Terms of service

These terms govern the use of Permiscope: the app at permiscope.app, its API and the Permiscope scanner (together, “the Service”). By creating an account or using the Service on behalf of an organization, you accept them for that organization and confirm you may do so.

1. Provider

The Service is provided by szczesny.com Radosław Szczęsny, ul. Obwiednia Południowa 62B/13, 44-200 Rybnik, Poland, NIP 6472381490 (“we”). Contact: privacy@permiscope.com.

2. Business use only

The Service is for businesses, public bodies and other professional users (“Customer”), acting in connection with their business or profession. It is not offered to consumers.

3. What the Service does

Permiscope gives an inventory of the MCP servers and AI-agent configurations on the Customer’s devices and repositories, evaluates them against security rules, and reports findings, changes and alerts. It is a detective tool: it helps the Customer see and manage risk, but it does not block anything and cannot guarantee that every risk is found. Security decisions remain the Customer’s.

4. Accounts

• Each person uses their own account. Keep your password and tokens secret; we recommend two-factor authentication.
• The Customer is responsible for who it invites, the roles it gives them, and for enrollment and API tokens it creates. Tell us at once at security@permiscope.com if you suspect unauthorized access.

5. Acceptable use

The Customer will:

• install the scanner only on devices and repositories it owns or is authorized to manage, and inform the people who use those devices as its law and policies require;
• not attempt to access other customers’ data, test the Service’s security without our consent (responsible reports to security@permiscope.com are welcome), or disrupt it;
• not use the Service to break the law or anyone’s rights, or to send content that is not scan data.

We may suspend access that puts the Service or other customers at risk, and will tell the Customer why unless the law forbids it.

6. Customer data

Data the Customer sends to the Service remains the Customer’s. We use it only to provide the Service and keep it secure. Where it includes personal data, we process it as the Customer’s processor under the data processing agreement, which forms part of these terms. Our handling of personal data as a controller is described in the privacy policy.

7. Fees

The Service is currently provided free of charge during early access. Paid plans will be introduced later; we will announce prices at least 30 days before any fee applies to an existing Customer, who may then stop using the Service without cost.

8. Availability and changes

We aim for the Service to be available at all times but do not guarantee uninterrupted operation, in particular during maintenance or failures of our providers. We may improve and change the Service; we will give reasonable notice before removing a feature the Customer relies on.

9. Intellectual property

We own the Service, the scanner and the security rules. The Customer receives a non-exclusive, non-transferable right to use them for its own internal purposes for the duration of these terms. Feedback may be used to improve the Service without obligation.

10. Warranty and liability

• The Service is provided “as is”. We exclude statutory warranty (rękojmia) to the extent the law allows.
• Our total liability under these terms is limited to the fees the Customer paid for the Service in the 12 months before the event, or EUR 100 if no fees were paid. We are not liable for lost profits or indirect damage.
• These limits do not apply to damage caused intentionally, or where the law does not allow them.

11. Term and termination

These terms apply while the Customer has an account. The Customer may stop at any time by deleting its organization in the app or by writing to us; we may end them with 30 days’ notice, or immediately for a serious breach. Before the end, the Customer can export its findings (CSV) and reports (PDF). We delete the Customer’s data within 30 days after the end, as set out in the DPA.

12. Changes to these terms

We may change these terms for a good reason, such as new features, law or security. We will publish the change here and email account owners at least 30 days before it takes effect, unless the change is required by law sooner. If the Customer does not agree, it may stop using the Service before that date.

13. Law and disputes

These terms are governed by Polish law. Disputes will be resolved by the common court with jurisdiction over our registered address. If a provision is invalid, the rest remains in force.