These Terms of Service govern access to and use of ReviewPilot, an AI-assisted code review service for engineering teams. Please read them carefully. ReviewPilot is offered to businesses and professionals, not to consumers.
1. Parties and acceptance
ReviewPilot is operated by [Company legal name, Unipessoal Lda], a single-member private limited company (sociedade unipessoal por quotas) incorporated in Portugal, with tax and registration number (NIPC) [NIPC] and registered office at [Registered address, Portugal] ("ReviewPilot", "we", "us").
These terms form a binding agreement between us and the company, organisation or individual professional that creates a ReviewPilot account or team (the "Customer", "you"). If you accept these terms on behalf of an organisation, you confirm that you are authorised to bind that organisation.
You accept these terms when you create an account, start a trial or otherwise use the service. If you do not agree with them, do not use ReviewPilot.
Our Privacy Policy explains how we handle personal data as a controller, and our Data Processing Agreement (DPA) governs the personal data we process on your behalf as a processor. Both form part of these terms.
2. Accounts and teams
To use ReviewPilot you must register with accurate information, including your name, a work email address and a team name. Each account belongs to one individual; credentials must not be shared.
Customers organise their users in teams. The user who creates a team becomes its owner. Owners can invite members, assign the owner or engineer role, connect repositories and configure integrations, AI providers, data retention and review guidance. Engineers can run and triage reviews within the team they belong to.
You are responsible for everything that happens under your team, for keeping passwords and invitation links confidential, and for removing access for people who should no longer have it. Tell us promptly at [contact email] if you suspect unauthorised access.
3. The service
ReviewPilot connects to the source control platforms you authorise (currently GitHub and Bitbucket Cloud), retrieves the changes in pull requests and branches, sends them for analysis to the AI provider you configure, and presents the resulting findings, risk levels and quality scores to your team. Where you enable it, ReviewPilot can publish the review back to the pull request.
To do this, ReviewPilot needs read access to the repositories and pull requests you connect and, only when publishing is enabled, write access to post pull-request reviews. We only use this access to provide the service to you.
ReviewPilot works on a bring-your-own-key basis. You choose the AI provider (for example OpenAI, Anthropic or Google) and model, and you provide your own API key. The AI provider processes the submitted code under your own agreement with it. We do not resell AI models or AI usage, and we do not add a mark-up to your AI provider costs.
4. Plans, trial and billing
ReviewPilot is offered under the plans described on our website at the time of purchase. Plans may limit, among other things, the number of connected repositories, seats and reviews per month. A monthly review quota applies to each team: the team is warned when it reaches 80% of the quota, and new reviews are paused when it reaches 100% until the next period starts or the plan is upgraded.
New teams may start with a paid trial (currently USD 5 for 14 days). Unless you cancel before the trial ends, it converts into the monthly plan you selected.
Orders, payments and invoicing are handled by our reseller and Merchant of Record, [Merchant of Record, e.g. Paddle]. The Merchant of Record is the seller of record for your purchase, collects payment, issues invoices and is responsible for calculating, charging and remitting applicable sales taxes and VAT. Its own terms apply to the purchase transaction. We never receive or store your full card details.
Subscriptions renew automatically for successive monthly periods at the then-current price until cancelled. You can cancel at any time; cancellation takes effect at the end of the current billing period and you keep access until then.
Fees are non-refundable, including for partially used periods, except where a refund is required by applicable law or expressly offered by the Merchant of Record. We may change prices for future billing periods by giving at least 30 days' notice; if you do not agree, you may cancel before the change takes effect.
Your own AI provider charges for the usage generated by your reviews directly under your agreement with it. Those costs are yours and are not included in ReviewPilot fees.
5. Your responsibilities
You confirm that you own, or are authorised by the owner to connect and have analysed, every repository and organisation you link to ReviewPilot, and that doing so does not breach any obligation you owe to third parties, including employers, clients or open-source licensors.
You are responsible for entering into and complying with your agreement with the AI provider you configure, for the API key you supply and its usage limits, and for all costs that provider charges. You decide whether your code may be sent to that provider.
You are responsible for the lawfulness of the content in your repositories, for informing your developers and other people whose data appears in that content, and for the review guidance you configure.
6. Acceptable use
You must not, and must not allow anyone else to:
- use the service in breach of any law or of third-party rights;
- connect repositories or accounts you are not authorised to use;
- attempt to access another team's data or bypass access controls, rate limits or quotas;
- probe, scan or test the vulnerability of the service without our prior written consent;
- introduce malware or interfere with the integrity or performance of the service;
- resell, sublicense or provide the service to third parties as a standalone offering;
- reverse engineer the service, except to the extent permitted by mandatory law;
- use the service to build a competing product or to benchmark it for publication without our consent.
7. Customer data and intellectual property
As between you and us, you own your source code, pull-request content and all other data you submit ("Customer Data"), as well as the findings, summaries and other outputs generated for you ("Outputs"). We do not claim ownership of Customer Data or Outputs.
You grant us a non-exclusive, worldwide, royalty-free licence to host, copy, transmit and process Customer Data only as necessary to provide, secure and support the service for you, in accordance with these terms and the DPA. We do not use Customer Data or Outputs to train AI models.
