Terms of Service
Last updated: June 2026
1. About these Terms
1.1These Terms of Service ("Terms") govern your access to and use of the Post Code Labs website at postcodelabs.com and its subdomains, and the services we make available through it (together, the "Services"). The Services include our marketing pages and field notes, our quote and contact forms, and our free automated code audit ("the audit").
1.2 By accessing or using the Services, you agree to be bound by these Terms and by our Privacy Policy, which is incorporated by reference. If you do not agree, do not use the Services.
1.3If you use the Services on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms, and "you" refers to that organisation.
1.4 These Terms govern only use of the Services. Any paid engagement between you and Post Code Labs is governed by a separate written agreement (see Section 4); where that agreement and these Terms conflict, that agreement controls for the engagement.
2. Eligibility
2.1 You must be at least 18 years old (or the age of majority in your jurisdiction) and able to form a binding contract to use the Services.
2.2 You may only use the audit on a repository you own or are authorised to submit for automated analysis. You are responsible for ensuring you have the rights and permissions necessary to grant us read access to it (see Section 5.2).
3. The Services
3.1 Informational website. Our marketing pages, pricing information, and field notes are provided for general information about Post Code Labs and our work. They do not constitute professional, legal, financial, or security advice, and do not create a client relationship.
3.2 Quote and contact requests. You may submit a request for a proposal or contact us through our forms. What we collect and how long we keep it is described in Section 6 and our Privacy Policy.
3.3 Free code audit. The audit is an automated assessment of a single GitHub repository against our published rubric, returned to you as a report. It is described in detail in Section 5.
4. Quote requests and engagements
4.1 A quote request is an enquiry, not a binding order. Any quote, estimate, or proposal we provide is an invitation to discuss and is not an offer capable of acceptance unless and until set out in a signed agreement.
4.2 We are under no obligation to provide a quote, accept a request, or perform any work absent a separate written engagement agreement.
4.3 Estimates of scope, timeline, and price are indicative and may change as requirements are clarified. Paid work, deliverables, warranties, and payment terms are governed exclusively by the engagement agreement for that work.
5. The free code audit
5.1 What the audit is — and is not
5.1.1The audit reads a single repository you select, scores it against our rubric, and produces a report. It is provided free of charge, "as is" and "as available", for informational purposes only.
5.1.2 The audit is an automated, best-effort assessment. It is not a professional security audit, penetration test, vulnerability assessment, code certification, or legal, financial, or compliance advice. A passing or high score is not a guarantee that your code is secure, correct, compliant, or fit for any purpose. You remain solely responsible for your code and for independently verifying any finding before relying on it.
5.1.3 We may change, rate-limit, suspend, or withdraw the audit, or change the rubric, at any time without notice.
5.2 Authorisation and repository access
5.2.1 To run an audit, you sign in with GitHub and authorise access to the repository you choose. You must have the right to authorise this access, and must not submit a repository you do not own or control without permission (see Section 7).
5.2.2 The audit is granted read-only access to that single repository, and nothing more. It:
- cannot change anything in your repositories — it cannot write, push, or delete;
- cannot access any repository other than the one you select for that audit; and
- cannot act on your behalf beyond reading the single repository you selected.
5.3 The report and the report link
5.3.1 When the audit finishes, we email you a link to your report. Anyone who has the link can view the report, without signing in, so treat it as confidential and share it only with people you intend to see the report.
5.3.2 The report link expires 90 days after the report is generated. After that, the link stops working and the report is deleted.
5.4 Secrets in your repository
5.4.1 The audit reads the files in the repository you select. If your repository contains committed secrets — for example, an API key or password saved in a file in your repository — those files may be read by the audit, and parts of them may be sent to our AI provider to score the audit. We do not deliberately collect, search for, or store secrets, and we do not keep your files after the audit finishes. As a best practice, do not run the audit against a repository that contains live secrets, and replace any credential you believe may have been exposed.
6. Quote and contact requests
6.1 When you submit a quote or contact request, we store the fields you provide (your email address, and optionally your company name, contact name, repository URL, and message), along with your IP address and browser details to help prevent abuse. We use an automated anti-abuse check to block spam submissions.
6.2 We retain this enquiry data for up to 24 months where no engagement results, after which it is automatically purged. We use it only to respond to and manage your enquiry. Full detail is in our Privacy Policy.
6.3 We do not sell or rent your enquiry data. We share it only with the service providers needed to operate the forms and notify us of your request (currently Cloudflare and our email provider, Resend).
