Sithub Platform

1. CONSENT AND LEGAL FORCE

1.1 Acceptance of Terms

By subscribing to services, downloading, installing, or using Sithub or any of its Components, you confirm that you:

• Have read and understood these Terms
• Agree to comply with these Terms in full
• Have the legal authority to enter into this agreement

If you do not agree with these Terms, you do not have the right to use the Platform.

1.2 Age Restrictions

To use Sithub:

• You must be at least 18 years old for independent use
• If you are between 16 and 18 years old, you must obtain written consent from a parent or legal guardian
• Use of the Platform is prohibited for persons under 16 years of age

1.3 Corporate Use

When using on behalf of an organization, you confirm that you have the authority to enter into this agreement on behalf of such organization.

1.4 Related Documents

These Terms are supplemented by the following documents, which are an integral part of them:

• Privacy Policy
• Technical Documentation on Security Architecture

2. PLATFORM DESCRIPTION AND OPERATING PRINCIPLES

2.1 Architectural Principle: Local Processing

Sithub is designed based on the principle of "Privacy by Design" (privacy by design). All Components operate exclusively on the User's local infrastructure without transferring source code to external servers.

2.2 Platform Components

2.2.1 Repository Management System

Self-hosted Git version control:

• Operates entirely on the User's equipment
• Does not require internet connection for core functionality
• Does not transmit repository data to Provider's servers
• Is a fully autonomous component for code management

2.2.2 Security Scanning Engine

AI-powered code analysis operating locally:

• Performs security scanning on local infrastructure
• Runs entirely within your network
• Integrates with locally stored vulnerability databases
• Does not transmit code or scan results externally
• Provides real-time vulnerability detection

2.2.3 Vulnerability Database Service

Security intelligence updates:

• Downloads threat data from Provider's servers
• Stores databases locally on your infrastructure
• The only component that communicates with Provider's servers
• Receives regular security updates

2.3 Security Update Service

2.3.1 Purpose of Service

Sithub uses vulnerability databases to scan User's code for known security threats. To ensure these databases are up-to-date, the Platform downloads updates from Provider's servers.

2.3.2 What is Transmitted FROM Provider's Servers TO User

Incoming data flow (from Provider's servers to User's infrastructure):

• Vulnerability databases (CVE, information about malicious packages)
• Security patches and vulnerability remediation instructions
• Package security metadata (npm, PyPI, Maven, etc.)
• Malicious code signatures
• Security scanning engine updates

2.3.3 What is Transmitted FROM User TO Provider's Servers

Outgoing data flow (from User's infrastructure to Provider's servers):

• License verification tokens - cryptographic tokens to confirm subscription validity
• License key hash - for authenticating update requests
• Update request metadata - timestamp, Sithub version, installation ID hash

CRITICALLY IMPORTANT:

• User's Source Code is NEVER transmitted to Provider's servers
• Security scan results are NEVER transmitted to Provider's servers
• File names, project structure, repository metadata are NEVER transmitted
• Information about developers and users is NEVER transmitted

3. DATA SECURITY GUARANTEES AND LIABILITY LIMITATIONS

3.1 Provider's Guarantees

3.1.1 Architectural Guarantee

The Provider guarantees that Sithub is designed in such a way that:

• User's source code is processed exclusively on local infrastructure
• Platform components do not contain functions for data transmission to external servers
• Only vulnerability database updates are downloaded from Provider's servers
• No code, scan results, or repository metadata is transmitted externally

3.1.2 Guarantee Limitations

The Provider does NOT guarantee protection from:

• User's own actions to transfer code to external services
• Compromise of User's infrastructure by third parties
• Network security configuration errors on User's side
• Actions of User's employees or contractors

3.2 User's Obligations

3.2.1 Infrastructure Security

The User undertakes to:

• Maintain proper firewall configuration
• Implement access control to local systems
• Ensure physical and network security of servers
• Regularly update operating systems and protection means

3.2.2 Preventing Manual Data Transfer

The User undertakes to:

• Not manually upload source code to external cloud services
• Train developers in principles of safe work with Sithub
• Control actions of users with privileged access

3.4 Right to Audit

The User has the right to conduct analysis of Sithub network traffic, request technical documentation on security architecture, and conduct analysis of open-source components of the Platform.

