Draft for review. Text in [brackets] still needs filling in. Not yet in effect.
Legal
Terms of Service
Last updated [date]
The short version
- Kavach is in early access: features will change, and some aren’t available yet.
- Your code stays yours. We use it only to provide Kavach to you, and never to train AI models.
- Kavach helps you find risks. It can’t promise your app is secure, and a Kavach Score is not a certification.
- Only connect code you have the right to share with us, and don’t use Kavach to attack anyone.
1. About these terms
These terms are an agreement between you and Ritvexa Innovations Private Limited, a company registered in India at [registered address] (“Ritvexa”, “we”, “us”), for your use of Kavach: the website at kavachcode.tech, the Kavach app at app.kavachcode.tech, and related services (together, “Kavach”). By creating an account or using Kavach, you accept these terms. If you use Kavach for an organisation, you confirm you can accept them on its behalf, and “you” includes that organisation.
Our Privacy Policy explains how we handle personal data.
2. Who can use Kavach
You must be at least 18 and able to enter a binding contract. Kavach is for building and running software; it is not a consumer service.
3. Early access
Kavach is under active development. During early access, accounts are admitted to features in batches, features may change or be withdrawn, and the service may be interrupted. Early-access features are provided free of charge unless we tell you otherwise before you start paying. We will give you reasonable notice before paid plans apply to you.
4. Your account
- Give us an email address you control, and keep your password private. You are responsible for activity on your account.
- Tell us straight away at hello@ritvexa.com if you think your account has been compromised.
- One person per account. Don’t share accounts or sign up on someone else’s behalf without their permission.
5. Your code and content
You keep all rights to the code, repositories and other material you connect or submit (“your content”). You give us a limited, non-exclusive licence to access, copy, store and analyse your content only as needed to provide Kavach to you: for example, to build your report, score your app, review your changes and, if you ask for one, let a Kavach engineer review it. This licence ends when you disconnect the content or delete your account, apart from copies in backups, which are deleted on their normal schedule.
We will not use your content to train AI models, ours or anyone else’s, and we will not sell it. When code scanning opens, we will tell you which service providers (for example AI model providers) process your content, and they will be bound not to train on it either.
You confirm that you have the right to give us access to your content, and that doing so doesn’t break any agreement or law, such as your employer’s policies or a client contract.
6. Acceptable use
You must not:
- connect or scan code you don’t have permission to share with us;
- use Kavach’s findings to attack, exploit or gain unauthorised access to any system you don’t own or have permission to test;
- probe, scan or test the security of Kavach itself without our written permission (see Reporting security issues);
- interfere with Kavach, overload it, or get around its rate limits or access controls;
- copy, resell or reverse engineer Kavach, or use it to build a competing product;
- use Kavach to break the law or anyone’s rights.
7. What Kavach is, and isn’t
Kavach uses automated analysis, and on some plans human review, to help you understand your software and find security risks.No review can find every problem. Kavach may miss vulnerabilities, report issues that aren’t real, or estimate impact (“blast radius”) incorrectly. Fix prompts and suggested changes are suggestions: review them, and test your software, before relying on them.
A Kavach Score, Trust Page or “human reviewed” mark describes the checks Kavach ran at a point in time. It is not a certification, audit opinion or guarantee that your software is secure or compliant with any standard or law, and you must not present it as one. You remain responsible for the security of your software and for how you use Kavach’s output.
8. Paid plans
When paid plans are available to you: prices are shown on our pricing page and at checkout; subscriptions renew automatically for the same period until cancelled; you can cancel any time and keep access until the end of the paid period; fees are non-refundable except where the law requires or we say otherwise; and prices exclude taxes such as GST, which we add where required. We will give you at least 30 days’ notice of a price change, which takes effect at your next renewal. [Payment provider, refund policy and invoicing details to be confirmed before billing launches.]
9. Our rights
Kavach, including its software, design and branding, belongs to Ritvexa and its licensors. These terms don’t give you any rights in it except the right to use Kavach as allowed here. If you send us feedback or suggestions, we may use them without owing you anything.
10. Suspension and termination
You can stop using Kavach and delete your account at any time. We may suspend or close your account if you seriously or repeatedly break these terms, if your use puts Kavach or others at risk, or if the law requires it. Where reasonable, we will warn you first and let you export your data. Sections 5 (licence ending), 7, 9, 11, 12 and 14 continue after termination.
11. Disclaimer
Except as expressly stated in these terms, and to the extent the law allows, Kavach is provided “as is” and “as available”, without warranties of any kind, including fitness for a particular purpose, accuracy, or that it will be uninterrupted or error-free.
12. Limitation of liability
To the extent the law allows, neither party is liable for indirect, incidental, special or consequential losses, or for lost profits, revenue or data, arising from these terms or Kavach. Our total liability for all claims relating to Kavach is limited to the greater of the fees you paid us in the 12 months before the claim arose and [₹10,000]. Nothing in these terms limits liability that cannot be limited by law, such as for fraud.
13. Indemnity
You will compensate us for reasonable losses and costs arising from a third-party claim that your content, or your use of Kavach in breach of these terms, infringes their rights or breaks the law.
14. Governing law and disputes
These terms are governed by the laws of India. The courts of [city], India have exclusive jurisdiction, except that either party may seek urgent relief in any competent court. Before going to court, we both agree to try to resolve a dispute informally for 30 days.
15. Changes to these terms
We may update these terms as Kavach develops. For material changes we will email you or show a notice in the app at least 30 days before they take effect (unless the change is required by law or fixes a security issue). If you keep using Kavach after that, the new terms apply; if you don’t agree, you can close your account.
16. Reporting security issues
Found a vulnerability in Kavach? Email hello@ritvexa.com with the details and give us reasonable time to fix it before telling anyone else. We won’t take legal action against good-faith research that follows this process and avoids harming users or their data.
17. Contact
Ritvexa Innovations Private Limited, [registered address]. Email: hello@ritvexa.com.