By default, pull-request diffs are discarded immediately after analysis. Team owners may choose to retain them for 7 or 30 days, after which they are purged automatically. Review findings, scores and review metadata are kept until you delete them or your team is closed.
We and our licensors own the service, its software, design, documentation and trademarks. Apart from the right to use the service under these terms, no rights are granted to you. If you send us feedback or suggestions, we may use them freely without obligation to you.
We may use aggregated, de-identified usage information that does not identify you, your users or your code to operate and improve the service.
8. AI-generated output
Findings, risk levels, quality scores and summaries are produced by third-party AI models and automated heuristics. They may be incomplete, inaccurate or wrong, may miss defects and vulnerabilities, and may flag issues that do not exist.
ReviewPilot is a tool that assists human reviewers; it does not replace them. You remain solely responsible for reviewing, testing and approving code, for deciding what to merge and deploy, and for any consequences of acting or not acting on an Output.
9. Availability and changes to the service
We aim to keep ReviewPilot available and to fix problems promptly, but the service is provided on an as-available basis and may be interrupted for maintenance, updates, incidents or reasons outside our control, including outages of GitHub, Bitbucket, AI providers or hosting providers.
We may change, add or remove features over time. If we remove a feature that is material to a paid plan, we will give reasonable prior notice and, if you are materially affected, you may cancel your subscription.
10. Suspension and termination
You may stop using the service and close your team at any time. Cancellation of the subscription is handled as described in section 4.
We may suspend or restrict access immediately if we reasonably believe that your use breaches these terms, creates a security risk, may cause harm to us or others, or if fees are unpaid. Where reasonable, we will notify you in advance and give you an opportunity to remedy the issue.
We may terminate these terms for material breach that is not remedied within 15 days of notice, or with 60 days' notice for any other reason. If we terminate for convenience, we will refund any prepaid fees for the period after termination, through the Merchant of Record.
On termination, your access ends and we delete Customer Data as described in the DPA and the Privacy Policy. Sections that by their nature should survive termination, including those on intellectual property, confidentiality, disclaimers, liability and governing law, will survive.
11. Confidentiality
Each party may receive non-public information from the other, including source code, security details and business information ("Confidential Information"). The receiving party will use it only for the purposes of these terms, protect it with at least reasonable care, and disclose it only to employees, contractors and service providers who need to know it and are bound by equivalent obligations.
These obligations do not apply to information that is or becomes public without breach, was already lawfully known to the receiving party, is independently developed, or must be disclosed by law or court order, in which case the receiving party will, where lawful, give prompt notice.
12. Disclaimer of warranties
To the maximum extent permitted by law, the service and all Outputs are provided "as is" and "as available", without warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy or non-infringement. We do not warrant that the service will be uninterrupted or error-free, or that it will detect every defect or vulnerability.
13. Limitation of liability
Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud or wilful misconduct (dolo), for gross negligence where such limitation is not permitted, or any other liability that cannot be limited under applicable law.
Subject to the paragraph above, neither party is liable for any indirect, incidental, special or consequential damages, or for loss of profits, revenue, business, goodwill or data, arising out of or relating to these terms or the service.
Subject to the first paragraph of this section, each party's total aggregate liability arising out of or relating to these terms or the service is limited to the fees you paid for the service in the 12 months before the event giving rise to the claim.
14. Indemnities
You will defend and indemnify us against third-party claims, and related losses, damages and reasonable costs, arising from repositories or content you connect without the necessary rights, from your use of the service in breach of these terms or of law, or from your agreement with, or instructions to, your AI provider.
We will defend and indemnify you against third-party claims alleging that the service, as provided by us and used in accordance with these terms, infringes that third party's intellectual property rights. This does not apply to claims arising from Customer Data, Outputs, third-party services or combinations with anything not provided by us.
The indemnified party must notify the other promptly, allow it to control the defence and settlement, and provide reasonable cooperation.
15. Governing law and disputes
These terms and any dispute arising out of or in connection with them are governed by the laws of Portugal, excluding its conflict-of-laws rules.
The courts of [city], Portugal, have exclusive jurisdiction, without prejudice to any mandatory rules that grant a party the right to bring proceedings elsewhere, including mandatory consumer protection rules where applicable.
16. Changes to these terms
We may update these terms from time to time. We will give at least 30 days' notice of material changes by email or in the service, unless a change is required sooner by law or to address security. If you continue to use the service after the changes take effect, you accept the updated terms; if you do not agree, you may cancel before they take effect.
17. General
These terms, together with the Privacy Policy, the DPA and any order placed through the Merchant of Record, are the entire agreement between the parties about the service. If any provision is held invalid, the rest remains in force. A failure to enforce a right is not a waiver. You may not assign these terms without our consent; we may assign them to an affiliate or successor of our business. Neither party is liable for delays caused by events beyond its reasonable control.
18. Contact
[Company legal name, Unipessoal Lda], [Registered address, Portugal]. NIPC [NIPC]. Email: [contact email]. Website: [domain].