Terms of Service

These Terms of Service (“Terms”) govern your use of the Specsight platform (“Service”) operated by Ola Piętka, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in Poland, NIP 5833430945, with its registered address at ul. Zawodzie 20, 80-726 Gdańsk, Poland (“we”, “us”, “our”).

By creating an account or using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms.

1. The service

Specsight is a B2B software-as-a-service platform that analyses codebases connected via GitHub or GitLab and turns them into a readable view of how your product behaves: features, scenarios and a changelog. The Service updates this view on each merge by monitoring code changes.

Early-stage product notice: Specsight is under active development. Features may change, be added, or be removed. While we strive for reliability, you should not rely on the Service as your sole source of truth for critical decisions without independent verification. We appreciate your understanding as we continue to improve the product.

2. Accounts

2.1 Registration

You must provide accurate and complete information when creating an account. You are responsible for maintaining the security of your account credentials and for all activity that occurs under your account.

2.2 Organisations

Specsight accounts are grouped into organisations. The organisation admin is responsible for managing members, roles, and connected projects. By inviting members, you confirm they are authorised to access the organisation’s data.

2.3 Age requirement

You must be at least 16 years old to use Specsight. By creating an account, you confirm that you meet this requirement.

2.4 API keys and AI tool connections

Members can generate API keys, or connect AI tools through OAuth, to give those tools access to the organisation’s specifications via our MCP server. API keys can only read. A tool connected through OAuth can also draft release notes on a member’s behalf when that member’s role allows it; drafts are published only from Specsight. Keep API keys confidential, and revoke keys or disconnect tools in your organisation’s integration settings if you believe they have been compromised. You are responsible for all activity performed with your organisation’s keys and connections.

3. Acceptable use

You agree not to:

• Use the Service for any unlawful purpose or in violation of any applicable laws
• Attempt to gain unauthorised access to the Service, other accounts, or underlying systems
• Interfere with or disrupt the Service or its infrastructure
• Reverse-engineer, decompile, or disassemble any part of the Service
• Use the Service to analyse repositories you do not have permission to access
• Resell, sublicense, or redistribute the Service without our written consent
• Upload or transmit malicious code through any integration

4. Intellectual property

4.1 Your code and data

You retain all ownership rights to your source code, repositories, and any data you provide to Specsight. We do not claim ownership over your code or the specifications generated from it. You grant us a limited, non-exclusive licence to access and process your code solely for the purpose of providing the Service.

4.2 Specsight IP

The Service, including its design, user interface, AI-powered features and integrations, and documentation, is owned by Ola Piętka and protected by intellectual property laws. These Terms do not grant you any rights to our trademarks, logos, or brand assets.

4.3 Generated specifications

The features, scenarios, and other specifications generated by Specsight from your code belong to you. You may export, copy, and use them freely within your organisation. If you publish release notes, anyone with the link can read them. You are responsible for what you choose to publish.

4.4 Feedback

If you send us suggestions, ideas, or feedback about the Service — including through the in-app feedback form — we may use them to improve the Service without any obligation to you. This does not affect your rights in your code or data under Section 4.1.

5. GitHub and GitLab integrations

The Service reads your code through a connection you set up with GitHub or GitLab. The two work differently, and the difference matters for what we store.

5.1 GitHub

The Service connects to GitHub through a GitHub App that you install on your GitHub account or organisation. By installing the app, you:

• Authorise Specsight to read the repositories you select
• Authorise Specsight to receive webhook notifications for code changes
• Confirm that you have the authority to grant this access

You can revoke access at any time by uninstalling the Specsight GitHub App from your GitHub settings. Revoking access stops future analyses but does not delete previously generated specifications — you can delete those separately.

5.2 GitLab

The Service connects to GitLab (gitlab.com or a self-managed instance) through an access token that you create in GitLab and provide to Specsight together with your instance URL: a fine-grained token limited to the permissions listed on our security page and on the GitLab connection page, or, where GitLab does not offer one, a legacy token with the api scope. By providing the token, you:

• Authorise Specsight to use the token to read the repositories you select, to clone them for analysis, and to create and remove Specsight’s own webhooks on those repositories
• Confirm that you have the authority to grant this access and that the token belongs to an account permitted to access those repositories
• Acknowledge that a legacy api-scope token is not technically read-only; whichever kind you provide, Specsight uses it only as described here and never writes to your code

You are responsible for the scope, ownership, and rotation of the token, and for revoking it if you believe it has been compromised. We store the token encrypted in a dedicated secrets manager (Supabase Vault), decrypt it only at the moment of use, and send it only to the https GitLab host you entered. A self-managed GitLab instance is operated by you, and we are not responsible for its availability or security. We store the token using industry-standard encryption but cannot guarantee absolute security; our liability for any compromise of a stored token is limited to the extent caused by our failure to maintain reasonable security measures.

