Legal
Terms of Use
Last updated: 30 September 2026
Article 1 — Purpose and scope
These terms of use (the "Terms of Use") govern access to and use of the website https://opentremor.dev and of the OpenTremor service hosted and operated by the Publisher (the "Service"), whatever the plan, including the free demo.
Paid plans are also governed by the terms of sale (the "Terms of Sale") and, where applicable, by specific terms. In case of conflict, the specific terms prevail over the Terms of Sale, which prevail over the Terms of Use. In case of conflict between the Terms of Use and the data processing agreement (article 17) regarding personal data, the agreement prevails.
The Terms of Use do not apply to the OpenTremor software installed and run by a third party on its own infrastructure: such a deployment is governed solely by the software's licences (article 9) and, where applicable, by its operator's own terms.
Article 2 — Definitions
- Publisher: [À COMPLÉTER], [À COMPLÉTER], registered with the [À COMPLÉTER] under number [À COMPLÉTER], with its registered office at [À COMPLÉTER], VAT: [À COMPLÉTER], reachable at [email protected], operating the Service under the trade name OpenTremor.
- Client: the natural or legal person acting for professional purposes on whose behalf an Account is opened or an Organization is created.
- User: any natural person who accesses the Service through an Account, on behalf of a Client.
- Account: a User's personal access to the Service, protected by credentials.
- Organization: the space in the Service attached to a Client, holding its Users, settings and Content.
- Content: the data, files, code, configuration, infrastructure plans and information submitted to the Service by the Client or its Users.
- Results: the analyses, findings, reports and recommendations the Service produces from the Content.
- Pack: a separately installable module of the software that recognises one kind of Content, splits it into units and supplies the rules applied when they are analysed.
Article 3 — Publisher and hosting
The Service is published by the Publisher and hosted in France by Scaleway SAS, with its registered office at 8 rue de la Ville-l'Évêque, 75008 Paris, France. The Publisher and the host are fully identified in the legal notice.
Article 4 — Professional use only
The Service is intended exclusively for professionals. By creating an Account, the User declares that they are acting for purposes within the Client's professional activity and that they have authority to bind the Client. The Service is not offered to consumers within the meaning of the French Consumer Code. The Publisher may suspend or refuse access to the Service for any User it finds to be acting for non-professional purposes.
Article 5 — Account
Using the Service requires an Account, created either with an email address and a password, or through an identity provider offered by the Service. The User provides accurate information and keeps it up to date.
Credentials are personal and confidential. The User is responsible for keeping them safe and for any use of their Account, and informs the Publisher without delay of any unauthorised use they become aware of. The Publisher recommends enabling two-factor authentication.
Creating an Account constitutes acceptance of the Terms of Use in the version in force on that date. The accepted version and its date are recorded (article 19).
Article 6 — Organizations and Users
The Client administers its Organization: it invites, provisions (including through single sign-on or SCIM), manages and removes its Users, and sets their roles.
The Client stands surety (se porte fort, article 1204 of the French Civil Code) for compliance with the Terms of Use by every User of its Organization, including Users who did not themselves accept the Terms of Use when their Account was created. The Client is answerable to the Publisher for its Users' breaches.
Article 7 — Free demo
The free demo lets each Organization run one hundred (100) analyses free of charge, once for the lifetime of the Organization, on the shared instance of the Service. It does not include platform administration.
The free demo is provided "as is", with no commitment as to availability, backups or support. The Publisher may change, limit or end it at any time.
The Publisher may delete a demo Organization that has been inactive for thirty (30) consecutive days, after informing its owners by email. Before any deletion, the Client has fifteen (15) days from that notice to request an export of its Content and Results by writing to [email protected]. Deletion covers the Organization and all of its Content and Results.
Creating several Organizations in order to obtain more free analyses is prohibited.
Article 8 — Acceptable use
The User undertakes to use the Service for its intended purpose, in accordance with the Terms of Use and the applicable law. In particular, the User shall not:
- submit Content that is unlawful, that they have no right to submit, or that infringes third-party rights;
- submit malicious code, or attempt to gain unauthorised access to the Service, its systems or other clients' data;
- run load, penetration or vulnerability tests against the Publisher's infrastructure without its prior written consent — vulnerabilities found in good faith should be reported to [email protected];
- circumvent the Service's limits, quotas or technical measures, or create Accounts by automated means;
- resell or make access to the hosted Service available to third parties without the Publisher's written consent.
The Client submits only the Content the analysis needs. In particular, it is the Client's responsibility not to include secrets (passwords, keys, tokens) or more personal data than necessary.
Article 9 — Free software and the Service
OpenTremor is free software: its server is distributed under the GNU Affero General Public License version 3 or later, its integration surfaces under the Apache License 2.0 (see the licence page). The source code of the version the Service runs is available as those licences provide.
The Terms of Use govern only the use of the hosted Service and of the Publisher's infrastructure. They neither aim nor have the effect of restricting the rights granted by the software's licences, which prevail for everything concerning the software itself. Those licences grant no right to the OpenTremor name and logos.
Article 10 — Client Content
The Client retains all rights to its Content and to the Results produced from it.
The Client grants the Publisher, for as long as strictly necessary to provide the Service, a non-exclusive, royalty-free licence to host, reproduce, process and display the Content, solely to provide the Service. The Publisher does not use the Content to train models, does not sell it and does not disclose it to third parties except as provided in the Terms of Use. It may compile aggregate usage statistics from which the Content cannot be identified.
The Client warrants that it holds the rights needed for the Content it submits, and indemnifies the Publisher against any third-party claim in that respect.
Content is retained for the periods set out in the privacy policy and in the Organization's settings. The Client may at any time request an export of its Content and Results by writing to [email protected].
