Terms of Service

Last updated: June 4, 2026

These Terms of Service (“Terms”) govern your access to and use of Shipmoor’s website, account console, Community CLI, paid IC subscription, license services, documentation, and related services (the “Services”).

For these Terms, “Shipmoor,” “we,” “us,” or “our” means the operator of the Shipmoor Services, and “you” means the person or organization using the Services. If you use the Services for an organization, you represent that you have authority to accept these Terms for that organization.

By accessing or using the Services, creating an account, starting checkout, or using a paid license, you agree to these Terms. If you do not agree, do not use the Services.

1. The Services

Shipmoor provides developer tooling that helps review AI-assisted code before it is merged or shipped. The IC plan is an individual paid subscription that unlocks Shipmoor Pro capabilities for one developer through account login and locally validated license entitlements.

The Community CLI runs locally and may remain available without a paid subscription. Paid IC features may include local Pro CLI capabilities, IDE integration features, agent-harness features, claim-admissibility checks, repair guidance, and richer local reports where available.

Shipmoor may update, improve, suspend, or discontinue parts of the Services over time. We will use commercially reasonable efforts to avoid materially reducing paid IC functionality during an active subscription period.

2. Accounts

Paid Services require an account. You must provide accurate account information and keep it current. Account sign-in is handled through WorkOS or another authentication provider we make available.

You are responsible for all activity under your account and for protecting account credentials, sessions, license files, license tokens, checkout sessions, and device authorization codes. Tell us promptly if you believe your account or license has been compromised.

3. License Validation

Shipmoor may issue signed license tokens after login, subscription activation, trial approval, or another authorized licensing flow. License tokens may be stored locally, including by the shipmoor CLI, and may be validated offline by the local binary.

License refresh, billing-state checks, and revocation propagation may require online requests. Those requests are intended to transmit identity, billing, subscription, entitlement, device, token, and audit metadata, not source code, file contents, diffs, or repository contents.

If a license token is invalid, expired, revoked, outside a grace period, or missing an entitlement, paid features may be unavailable or may downgrade to Community-equivalent behavior.

You may not sell, share, publish, sublicense, transfer, tamper with, forge, reverse engineer, or bypass license tokens, entitlement checks, seat limits, device limits, or issuance endpoints.

4. Subscriptions and Billing

The IC plan may be billed monthly or annually through Stripe Checkout, Stripe Customer Portal, or another payment flow we make available. Stripe processes payment details; Shipmoor does not receive or store full payment-card numbers.

Unless the checkout page, order form, or written agreement says otherwise:

• fees are charged in advance;
• subscriptions automatically renew for the selected billing period;
• you are responsible for taxes and similar governmental charges;
• fees are non-refundable except where required by law;
• failed payments may result in a grace period before paid entitlements downgrade or are revoked;
• usage, seat, device, token, or rate limits may apply.

You may cancel an IC subscription through the billing portal or another cancellation flow we make available. When a subscription is cancelled at period end, paid entitlements may remain active until the end of the then-current billing period. When a subscription is cancelled immediately, deleted, unpaid past any grace period, charged back, or otherwise invalid, paid entitlements may be revoked or downgraded.

If you buy through a marketplace, reseller, or other third party, that third party’s billing, renewal, cancellation, and refund terms may also apply.

5. Acceptable Use

You may not use the Services to:

• violate law, sanctions, export controls, privacy rights, intellectual-property rights, or contractual obligations;
• access, scan, test, or process systems, repositories, or code without authorization;
• attack, disrupt, overload, scrape, or interfere with the Services;
• abuse checkout, account, license issuance, refresh, revocation, or device authorization endpoints;
• tamper with, forge, reverse engineer, publish, or bypass signed license tokens or entitlement checks;
• share an individual IC subscription as a team or organization license;
• resell, sublicense, rent, or commercially exploit the Services except as expressly permitted in writing;
• build or improve a competing product using non-public Services, outputs, APIs, or documentation;
• misrepresent Shipmoor output as a certification, guarantee, or endorsement.

We may suspend or restrict access if we reasonably believe your use violates these Terms, creates security risk, threatens service integrity, or may cause legal liability.

6. Your Content and Local Scans

As between you and Shipmoor, you retain all rights in your source code, repositories, file contents, diffs, patches, prompts, tickets, and other content.

The IC subscription and license validation flow does not require Shipmoor to upload, transmit, or store your source code, file contents, diffs, or repository contents. Local scans run in your environment. You are responsible for deciding what code to scan, reviewing Shipmoor output before relying on it, and validating any fixes before merging or deploying code.

