Legal Agreement · Binding Terms

Terms of Service & Limitation of Liability

Last Updated & Effective Date: October 23, 2026

Plain-English Summary (Not a substitute for full text)

Furnace is a pre-launch diagnostic tool and code review service created to help software developers spot common bugs, security oversights, and data exposure risks before shipping. Furnace is not an insurance policy, security guarantee, or regulatory certification. Because software security involves complex environments beyond any static analysis, our total legal liability to you is strictly capped at what you paid us (e.g. $99 for an audit, or your monthly subscription), and we are not liable for any business losses, data breaches, downtime, or lost revenue. Furthermore, all suggested code patches and AI fix prompts are provided for guidance only and must be tested by you before production use.

1. Acceptance & Parties

These Terms of Service ("Terms") constitute a legally binding contract between you (whether an individual software developer or an organization, referred to as "you" or "Customer") and Furnace ("Furnace", "we", "us", or "our", operated by Vishwas Mehta).

By accessing or using our website (https://vyshwas.github.io/furnace-site/), purchasing a Founding Launch Audit, downloading, installing, or executing the Furnace command-line tool (CLI), applying any suggested fix prompt, or using any associated audit reports or services, you agree to be bound by these Terms under applicable electronic contract laws (including the US Electronic Signatures in Global and National Commerce Act, Uniform Electronic Transactions Act, and the Indian Information Technology Act, 2000). If you do not agree to all terms and conditions herein, you must immediately cease all access and use of Furnace.

2. Nature of Service & Point-in-Time Scope

Furnace provides automated static code checks (via the Furnace CLI and Furnace Pro) and human spot-check reviews (via the Founding Launch Audit) targeting common pre-launch pitfalls, including missing route authentication, absent authorization checks, exposed secrets, and database access rule omissions.

What Furnace is NOT:

Not a Guarantee of Security: Furnace does NOT guarantee, warrant, or promise that your codebase, application, infrastructure, third-party libraries, or deployment environment is completely secure, bug-free, impervious to attacks, unhackable, or free from vulnerabilities.
Not a Security Certification or Regulatory Opinion: A Furnace report or "READY" verdict is not a formal ISO 27001, SOC 2, HIPAA, PCI-DSS, or governmental compliance certification, nor does it constitute an audit opinion or formal penetration test.
Limited Technical Scope: Automated checks evaluate code solely against specific deterministic static patterns. They cannot detect architecture-level logic exploits, zero-day vulnerabilities, social engineering, malicious dependencies, or runtime infrastructure misconfigurations.
Point-in-Time Assessment: An audit report or CLI verdict reflects only the specific files, branch, and commit evaluated as of the specific date and time of review. Furnace assumes no obligation to monitor, re-evaluate, or update any report as new attack vectors or code revisions emerge.

You acknowledge that you remain solely responsible for the architecture, security, deployment, and testing of your software.

3. Strict Limitation of Liability (Monetary Cap)

This section establishes the maximum amount of money you can recover under any circumstances. Please read it carefully.

Maximum Aggregate Monetary Cap

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL FURNACE, ITS FOUNDER (VISHWAS MEHTA), OPERATORS, CONTRIBUTORS, CONTRACTORS, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY CLAIMS, LIABILITIES, LOSSES, COSTS, OR DAMAGES ARISING OUT OF OR IN CONNECTION WITH THE SERVICES, AUDIT REPORTS, CLI CHECKS, WEBSITE, REMEDIATION GUIDANCE, OR THESE TERMS, UNDER ANY LEGAL THEORY (WHETHER IN CONTRACT, TORT INCLUDING NEGLIGENCE, STRICT LIABILITY, STATUTORY, OR OTHERWISE), IN AN AGGREGATE AMOUNT EXCEEDING:

FOR PAID AUDITS OR SUBSCRIPTIONS: THE EXACT AMOUNT OF FEES ACTUALLY PAID BY YOU TO FURNACE FOR THE SPECIFIC SERVICE GIVING RISE TO THE CLAIM DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM (FOR EXAMPLE, EXACTLY $99.00 USD FOR A FOUNDING LAUNCH AUDIT, OR THE SUM OF MONTHLY PRO PAYMENTS PAID WITHIN THE LAST YEAR); OR
FOR FREE, ALPHA, OR TRIAL USE: AN AGGREGATE TOTAL OF TEN DOLLARS ($10.00 USD).