You can revoke access at any time by revoking the token in GitLab or by disconnecting GitLab in your organisation’s integration settings. Either stops future analyses. Disconnecting also destroys the stored token, as does replacing it or deleting your organisation, and asks GitLab to remove the webhooks Specsight created on your repositories; if the token has already expired or been revoked, GitLab refuses that request and those webhooks remain until you delete them in GitLab. Revoking access does not delete previously generated specifications, which you can delete separately.

6. AI-powered analysis

Specsight uses artificial intelligence (powered by Anthropic’s Claude) to analyse your code and generate specifications. You acknowledge that:

• AI-generated specifications are best-effort interpretations and may contain inaccuracies, omissions, or misinterpretations — you should review them before relying on them for any decisions
• During analysis, your entire repository (for full scans) or code diffs (for merge syncs) are sent to the Claude API under Anthropic’s API Terms. Anthropic does not use API inputs to train their models.
• When you use Ask Specsight, your questions, the conversation, and the relevant context — parts of your spec, or your account and billing state for the Specsight Help drawer — are sent to the Claude API under the same Anthropic API Terms, using your organisation’s own Anthropic API key when one is stored
• Source code is processed in ephemeral environments and is not permanently stored by Specsight — it is deleted immediately after analysis
• We are not responsible for any decisions made, code shipped, or actions taken based on AI-generated specifications
• You are responsible for ensuring that repositories you connect do not contain sensitive personal data, credentials, secrets, or other material that should not be processed by third-party AI services. We are not liable for the processing of such data if you choose to include it in a connected repository.
• While we implement industry-standard security measures, we rely on third-party sub-processors (including Anthropic) to process your code. We are not liable for data incidents caused by a sub-processor’s breach of their own security obligations, provided we have taken reasonable steps in selecting and monitoring them.

6.1 Bring-your-own-key (BYOK)

Organisations that joined on our former BYOK plan can keep using their own Anthropic API key until they move to the Standard plan. While they do:

• Your key is encrypted and stored in a dedicated secrets manager (Supabase Vault) and is only decrypted at the moment of use
• AI API calls are made using your key and billed directly to your Anthropic account — we are not responsible for charges incurred on your Anthropic account
• You are responsible for the security of your API key before you provide it to us, and for rotating it if you believe it has been compromised
• We store your key using industry-standard encryption but cannot guarantee absolute security. Our liability for any compromise of a stored key is limited to the extent caused by our failure to maintain reasonable security measures
• An Admin can delete the stored key at any time in billing settings, and we delete it when the organisation moves to Standard

7. Pricing and payment

7.1 Plans

Specsight offers one paid subscription plan, Standard. We may also agree individual terms with an organisation, such as a custom price, a discount, a free period or higher limits. Usage limits are shown on our pricing page; when your organisation reaches one, that use pauses until the limit resets. Current pricing is displayed on our website and may change with 30 days’ notice.

7.2 Free trial

An organisation can apply for a free trial of Standard during setup. We decide each application and may decline it. Each company and each person can have one free trial.

• The trial lasts 7 days from when you start it at checkout and covers one project. Re-analysis is not included, and the project cannot be deleted during the trial.
• You add a payment method to start the trial. Nothing is charged during it, and we email you before the first charge.
• When the trial ends, your Standard subscription starts and your payment method is charged the price shown at checkout, unless you cancelled before the trial ended.
• You can cancel at any time during the trial through the Stripe customer portal in your billing settings. Access continues until the trial ends and nothing is charged. Your data is then retained as described in section 7.5.
• You can also end the trial early and start your subscription straight away. Your payment method is charged at that moment.

7.3 Billing

Paid subscriptions are billed in advance on a monthly basis through Stripe. You authorise us to charge the payment method on file.

7.4 Money-back guarantee and refunds

The first payment for a new organisation’s subscription comes with a 14-day money-back guarantee. If you are not satisfied with the Service, email ola@specsight.app within 14 days of that payment and we will refund it in full.

• A refund ends the subscription immediately. Access to the organisation pauses and your data is retained as described in section 7.5.
• The guarantee applies once per customer. It does not cover an organisation that subscribes again after a previous subscription ended, or a subscription that began with a free trial or with a free period under an individual agreement.
• Other payments are non-refundable, except where applicable law requires a refund.

Nothing in this section limits any rights you have under applicable law, including EU consumer protection rules.

7.5 Cancellation and data retention

You can cancel your subscription at any time through the Stripe customer portal in your billing settings. Paid features remain active until the end of the current billing period.

When your subscription ends — because you cancelled or because payment could not be collected — access to your organisation pauses until you subscribe again. Your data is retained for 90 days from that moment, and subscribing again within this window restores full access to everything as you left it. We send a warning email before the retention window closes. After 90 days, the organisation and all its data are permanently deleted.

8. Service availability

We strive to maintain high availability but do not guarantee uninterrupted access. The Service may be temporarily unavailable due to maintenance, updates, or circumstances beyond our control. We will make reasonable efforts to notify you of planned downtime.

