Terms of service

1. Agreement and definitions

1.1 These Terms of Service (the ”Terms”) constitute an agreement between Abstr AB, a Swedish limited company (reg. no. 559512-2739, Linnégatan 77, 114 60 Stockholm, Sweden) (”Abstr”, ”we”, ”us”), and the organisation that creates an account for or uses the Service (the ”Customer”, ”you”). Abstr and the Customer are referred to individually as a ”Party” and jointly as the ”Parties“.

1.2 Abstraction® is a registered trademark of Abstr AB.

1.3 By using the Service or creating an account for the Service, you accept these Terms and enter into an agreement with us for the provision of the Service (the ”Agreement”). The person accepting the Terms and entering into the Agreement confirms they are authorised to legally bind the Customer.

1.4 If you have signed an Order Form for Abstr’s provision of the Service, such Order Form shall constitute an integral part of the Agreement. In the event of any conflict between these Terms and such Order Form, the terms of the Order Form shall take precedence.

1.5 Definitions:

• ”Agreement” refers to the Terms, including any applicable DPA, Order Form, and other attachments or amendments thereto as agreed in writing by the Parties.
• ”App” means our applications, whether web, desktop or mobile, through which Users access and administer the Service.
• ”Credit” means a unit of monetary value, denominated in the currency stated at abstraction.com/pricing or in the applicable Order Form, which is purchased by the Customer, included in a Plan or granted as Trial Credits, and which is applied towards payment for usage of the Service in accordance with the applicable Plan and billing terms.
• ”Customer Data” means all data you or your Users submit to or connect to the Service, including source code in connected repositories, pull requests, comments, and prompts.
• ”DPA” means the applicable Data Processing Agreement, found at abstraction.com/dpa, which forms part of these Terms and subsequently, the Agreement.
• ”Fees” means any fees payable by the Customer for a subscription or use of the Service.
• ”GitHub App” means the Abstraction application registered on GitHub, which you install in your GitHub organisation to grant the Service access to the repositories you select.
• ”Order Form” means an order form for provision of the Service signed by Enterprise Customers, which sets out any additional or amended terms. An Order Form constitutes an integral part of the Agreement.
• ”Output” refers to such content generated for the Customer when using the Service, including reviews, findings, explanations, diagrams and documentation.
• ”Plan” means a subscription plan for the Customer’s use of the Service, as further described in Section 4 and at abstraction.com/pricing.
• ”Service” means the Abstraction platform, including the App, the Astrid assistant, PR reviews and checks, integrations (GitHub, Slack), the CLI and MCP server, APIs, documentation, and any other interface through which we make the Service available.
• ”Trial Credit” means such Credit(s) granted to the Customer by Abstr free of charge for trial use of the Service, subject to the terms set out in Section 4.
• ”User” means a person you allow to use the Service under your account.
• ”Workspace” refers to the space in your account where Users collaborate on connected repositories, with its own roles and access.

2. Accounts and acceptable use

2.1 The Service is intended for business use only and is not offered to consumers. By creating an account for or using the Service, you represent and warrant that the use of the Service by you and your Users is solely for business purposes and that no consumer use of the Service will be permitted. Any consumer use of the Service shall constitute a material breach of the Agreement and entitle Abstr to immediately terminate the Agreement and suspend or remove your account.

2.2 Users sign in through a supported identity provider (currently GitHub or Google). You are responsible for your Users, for the roles you assign to them, and for keeping their sign-in credentials, API keys and access tokens secure. You are responsible for all acts and omissions of your Users under the Agreement, as if such acts or omissions were your own. Notify us promptly at security@abstraction.com if you suspect any unauthorised access to a User’s account or the Service.

2.3 You may only connect repositories and other sources to the Service that you have the right to share with us. You are responsible for the permissions you grant when installing the GitHub App or other integrations.

2.4 You must not, and must not let others:

• resell, sublicense or provide the Service to third parties, except to your own Users;
• reverse engineer, decompile or try to extract the source code or models of the Service, except where expressly permitted by applicable law;
• use the Service to build or train a competing product, service, or AI model;
• access the Service by automated means other than through our documented APIs, CLI and MCP server, or exceed published rate limits;
• probe, scan or test the Service’s security without our written permission;
• upload malware or content that is unlawful or infringes others’ rights;
• interfere with the Service or other customers’ use of it.