4. SUBSCRIPTION AND PAYMENT

4.1 Subscription Model

4.1.1 Subscription Options

Sithub is provided on the basis of subscription, including:

• Full access to all Platform features
• All capabilities without restrictions
• Regular security database updates
• Technical support in accordance with SLA

Available Plans:

• Monthly Plan: $480/month (USD)
• Annual Plan: $336/month billed annually at $4,032/year (USD)

The monthly plan provides flexibility; the annual plan offers 30% savings.

4.1.2 Cost and Payment

• Current subscription cost is indicated on the website www.silence.codes or https://sithub.silence.codes
• Payment is made in advance (monthly or annually)
• Non-cash payments are accepted in accordance with the legislation of the Republic of Kazakhstan
• International payment methods are available for international clients

4.2 Renewal and Cancellation

If the User does not cancel the subscription before the end of the validity period, the subscription is automatically renewed for the next period. The User can cancel the subscription at any time; the subscription remains active until the end of the paid period.

4.3 Refund Policy

Paid funds for subscription are not refunded, except in cases of critical system failure, breach of privacy guarantees, or regulatory requirements. For Users located in the European Union, a 14-day right of withdrawal applies.

5. SERVICE LEVEL AGREEMENT (SLA)

5.1 Update Server Availability

The Provider strives to ensure 99.5% uptime of update servers per year. This is equivalent to no more than 43.8 hours of downtime per year.

5.2 Local Component Operation

All Platform components continue to operate regardless of Provider's server availability:

• Repository Management - fully autonomous
• Security Scanning - continues using last downloaded vulnerability database
• Code Analysis - operates completely offline

5.3 Security Updates

The Provider provides vulnerability database updates at least once per week. When critical vulnerabilities are discovered (CVSS 9.0+), update is released within 48 hours from public disclosure.

5.4 Technical Support

Support is available Monday to Friday, 09:00-17:00 (GMT+6, Nur-Sultan). Critical incidents are handled 24/7.

6. INTELLECTUAL PROPERTY

6.1 User's Rights to Their Code

The User retains full and exclusive rights to all source code created using Sithub. The Provider does not claim ownership of User's code and NEVER uses User's code for AI model training or other purposes.

6.2 Provider's Rights to Platform

The Provider retains all rights to source code of all Platform Components, algorithms and methodologies, vulnerability databases, trademarks, and technical documentation.

6.3 Usage Restrictions

The User does NOT have the right to reverse engineer proprietary Platform components, distribute or resell Sithub to third parties, remove or modify copyright notices, create competing products based on Sithub, or distribute vulnerability databases provided by Provider.

7. LIMITATION OF LIABILITY

7.1 "As Is" Provision

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW: Sithub is provided "AS IS" and "AS AVAILABLE", without any warranties, express or implied.

7.2 Liability Boundaries

Provider is NOT responsible for problems on User's side, accuracy of security scanning (false positives/negatives), or indirect damages (lost profits, loss of business reputation, data loss, business interruption).

The Provider's maximum aggregate liability for all claims related to Sithub is limited to: The amount paid by User for subscription during the 12 months preceding the claim

7.4 Force Majeure

The Provider is not responsible for non-fulfillment of obligations caused by force majeure circumstances, including natural disasters, wars, terrorist attacks, epidemics, actions of government authorities, power outages, internet failures, or cyberattacks on Provider's infrastructure.

8. TERMINATION OF TERMS

8.1 Termination by User

The User can stop using Sithub at any time. After subscription termination, all downloaded Components remain on User's infrastructure and continue to function with the last received security database.

