Terms of Service
Last updated 7 August 2026.
These terms cover your use of Codanopy. They are written to be read, not to be survived. If something here is unclear, email us before you use the service and we will explain it.
Who you are dealing with
Codanopy is operated by Bendegúz Szatmári, egyéni vállalkozó (sole trader), Liptó utca 9, Building B, ground floor, door 2, 1124 Budapest, Hungary. Registration number 62462161, VAT number HU92150650. Reach us at bendeguz@codanopy.com. In these terms "we" and "us" mean that person, and "you" means whoever is using the service.
What Codanopy is
You give us source code, we run open-source security scanners and an AI review over it, and we give you back a report: a score, a summary, and a list of problems with explanations and fix prompts.
It is an automated review. It is not a security audit, a penetration test, a certification, or a guarantee that your application is safe. A clean score means we found nothing, not that there is nothing to find. Use it as a first pass, never as the last word.
What you may submit
Only code you have the right to submit — your own, your employer's with their permission, or a public repository. By submitting, you confirm you have that right and that sharing the code with us breaks no agreement you are under.
Do not submit code whose purpose is to attack other systems, and do not use Codanopy to scan a system you have no authorisation to test. We can refuse or stop any scan.
The free scan
Scanning is free and always will be for the volumes below. You get a teaser report straight away: the score, a plain English summary, and how many problems of each kind we found. No account is created and there is nothing to log into.
- 20 MB and 5,000 files of scannable source per repository.
- 50 MB maximum ZIP upload.
- 3 scans per hour and 10 per day per person, plus a daily total across all users so every scan gets a full AI review.
These limits exist because every scan costs us real money in AI usage. Working around them — rotating addresses, scripting submissions, using someone else's email — is a breach of these terms and we will block it.
The $49 unlock
$49 unlocks one report, once, permanently. It is a single payment, not a subscription, and nothing recurs. What it buys is the part the teaser withholds: where each problem is, why it matters, and a fix prompt you can paste into Cursor or Copilot.
The price includes VAT where VAT applies. Payment is handled by Stripe and we never see your card details.
We start generating your full report the moment your payment succeeds. By paying you ask us to begin immediately and you accept that, once we have delivered it, the statutory 14-day right of withdrawal for digital content no longer applies. Read the next section before that worries you.
Refunds
Ask within 14 days and we refund you. No reason needed, no questions. Reply to the email that delivered your report.
A refund returns the report to its free teaser state. You are un-buying it, not keeping it — the explanations and fix prompts go back behind the paywall, and you may buy it again later if you change your mind.
One no-questions refund per customer. After that we will look at the request before refunding, and we will still say yes if the reason is a good one.
If we fail to deliver the explanations and fix prompts you paid for, we refund you without being asked. You should not have to chase us for a product we did not hand over.
Your report link is a credential
Reports have no login. The link is unlisted, not private: anyone you send it to can read the whole report. We keep it out of search engines, but we cannot keep it from someone you gave it to. Treat it the way you would treat a password.
What we keep
Your repository is never stored. We keep the specific code sections each finding refers to until your unlocked report is delivered, or for one week — whichever comes first. Reports and findings are kept indefinitely so the link you share stays alive. The Privacy Policy covers this in full, including who else processes your data.
What we do not promise
Codanopy is provided as it is. We do not promise it will find every problem, that it will be available when you want it, or that every finding it reports is real — automated scanners produce false positives and AI review produces mistakes. You are responsible for deciding what to act on.
To the extent the law allows, our total liability to you for anything connected to Codanopy is limited to what you actually paid us. If you paid us nothing, that is the limit. Nothing here limits liability that cannot legally be limited, and if you are a consumer your statutory rights are unaffected by anything in this section.
Ending it
You can stop using Codanopy whenever you like; there is no account to close. We can refuse service or delete a report if it breaks these terms, and we will tell you why if you ask.
Changes
We may change these terms. The version in force is the one on this page when you use the service, and the date at the top tells you when it last moved. Changes are never retroactive: a report you already bought stays governed by the terms you bought it under.
Which law applies
Hungarian law governs these terms. If you are a consumer in the EU, this does not take away the protections of your own country's law, and you may bring a claim in the courts where you live. You can also use the European Commission's online dispute resolution platform, though emailing us first is faster and usually works.
Contact
bendeguz@codanopy.com reaches a person.
Adapted from the 37signals policies, used under CC BY 4.0.