Terms of service

1. The open-source scanners are not part of this agreement

Ebb, Telltale, Charter and Lading are published under the Apache License 2.0. They run locally and in your own CI, need no account, are unlimited, and are governed solely by that licence. Nothing here restricts them, and ending a Foretop Hub subscription does not affect your right to use them.

2. What Foretop Hub is

Foretop Hub is a hosted service that receives scan results you choose to send it and provides shared history, policies and baselines, ownership routing, expiring suppressions and dated evidence exports across your repositories. You decide what to send; the service does not read your repositories itself.

3. Who sells you the subscription

Subscriptions are sold by Paddle.com Market Ltd as the merchant of record and authorised reseller. Paddle is the seller for the purposes of your purchase, issues your invoice, and calculates, collects and remits VAT and sales tax. Payment terms, refunds and chargebacks are handled under Paddle's buyer terms. The service itself is provided by Nicolas Mitchell, sole trader (entreprise individuelle), registered at 35 rue de l’Aigle, 92250 La Garenne-Colombes, France, under SIREN 817 535 081, SIRET 817 535 081 00043, intracommunity VAT number FR25 817535081. That VAT number identifies the business; it is not the VAT applied to your purchase, which Paddle calculates and collects as merchant of record.

4. Price, billing period and renewal

Foretop Hub costs €39 per month or €390 per year, including tax, for up to 10 repositories. Subscriptions renew automatically at the end of each billing period until cancelled. The price shown is the total you are charged: Paddle, as merchant of record, calculates and remits any VAT or sales tax due for your location out of that amount rather than adding it on top.

5. Cancelling

You may cancel at any time from the billing portal, reached from your account settings. Cancellation takes effect at the end of the period you have already paid for — access continues until that date, and no further payment is taken. There is no cancellation fee and no notice period.

6. Failed payments

If a payment fails, full access continues for 7 days while the payment is retried, with a warning shown in the product. After that the account becomes read-only: your existing history and evidence stay visible and exportable, and new scans and new repository connections are paused. Access is restored automatically as soon as a payment succeeds. Your data is not deleted because a payment failed.

7. Your data, and what happens to it

Scan results you send are stored to provide the service. Run history is kept for the life of your organisation. Finding-level detail is kept for a plan-dependent window, after which the detail expires while the history and trends remain — this is published in the product documentation and applies whether or not you are paying.

Ending a subscription does not delete your data. Deletion is available on request and removes the organisation and everything under it. Foretop does not sell your data, does not use it to train models, and does not share it with third parties except the infrastructure providers needed to run the service.

8. Acceptable use

Do not use the service to attack it or anyone else, to circumvent its limits, to store material you have no right to store, or to resell access without agreement. Accounts may be suspended for any of these, and for a confirmed chargeback.

9. Availability and liability

The service is provided as-is, without warranty. No uptime commitment is offered and none should be inferred. To the maximum extent the law allows, liability is limited to the amount you paid in the twelve months before the claim. Nothing here limits liability that cannot lawfully be limited.

10. Changes

These terms may change. Material changes affecting an active subscription will be notified before they take effect, and you may cancel before renewal if you do not accept them.

11. Governing law

These terms are governed by the law of France.

12. Contact

Questions about these terms, your subscription, or your data: open a request. Do not include secrets, credentials or customer data in a public channel.