Terms of Service

1.About these terms

These Terms of Service (“Terms”) are an agreement between you and the company below (“RuleFix”, “we”, “us”) for the RuleFix website, dashboard, MCP server, API, GitHub App and related tools (the “Service”):

• Legal name: Vinkura Innovations Network Private Limited (“RuleFix”)
• Registered office: 197, Chaudhary Mohalla, Gulab Nagar, Bareilly, Uttar Pradesh 243003, India
• CIN: U63999UP2025PTC219516
• Website: rulefix.in

By creating an account, ticking the box at sign-up or using the Service, you accept these Terms, our Acceptable Use Policy and, where we process personal data for your organisation, our Data Processing Addendum (together, the “Agreement”). Our Privacy Policy explains how we handle your own personal data. If you have signed an order form with us, it prevails over these Terms where they conflict.

If you use the Service for an organisation, you confirm that you are authorised to accept these Terms for it, and “you” includes that organisation. You must be at least 18 and able to enter into a binding contract.

2.Accounts, workspaces and admins

• Give us accurate details and keep them up to date. Keep your sign-in methods and API keys secret; you are responsible for activity under them.
• Your work lives in a workspace. The workspace owner and admins control it: they can invite and remove members, create and revoke API keys, connect the GitHub App, add projects and websites, and delete data. The organisation that owns a workspace owns its content, even if you created it.
• Tell us straight away at security@rulefix.in if you suspect unauthorised access to your account, a workspace or an API key.
• We may contact you about your account by email, including security notices and changes to these Terms.

3.The Service

RuleFix analyses source code and public websites against rules mapped to privacy, security and regulatory frameworks (such as the DPDP Act, GDPR, SOC 2, HIPAA, PCI DSS, ISO 27001, CCPA and LGPD), records findings, and suggests fixes. We improve the Service continuously, so features may change. We will not materially reduce the core functionality of a paid plan during a paid term. Features labelled beta, preview or “soon” are provided as they are and may change or end.

We may set reasonable usage limits (for example requests per minute, files per call and file size) to keep the Service reliable; current limits are in our documentation and the Acceptable Use Policy.

4.Acceptable use

You must follow the Acceptable Use Policy. In particular, you must not use RuleFix to break the law, attack or probe systems you aren't authorised to test, abuse our API or MCP server, or get around limits or security controls.

Website scanning: only ask RuleFix to scan websites that you own or that you are authorised in writing to test. Our scans fetch publicly accessible pages, but the decision to scan a site is yours, and you are responsible for having permission.

Repositories: only connect or submit code that you have the right to share with us for analysis.

5.Your content and our licence to use it

“Customer content” means the code, configuration, website addresses, findings, notes and other material you or your agents submit to the Service. You keep all rights in it. You give us a non-exclusive, worldwide, royalty-free licence to host, copy, process and display customer content only as needed to provide, secure and support the Service for you, and to comply with law. This licence ends when the content is deleted.

We do not use customer content to train AI models, and we do not sell it. We may use aggregated, de-identified data about how the Service performs (for example rule hit rates) to improve it; this data does not identify you, your organisation or your code.

You are responsible for customer content and for having all rights and permissions (including any notices or consents needed under privacy law) to let us process it. Where customer content contains personal data, our DPA applies.

6.AI-generated fixes

When you or your agent request an AI fix, RuleFix sends a redacted portion of the relevant file to an AI model provider (currently Anthropic) and returns a suggested edit, which RuleFix re-scans before returning. You understand that:

• Suggestions are generated automatically and may be incomplete, insecure or wrong, even after our re-scan. They can change behaviour your tests don't cover.
• You must review, test and approve every change before merging or deploying it. You are responsible for the code you ship.
• As between you and us, you own the suggested code you choose to use, to the extent the law allows ownership of it.
• If you don't want code sent to an AI provider, don't request AI fixes; reference fixes don't send code anywhere.

7.No compliance guarantee; not legal advice

RuleFix helps engineers find and fix issues in code and websites and keep evidence of that work. It does not provide legal advice, and using it does not make you compliant with the DPDP Act, GDPR, SOC 2, HIPAA, PCI DSS, ISO 27001, CCPA, LGPD or any other law or standard. Compliance depends on your whole organisation — policies, contracts, people and processes — and is decided by regulators, courts and your auditors.

Rules can miss issues (false negatives) and flag things that are fine (false positives). Framework mappings are our interpretation. Get advice from a qualified professional for decisions that matter.

8.Plans, fees and billing

• Some plans are free; paid plans are billed in advance, monthly or yearly, in Indian Rupees unless your order form says otherwise. Prices are on our pricing page and exclude GST and other applicable taxes, which we add to your invoice.
• Paid plans renew automatically at the end of each term until cancelled. We will email you before a yearly plan renews.
• Payments are processed by our payment partner (Razorpay). By paying you authorise the charge, and for subscriptions, the recurring charge.
• We may change prices for future terms with at least 30 days' notice; the change applies from your next renewal.
• If a payment fails, we will tell you and retry. If it is still unpaid 14 days after our notice, we may downgrade or suspend the paid features.
• Cancellations and refunds are covered by our Refund & Cancellation Policy.

