Terms

These terms cover your use of Holefind, a service run by AI FRAME APPS LTD, a company in the United Kingdom. Registered in England and Wales, company number 15936914. Registered office: 2 Branston Street, Birmingham, B18 6BP, England. By starting a check you agree to them. Contact: [email protected].

What Holefind is

Holefind uses an AI model to read the code in a GitHub repo and write a report of likely problems, with suggested fixes. It is a fast second opinion, not a security audit, penetration test or guarantee. The AI can miss problems, and it can occasionally flag something that is not a real problem. Check any fix before you rely on it, and test changes before you deploy them.

Your repos

Only check repos that are public, or that you own or have permission to have reviewed. Do not use Holefind, or its reports, to attack or exploit anyone else's software. We may refuse or stop checks that look like abuse.

The live site check

You can also point Holefind at a live site. By default this is passive: we open the address the way an ordinary visitor's browser does and read only what that visitor can see. Only check a site that you own or have permission to test.

If your site uses Supabase, you may tick a box to confirm the app is yours and ask us to test whether its database can be read with the public key your site already gives every visitor. This test goes a little further than a plain page view, so it is off unless you tick that box. When you do, you confirm the app is yours and that you are allowed to test it. We use only the public key found in your own site's code, send only count-only, read-only requests, and never read, change or store the contents of any row. We never try any other key, and we only ever test the Supabase project your site itself uses, never an address you type. Do not tick the box for an app that is not yours.

Free checks and the full report

A free check is a quick first review. It shows your 3 most serious findings and the title and severity of the rest. The full report for one check costs £19 or £29 in the UK, €22 or €34 in countries that use the euro and $25 or $38 everywhere else, including VAT where it applies. Stripe picks the currency from where you are, and you pay the amount shown at checkout. It is a one-off payment through Stripe, not a subscription. We only charge you to unlock a report that has already finished. A failed check costs nothing.

When you pay, you see every finding from the quick check straight away, and we also run a full review: a slower, more thorough reading of your code that replaces the quick findings when it finishes, usually within a few minutes. If the full review cannot finish, you keep the unlocked quick report, and you can contact us for a refund.

For 14 days after you pay, up to 3 re-checks of the same repo are included: each one is unlocked and gets a full review, at no extra cost. A re-check that fails on our side does not count towards them. Re-checks follow the same fair-use limits as any other check (for example, how many can be started per hour), and a re-check of code that has not changed since the last check is not started.

Your right to cancel

The full report is digital content that we supply straight away. When you pay, you ask us to unlock it immediately and you accept that your 14-day right to cancel ends once it is unlocked. This does not affect your legal rights if the report is faulty or not as described. If a report you paid for fails to load or is empty, contact us and we will fix it or refund you.

If a finding is wrong

If you think a finding in a report you paid for is wrong, mark it "Not an issue" on the report and tell us why. We read disputed findings and use them to improve our checks.

Automated reviews can flag code that turns out to be fine, which is why each finding says how sure we are. A finding marked Low confidence is a lead to check, not a claim that something is broken. One wrong finding does not make a report faulty.

If a paid report was materially wrong, meaning its critical or high findings were not real problems in the code we checked, tell us within 14 days of paying. We will first re-run the full review at no cost. If the new report is still materially wrong, we will refund you. This does not affect your legal rights as a consumer.

Accounts

You do not need an account to check a repo. If you create one, by email or with GitHub, it keeps your reports in one place. There are no passwords: we email you a sign-in link, or you sign in with GitHub. Keep access to your email and GitHub account secure, because anyone who can use them can sign in to your Holefind account. If you add an email address that already has its own Holefind account, or connect a GitHub account that already has one, the two accounts are combined into one. You can delete your account at any time on the Account page.

Who can see a report

A report that is not saved to an account can be opened by anyone who has its link, so share the link with care. A report saved to an account can only be opened by that account, unless its owner turns on sharing: then anyone with the separate share link can view it, but not change it, re-check it or pay for it. The owner can turn sharing off, or make a new share link, at any time, and the old link then stops working. Reports you pay for are saved to the account for the email address you pay with. Our staff can open reports only to give support, to fix problems or to investigate abuse.

Using the report

The report is yours to use for your own projects, including pasting its prompts into AI coding tools. Please do not resell it.

Availability and changes

We try to keep Holefind running, but we do not promise it will always be available or error-free. We may change or stop the service. If we stop it, paid reports will stay available for at least 90 days so you can save them.

Our liability

Nothing in these terms limits liability that cannot be limited by law, such as for death or personal injury caused by negligence, or fraud. Otherwise, we are not liable for losses caused by relying on a report, or by problems a report did not find. Our total liability to you for any report is limited to the amount you paid for it.

Law

These terms are governed by the law of England and Wales. If you live elsewhere in the UK, you can also bring a claim in your local courts.