Article 11 — Third-party services
Some features rely on third-party services chosen and configured by the Client: a large language model (LLM) provider, GitHub, messaging (Slack, webhooks), identity providers.
Analyses that use a language model run with the Client's own access key, at the provider the Client chose. The Client contracts directly with that provider, bears the cost of its use, and is responsible for the choice of provider, including where it processes data. The Client ensures that this processing complies with the applicable law, in particular on personal data, and informs the data subjects, where required, of any transfer outside the European Union. The budget limits the Service offers are an aid and do not guarantee a spending cap.
The sub-processors the Publisher itself uses are distinct from those third-party services; they are listed in the data processing agreement (article 17). The Publisher is not responsible for the availability, output or terms of the third-party services chosen by the Client.
Article 12 — Analysis results
Results are produced automatically, in particular with language models. They may be incomplete, inaccurate or irrelevant: the Service may flag an issue that is not one and, above all, may miss an issue that exists.
Results are an aid to review. They are not an audit, a security or compliance certification, or advice. The Client remains solely responsible for reviewing the Results and for its decisions, in particular whether or not to deploy a change.
Article 13 — Availability, maintenance and backups
The Publisher endeavours to keep the Service available at all times. It has a best-efforts obligation (obligation de moyens) and guarantees neither uninterrupted availability, nor an availability rate, nor a recovery time, unless the Terms of Sale or specific terms expressly provide otherwise.
The Publisher may interrupt the Service for maintenance. Planned interruptions that affect the Service's availability are announced in the Service and, where they can be scheduled, at least five (5) business days in advance. Urgent work, in particular for security, may take place without notice.
The Service evolves: new versions of the software are deployed as they are released, identical for every client. Deployments that do not materially affect functionality are not announced in advance; material changes are announced in the Service at least fifteen (15) days before they are deployed.
For paid plans, backups are governed by the Terms of Sale. For the free demo, no backup commitment is made. In every case, the Client is advised to keep its own copies of its Content.
Article 14 — Security
The Publisher implements technical and organisational measures that are reasonable in light of the state of the art to protect the Service and the Content: encrypted communications, encryption of stored secrets (language model provider keys, integration tokens), isolation between Organizations, role-based access control, and two-factor authentication available to every User. No system being invulnerable, the Publisher does not guarantee the absence of any vulnerability.
In the event of a personal data breach, the Publisher informs the Client without undue delay and assists it in meeting its notification obligations, under the data processing agreement (article 17).
Article 15 — Liability
The Publisher has a best-efforts obligation. It is liable only for a breach of its obligations, and only for direct and foreseeable damage.
The following, in particular, are not compensable: loss of revenue, profit or customers, reputational harm and the cost of a replacement service. The consequences of decisions taken on the basis of the Results remain the Client's responsibility.
For the free demo, the Publisher's total liability is limited to one hundred (100) euros. For a paid plan, it is governed by the Terms of Sale.
These limitations do not apply to gross negligence or wilful misconduct, nor to damage whose compensation the law prohibits limiting.
Article 16 — Suspension, termination and deletion
The Publisher may suspend a User's or an Organization's access for breach of the Terms of Use, after a formal notice sent by email has remained without effect for eight (8) days. Suspension may be immediate in an emergency: a threat to the security of the Service or of third parties, manifestly unlawful use, or an order from an authority.
A User may at any time ask for their Account to be deleted, and a Client for its Organization to be closed, by writing to [email protected]. The Publisher does so within one (1) month.
An Organization whose closure is requested is locked, then deleted with all of its Content after a grace period of thirty (30) days during which the closure can be cancelled and an export of the Content requested. Data remaining in backups is erased as the backups rotate. Some data is kept longer where the law requires it or as evidence of transactions (audit logs, billing data), as set out in the privacy policy.
Article 17 — Personal data and cookies
The processing of Users' personal data (credentials, usage logs, records of acceptance of the Terms of Use) is described in the privacy policy.
Where the Publisher processes, on a Client's behalf, personal data contained in its Organization, it acts as a processor within the meaning of article 28 of the GDPR, under the data processing agreement in annex 2 of the Terms of Sale. That agreement forms an integral part of the Terms of Use: it applies to every plan, including the free demo, whether or not the Client has subscribed to a paid plan.
The Service uses only cookies that are strictly necessary for it to work (such as the session, sign-in security and cookie choices), which are exempt from consent under the CNIL's guidelines. It uses no analytics or advertising cookies.
Article 18 — Changes to the Terms of Use
The Publisher may change the Terms of Use. Any material change is notified to Users by email or in the Service at least thirty (30) days before it takes effect. A User or Client who refuses it may, before that date, delete their Account or terminate their subscription at no cost or penalty; otherwise, using the Service after the change takes effect constitutes acceptance.
For Clients on a paid plan, a material change taking effect during a current commitment period applies only with the Client's express consent or at the end of that period, unless it is more favourable to the Client.
Changes required by law, by an authority or for security reasons may take effect immediately.
Article 19 — Evidence
Electronic records kept in the Publisher's systems — in particular the record of acceptance of the Terms of Use (version and date), audit logs and usage data — are binding between the parties unless proven otherwise, in accordance with article 1368 of the French Civil Code.
Article 20 — General provisions
If any provision of the Terms of Use is held invalid, the others remain in force. The Publisher's failure to invoke a breach does not waive its right to invoke it later.
The Terms of Use are written in French. This English translation is provided for information only; in case of discrepancy, the French version prevails.
Article 21 — Governing law and disputes
The Terms of Use are governed by French law.
In the event of a dispute, the parties seek an amicable solution for thirty (30) days from its written notification. Failing that, the dispute is brought before the competent courts of [À COMPLÉTER], subject to mandatory rules of jurisdiction.