2.5 We may suspend access, with notice where reasonably possible, if your use of the Service breaches this Section 2 or any other applicable part of the Agreement, threatens the security of the Service, or if payment of Fees is overdue as described in Section 4.

3. Customer Data and AI processing

3.1 You own your Customer Data. Nothing in these Terms transfers ownership of your source code or other Customer Data to us.

3.2 By accepting these Terms, you grant us a non-exclusive, worldwide licence to access, use, host, copy, analyse and process Customer Data, including source code and other materials in connected repositories, as required to provide, secure, improve, and support the Service, and as described in the DPA.

3.3 No training. We do not use Customer Data or Output to train, fine-tune, or improve any AI model, whether our own or that of any third party.

3.4 To provide the Service to you, we send Customer Data (such as source code in a normalised form, diffs, text files and descriptions derived from them), within the scope you permit, to large language model providers listed as sub-processors at abstraction.com/subprocessors. We use such sub-processors under “zero data retention” terms, which means the providers do not store the data we input or use it for training of AI models. We will notify you before adding a new AI sub-processor, in accordance with the DPA.

3.5 We may collect usage data about how the Service is used (for example feature usage, performance, and cost per action) to operate, bill, support, and improve the Service, as well as to manage our customer relationships. Usage data does not include the content of your Customer Data. We may share or publish usage data only when it is aggregated across customers, for example as totals for the whole Service or per market or industry, and only where no individual customer or User can be identified from it. Service providers that process usage data on our behalf, such as our analytics provider, are not third parties for the purpose of this section.

3.6 Customer Data is stored in the EU (Google Cloud). Our security measures are described at abstraction.com/security and in the DPA. The full list of sub-processors, including Google Cloud for hosting and Grafana Labs for monitoring, is available at abstraction.com/subprocessors.

4. Plans, Fees and payment

4.1 Trial. Upon creating an account, new organisations that have not previously used or subscribed to the Service may receive Trial Credits for trial use of the Service (currently USD 50). Trial Credits have no cash value, are valid for thirty (30) days from issuance, and may only be issued once per organisation. When the Trial Credits have been exhausted or have expired, access to paid features of the Service will cease until the Customer selects a paid Plan. Abstr reserves the right to refuse or revoke Trial Credits where it has reasonable grounds to suspect that an organisation or account has been created, or is being used, for the purpose of obtaining Trial Credits more than once. Any such misuse of the Service shall constitute a material breach of the Agreement.

4.2 Paid Plans. Current Plans and Fees are listed at abstraction.com/pricing and in the App’s billing page. The paid Plans currently available are as follows:

• ‘Pay as you go’: the Customer purchases Credits by card, which are deducted at the applicable list rates upon usage of the Service. Credits under this Plan expire twelve (12) months after purchase. The Customer may enable automatic top-ups, whereby additional Credits are purchased automatically when the Customer’s Credit balance falls below a specified threshold. If the Customer’s Credits are exhausted and not replenished, access to paid features of the Service will be suspended, but Customer Data will be retained.
• ‘Team’: a monthly per-seat Fee, which includes a monthly Credit allowance. Usage of the Service beyond the included allowance is charged at the applicable Plan rates. Unused included Credits expire at the end of each subscription period and do not carry over.
• ‘Enterprise’: pricing, invoicing and other commercial terms as agreed in a separate Order Form.

4.3 Usage is measured by the Service, and each billable action is priced upon occurrence. The billing page shows your accrued spend and remaining Credits. Credits expire as set out in this Section 4 and are not refundable.

4.4 Team Plan subscriptions renew automatically each month until cancelled. You can cancel a subscription at any time in the billing page. Such cancellation takes effect at the end of the current subscription period.

4.5 Fees are stated excluding VAT and other taxes, which are added to the invoice where applicable. Payments are processed by our payment providers (Stripe and Metronome). Except where the Agreement or applicable law or regulations provide otherwise, any Fees already paid are non-refundable.

