Terms of use

These terms are between you and Siva Koza d.o.o. ("we"), whose details are in the legal notice. They cover this website, Mainfast Pro and the hosted GitHub App. If you accept them for a company, you confirm you may bind it.

Effective 7 November 2026.

The software

The Mainfast checks are open source under the MIT licence. That licence, not these terms, governs your use of the code. The hosted GitHub App is a service provided under these terms, not under the MIT licence.

Pro and keys

Pro is the hosted GitHub App. The pricing page sets out who needs it, what it costs and what it includes. An owner of the organisation buys it from the App's dashboard, for that organisation. Polar Software, Inc. sells it as merchant of record, so Polar's terms also apply to your purchase, and Polar handles payment, tax, invoices, cancellation and refunds, including any right of withdrawal you have as a consumer. A subscription renews until you cancel it. Uninstalling the App does not cancel it.

Seats follow active contributors. If you have more active contributors than seats we show it on the dashboard, and we do not charge for them automatically. Keep any key secret: you are responsible for how it is used.

The hosted GitHub App

The App is free for public repositories and for private organisations with up to 5 active contributors. Above that, a new install runs in full for 14 days from the account's first install, which reinstalling does not restart, and from day 7 the checks and the dashboard show the date blocking starts.

After those 14 days, without an active Pro subscription, every hosted check fails, is titled as needing Pro, and checks nothing. Where a check is required in branch protection or a ruleset, that blocks merges. The dashboard then shows only the upgrade page. Your data stays stored while the App is installed and returns on payment, and open pull requests are re-checked automatically. To avoid this you can pay, reduce your active contributors, remove the check from your requirements, or uninstall the App.

We block only when we know you are over the limit with no active subscription. If we cannot tell, because of an error or an outage, the checks run normally. A subscription with a failed payment keeps working until Polar ends it.

The GitHub Actions are not part of this. They stay free, and they never fail or block a merge for licensing.

You confirm you may install the App on the accounts and repositories you choose, and you permit us to read them through GitHub's API to run the checks and to store the results described in our privacy policy. You can stop at any time by uninstalling it, and we may suspend an installation that is abused or that endangers the service.

Data processing for the hosted App

If you install the App for an organisation and the GDPR applies, this section is the processing agreement under GDPR Article 28. You are the controller and we are the processor of the personal data in the App's findings and contributor counts, which concern the people who work in your repositories. We process it for as long as the App is installed, to run the checks and show the dashboard. We:

• act only on your documented instructions, which are these terms and how you configure the App, unless the law requires otherwise, in which case we tell you if we may;
• bind anyone who handles the data to confidentiality, and protect it with appropriate technical and organisational measures, including encrypted transport, signed webhooks and short-lived tokens;
• use Cloudflare, Inc., GitHub, Inc. and, if you set up a Slack webhook, Slack as sub-processors, which you authorise. We will publish any change in the privacy policy before it applies, you may object by writing to us, and you may uninstall if we cannot resolve the objection. We bind sub-processors to equivalent duties and remain responsible for them;
• help you answer requests from people exercising their rights and meet your duties on security, breach notices and impact assessments, as far as our role allows;
• tell you without undue delay after becoming aware of a personal data breach;
• delete the data when you uninstall the App, and otherwise as the privacy policy says;
• give you the information needed to show compliance, and allow reasonable audits on written notice.

What a result means

The checks reduce risk, but they do not guarantee that a merge is safe. They can miss a real problem and can report one that does not exist. Review what they report, and keep your own tests and reviews.

Availability

We may change or discontinue the website, plans or any feature. The Actions run in your CI, and a licence check that cannot reach Polar counts as valid, so an outage on our side does not block merges that use them. If you require a hosted App check in branch protection or a ruleset, an outage on our side can hold a merge until the check reports, and so can a missing Pro subscription, as described above.

Acceptable use

Do not attack or overload this website or the App, or resell or share keys or subscriptions in breach of your plan. We may revoke a key that is abused.

Liability

The website, keys and App are provided "as is", without warranties, as far as the law allows. We are not liable for indirect or consequential loss, or for lost data or lost profit.

Otherwise our liability is limited to the greater of what you paid us in the twelve months before the claim and EUR 50.

Nothing here limits liability that cannot lawfully be limited, including for fraud, intent or gross negligence, or death or personal injury. If you are a consumer, your statutory rights are unaffected.

Law

Croatian law applies, without its conflict-of-law rules and without the UN Convention on Contracts for the International Sale of Goods. The courts of Zadar have jurisdiction, except where consumer law gives you the right to sue where you live. If part of these terms is invalid, the rest still applies.

Changes and contact

If these terms change, we publish the new version here with its date. Where a change materially affects a paid subscription or the data processing section, we give at least 30 days' notice where we have a way to reach you. To reach us: mainfast@sivakoza.ai.