Terms of service.

when this document says “we”, “us”, “our”, or “fizzgig”, it means fizzgig labs, a sole-trader operation based in london, uk. contact for anything in this document: sidekick@fizzgig.ai.

when it says “you” or “your”, it means the person or entity using the service. if you're using fizzgig on behalf of a company, you confirm that you have authority to bind that company to these terms.

• service — the fizzgig website (fizzgig.ai), dashboard, MCP gateway, tool workers, and any other software or content we make available under a fizzgig-branded domain.
• tools — the discrete scanning capabilities exposed via the MCP gateway (rls-checker, secret-leak-finder, deep_audit, etc). Each tool receives input, returns findings, and never persists your raw source code beyond the redacted summary in the audit log.
• MCP — Model Context Protocol, the open standard your AI editor uses to call fizzgig's tools.
• content — anything you submit to the service: source code, migrations, configuration files, prompts, decisions recorded in perfect memory, plan cards, etc.
• findings — the output of a tool run: security issues, quality nits, brand drift, etc.
• team — the multi-tenancy scope. Every user has at least a personal team; paid tiers can invite additional seats.

• you must be at least 16 years old to use the service.
• you must not be barred from receiving services under UK or applicable US export laws (fizzgig sub-processors are US-based; see privacy policy for the full list).
• one account per person for individual use; team accounts must not be used to circumvent per-user tier caps.

fizzgig has three tiers, described on /pricing. Current tiers and prices are the source of truth on that page; changes are announced by email to active users before they take effect.

• base tier billing is in pounds sterling (GBP). Hobby is free forever. Startup and Scale-up billed monthly in advance via Stripe.
• deep_audit credit is denominated in US dollars (USD) because the underlying LLM providers (Anthropic Claude + Google Gemini) bill fizzgig in USD. Scale-up bundles $25 USD/month of credit; top-up packs are also USD-denominated.
• usage caps (MCP calls, connected platforms, refresh cadence) are set out on /pricing. Exceeding a cap does not automatically overage-bill you — the service returns a cap-exceeded response and prompts you to upgrade.
• cancellation — cancel any time from /dashboard/billing. Cancellation takes effect at the end of the current billing period; no partial refunds for the unused portion of a paid month.
• failed payments — Stripe retries per its standard schedule. If retries fail, the account downgrades to the Hobby tier; historical data is retained per the privacy policy retention schedule.
• price changes — 30 days' email notice before any price increase takes effect on an existing paid account.

you agree not to:

• submit code, migrations, prompts, or other content you don't own or have permission to submit to fizzgig's tools. This is particularly important for deep_audit — inputs are forwarded to Anthropic and Google. If it's not yours to share, don't send it.
• attempt to reverse-engineer, decompile, or extract fizzgig's tool implementations, prompts, or scanning heuristics beyond what a normal caller learns from tool responses.
• attempt to bypass rate limits, per-tier call caps, per-day cost caps, or other technical controls.
• use the service to build a competing product that repackages fizzgig's outputs.
• use the service in a manner that violates any applicable law, third-party right, or platform policy of an integrated vendor (Supabase, Vercel, GitHub, Stripe, Neon, Netlify, GitLab, Railway, Cloudflare).
• use the service to develop or improve a machine-learning model competitive with fizzgig's.
• submit content that contains malware, secrets you intend to leak, personal data of others obtained unlawfully, or content that is otherwise illegal.

we may suspend or terminate accounts that materially breach this section, with notice where practical. For prompt-injection attempts, credential-stuffing, or other clearly malicious activity, we reserve the right to suspend immediately.

