Terms of Service

1. Acceptance of terms

By creating an account, installing the Trojan CLI, or using the Trojan website ("Service"), you agree to these Terms of Service ("Terms"). If you do not agree, do not use the Service.

The Service is operated by Chizulu Zephaniah, an individual based in Nova Scotia, Canada ("Trojan", "we", "us", or "our"). Questions about these Terms may be directed to hi@trojancli.com.

2. The Service

Trojan provides a local security scanning CLI and a web platform for managing subscriptions and viewing reports. The CLI runs entirely on your machine; your source code is never transmitted to our servers.

We reserve the right to modify, suspend, or discontinue any part of the Service at any time with reasonable notice. We will not be liable to you or any third party for any such modification, suspension, or discontinuation.

3. Accounts

You must be at least 13 years old to create an account. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. Notify us immediately at security@trojancli.com if you believe your account has been compromised.

You may not create an account on behalf of another person without their consent, or use automated means to create accounts in bulk.

4. Subscriptions and billing

Trojan offers a free tier and a paid Pro plan. Paid subscriptions are billed monthly or annually in advance. All payments are processed by Stripe, Inc. By subscribing, you authorize Stripe to charge your payment method on a recurring basis.

You may cancel your subscription at any time from your account dashboard. Cancellation takes effect at the end of the current billing period — you retain access to Pro features until then. We do not provide refunds for partial billing periods except where required by applicable law.

We reserve the right to change subscription pricing with at least 30 days' notice. Price changes take effect at your next renewal date.

5. Acceptable use

You agree not to use the Service to:

• Scan systems or codebases you do not own or have explicit permission to scan
• Circumvent, disable, or interfere with security features of the Service
• Attempt to reverse-engineer, decompile, or extract the source code of the CLI binary
• Share, resell, or sublicense your Pro account credentials to others
• Use the Service for any unlawful purpose or in violation of any applicable law
• Introduce malicious code or attempt to compromise our infrastructure

Violation of this section may result in immediate suspension or termination of your account without refund.

6. AI features

The AI explanation feature sends security finding metadata (affected file path, scanner rule, and a short code snippet) to DeepSeek, a third-party AI provider, to generate a human-readable explanation. This feature is only triggered by your explicit action and is never invoked automatically.

AI-generated explanations are provided for informational purposes only. They do not constitute professional security advice. We make no warranty as to the accuracy, completeness, or fitness of any AI-generated content for a particular purpose. Always verify findings with a qualified security professional for critical systems.

7. Intellectual property

The Trojan CLI binary, website, and all associated content are owned by Chizulu Zephaniah. The open-source scanners bundled with Trojan (Semgrep, Trivy, Gitleaks, Checkov, Syft) remain the property of their respective owners and are governed by their own licenses.

Your code and projects remain entirely your property. We claim no rights over any content that you scan using the Service.

8. Disclaimer of warranties

The Service is provided "as is" and "as available" without any warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

Trojan is a security tool designed to help identify potential vulnerabilities. It does not guarantee that your codebase is free of security issues, and its output should not be the sole basis for security decisions. We do not warrant that the Service will be uninterrupted, error-free, or that any particular vulnerability will be detected.

9. Limitation of liability

To the maximum extent permitted by applicable law, Chizulu Zephaniah shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, goodwill, or business arising out of or in connection with your use of the Service, even if advised of the possibility of such damages.

Our total liability to you for any claim arising from or relating to the Service shall not exceed the amount you paid us in the 12 months preceding the claim.

10. Indemnification

You agree to indemnify and hold harmless Chizulu Zephaniah from and against any claims, damages, losses, and expenses (including reasonable legal fees) arising out of your use of the Service, your violation of these Terms, or your violation of any third-party rights.

11. Governing law and disputes

These Terms are governed by the laws of the Province of Nova Scotia and the federal laws of Canada applicable therein, without regard to conflict of law principles.

Any dispute arising out of or relating to these Terms or the Service that cannot be resolved informally shall be submitted to the exclusive jurisdiction of the courts located in Halifax, Nova Scotia, Canada.

If you are a consumer located in the European Union, you may also have the right to bring a claim before the courts of your country of residence.

12. Termination

Either party may terminate the agreement at any time. We may suspend or terminate your account immediately if you violate these Terms. Upon termination, your right to use the Service ceases. Sections 7, 8, 9, 10, and 11 survive termination.

13. Changes to these terms

We may update these Terms from time to time. If we make material changes, we will notify you by email at least 14 days before the changes take effect. Your continued use of the Service after that date constitutes acceptance of the updated Terms.