Legal
Terms of Service
Last updated:
These terms govern your use of the Shadscan website, hosted scanner, hosted API, and related services. Shadscan is an OrcDev project. By using a hosted Shadscan service, you agree to these terms.
The service
Shadscan inspects React and shadcn application source for detectable UI fundamentals and returns deterministic findings, scores, evidence, and suggested actions. The public web scanner supports public GitHub repositories. The authenticated API may also accept a source snapshot.
The Shadscan CLI is open-source software distributed under its own MIT license. These terms do not replace or restrict rights granted by that license. These terms apply when you access our website or hosted services.
Who may use Shadscan
You must be legally able to enter into these terms. If you use Shadscan for an organization, you represent that you have authority to bind that organization, and "you" includes that organization.
Your responsibilities
You agree that you will:
- submit only repositories, snapshots, and files you are authorized to access and process;
- remove secrets, credentials, private keys, and unnecessary personal or sensitive information before submitting a snapshot;
- comply with applicable law, third-party rights, and repository licenses;
- keep hosted API credentials confidential and notify us if they may have been compromised; and
- independently review findings before making product, accessibility, security, compliance, or legal decisions.
Acceptable use
You may not:
- interfere with, overload, probe, or disrupt Shadscan or its providers;
- evade rate limits, authentication, access controls, or safety limits;
- submit malicious archives, malware, unlawful material, or content designed to exploit the service;
- use Shadscan to violate privacy, intellectual-property, or other rights; or
- resell or provide the hosted service as your own without written permission.
We may limit, suspend, or block access when reasonably necessary to enforce these terms, protect the service, comply with law, or prevent harm.
Your content
You retain whatever rights you have in content you submit. You grant us a limited, non-exclusive right to host, copy, extract, and process that content only as needed to provide, secure, and troubleshoot the requested scan. This right ends when the temporary scan material is deleted, except for limited operational records described in our Privacy Policy.
Submitting a public GitHub repository does not give Shadscan ownership of that repository or change its license.
Scan results are guidance
Shadscan uses static rules and heuristics. Results may contain false positives, false negatives, incomplete evidence, or suggestions that do not fit your product. A score is not a certification, guarantee, or substitute for professional accessibility testing, security review, legal advice, or human product judgment.
You are responsible for reviewing and testing any change made from a Shadscan report or agent handoff.
API credentials and limits
Hosted API keys remain our property and may be revoked or rotated. You are responsible for activity performed with your credentials. Usage is subject to documented and technical limits, which may change to protect reliability and fair access.
Third-party services
Shadscan relies on services such as GitHub, Vercel, Neon, and npm. Your use of those services may be subject to their own terms and policies. We are not responsible for third-party services or content outside our control.
Our intellectual property
Except for open-source code and third-party materials governed by their own licenses, Shadscan's website content, branding, and service are owned by us or our licensors. No right to use Shadscan names or marks is granted except as permitted by law or with written permission.
Feedback
If you voluntarily provide ideas or feedback, you allow us to use them without restriction or an obligation to compensate you. This does not transfer ownership of your repository or source code.
Availability and changes
We may change, suspend, or discontinue features, rules, scores, limits, or hosted services. We do not promise uninterrupted availability or that every historical report can be reproduced after rules and dependencies change.
Disclaimers
To the maximum extent permitted by law, Shadscan and its hosted services are provided "as is" and "as available." We disclaim implied warranties of merchantability, fitness for a particular purpose, non-infringement, and accuracy. Nothing in these terms excludes warranties or rights that cannot lawfully be excluded.
Limitation of liability
To the maximum extent permitted by law, we will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, data, goodwill, or business opportunity arising from Shadscan.
Our aggregate liability is limited to the greatest extent permitted by applicable law. These limits do not apply where liability cannot lawfully be limited.
Indemnity for business use
If you use Shadscan on behalf of a business, you will defend and indemnify us against third-party claims arising from content you submit, your violation of these terms, or your unlawful use of the service, to the extent permitted by law.
Termination
You may stop using Shadscan at any time. We may suspend or terminate hosted access for a material or repeated breach, legal requirement, security risk, or threat to other users. Provisions that by their nature should survive termination will continue, including ownership, disclaimers, liability limits, and dispute terms.
Disputes and consumer rights
Before filing a claim, contact us and give us a reasonable opportunity to resolve the issue informally. Any dispute will be handled by courts with lawful jurisdiction over the operator and the dispute. Mandatory consumer-protection rights and any forum available to you under applicable law are not limited by these terms.
Changes to these terms
We may update these terms as the service changes. The current version and date will appear on this page. Continued use after an update takes effect means you accept the revised terms, except where law requires a different form of notice or consent.
Contact
Questions about these terms can be sent to orc@orcdev.com.