If a future feature clearly asks you to connect a hosted integration or send content to Shipmoor or a third-party provider, that feature will be governed by these Terms, the Privacy Policy, and any additional agreement or product controls that apply.

7. Third-Party Services

The Services may use or integrate with third-party services, including WorkOS for authentication, Stripe for billing, Supabase for database hosting, Vercel for web hosting, source-code hosts, CI providers, package registries, and other services you choose to connect.

Third-party services are not controlled by Shipmoor. Their terms and policies govern your use of them.

8. Support

Community CLI support may be limited to documentation, release notes, and public channels where available. IC support may include account, billing, login, license, and product support through the channels we make available.

We do not promise any service level, uptime commitment, custom support response time, data-residency commitment, DPA, or enterprise support unless it appears in a signed written agreement with Shipmoor.

9. Security

We use commercially reasonable technical and organizational measures designed to protect the Services. You are responsible for securing your own repositories, endpoints, CI systems, credentials, license files, networks, logs, backups, and third-party integrations.

If you discover a security issue involving Shipmoor, contact security@shipmoor.dev with enough detail for us to investigate.

10. Intellectual Property

Shipmoor and its licensors retain all rights in the Services, software, documentation, rules, workflows, designs, interfaces, trademarks, logos, and related technology. Except for rights expressly granted in these Terms, no rights are transferred to you.

Third-party open-source components included in or distributed with the Services are governed by their applicable licenses. If there is a conflict between these Terms and an open-source license for an open-source component, the open-source license controls for that component.

11. Feedback

If you provide feedback, suggestions, bug reports, false-positive reports, rule-quality feedback, or feature requests, you grant Shipmoor a worldwide, royalty-free, perpetual, irrevocable license to use them without restriction or compensation.

12. Termination

You may stop using the Services at any time and may cancel paid subscriptions through the cancellation flow we make available.

We may suspend or terminate access if you breach these Terms, payment is overdue, a license token is misused, your use creates legal or security risk, we are required to do so by law, or we discontinue a Service.

After termination, your right to use affected paid Services ends. Community-equivalent functionality may remain available where provided, unless restricted for security, legal, abuse, or integrity reasons. Sections that by their nature should survive will survive, including payment obligations, intellectual property, disclaimers, limitations of liability, indemnity, and dispute provisions.

13. Disclaimers

The Services and documentation are provided “as is” and “as available” except as expressly stated in a signed agreement.

To the maximum extent permitted by law, Shipmoor disclaims all warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, availability, security, and error-free operation.

Shipmoor does not warrant that the Services will find every defect, avoid every false positive, prevent incidents, ensure compliance, or make code safe for production. Shipmoor output is advisory and must be reviewed before use.

14. Limitation of Liability

To the maximum extent permitted by law, Shipmoor will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost data, business interruption, security incidents, production outages, or cost of substitute services.

To the maximum extent permitted by law, Shipmoor’s total liability arising out of or relating to the Services or these Terms will not exceed the greater of:

• the amounts paid by you to Shipmoor for the affected Service in the twelve months before the event giving rise to liability; or
• USD $100 if you used only free Services.

These limits apply regardless of legal theory and even if a remedy fails of its essential purpose.

15. Indemnity

You will defend, indemnify, and hold harmless Shipmoor and its affiliates, officers, directors, employees, contractors, and agents from claims, damages, liabilities, costs, and expenses, including reasonable attorneys’ fees, arising from your content, your use of the Services in violation of these Terms, your violation of law or third-party rights, your systems or repositories, or your misuse of credentials or license tokens.

16. Export and Sanctions

You may not use, export, re-export, or transfer the Services in violation of export controls, sanctions, or other applicable laws. You represent that you are not located in, organized under the laws of, or ordinarily resident in a country or territory subject to comprehensive sanctions, and that you are not listed on a restricted-party list.

17. Changes to These Terms

We may update these Terms from time to time. If changes are material, we will provide reasonable notice through the website, product, email, console, CLI, or another appropriate channel. The updated Terms become effective on the date stated in the updated version. Your continued use of the Services after the effective date means you accept the updated Terms.

18. Governing Law and Venue

These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-law rules.

Any dispute arising out of or relating to these Terms or the Services will be resolved in the state or federal courts located in Delaware, and each party consents to the exclusive jurisdiction and venue of those courts, unless a separate written agreement states otherwise.

19. Contact

Questions about these Terms or legal notices may be sent to:

Email: legal@shipmoor.dev