Terms of Service
AI Powered Smart Contract Audit Terms of Service
Operator: Naviget SIA, a company registered in the Republic of Latvia, reg. No. 40103628517, registered address Slokas iela 183-11, Riga, Latvia ("Naviget," "we," "us").
Service: AI Powered Smart Contract Audit, an automated smart-contract security audit platform, accessible at sca.aistarts.lv, via REST API, MCP, and A2A interfaces (the "Service").
Effective Date: 09 July 2026
Last Updated: 09 July 2026
These Terms of Service ("Terms") form a binding agreement between Naviget and the entity or person using the Service ("Customer," "you"). By creating an account, submitting code for audit, or otherwise accessing the Service (including via API, MCP, or A2A), you accept these Terms in full. If you do not agree, do not use the Service.
1. Business-Only Service; Eligibility
1.1. The Service is offered exclusively to businesses and professionals acting in the course of their trade, business, or profession — including but not limited to DeFi protocols, Web3 development teams, DAOs, venture funds, security researchers, and autonomous AI agents acting on behalf of such entities. The Service is not directed at, and may not be used by, consumers acting for personal, family, or household purposes. By using the Service you represent and warrant that you are acting in a business capacity.
1.2. You must be at least 18 years old and have full legal capacity to enter into this agreement. If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation, and "you" refers to that organisation.
1.3. We may refuse service to, or terminate the account of, anyone we reasonably believe does not meet these eligibility requirements.
2. Description of the Service
2.1. AI Powered Smart Contract Audit is an automated, AI-driven first line of review for smart contract code (Solidity, Rust/Anchor, Move). The Service analyses submitted code and produces a security report, which may include a description of potential vulnerabilities, generated proof-of-concept exploit code, and a structured audit report (Markdown and JSON).
2.2. The Service is explicitly not a substitute for a manual audit performed by human security professionals. It is provided as a preliminary, automated screening tool. Section 4 of the separate AI Audit Disclaimer, which is incorporated into these Terms by reference, governs the limitations of the Service and is binding on you.
2.3. We may modify, suspend, or discontinue any part of the Service (including specific chains, languages, or verification levels) at any time. We will make reasonable efforts to notify Customers of material changes affecting active audits.
3. Accounts and Access
3.1. Access to the web dashboard requires authentication via Google or GitHub OAuth. Access to the REST API requires an API key issued from the dashboard. You are responsible for safeguarding your account credentials, API keys, and any GitHub Personal Access Tokens you provide, and for all activity occurring under them.
3.1A. Acceptance mechanism. You must affirmatively accept these Terms (together with the Privacy Policy, Refund Policy, and AI Audit Disclaimer) — for example, by checking an acceptance box — when creating an account or generating your first API key via the dashboard. This acceptance covers all subsequent access to the Service under that account through any interface, including the REST API, MCP, and A2A, whether invoked directly by you or by an automated agent acting on your behalf. We retain a record of the Terms version, timestamp, and account associated with each acceptance. If these Terms are updated, continued use of any interface (dashboard, API, MCP, or A2A) after the effective date of the update constitutes acceptance of the updated Terms by the account holder.
3.2. You must notify us promptly at info@aistarts.lv of any suspected unauthorised use of your account or leaked credentials. We are not liable for losses caused by your failure to secure your credentials.
3.3. For programmatic/automated (API, MCP, A2A) use, you are responsible for implementing the X-Idempotency-Key mechanism correctly. We are not responsible for duplicate charges resulting from your failure to use idempotency keys as documented.
4. Submitted Code: Licence, Ownership, and Warranties
4.1. Ownership. You retain all right, title, and interest in and to the source code, repositories, and materials you submit ("Submitted Code"). We claim no ownership over Submitted Code.
4.2. Licence to us. You grant Naviget a limited, non-exclusive, worldwide licence to access, copy, store, process, and analyse the Submitted Code — including by transmitting relevant portions to third-party large language model ("LLM") providers as described in our Privacy Policy — solely for the purpose of providing the Service to you, improving the reliability of our automated pipeline (in de-identified, aggregate form only, and only where you have not opted out), and complying with law.
4.3. Your warranty. You represent and warrant that: (a) you own the Submitted Code or have all necessary rights and permissions from the rights holder to submit it for audit; (b) the Submitted Code does not infringe any third party's intellectual property, trade secret, or confidentiality rights; and (c) submission of the Submitted Code to us and to our subprocessors does not violate any law or any obligation you owe to a third party.
4.4. Indemnification for unauthorised submissions. You will defend, indemnify, and hold harmless Naviget, its officers, employees, and subcontractors from any claim, loss, or expense (including reasonable legal fees) arising out of a breach of Section 4.3.
