request from the account;
• notify you without undue delay if we become aware of a personal-data breach affecting your account or the personal data we process for you.

If we break these promises, you can claim against Conso4s Ltd under these Terms. We do not pass that responsibility to Stripe, GitHub, an LLM vendor, or a host so that you have nobody to sue. Those providers may have their own terms for their products; we stay liable to you for Appfora.

4.Accounts and security

Keep login credentials and API keys (af_live_…) secret. Tell us promptly at [email protected] if you think an account or key is compromised. You are responsible for activity that uses your credentials unless that activity happened because of a failure on our side (for example we leaked a key, or an attacker used a vulnerability in Appfora).

You must only connect repositories you own or are authorised to have us scan. We may suspend an account we reasonably believe is compromised or is being used to attack the Service or other customers. We will restore access when the reason for suspension has been fixed, unless we are required by law to keep it closed.

5.Fees, trial, cancel, refunds

Subscriptions are monthly unless we agree otherwise in writing (including Enterprise). Pillars are billed separately. Bundling two pillars is 5% off, three is 10% off, four is 15% off. Usage above plan caps is billed as overage at the rates on the pricing page for that cycle. Fees are exclusive of VAT and similar taxes unless we say they include tax. You pay tax that the law puts on you; we account for tax the law puts on us.

Payments go through Stripe (cards) or invoice for Enterprise. We do not store full card numbers.

Cancel any time in the account. No cancellation fee. No minimum term on self-serve plans. We do not claw back unused days of a period you already paid, except:

• where the law requires a refund (including UK/EU consumer cooling-off where it applies);
• where we billed you in error: we refund or credit the error in full;
• where we withdraw the Service or a paid pillar you still use, without a reasonably equivalent replacement: we refund the unused portion of that pillar for the current period;
• where we agree a refund in writing.

Overages incurred before cancellation remain payable. Billing disputes: [email protected]. We will look at them in good faith.

6.Acceptable use

You must not:

• use the Service unlawfully;
• scan code you have no right to have scanned;
• attack, overload, or bypass isolation, rate limits, or billing;
• reverse engineer the platform except where the law says you may;
• resell Appfora as if it were yours, except under a written partner agreement with us.

We may suspend for a material breach. Where it is reasonable and lawful, we will warn you first and give a chance to fix it.

7.Intellectual property

You own your code. You own the Generated Outputs we produce for you (legal drafts, support knowledge, growth artefacts, test reports and related files). You licence us to process the connected repository only to provide the Service.

We own Appfora: software, models we supply, site, and marks (including Appfora.io as our trademark). We do not transfer those to you. We grant you a non-exclusive licence to use the Service and your Outputs for your business while your account is in good standing, and to keep using Outputs you exported even after you cancel.

If a third party claims that the Appfora platform (not your code, and not facts you told us to put in a document) infringes their IP, we will defend that claim and pay damages and costs finally awarded against you, or a settlement we approve, provided you tell us promptly, let us control the defence, and cooperate reasonably. That indemnity is our problem, not yours.

8.Legal pillar: what we stand behind

Legal drafts are generated from the connected codebase and from frameworks we state (for example UK GDPR, EU GDPR, CCPA where the scan supports it). We will use reasonable skill and care so that the draft reflects what the scan actually found (data stores, processors, payments, tracking, user-facing features we can see in that code).

If a draft is wrong or incomplete because we failed that duty, for example we omitted a processor or payment flow that was present in the scanned code, or we generated text that contradicts the scan, that failure is ours. You may require us to correct the draft at our cost, and you may claim for loss under section 11.

We are not liable as a law firm. We do not warrant that a draft is sufficient for every regulator, court, or country, or that it covers facts that were not in the scanned code (your company number, insurance, offline processes, staff policies, unpublished product behaviour). You must add those facts. You decide whether to publish. A solicitor’s review is still wise for high-risk or multi-country launches; it is not a condition we use to dump our own failures onto you.

Auto-updates when law or code changes are provided with the same reasonable skill and care. We are not your ongoing general counsel.

9.Support, Growth, and Test pillars

Support. We will run the assistant with reasonable skill and care on the product context we have. We are liable if our infrastructure leaks another customer’s data into your assistant, or yours into theirs, or if we lose your support configuration through our fault. We are not liable for an answer that is wrong because your product behaviour was not in the scanned material, or because an end user was abusive or off-topic.

Growth. Suggestions are advisory. We are liable if we fail to deliver the feature you paid for (for example experiments never generate, or we destroy your data). We are not liable for marketing results, revenue, or ranking.