7. Acceptable use
7.1 We may suspend or revoke your access to the Services, including the audit, if you breach this section or if we reasonably suspect abuse. You agree not to:
- use the audit on a repository you do not own or have permission to submit;
- use the Services to violate any law or any third party's rights;
- attempt to circumvent, disable, or overload our rate limits, anti-abuse measures, or security controls, or submit automated or bulk requests except as the Services expressly permit;
- probe, scan, or test the vulnerability of the Services, or access them other than through the interfaces and instructions we provide;
- reverse engineer, scrape, or systematically extract the Services, our rubric, or our reports, except to the extent this restriction is prohibited by law;
- resell, sublicense, or commercially redistribute the audit or reports as your own product; or
- submit content that is unlawful, infringing, malicious, or designed to disrupt the Services or other users.
8. Intellectual property
8.1 Your content. You retain all rights in your repositories, source code, and the materials you submit. We claim no ownership of your code. We access it only to provide the audit, and do not retain your source code after the audit completes.
8.2 Your report. We grant you a non-exclusive, worldwide licence to use the report we generate for your own internal business purposes. The report is provided for your benefit; you are responsible for how you act on it.
8.3 Our materials. The Services, including our website, content, field notes, branding, and the audit rubric, scoring methodology, and report format, are owned by Post Code Labs or our licensors and are protected by intellectual-property laws. Except for the rights expressly granted here, we reserve all rights.
9. Confidentiality
9.1 We treat the contents of the repository we access during an audit as confidential, use it solely to generate your report, and do not disclose it to third parties except the providers listed in Section 5.4 for that purpose. In any case, we do not keep your files after the audit.
9.2Each party's broader confidentiality obligations for a paid engagement are governed by the engagement agreement for that work.
10. Privacy and your data rights
10.1 Our handling of personal data is described in our Privacy Policy, which is built on the Singapore Personal Data Protection Act 2012 (PDPA) and forms part of these Terms.
10.2 You may request access to, correction of, or deletion of the personal data we hold about you, and may withdraw consent, by contacting our Data Protection Officer at [email protected]. We action data-subject deletion and export requests across both our quote and audit records.
10.3 Cookies and analytics.We use essential cookies to operate the audit sign-in and to secure form submissions, and analytics only with your consent (managed through the cookie banner and the "Cookie settings" link in our footer). If you decline analytics, we measure usage in a way that stores nothing on your device. See our Privacy Policy for detail.
11. Disclaimers
11.1 The Services, including the audit and every report, are provided "as is" and "as available" without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, title, and non-infringement, to the fullest extent permitted by law.
11.2 We do not warrant that the Services will be uninterrupted, error-free, or secure, that any finding or score is accurate or complete, or that acting on a report will achieve any particular result. The audit is automated and may produce false positives or miss issues.
11.3 You are responsible for maintaining your own backups and for independently validating any output of the Services before relying on it.
12. Limitation of liability
12.1 To the fullest extent permitted by law, Post Code Labs and its officers, employees, and suppliers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business opportunity, arising out of or relating to your use of (or inability to use) the Services, even if advised of the possibility.
12.2 To the fullest extent permitted by law, our total aggregate liability arising out of or relating to the Services — and in particular the free audit, which is provided at no charge — will not exceed the greater of (a) the total amount you paid us, if any, for the Services giving rise to the claim in the 12 months before the event, or (b) one hundred Singapore dollars (SGD 100).
12.3 Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law (for example, liability for fraud or for death or personal injury caused by negligence).
13. Indemnity
13.1 You agree to indemnify and hold harmless Post Code Labs from any claim, loss, or expense (including reasonable legal fees) arising out of your breach of these Terms, your misuse of the Services, or your submission of a repository you were not authorised to submit for analysis.
14. Suspension and termination
14.1 You may stop using the Services at any time. We may suspend or terminate your access to the Services, in whole or in part, at any time — including for breach of these Terms, suspected abuse, or to comply with law.
14.2 Sections that by their nature should survive termination — including Sections 8, 9, 11, 12, 13, and 15 — survive.
15. General
15.1 Changes to these Terms.We may update these Terms from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page; your continued use of the Services after an update constitutes acceptance of the revised Terms.
15.2 Governing law and jurisdiction. These Terms are governed by the laws of Singapore, and the courts of Singapore have exclusive jurisdiction over any dispute arising out of or relating to them, without prejudice to any mandatory consumer-protection rights you may have in your place of residence.
15.3 Severability. If any provision of these Terms is held unenforceable, the remaining provisions remain in full force, and the unenforceable provision will be limited or removed to the minimum extent necessary.
15.4 Entire agreement. These Terms and the documents they incorporate (including the Privacy Policy and, where applicable, an engagement agreement) are the entire agreement between you and Post Code Labs regarding the Services and supersede prior understandings on that subject.
15.5 Assignment. You may not assign these Terms without our consent. We may assign them in connection with a merger, acquisition, or sale of assets.
15.6 No waiver. Our failure to enforce any provision is not a waiver of our right to do so later.
16. Contact
Post Code Labs Pte. Ltd.
- Legal enquiries: [email protected]
- Data protection (access, correction, deletion): [email protected]