4.5. Confidentiality. We treat Submitted Code as confidential. We will not disclose it to third parties except: (a) to subprocessors strictly as needed to provide the Service (see Privacy Policy); (b) as required by law or valid legal process; (c) with your consent. Submitted Code is retained per the retention schedule in our Privacy Policy and deleted or anonymised thereafter, subject to Section 8 (Prohibited Content) logging requirements.
4A. Prohibited Content and Automated Screening
4A.1. You may not submit: (a) CTF challenges, exploit collections, or benchmark repositories not intended for genuine production audit (automatically screened by "Guard 1"); (b) malware, or code whose primary purpose is to attack third-party systems without authorisation; (c) code you do not have the right to submit under Section 4.3; (d) content that violates applicable law.
4A.2. We use automated filters to detect prohibited submissions. We may reject, halt, or refuse to complete an audit that trips these filters, in our sole discretion, with the refund treatment described in the Refund Policy.
4A.2A. Appeal for legitimate submissions. We recognise that automated screening may occasionally flag a genuine, authorised white-hat audit, penetration-testing exercise, or research repository as prohibited content. If your submission is rejected and you believe this was in error, you may request manual review at info@aistarts.lv within 14 days, providing evidence of your authority to test the target system. We will review flagged submissions promptly and, where the rejection is found to be a false positive, will re-queue the audit or issue a full refund at your election.
4A.3. We reserve the right to report to relevant authorities any submission that appears to constitute an active attack against a live, unauthorised third-party system.
5. Fees and Payment
5.1. The Service operates on a prepaid credit model. Each complete audit is billed at the price displayed on the dashboard at the time of submission (currently USD 25 per audit, subject to change with notice on the pricing page).
5.2. Credits may be purchased by card (via Stripe) or cryptocurrency (direct USDC deposit on Base or Solana). The USD value of a crypto payment is determined at the time of on-chain confirmation; you bear the risk of any exchange-rate movement.
5.3. Minimum top-up USD 5, maximum USD 5,000 per transaction. We may impose a maximum number of concurrent audits per account (currently six).
5.4. Refunds are governed exclusively by our Refund Policy, incorporated by reference. Chargebacks or payment disputes initiated other than through the process in the Refund Policy may result in immediate suspension of your account pending resolution. Any technical failure caused by a third party — including a blockchain node, RPC provider, or LLM provider — that results in an automatic refund to your internal Service balance is not separate grounds for a chargeback, crypto payment dispute, or additional cash refund; the automatic balance refund constitutes full satisfaction of the claim (see Refund Policy, Section 2A).
5.5. All fees are exclusive of applicable taxes (including Latvian PVN/VAT) unless stated otherwise. You are responsible for any taxes applicable to your use of the Service, other than taxes on our net income.
6. Third-Party Services and AML Screening
6.1. The Service relies on and integrates third-party providers, including LLM providers, GitHub, Stripe, AMLBot (for AML/risk screening of crypto deposits), and our hosting provider. Your use of the Service is also subject to the applicable terms of these providers where you interact with them directly (e.g., GitHub OAuth, crypto wallets).
6.2. Direct cryptocurrency deposits are screened via AMLBot. We reserve the right to block, delay, or reverse (where technically and legally possible) any transaction flagged as originating from sanctioned addresses, mixers, or other high-risk sources, and to place a payment under manual review (pending_aml_review) where automated screening is unavailable or inconclusive. We are not liable for delays caused by such reviews.
6.3. We are not responsible for outages, errors, or losses caused by third-party providers outside our control, though we will use commercially reasonable efforts to route around such failures (e.g., our Guard/fallback mechanisms).
7. AI-Generated Output; No Professional Opinion
7.1. All reports, findings, verdicts, severity ratings, and proof-of-concept code generated by the Service are produced by an automated AI pipeline and do not constitute the opinion of a licensed or credentialed human security auditor, legal advice, financial advice, or investment advice.
7.2. This Section, and the standalone AI Audit Disclaimer incorporated by reference, are essential terms of this agreement. Your use of any report to make deployment, investment, disclosure, or business decisions is entirely at your own risk.
8. Intellectual Property in Reports
8.1. Subject to your compliance with these Terms, you own the specific AUDIT_REPORT.md, JSON report, and proof-of-concept test files generated for your Submitted Code ("Deliverables"), for your internal business use, disclosure to counterparties, or publication, provided that any public disclosure of a Deliverable must reproduce the disclaimer and verdict language in full and not selectively, in a misleading manner.
8.2. Naviget retains all right, title, and interest in the Service itself, including the underlying pipeline, agent architecture, prompts, models, methodology, scoring logic, and all improvements thereto, whether or not derived from aggregate/de-identified analysis of Submitted Code.
