Siirry sisältöön

Terms of Service

Last updated: 21 September 2026

These terms govern the use of Softagram Analyzer (the “Service”), an online service provided by Softagram Oy, Business ID 2532004-3, Ketolanperäntie 469, 90450 Kempele, Finland (“Softagram”, “we”). By creating an account, installing the Softagram GitHub App or using the Service, you accept these terms. If you act for a company or other organisation, you confirm that you are authorised to bind it, and “you” means that organisation.

The Service is intended for business use. If you have signed a separate agreement with Softagram, that agreement prevails over these terms where they differ. Our Privacy Policy describes how we handle personal data and forms part of these terms.

1. The Service

Softagram Analyzer connects to your source code repositories, builds a dependency graph of the code, and reports the impact of changes in pull requests: affected components, dependency rule violations, software bill of materials and known vulnerabilities in dependencies. It integrates with GitHub, GitLab and Bitbucket. The Service is hosted at private.softagram.com.

We develop the Service continuously and may add, change or remove features. We will not remove a feature that is central to the Service without giving paying customers at least 30 days' notice. Features marked as beta or preview are provided for evaluation and may change or be withdrawn without notice.

We aim to keep the Service available at all times but do not guarantee a specific uptime unless a written agreement says so. We announce planned maintenance in advance when we can. Support is available by email at support@softagram.com on Finnish business days.

2. Accounts

  • You can create an account with an email address or by signing in with GitHub.
  • You must be at least 18 years old.
  • Keep your credentials confidential. You are responsible for everything done through your account, and you must tell us promptly if you suspect unauthorised use.
  • The information you give us must be accurate and kept up to date.
  • Users you invite to your organisation's workspace are bound by these terms, and you are responsible for their use of the Service.

3. Your repositories

You choose which repositories the Service can read. By connecting a repository you confirm that you have the right to grant that access, including for any third-party or open-source code it contains. We read repositories only to provide the Service, and we do not modify your code. Pull request comments and checks are written only where you have enabled them. You can revoke access at any time in your GitHub, GitLab or Bitbucket settings; the Service then stops analysing that repository.

4. Acceptable use

You may not:

  • use the Service for any unlawful purpose or in breach of a third party's rights;
  • try to access accounts, data or systems you are not authorised to access;
  • probe, scan or test the Service for vulnerabilities without our written permission;
  • interfere with the Service, for example by overloading it or introducing malicious code;
  • copy, reverse engineer, decompile or create derivative works of the Service, except where the law allows it regardless of this clause;
  • resell or sublicense the Service, or use it to build a competing product;
  • share one user's credentials between several people.

5. Fees and billing

  • The Service costs USD 19 per active developer per month, or the price shown on the pricing page at the time you subscribe. An active developer is a person who commits code to a connected repository during the billing period. Each person is counted once, however many repositories they contribute to.
  • New accounts get a 14-day free trial. No payment details are needed for the trial, and nothing is charged if you cancel before it ends.
  • You can pay through GitHub Marketplace or by direct invoice. Subscriptions bought through GitHub Marketplace are billed and collected by GitHub under GitHub's terms, and refunds follow GitHub Marketplace's policies.
  • Direct invoices are payable within 15 days of the invoice date. On late payment we may charge interest under the Finnish Interest Act and reasonable collection costs, and we may suspend the Service when payment is more than 14 days overdue. The fee remains payable during suspension.
  • Prices exclude VAT and other taxes, which are added where they apply.
  • We may change prices with at least 30 days' notice by email. A price change takes effect at the start of your next billing period after the notice period. If you do not accept the new price, you can cancel before it takes effect.

6. Term, cancellation and termination

  • A subscription runs for the billing period you chose, monthly or annual, and renews automatically until cancelled.
  • You can cancel at any time. Access continues until the end of the current billing period. We do not refund unused parts of a billing period.
  • We may suspend or terminate your access if you breach these terms and do not remedy the breach within 30 days of our written notice. We may suspend access immediately where necessary to protect the Service, other customers or the law, and will tell you why as soon as we can.
  • Either party may end the agreement immediately if the other becomes insolvent or enters bankruptcy proceedings.
  • Before closing your account, export any analysis results you want to keep. After closure we delete your account data, repository metadata and analysis results within 30 days, as described in the Privacy Policy, unless the law requires us to keep something longer.
  • Clauses that by their nature outlast the agreement, such as confidentiality, intellectual property and limitation of liability, remain in force after it ends.