4.6 If a scheduled payment fails or an invoice is overdue by more than 14 days, we may suspend your access to any paid features of the Service upon notice. Late invoices accrue interest under the Swedish Interest Act (SFS 1975:635) (Sw. räntelag (1975:635)).

4.7 We may change Fees with at least 30 days’ notice. Such change takes effect from your next billing period. Should you not wish to continue using the Service subject to the new Fees, you may cancel your subscription before the change takes effect.

5. Confidentiality, security and data protection

5.1 Confidentiality. Each Party undertakes not to disclose confidential information which it has received from the other Party to a third party without the other Party’s prior consent. Confidential information shall include Customer Data and any other information disclosed to the other Party in connection with the Agreement, whether in writing or orally. Third-party information of technical, commercial or any other nature which either Party has taken part of within the scope of the Agreement is considered confidential information unless there are objective and reasonable ground to not consider the information confidential. Further, confidential information does not include information which:

1. is part of the public domain, or which comes into the public domain through no breach of this Agreement,
2. at the time of disclosure was already in the possession of the receiving Party, as evidenced by the receiving Party,
3. the other Party is obliged to disclose according to applicable laws and regulations or decisions by a court of law or public authority, or
4. the other Party received from a third party who in turn was not bound by a confidentiality obligation in relation to the information.

5.2 Abstr is entitled to share confidential information with its employees, contractors, sub-processors, external advisors, and affiliates, provided such parties are bound by confidentiality obligations equivalent to the obligations under this Agreement.

5.3 The confidentiality obligations in this Section 5 shall apply during the term of this Agreement and for three years following the termination of the Agreement.

5.4 Security. We maintain adequate technical and organisational security measures appropriate to the applicable risk, including encryption in transit and at rest, role-based access control, isolated processing per customer, and audit logging. Our staff does not access your Workspaces unless you invite them to do so, it is necessary to investigate a security incident, or to comply with applicable law or regulations.

5.5 Data processing. Where we process personal data on your behalf, we do so as your processor under the applicable DPA, which forms part of these Terms. The DPA covers processing activities carried out by us under the Agreement, including, without limitation, the use of sub-processors, transfers outside the EU/EEA, security measures, audits and deletion. A countersigned copy of the applicable DPA is available on request by contacting legal@abstraction.com.

5.6 We will notify you without undue delay, and in any case within 48 hours, after becoming aware of a security breach affecting your Customer Data.

5.7 Our handling of personal data for our own purposes (for example account governance and billing) is described in our Privacy Policy at abstraction.com/privacy.

6. Intellectual property, Output and feedback

6.1 Ownership and licence. We own the Service and all related software, models, documentation and trademarks, including Abstraction®. Subject to the Agreement and your payment of Fees, we grant you a non-exclusive, non-transferable, worldwide and limited license to use the Service for your internal business purposes and in accordance with the terms of the Agreement, during the term of the Agreement.

6.2 Output belongs to you. As between the Parties, you own the Output generated from your Customer Data and may use it freely. Similar Output may be generated for other customers, and your rights under the Agreement do not extend to such data.

6.3 AI limitations. Output is generated with the help of AI and may be incomplete or wrong. PR reviews, checks and findings help your engineers and do not replace their judgement. You are responsible for reviewing Output before you rely on it, merge code, or use it in decisions regarding security, compliance, or other critical decisions.

6.4 Feedback. To the extent that you provide Abstr with suggestions, ideas, enhancement requests or other feedback relating to the Service (”Feedback”), you hereby grant Abstr a perpetual, irrevocable, worldwide, royalty-free and fully sublicensable right to use, reproduce, modify, and otherwise exploit such Feedback without restriction or obligation of any kind. For the avoidance of doubt, nothing in this paragraph grants Abstr any rights in or to your Customer Data.

6.5 Excluded features. Features marked as “trial”, “beta”, “preview” or “experimental” are provided as is, may change or be removed, and are excluded from any service commitments or other guarantees offered under the Agreement.