8.3. A Deliverable is authoritative only in the exact form retrieved directly from your authenticated dashboard account or via the API/MCP/A2A interfaces. You may not represent any copy, excerpt, forgery, or unofficially reproduced version of a Deliverable as one issued by us, and you may not use our name, branding, or the phrase "audited by AI Powered Smart Contract Audit" in a way that misrepresents the scope, verdict, or limitations described in the original Deliverable.
8.4. If we become aware that you, or a third party, have published, distributed, or represented to any person a Deliverable that has been altered, selectively excerpted in a misleading manner, or falsely attributed to us, we reserve the right to: (a) publish a notice disclaiming or revoking that Deliverable, including the affected project or report identifier; and (b) inform any counterparty, exchange, or platform that relied on the falsified Deliverable that it does not reflect our original output. This right is in addition to, and does not limit, our remedies under Section 10 (Indemnification).
9. Limitation of Liability
9.1. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE AND ALL DELIVERABLES ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR COMPLETENESS. We do not warrant that the Service will detect all vulnerabilities, that a "CLEAN" verdict means the code is free of exploitable defects, or that the Service will be uninterrupted or error-free.
9.2. TO THE MAXIMUM EXTENT PERMITTED BY LAW, NAVIGET'S TOTAL AGGREGATE LIABILITY TO YOU ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS, WHETHER IN CONTRACT, TORT, OR OTHERWISE, SHALL NOT EXCEED THE FEE ACTUALLY PAID BY YOU TO NAVIGET FOR THE SPECIFIC AUDIT GIVING RISE TO THE CLAIM. Where a claim relates to more than one audit, liability is capped separately per audit and is not aggregated across audits.
9.3. IN NO EVENT WILL NAVIGET BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, TOKENS, DIGITAL ASSETS, OR BUSINESS OPPORTUNITY, OR FOR LOSSES ARISING FROM AN EXPLOIT, HACK, OR ATTACK AGAINST ANY SMART CONTRACT AUDITED (OR NOT FLAGGED) BY THE SERVICE, EVEN IF NAVIGET HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
9.4. These limitations apply regardless of the verification level (L0–L3) reported and regardless of whether a vulnerability was, or should have been, detected. Nothing in this Section limits liability that cannot be excluded or limited under mandatory Latvian or EU law (such as liability for death, personal injury caused by negligence, fraud, or willful misconduct).
10. Indemnification by Customer
You will defend, indemnify, and hold harmless Naviget and its officers, employees, and subcontractors from any third-party claim, loss, liability, or expense (including reasonable attorneys' fees) arising from: (a) your breach of these Terms; (b) your use of a Deliverable to make a business, investment, or deployment decision; (c) your submission of Code in violation of Section 4.3; or (d) your violation of applicable law.
11. Suspension and Termination
11.1. We may suspend or terminate your access to the Service, with or without notice, if we reasonably believe you have violated these Terms, engaged in fraudulent or abusive use, submitted prohibited content, or triggered AML/sanctions flags.
11.2. You may stop using the Service, and close your account, at any time. Unused credits are handled under the Refund Policy.
11.3. Sections 4.3–4.5, 7, 8, 9, 10, 12, and 13 survive termination.
12. Governing Law and Dispute Resolution
12.1. These Terms are governed by the laws of the Republic of Latvia, without regard to conflict-of-law principles.
12.2. The parties submit to the exclusive jurisdiction of the courts of Riga, Latvia for any dispute arising out of or relating to these Terms or the Service, except that Naviget may seek injunctive relief in any competent jurisdiction to protect its intellectual property or confidential information.
12.3. For Customers requiring a negotiated enterprise agreement, Naviget may agree in a separate signed agreement to alternative dispute resolution in lieu of this Section. Absent such a signed agreement, Section 12.2 governs.
13. Miscellaneous
13.1. Entire Agreement. These Terms, together with the Privacy Policy, Refund Policy, AI Audit Disclaimer, and (where applicable) Data Processing Agreement, constitute the entire agreement between the parties regarding the Service.
13.2. Changes. We may update these Terms from time to time. Material changes will be notified via the dashboard or email at least 14 days before taking effect. Continued use after the effective date constitutes acceptance.
13.3. Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.
13.4. Severability. If any provision is held unenforceable, the remaining provisions remain in full force.
13.5. Force Majeure. Neither party is liable for delay or failure to perform caused by events beyond its reasonable control (including LLM provider outages, internet/infrastructure failures, or blockchain network disruptions).
13.6. No Waiver. Failure to enforce any provision is not a waiver of that provision.
13.7. Contact. info@aistarts.lv / @aistartsbot (Telegram)