Warclick Terms of Service

1. Definitions

• "Account" means an organization account authenticated through GitHub.
• "Activity Event" means a GitHub commit, pull request, issue, or code review.
• "Contributor" means a GitHub user who generates one or more Activity Events during a billing period.
• "Customer Data" means data derived from Activity Events and related metadata.
• "You" or "Customer" means the individual or organization using the Service.

2. Authentication & GitHub Permissions

You must authenticate using a valid GitHub account to use the Service.

Warclick relies entirely on permissions granted by GitHub through OAuth and GitHub App installation. During onboarding, GitHub provides Warclick with a list of organizations and repositories that you are authorized to access based on your GitHub account and granted permissions.

You may only connect organizations and repositories for which GitHub has granted you access. Warclick does not independently determine, expand, or elevate permissions and strictly honors GitHub's access controls.

3. GitHub Permissions Scope

Warclick requests read-only GitHub permissions necessary to deliver the Service, including:

• Repository Contents
• Repository Commit Statuses
• Repository Metadata
• Repository Deployments
• Repository Issues
• Repository projects
• Repository Pull requests
• Organization Members
• Organization projects

Warclick does not request write access or create, modify or delete your GitHub resources. If additional permissions are needed, they will be presented through GitHub's applicable authorization or installation controls for approval.

4. Source Code & Data Handling Policy

Warclick does not:

• Clone repositories
• Use source code for engineering analysis or intentionally persist repository source files
• Use file contents or filenames for engineering analysis or intentionally persist them as repository file data

GitHub API responses may incidentally include filenames or code changes alongside requested commit metadata. Activity text may also contain information supplied by its authors. We do not ingest filenames into our analytics records. The restrictions above describe the Service's collection and analysis purposes and do not warrant that such information can never be received in an API response.

Warclick analyzes:

• Activity metadata
• Timestamps
• Activity-related text such as commit messages and pull request titles and descriptions, to categorize activity and generate engineering insights

5. Billing, Trials & Subscriptions

5.1 Free Trial

• Each organization receives one (1) seven-day free trial.
• Free trials begin after onboarding completes.
• Free trials are one-time per organization.
• Returning customers who have previously used their free trial must subscribe and pay upfront.

5.2 Subscription Billing

• Billing is monthly and usage-based.
• Charges are calculated at the end of each billing period.
• You are billed only for Contributors who generate at least one Activity Event during the billing period.

5.3 Payment & Past Due Accounts

• Payments are processed via Stripe.
• Accounts more than thirty (30) days past due may be automatically canceled.

6. Cancellation, Data Retention & Deletion

You may cancel your subscription at any time. Access will remain active through the end of the current billing period.

An organization owner may request deletion using the Service's controls, subject to the displayed subscription and authorization requirements. Eligible administrators of organizations without an owner may also use these controls. Deletion stops GitHub collection and removes organization activity data from active analytics storage. We send an email confirmation after that processing completes. Limited account, billing, security and deletion records may remain.

Upon cancellation or uninstallation of the GitHub App, before an organization deletion request is completed:

• Customer Data may be retained for up to 120 days for billing reconciliation and service continuity
• After this period, data may be permanently deleted
• Backup copies are not selectively edited and expire under the normal backup retention schedule. Deleted organization data will not be returned to active service through a backup restoration.

7. Data Ownership & Aggregation

You retain all rights, title, and interest in your Customer Data.

Warclick may aggregate and anonymize counts of Activity Events for:

• Industry benchmarking
• Analytics
• Product improvement

Aggregated data does not identify individual users or organizations.

8. Transparency & Auditability

Warclick is committed to transparency while protecting all customers.

• Customers may review collected data directly within the Service
• Warclick does not provide direct database access or a standard customer-data export service. This does not limit rights or assistance required by applicable privacy law.
• Upon written request, no more than once in any twelve-month period per customer, Warclick will provide reasonable information and available documentation describing its then-current data handling and security practices for a customer security review or documentary audit.

Security Review Requests

Security reviews are conducted on request; Warclick is not required to issue periodic or proactive security reports. Information provided for a review is subject to the confidentiality obligations in Section 8.2. Warclick may redact or withhold details where reasonably necessary to protect system security, other customers' information or third-party confidentiality obligations, while providing a reasonable description of the relevant practices.