• you retain ownership of your content — the source code and other content you submit. You grant fizzgig a limited licence to process your content for the sole purpose of providing the service (running tools, producing findings, storing the audit envelope described in the privacy policy).
• fizzgig retains ownership of the platform — the marketing site, dashboard, MCP gateway, tools, prompts, heuristics, design system, brand assets, and documentation.
• findings and outputs — the findings and recommendations that tools produce for your submitted content are yours to use, share, or act on. If a finding turns out to be wrong or misleading, that's the nature of automated review; see the warranty disclaimer below.
• feedback — if you send us product feedback or suggestions, we may use it to improve the service without owing you anything in return.

what fizzgig collects, why, who else sees it, and how to get it back or delete it, is described in the privacy policy. The privacy policy is incorporated into these terms by reference. For processing carried out on your behalf where you are the data controller (e.g. team accounts processing your customers' data), the privacy policy's data processing agreement section governs.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT ANY EXPRESS OR IMPLIED WARRANTY, TO THE MAXIMUM EXTENT PERMITTED BY LAW. THIS INCLUDES ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

plain-english version:

• fizzgig's tools are AI-assisted and may miss real issues (false negatives) or flag things that aren't problems (false positives). Findings are advisory, not authoritative.
• we do our best to keep the service running, but we don't guarantee a specific uptime SLA at these price points. Scheduled maintenance and unplanned outages will happen.
• integrations depend on third-party APIs (Supabase, Cloudflare, Anthropic, etc). If a third-party API is down or changes behaviour, fizzgig's tooling that depends on it may fail or degrade.
• you are responsible for reviewing any finding before acting on it in production. Fixing a code bug based on a fizzgig finding without human review is your call and your risk.

nothing in this section excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under UK law.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, FIZZGIG'S TOTAL AGGREGATE LIABILITY TO YOU FOR ANY CLAIM ARISING OUT OF OR RELATING TO THE SERVICE IS LIMITED TO THE GREATER OF (A) THE FEES YOU PAID TO FIZZGIG IN THE 12 MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) £100 GBP.

plain-english version:

• fizzgig is not liable for indirect, incidental, consequential, or punitive damages — including lost profits, lost data, business interruption, or reputational harm — even if we've been advised such damages are possible.
• the cap above applies per calendar year, not per claim, so multiple claims don't stack.
• as above, nothing in this section limits liability that can't be limited under UK law (death or personal injury from negligence, fraud, deliberate misconduct).

you agree to indemnify fizzgig against any third-party claim arising from (a) content you submitted that you did not have permission to submit, (b) your use of the service in breach of these terms or applicable law, or (c) your infringement of a third party's intellectual property rights via your use of the service. “indemnify” here means you'll defend the claim at your cost and cover any damages awarded.

• these terms apply for as long as you have a fizzgig account, or until either party terminates.
• you may terminate at any time by deleting your account from /dashboard/profile.
• we may terminate or suspend your account with 30 days' notice for convenience, or immediately for material breach of the acceptable-use section.
• on termination: you can export your data first via /dashboard/profile → export your data. After termination, data is handled per the privacy policy retention schedule.
• sections that by their nature survive termination — content ownership, licences you've granted, warranty disclaimer, limitation of liability, indemnity, governing law — survive termination.

we may update these terms from time to time. the last updateddate at the top will reflect the latest version. for any change that materially affects your rights, we'll email active users at least 14 days before it takes effect. continuing to use the service after a material change means you accept the new terms. the historical diff will live in the repository commit log once we open-source the marketing site.

these terms are governed by the laws of england & wales. any dispute arising under or in connection with these terms is subject to the exclusive jurisdiction of the courts of england & wales.

before starting formal proceedings, we'd rather talk. email sidekick@fizzgig.aiwith your issue; a real person reads every reply and we'll try in good faith to resolve within 30 days.

• entire agreement — these terms plus the privacy policy are the entire agreement between you and fizzgig regarding the service, and supersede any prior discussion or agreement.
• severability — if a court finds any part of these terms unenforceable, the rest continues in effect.
• no waiver — fizzgig not enforcing a term on one occasion doesn't waive our right to enforce it later.
• assignment — you may not assign these terms without our written consent. we may assign them (e.g. if fizzgig is acquired or reorganised) with notice.
• notices — from fizzgig to you: sent by email to your account address. from you to fizzgig: sent to sidekick@fizzgig.ai.
• third-party beneficiaries — no one other than you and fizzgig has any right under these terms.