8.1 Force majeure

We are not liable for any failure or delay in performing our obligations where such failure or delay results from events beyond our reasonable control, including but not limited to: natural disasters, internet or infrastructure outages, failures of third-party services we depend on (such as GitHub, GitLab, Anthropic, Supabase, Stripe, or Vercel), government actions, cyberattacks, or pandemics.

9. Data handling

Your use of the Service is also governed by our Privacy Policy, which describes how we collect, use, and protect your data. By using the Service, you consent to the data practices described therein.

If you require a Data Processing Agreement (DPA) for your organisation’s compliance needs, contact us at ola@specsight.app.

9a. Marketing communications

Creating a Specsight account subscribes you to occasional service announcements (new features, important changes, release notes) as part of the service itself. You may additionally opt in to Specsight’s newsletter — by ticking the newsletter checkbox on the signup page, submitting your email through the newsletter form in the site footer or at the foot of blog posts, or ticking the marketing opt-in checkbox on our cost-of-drift calculator. If you leave your email when answering our research survey, we subscribe you to service announcements only, as stated on the survey form. You may unsubscribe from either category at any time using the one-click link present in every marketing email. We comply with applicable email-marketing law, including GDPR, CAN-SPAM, and CASL. We never share your contact details with third parties for their own marketing purposes. See our Privacy Policy §3a for the lawful basis, processor, and withdrawal mechanics.

10. Limitation of liability

To the maximum extent permitted by applicable law:

• The Service is provided “as is” and “as available” without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement
• We are not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Service, including but not limited to loss of profits, data, business opportunities, or goodwill
• Our total aggregate liability for any claim related to the Service shall not exceed the amount you paid us in the twelve (12) months preceding the event giving rise to the claim, or EUR 100, whichever is greater
• We are not responsible for the accuracy, completeness, or reliability of AI-generated specifications, nor for any decisions or actions taken based on them
• We are not responsible for any loss or damage resulting from unauthorised access to your account caused by your failure to safeguard your credentials

Nothing in these Terms excludes or limits our liability for (a) death or personal injury caused by our negligence, (b) fraud or fraudulent misrepresentation, or (c) any other liability that cannot be excluded or limited under applicable law, including mandatory consumer protection rights under EU law.

11. Indemnification

You agree to indemnify and hold Ola Piętka harmless from any third-party claims, losses, or damages (including reasonable legal fees) arising from: (a) your use of the Service in violation of these Terms, (b) your infringement of any third party’s intellectual property or other rights, or (c) your use of the Service to analyse repositories you were not authorised to access.

12. Termination

12.1 By you

You may stop using the Service and delete your account at any time through your account settings. Organisation admins may delete their organisation, which will remove all associated data.

12.2 By us

We may suspend or terminate your account if you violate these Terms or engage in behaviour that harms other users or the integrity of the Service. We will make reasonable efforts to notify you before or at the time of termination, except in cases of serious violations.

12.3 Effect of termination

Upon termination, your right to use the Service ceases immediately. We will delete your personal data in accordance with our Privacy Policy (within 30 days). Provisions that by their nature should survive termination — including Sections 4 (Intellectual Property), 10 (Limitation of Liability), 11 (Indemnification), and 14 (General) — will continue to apply.

13. Changes to these terms

We may update these Terms from time to time. We will notify you of material changes by email or through a notice in the app at least 30 days before they take effect. Continued use of the Service after the changes take effect constitutes acceptance of the updated Terms. If you do not agree with the changes, you may stop using the Service and delete your account before the changes take effect.

14. General

• Governing law: These Terms are governed by and construed in accordance with the laws of the Republic of Poland, without regard to conflict-of-law principles.
• Jurisdiction: Any disputes arising from or relating to these Terms or the Service shall be submitted to the competent courts in Gdańsk, Poland. If you are a consumer within the EU, you retain the right to bring proceedings in the courts of your country of residence as provided by mandatory consumer protection regulations.
• EU dispute resolution: The European Commission provides an online dispute resolution platform at ec.europa.eu/consumers/odr. We are not obligated to participate in dispute resolution proceedings before a consumer arbitration body, but we will consider doing so in good faith.
• Severability: If any provision of these Terms is found unenforceable, the remaining provisions continue in full force.
• Entire agreement: These Terms, together with the Privacy Policy, constitute the entire agreement between you and Ola Piętka regarding the Service.
• Assignment: You may not assign your rights under these Terms without our consent. We may assign our rights in connection with a merger, acquisition, or sale of assets, provided the assignee agrees to honour these Terms.
• No waiver: Our failure to enforce any provision of these Terms does not constitute a waiver of that provision or any other provision.

15. Contact

If you have questions about these Terms, contact us at:

• Email: ola@specsight.app
• Contact form: specsight.app/contact
• Post: Ola Piętka, ul. Zawodzie 20, 80-726 Gdańsk, Poland