Custom assessments, on-site inspections, penetration testing, direct system access and work beyond a reasonable documentary review require a separate written agreement on scope, timing and any fees. These provisions do not limit assistance or oversight required by applicable law, the incident notifications in Section 8.1 or other notices expressly required by these Terms.

8.1 Security Incident Notification

Warclick will notify affected customers without undue delay, and no later than 72 hours after becoming aware of unauthorized access to, acquisition of, or disclosure of their Customer Data within systems under Warclick's control. Notification will be in writing and will describe the nature and scope of the incident, the categories and approximate volume of affected data, corrective measures taken or planned, and a contact for further inquiries, to the extent reasonably known at the time. We will provide material updates as the investigation progresses. Unsuccessful attempts that do not compromise Customer Data are excluded. Any shorter notification period required by applicable law will apply.

8.2 Mutual Confidentiality

Each party will protect the other party's nonpublic information disclosed in connection with the Service that is identified as confidential or reasonably should be understood to be confidential. Customer confidential information includes nonpublic Customer Data, personal information and usage data. Warclick confidential information includes nonpublic technology and security practices.

The receiving party will use confidential information only to perform its obligations or exercise its rights under these Terms and will protect it with reasonable care. Access is limited to personnel and service providers who need the information for those purposes and are bound by written confidentiality obligations at least as protective as this section. Each party is responsible for compliance with this section by those recipients. This permits the AI processing and other service-provider processing disclosed in our Privacy Policy; it does not authorize unrelated use of confidential information.

These obligations do not apply to information the receiving party can demonstrate became public without breach, was independently developed without using the confidential information, or was lawfully received from a third party without a confidentiality restriction. If disclosure is required by law, regulation or court order, the receiving party may disclose only what is required and will give prompt written notice to the disclosing party where legally permitted.

These confidentiality obligations continue for two years after termination of the Service. Expiration of that period does not limit obligations concerning personal information under applicable law or our Privacy Policy.

8.3 Data Scope & Privacy-Request Assistance

Warclick is an engineering telemetry service designed to process contributor identities, GitHub activity and related account and usage information. It does not require or intentionally collect records about our customers' consumers or end users as part of that service. Contributor and account information may nevertheless constitute personal information under applicable privacy law. Customers should not include unrelated consumer or end-user records in text or other information made available to the Service.

To the extent Warclick processes personal information on a customer's behalf, Warclick will reasonably cooperate with the customer in responding to applicable privacy-rights requests concerning that information, taking into account the nature of the processing and applicable legal deadlines. The customer must provide information reasonably necessary to identify the relevant records, verify its authority and explain the requested assistance and deadline. This provision does not create a general customer-data export service or a fixed ten-business-day completion commitment, and does not limit obligations imposed by applicable law.

8.4 Processing Purposes & Safeguards

Warclick processes information to collect and attribute engineering activity, provide contributor and organization analytics and AI insights, administer accounts and billing, provide support, and maintain and improve the security, reliability and performance of the Service. Service providers may assist with these purposes as described in the Privacy Policy. We do not sell personal information or share it for cross-context behavioral advertising.

Where Warclick processes personal information as a service provider on a customer's behalf under applicable privacy law, it will limit retention, use, disclosure and combining of that information to the specified service purposes and uses permitted by that law. Deidentified benchmarking and contributor attribution remain permitted only to the extent consistent with applicable law. Warclick will promptly notify the affected customer if it determines it can no longer meet its applicable service-provider obligations, and will cooperate with reasonable, legally required steps to stop and remediate unauthorized processing.

Warclick will maintain reasonable administrative, technical and physical safeguards appropriate to the information processed, including encryption in transit and limiting access to authorized personnel with a business need. This does not represent that Warclick holds any particular security certification.

9. Acceptable Use

You agree not to:

• Introduce malware or malicious code
• Attempt to scrape, reverse engineer, or disrupt the Service
• Use the Service for unlawful purposes
• Interfere with system integrity or performance

10. Intellectual Property

Warclick retains all rights to the Service, including software, interfaces, branding, and trademarks. No rights are granted except as expressly stated.

11. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WARCLICK'S TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT PAID BY YOU IN THE THREE (3) MONTHS PRECEDING THE CLAIM.

13. Indemnification

You agree to indemnify and hold harmless Warclick from claims arising out of your use of the Service or violation of these Terms.

14. Governing Law

These Terms are governed by the laws of the State of Tennessee, without regard to conflict-of-laws principles.

15. Contact

Questions about these Terms may be sent to:

wlparker+warclick at gmail.com