8.2 Termination by Provider

The Provider may immediately terminate service provision in case of violation of acceptable use conditions, bypass of licensing mechanisms, illegal use of Platform, or distribution of Sithub or databases to third parties. When a breach is identified, Provider sends written notification and User has 14 days to remedy the breach.

8.3 Consequences of Termination

After subscription termination: license key is deactivated, access to security updates ceases, access to technical support ceases. User data (code, scan results) remains on User's infrastructure.

9. ACCEPTABLE USE

9.1 Permitted Use

The User has the right to use Sithub for software development, code analysis for security vulnerabilities, corporate repository management, training and educational purposes (within User's organization), and any lawful purposes related to software development.

9.2 Prohibited Use

The User does NOT have the right to:

• Reverse engineer proprietary Platform components
• Bypass licensing or authentication mechanisms
• Distribute Sithub or its components to third parties
• Distribute vulnerability databases
• Use Sithub for developing malware or hacking tools
• Use Sithub for any illegal purposes

10. COMPLIANCE WITH LEGISLATION

10.1 Export Control

The User is responsible for compliance with all applicable export control laws. Sithub cannot be used in territories subject to international sanctions.

10.2 Data Protection

For Users located in the European Union, provisions of the General Data Protection Regulation (GDPR) apply. Provider acts as data processor, User is the data controller. Provider uses Standard Contractual Clauses approved by the European Commission for data transfers from EU to Kazakhstan.

10.3 Data Retention

11. APPLICABLE LAW AND DISPUTE RESOLUTION

11.1 Applicable Law

These Terms are governed by and construed in accordance with the laws of the Republic of Kazakhstan, without regard to conflict of law provisions.

11.2 Dispute Resolution

Before applying to court or arbitration, Parties undertake to send written claim to the other Party, provide 30 days for response and settlement, and make good faith attempt to resolve dispute through negotiations. Claims are sent to:

• To Provider: info@silence.codes
• To User: to contact email specified during registration

11.2.2 Arbitration

If pre-litigation settlement does not lead to result, disputes are subject to resolution in arbitration in accordance with the Regulations of the International Arbitration Court at the National Chamber of Entrepreneurs of the Republic of Kazakhstan "Atameken". Place of arbitration: Astana (Nur-Sultan), Republic of Kazakhstan.

12. CHANGES TO TERMS

12.1 Right to Change

The Provider reserves the right to change these Terms at any time for changes in applicable legislation, development of Sithub functionality, changes in business model, or improvement of User interests protection.

12.2 Change Notification

Material changes are notified via email 30 days before changes take effect, notification in Sithub interface, and publication on website with highlighted changes.

12.3 Consent to Changes

By continuing to use Sithub after changes take effect, you confirm consent to updated Terms. If you do not agree with changes, you have the right to stop using Sithub and cancel subscription before changes take effect.

13. MISCELLANEOUS PROVISIONS

13.1 Severability

If any provision of these Terms is found to be invalid or unenforceable, remaining provisions remain in full force, invalid provision is replaced by valid provision closest in meaning.

13.2 Waiver of Rights

Non-exercise or delay in exercising any right does not mean waiver of such right. Provider may exercise its rights at any time in the future.

13.4 Entire Agreement

These Terms together with Privacy Policy constitute the entire agreement between Parties and replace all previous oral agreements, written agreements, and representations and statements.

13.6 Notices

Official Notices are Sent to:

To Provider:

• Email: info@silence.codes
• Postal address: Astana city, Almaty district, Ak-Bulak-3 residential area, Tasshoki lane, house 3, apartment 26

To User:

• To email specified during registration
• Through notifications in Sithub interface

14. CONTACT INFORMATION

Questions about terms of service, about your subscription, about how the platform works?

Contact us:

Email: info@silence.codes

Response time: up to 5 business days

We created Sithub to ensure secure development with privacy compliance. These Terms are designed to protect the interests of both Parties and ensure transparency of our relationship.