Test. We are liable if our runner, isolation, or credential vault fails (including leaking vault secrets through our fault, or reporting a pass when our own harness did not run the journey). We are not a guarantee that your application is bug-free. A green run means the journeys we generated and executed on that run did not fail in the way our reports describe.

10.Privacy and confidentiality

Account and site data: we are controller under UK GDPR (and EU GDPR where it applies). See the Privacy Policy. Support and similar features that process your end users’ personal data: we are your processor; a Data Processing Addendum is available on request and is incorporated when you use those features.

Each party will keep the other’s confidential information secret and use it only to perform these Terms, except information that is public through no fault, independently developed, or required by law (in which case we give notice where lawful).

A breach of this section 10, or of our promise not to store raw source, is a direct loss. We do not exclude it.

11.Liability: ours, and the cap

Nothing in these Terms limits or excludes liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or anything else the law of England and Wales (or a mandatory law that applies to you) does not allow us to limit.

Subject to that, Conso4s Ltd is liable to you for:

• our breach of these Terms;
• our negligence in providing the Service;
• our breach of confidentiality or data-protection duties;
• the indemnities we give in section 7;
• failures described in sections 3, 8, and 9 that are our fault.

We are not liable for loss of profit, revenue, goodwill, or indirect or consequential loss, except to the extent that loss is a direct and reasonably foreseeable result of a data breach, confidentiality breach, or IP indemnity we owe, or the law does not allow that exclusion.

Our total liability arising out of or in connection with these Terms is limited to the greater of (a) the fees you paid us for Appfora in the 12 months before the claim, and (b) £10,000 (GBP). The £10,000 floor is so a low monthly fee does not wipe out a real failure on our side. This cap does not apply to our liability that cannot be capped by law, or to our IP indemnity in section 7, or to our liability for a personal-data breach caused by us.

You are not required to indemnify us for using Generated Outputs, including publishing Legal drafts, except where the claim arises because you connected a repository you had no right to connect, or you altered a draft so that it no longer matches what we generated and the claim is about that alteration.

You remain responsible for your own product, your customers, and your compliance programme. We remain responsible for Appfora.

12.Your limited indemnity to us

You will indemnify Conso4s Ltd against claims, damages, and reasonable legal costs arising only from:

• your connecting a repository you were not authorised to have us scan; or
• content you upload that infringes a third party’s rights, other than content we generated.

That is the whole of your indemnity. There is no general “you cover us for the internet” clause.

13.Suspension, termination, data

You may stop and close the account at any time. We may terminate for unpaid fees after notice, for material unremedied breach, or if the law requires it.

After closure, export what you need first. Deletion follows section 3. Sections that should survive (IP, confidentiality, fees owed, liability, this survival sentence) survive.

14.Changes

We may change the Service to improve it, to fix security, or to comply with law. We will not silently gut a paid pillar. If we make a material cut, section 5 (refund of unused portion) applies.

We may change these Terms. For a material change we will give at least 30 days’ notice by email or in-product notice, except where a shorter period is required for security or law. If you do not agree, cancel before the change takes effect; you are not stuck. The date at the top of this page is the effective date.

15.Law and disputes

These Terms are governed by the laws of England and Wales. The courts of England and Wales have jurisdiction, except that:

• if you are a consumer, you may bring proceedings in the courts of your place of residence where the law gives you that right;
• if you are established in the EEA or Switzerland, mandatory local protections still apply;
• we will not object to you using an applicable statutory ombudsman or the ICO (or your EU supervisory authority) for privacy complaints.

Write to us first at [email protected] so we can try to fix it. That does not delay a limitation period or a regulator.

16.General

• Entire agreement. These Terms, the Privacy Policy, Cookie Policy, pricing page, and any DPA or Enterprise order we both sign are the whole contract for Appfora.
• Severability. If a clause is unenforceable, the rest remains.
• Waiver. A delay in enforcing a right is not a waiver.
• Assignment. You need our written consent to assign, not to be unreasonably withheld. We may assign to a successor of the Appfora business and will notify you.
• Force majeure. Neither party is liable for delay caused by events beyond reasonable control, for so long as those events last. This does not excuse payment of fees already incurred, or our duties on data we still hold.
• Third-party rights. Nobody else may enforce these Terms under the Contracts (Rights of Third Parties) Act 1999.
• Language. These Terms are in English. A translation is a courtesy; the English text controls, except where local law requires otherwise.

17.Contact

• Conso4s Ltd (Appfora)
• Suite 3, Middlesex House, Rutherford Close, Stevenage, SG1 2EF, United Kingdom
• Support: [email protected]
• Legal: [email protected]
• Privacy: [email protected]

Company number 11083797. VAT number: as shown on invoices.