7. Your data

  • Your repository data and the analysis results generated from it belong to you. You grant us the right to process them only as needed to provide, secure and improve the Service.
  • The Service stores repository metadata: file paths, dependency relationships between code components, and commit metadata such as author names, timestamps and messages. It does not store the content of your source files beyond what structural analysis requires.
  • Where repository data contains personal data, such as commit author names, you are the controller and we process it as your processor on your instructions. A data processing agreement under Article 28 of the GDPR is available on request. Our sub-processors are Hetzner Online GmbH (hosting, Finland) and the repository platform you connect.
  • We may use aggregated usage statistics that do not identify you or your code to improve the Service. We do not use your repository data to train models or for any purpose other than providing the Service to you.
  • Data is encrypted in transit and hosted in Finland. We restrict access to it to staff who need it to operate the Service.

8. Confidentiality

Each party keeps the other's non-public information confidential and uses it only to perform this agreement. This does not cover information that is public without the receiving party's fault, was already known to it, is received lawfully from a third party, is developed independently, or must be disclosed by law or a court. The obligation lasts for five years after the agreement ends, and indefinitely for trade secrets.

We may name you as a customer, using your name and logo, in our marketing unless you tell us not to by email. Anything more specific about your use of the Service requires your prior written consent.

9. Intellectual property

  • The Service, including its software, models, algorithms, documentation and trademarks, belongs to Softagram or its licensors. You get a non-exclusive, non-transferable right to use it for the duration of your subscription in accordance with these terms. No other rights are granted.
  • The Service includes open-source components. Their own licences apply to them.
  • If you send us feedback or suggestions, we may use them without obligation to you.

10. Warranties

We provide the Service with professional care, but it is provided “as is”. Analysis results are produced automatically from the structure of your code. They can be incomplete or wrong, for example when a language, build system or dependency manager is not fully supported, and they are not a substitute for code review, testing or a security audit. Decisions about your code, including what to merge, remain yours. We do not warrant that the Service is error-free or uninterrupted, or that it will find every dependency, rule violation or vulnerability.

11. Liability

  • Neither party is liable to the other for indirect or consequential loss, including lost profit, lost revenue, lost data (to the extent you are responsible for backups), business interruption, or claims by your customers or other third parties.
  • Our total liability for all claims relating to the Service in any 12-month period is limited to the fees you paid us for the Service in the 12 months before the event giving rise to the claim, excluding VAT.
  • These limits do not apply to damage caused intentionally or by gross negligence, to intentional breach of confidentiality, to intentional infringement of intellectual property rights, to personal injury, or where the law does not allow liability to be limited.
  • You are responsible for claims arising from repositories you connect without having the right to do so.
  • Tell us in writing about a defect or breach within 30 days of discovering it, and give us a reasonable opportunity to fix it before seeking other remedies.

12. Force majeure

Neither party is liable for delay or failure caused by events beyond its reasonable control, such as power or network outages, large-scale cyber attacks on general infrastructure, acts of authorities, labour disputes, pandemics or war, provided it tells the other party promptly. If such an event lasts more than six months, either party may terminate the agreement in writing.

13. Changes to these terms

We may update these terms. We will notify you of material changes at least 30 days before they take effect, by email to the address on your account. If you do not accept a change, you can cancel before it takes effect; continuing to use the Service after that date means you accept the updated terms. The date at the top shows the current version.

14. General

  • Neither party may assign this agreement without the other's written consent, which may not be unreasonably withheld. We may assign it to a group company or in a business transfer, provided the assignee takes on all obligations.
  • If a clause is found invalid, the rest of the terms remain in force and the clause is replaced by a valid one closest to its intent.
  • These terms, the Privacy Policy and any written agreement between us are the entire agreement about the Service. Your own purchasing terms do not apply.
  • These terms are written in English. Notices to us go to info@softagram.com; notices to you go to the email address on your account.

15. Governing law and disputes

These terms are governed by Finnish law, excluding its conflict-of-law rules. Disputes are first addressed by negotiation. If that fails, the District Court of Helsinki, Finland, has jurisdiction. If you use the Service as a consumer in the European Union, the mandatory consumer protection rules of your country of residence also apply.

16. Contact