Terms of Service

These Terms of Service (“Terms”) are a binding agreement between you and All Still Good, operated by Eastbase Studio (“All Still Good”, “we”, “us”). By creating an account or using the service, you agree to these Terms. If you do not agree, do not use All Still Good.

All Still Good is a continuous health and security monitoring service for web applications — particularly apps built with AI tools such as Lovable, Bolt, Cursor, Replit and v0. It runs read-only checks against an app you have verified you own, holds a known-good baseline, compares each later scan against that baseline, and notifies you in plain English when something appears to break, leak, or regress. It can also generate suggested fix briefs to help you remediate findings.

All Still Good detects and explains issues. It does not modify, patch, or otherwise change your application — remediation is always in your hands.

You must provide accurate information when you register and keep your credentials secure. You are responsible for all activity under your account. You must be at least 18 years old (or the age of majority where you live) to use All Still Good.

This is a core condition of using All Still Good, not a formality:

• You may only add and monitor an application that you own or are otherwise expressly authorized to test.
• Before any scan runs, you must verify ownership of the target (via a DNS record, a meta tag, a hosted file, or a connected GitHub repository). Nothing is scanned until this gate passes.
• By verifying a target and running a scan, you confirm you have authority to authorize automated read-only security checks against it.
• You must not use All Still Good against any system you do not own or are not authorized to test. Doing so may be unlawful and is a material breach of these Terms.

You are solely responsible for ensuring you have the right to monitor every target you add. We may suspend or terminate accounts we reasonably believe are scanning systems without authorization.

You agree not to:

• Use All Still Good to attack, overload, exploit, or gain unauthorized access to any system.
• Attempt to circumvent the ownership-verification gate or other safeguards.
• Reverse-engineer, resell, or build a competing service from the platform.
• Upload unlawful content, infringe others' rights, or interfere with the service's operation.
• Provide a Supabase service_role key or other privileged credential — we reject these by design and you must not attempt to supply them.

All Still Good offers a free tier (a one-time baseline scan) and paid subscriptions (Pro and Business) billed monthly. Paid subscriptions are processed by our Merchant of Record, Lemon Squeezy, which handles payment, invoicing, and applicable taxes. Subscriptions renew automatically until cancelled. You can cancel, upgrade, or downgrade at any time from your billing settings. Cancellation, proration, and refund terms are described in our Refunds & Cancellation Policy.

All Still Good uses OpenAI GPT-5.6 models through Vercel AI Gateway to write plain-English explanations, suggested fix briefs, scan summaries, and observational journey steps. These are suggestions, not guarantees. AI output can be incomplete or wrong. Always review a fix brief and understand a change before applying it to your application. You remain responsible for any change you make to your own app.

All Still Good performs best-effort, automated, read-only checks for a defined set of common issues. It is a monitoring aid, not a guarantee that your application is secure and not a substitute for a professional security audit, penetration test, or compliance assessment. We do not warrant that we will detect every vulnerability, that findings are free of false positives or false negatives, or that your app is safe because a scan came back clean. Security is ultimately your responsibility.

All Still Good and its software, design, and content are owned by Eastbase Studio and protected by intellectual-property laws. You retain ownership of your data and your applications. You grant us the limited rights needed to operate the service for you (for example, to scan your verified targets and store findings).

All Still Good relies on third-party providers (including hosting, database, payment, email, AI, and analytics providers) to operate. Your use of the service is also subject to those providers’ terms where applicable. We are not responsible for third-party services we do not control. See our Privacy Policy for the providers we use.

You may stop using All Still Good and delete your account at any time. We may suspend or terminate your access if you breach these Terms, particularly the authorized-monitoring condition in Section 4. On termination, your right to use the service ends; sections that by their nature should survive (e.g. disclaimers and limitation of liability) will survive.

The service is provided “as is” and “as available”, without warranties of any kind, to the maximum extent permitted by law. To the fullest extent permitted by law, All Still Good and Eastbase Studio will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss arising from a security incident we did not detect. Our total liability for any claim relating to the service is limited to the amount you paid us in the twelve months before the claim.

We may update these Terms as the product evolves. If we make material changes, we will update the “last updated” date and, where appropriate, notify you. Continuing to use All Still Good after changes take effect means you accept the updated Terms.

These Terms are governed by the laws of [your jurisdiction], without regard to conflict-of-law rules. Any dispute will be resolved in the courts of [your jurisdiction], unless applicable law requires otherwise.

Questions about these Terms? Email support@allstillgood.com.