Terms of Service.

ShipSafe is operated by Frank Labs, a company owned and run by Ty Wells out of Nassau, Bahamas. When these terms say “we,” “us,” or “ShipSafe,” they mean Frank Labs.

ShipSafe is three things that work together:

• Coaching. Human security coaching for people shipping AI-assisted code. Right now the coach is Ty. That may change.
• The public scanner at /scan.A free, anonymous-ish scan you can run on your own code or a public GitHub URL. It finds the common vibe-code security mistakes and shows you what’s wrong.
• The shipsafe-sentinel CLI. An open-source scanner you can run on your own machine. Published to npm under the Apache 2.0 license. Same terms as the LICENSE and NOTICE files in the package. You can fork it, embed it, ship it. Attribution required, warranty not included.

When you submit code or a GitHub URL to /scan, you are telling us:

• You own the code, or you have permission to scan it.
• It’s a public repository or a project you have the right to share. No private repos. No stolen source.
• You understand the scanner is not a magic wand. It finds patterns. It misses things. A clean scan is not a guarantee of security.

If you submit something you don’t own, that’s on you, not us.

For the public scanner:

• Uploaded code auto-deletes after 7 days. Or earlier, if you ask.
• Findings auto-purge after 7 days.We keep aggregate counts (“X scans ran this week”) but the scanned content and the specific findings are gone.
• Emails you give us at unlock go into a Resend audience. We use that list to send cohort launch announcements and occasional product updates. Every email has one-click unsubscribe. Use it whenever you want.

Full data handling is in the Privacy Policy.

You can choose to make a scan report public. If you do, you are publishing that content under your own name. You accept full liability for anything you put on the public internet. If your public report exposes a secret you forgot to rotate, that is your problem, not ours.

You can unpublish a public report at any time. We remove it from our servers within 24 hours of your request. Cached versions on third parties (Google, Archive.org, etc.) are outside our control.

Coaching access is tied to the Early AI-dopters community on Skool. Joining Early AI-dopters grants access to ShipSafe coaching. Leaving Skool (or getting removed from Skool) ends your ShipSafe coaching access.

Skool is a separate company. Your use of Skool is governed by Skool’s own terms of service and privacy policy. We don’t control Skool. If Skool changes their rules, we don’t owe you a refund for that.

Right now, coaching is free for Early AI-dopters members. The public scanner is free.

If we introduce paid cohorts or premium features, the specific cohort agreement you sign at checkout will define the price, scope, and refund window. Default policy: refund inside the first 7 days of a cohort, prorated after that only if we can’t deliver what we promised. If a specific cohort agreement says something different, the cohort agreement wins.

The scanner finds things. It does not find everything. Running a scan and getting zero findings does not mean your application is secure. It means the patterns we look for didn’t match.

You are the owner of your security posture. We’re a second pair of eyes. We are not your pen tester, your SOC, or your insurance policy.

To the fullest extent allowed by law, Frank Labs’s total liability to you for any claim related to ShipSafe is limited to the amount you paid us in the 12 months before the claim. If you paid us nothing, our liability is zero.

We are not liable for indirect, incidental, consequential, or punitive damages. Not for lost profits, lost data, or reputational damage from a breach the scanner didn’t catch.

If a court says part of this clause is unenforceable, the rest still stands.

If we change these terms in a way that materially affects your rights, we will give 30 days’ notice. Notice means either an email to the address you gave us, a banner on ShipSafe, or a post in the Early AI-dopters community. Your choice after that is simple: keep using ShipSafe (you accept the new terms) or stop using it.

Minor cleanups (typos, clarifications) may happen without notice. The “Last updated” date at the top always reflects the current version.

These terms are governed by the laws of the Commonwealth of The Bahamas. Any dispute that can’t be resolved by email gets resolved in Bahamian courts.

If you are in a jurisdiction with consumer protection laws that override parts of this agreement (GDPR in the EU, for example), those laws still apply to you. We don’t try to contract around them.

Questions about these terms: twells@gtsbahamas.com .

Security or privacy concerns: see the Privacy Policy for the dedicated address.