7. Warranties, liability and indemnities

7.1 We will provide the Service with reasonable skill and care and in material accordance with its related documentation. If the Service does not conform to the Agreement, you shall inform us as such and we will use reasonable efforts to amend such non-conformity. If we cannot fix amend the non-conformity within a reasonable time, you may terminate the affected Plan and receive a pro rata refund of any prepaid Fees for the remaining subscription period.

7.2 Notwithstanding the above, the Service is provided “as is” and “as available”. To the extent permitted by applicable law, we disclaim all other warranties, including merchantability, fitness for a particular purpose, and that the Service or Output will be provided error-free or uninterrupted.

7.3 Neither Party is liable for indirect or consequential loss, including lost profits, revenue, goodwill or data, even if such loss was foreseeable.

7.4 Each Party’s total liability under the Agreement in any 12-month period is limited to the Fees you paid to us in the 12 months preceding the event giving rise to the claim.

7.5 The limitations in Sections 7.3 and 7.4 do not apply to liability for gross negligence, wilful misconduct, fraud, your payment obligations, breaches of Section 2, or liability that cannot be limited by applicable law.

7.6 We will defend you against third-party claims that the Service, used as permitted and in accordance with the Agreement, infringes their intellectual property rights, and pay any resulting damages or agreed settlement. You will do the same for claims arising from Customer Data or your breach of Section 2. The Party seeking indemnification shall promptly notify the other Party in writing and grant such other Party sole control of the defence and settlement of the claim.

7.7 Force majeure. If the performance of this Agreement or any obligation hereunder is prevented or restricted by reasons beyond the reasonable control of a Party including, but not limited to, computer related attacks, hacking, or acts of terrorism, the Party so affected shall be excused from such performance and liability to the extent of such prevention or restriction. This shall also apply to damages incurred due to Swedish or foreign enactments, governmental actions, pandemics, wars, strikes, blockades, boycotts, lock-outs or other similar circumstances affecting the Services, as well as outages at upstream cloud or AI providers not caused by Abstr’s negligence.

8. Term, termination and general terms

8.1 The Agreement enters into force when you accept these Terms by creating an account or using the Service, and remains in force until your account is closed. You may close your account at any time. We may terminate the Agreement with 30 days’ notice, or immediately if you materially breach the terms of the Agreement and do not cure the breach within 14 days of receiving notice of such breach.

8.2 Upon termination, we will revoke integrations, API keys and access tokens, and you may export your Output for 30 days after termination. After that, we will delete your Customer Data from active systems, and from backups within 30 days as they rotate. We will confirm such deletion in writing, upon your request. Notwithstanding the above, any records that we are obliged to retain under applicable law or regulations, such as invoices, are retained as required.

8.3 If, for a continuous period of three (3) months, the Customer has no active paid Plan and no remaining Credits, Abstr may terminate the Agreement and close the account upon 30 days’ prior notice to the account’s administrators. Upon such termination, Customer Data shall be handled in accordance with Section 8.2.

8.4 Sections 3.1, 5, 6.2–6.4, 7, 8.2-8.3, and 8.6–8.8, together with any provision which, by its nature, is intended to survive the termination of the Agreement, shall survive such termination and remain in full force and effect.

8.5 We may update these Terms. For material changes we will give at least 30 days’ notice by email or in the App before they take effect. If you do not agree to such changes, you may terminate your subscription and close your account before the change takes effect, and we will refund any prepaid Fees for the remaining, unused subscription period. Continued use of the Service after the changes take effect means you have accepted the updated Terms.

8.6 The Agreement is governed by Swedish law, without regard to its conflict-of-law rules. Disputes are settled by the Swedish courts, with Stockholms tingsrätt as the court of first instance.

8.7 Neither Party may assign the Agreement without the other’s consent, except that we may assign them to an acquirer of all or substantially all of our business. We may use subcontractors and remain responsible for them. We may name you as a customer or show your logo only with your prior written consent, which you may withdraw at any time.

8.8 This Agreement, including these Terms, the DPA and any applicable Order Form constitutes the entire agreement between the Parties regarding the Service. If any provision is deemed invalid or unenforceable, any remaining provisions shall apply unaffected. Notices to us shall be sent to legal@abstraction.com, and notices to you are sent to the email address of your account’s administrators.