9.Suspension and termination

By you: you can stop using RuleFix at any time, cancel a paid plan from your billing settings (or by emailing support@rulefix.in), delete a workspace you own, or request erasure of your account in Settings → Privacy.

By us: we may suspend access, in whole or in part, if we reasonably believe you are breaching the Agreement, your use threatens the security or stability of the Service or others, payment is overdue as described above, or the law requires it. We will tell you the reason and give you a chance to fix it first unless the risk is urgent or the law prevents us. We may terminate the Agreement for a material breach that you don't fix within 30 days of notice, or immediately for serious or repeated violations of the Acceptable Use Policy. We may end a free plan with 30 days' notice.

After termination: you can export your data for 30 days (unless termination was for unlawful use), after which we delete customer content as described in the DPA and our Privacy Policy, except where the law requires us to keep it. Sections that by their nature should survive (including content licence limits, disclaimers, liability, indemnity and disputes) survive.

10.Our intellectual property

We and our licensors own the Service, including the software, rules, rule mappings, documentation and the RuleFix name and logo. We give you a limited, non-exclusive, non-transferable right to use the Service under the Agreement during your subscription. Don't copy, resell or reverse engineer it except as the law expressly allows. If you send us feedback, we may use it without obligation to you. Open-source components are licensed under their own licences.

11.Confidentiality

Each of us will protect the other's non-public information received under the Agreement (including customer content, and our non-public product and security information) with at least reasonable care, use it only to perform the Agreement, and share it only with people and sub-processors who need it and are bound by similar obligations. This doesn't cover information that is public through no fault of the recipient, already known to it, independently developed, or lawfully received from someone else. Disclosure required by law is allowed, with notice to the other party where lawful.

12.Warranties and disclaimers

We will provide the Service with reasonable skill and care and in line with our security practices. Except for that, and to the fullest extent the law allows, the Service is provided “as is” and “as available”. We do not warrant that it will be uninterrupted or error-free, that it will find every issue, or that fixes it suggests are correct or sufficient for any law or standard. We disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement.

Nothing in these Terms limits rights you have under consumer protection law that can't be limited by contract.

13.Limitation of liability

To the fullest extent the law allows:

• Neither of us is liable for indirect, incidental, special or consequential losses, or for loss of profits, revenue, goodwill or data (other than our obligation to restore data from our backups), even if warned of them.
• Each party's total liability arising out of or relating to the Agreement in any 12-month period is limited to the greater of (a) the fees you paid us for the Service in the 12 months before the event giving rise to the claim and (b) ₹10,000.
• These limits don't apply to your payment obligations, your indemnity, breach of the Acceptable Use Policy, or liability that the law does not allow to be limited (such as fraud).

14.Indemnity

You will defend and indemnify us against third-party claims, and resulting losses, fines and reasonable legal costs, arising from customer content, your breach of the Acceptable Use Policy (including scanning targets you weren't authorised to test) or your violation of law. We will promptly tell you about the claim, let you control its defence (you may not settle in a way that admits fault for us without our consent) and give reasonable help at your cost.

15.Governing law and disputes

The Agreement is governed by the laws of India. If a dispute arises, please email legal@rulefix.in first — we will try in good faith to resolve it within 30 days.

If it isn't resolved, it will be finally settled by arbitration under the Arbitration and Conciliation Act, 1996, by a sole arbitrator appointed by agreement (or, failing agreement, as that Act provides). The seat and venue will be Bareilly, Uttar Pradesh, India, and the language English. Subject to this, the courts at Bareilly, Uttar Pradesh, India have exclusive jurisdiction, including for interim relief. Either of us may seek urgent injunctive relief from any competent court to protect confidential information or intellectual property. Nothing here limits your right to complain to the Data Protection Board of India or another regulator.

16.General

• Changes: we may update these Terms. For material changes we will give at least 30 days' notice by email or in the dashboard (unless a change is required sooner by law), and the dashboard will ask you to accept the new version. If you don't agree, you may cancel before the change takes effect and get a pro-rata refund of prepaid fees for the unused period.
• Force majeure: neither of us is liable for delays caused by events beyond reasonable control, other than payment obligations.
• Assignment: you may not transfer the Agreement without our consent, except to a successor of your business; we may transfer it to an affiliate or successor with notice.
• Whole agreement: the Agreement is the entire agreement about the Service. If a provision is unenforceable, the rest stays in force. A failure to enforce is not a waiver. There are no third-party beneficiaries.
• Notices: we send notices to your account email; you send them to legal@rulefix.in.

17.Contact

• Legal: legal@rulefix.in
• Support and billing: support@rulefix.in
• Post: Vinkura Innovations Network Private Limited, 197, Chaudhary Mohalla, Gulab Nagar, Bareilly, Uttar Pradesh 243003, India