THIS LIMITATION OF LIABILITY IS CUMULATIVE AND NOT PER-INCIDENT. MULTIPLE CLAIMS WILL NOT ENLARGE THIS LIMIT.

4. Complete Exclusion of Consequential & Business Damages

Exclusion of Lost Profits, Breaches, and Business Damages

UNDER NO CIRCUMSTANCES SHALL FURNACE OR ITS FOUNDER BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES WHATSOEVER, REGARDLESS OF THE LEGAL CAUSE OF ACTION, INCLUDING WITHOUT LIMITATION:

ANY LOSS OF ACTUAL OR ANTICIPATED PROFITS, REVENUE, CONTRACTS, CLIENTS, OR BUSINESS OPPORTUNITIES;
ANY DATA LOSS, BREACH OF CUSTOMER DATA, UNAUTHORIZED DATABASE ACCESS, EXFILTRATION OF USER RECORDS, OR LEAKED CREDENTIALS;
ANY SYSTEM DOWNTIME, CORRUPTION, DESTRUCTION OF CODE, OR BUSINESS INTERRUPTION;
ANY RANSOMWARE, EXTORTION DEMANDS, FORENSIC INVESTIGATION EXPENSES, PR CONSULTING EXPENSES, OR LEGAL SETTLEMENT COSTS;
ANY CLAIMS, DEMANDS, OR LAWSUITS BROUGHT AGAINST YOU OR YOUR COMPANY BY YOUR END USERS, CUSTOMERS, INVESTORS, PARTNERS, OR GOVERNMENTAL REGULATORS.

THESE EXCLUSIONS APPLY EVEN IF FURNACE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES, AND EVEN IF ANY LIMITED REMEDY SPECIFIED HEREIN FAILS OF ITS ESSENTIAL PURPOSE.

5. Remediation Advice, Code Patches & AI Prompts Disclaimer

Furnace may provide remediation suggestions, code patches, configuration examples, and ready-to-use AI prompts (e.g. for Cursor, Claude Code, Lovable, or Bolt) to assist in fixing detected issues.

Customer Responsibility for Code Implementation

ALL REMEDIATION GUIDANCE, CODE PATCHES, CODE SNIPPETS, AND AI FIX PROMPTS ARE PROVIDED STRICTLY ON AN "AS-IS" BASIS FOR GENERAL INFORMATIONAL AND EDUCATIONAL PURPOSES. FURNACE DOES NOT WARRANT OR GUARANTEE THAT ANY SUGGESTED PATCH OR PROMPT WILL FULLY RESOLVE THE ISSUE, WILL BE ERROR-FREE, OR WILL NOT INTRODUCE SOFTWARE REGRESSIONS, FUNCTIONAL DEFECTS, OR OPERATIONAL DOWNTIME IN YOUR ENVIRONMENT.

Customer acknowledges that it is solely responsible for reviewing, testing, compiling, and validating all code before deploying it to production. Furnace shall have zero liability for any damages, errors, data corruption, or downtime resulting from Customer's adoption or implementation of any recommended fix or AI prompt.

6. "AS IS" and "AS AVAILABLE" Disclaimer of Warranties

THE FURNACE SOFTWARE, CLI PACKS, SCRIPTS, VERDICTS, VERIFICATION GATES, AUDIT REPORTS, SAMPLE REPORTS, AND WEBSITE ARE PROVIDED STRICTLY ON AN "AS IS" AND "AS AVAILABLE" BASIS. TO THE MAXIMUM EXTENT PERMITTED BY LAW, FURNACE EXPRESSLY DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, ACCURACY, AND NON-INFRINGEMENT.

We make no representation or warranty that: (a) the service will meet your specific business or technical requirements; (b) the operation of the CLI or reports will be uninterrupted, error-free, or entirely bug-free; or (c) that all security vulnerabilities, logic defects, or coding oversights in your application will be discovered or prevented.

7. Customer Authority, Acceptable Use & Indemnification

By submitting source code, repository links, or executing the Furnace CLI against any directory or endpoint, you represent, warrant, and covenant that:

You are the rightful owner of the source code and infrastructure, or you have obtained explicit, written authorization from the owner to test and submit the software to Furnace;
You will not use Furnace to probe, scan, or attack third-party software, endpoints, or cloud environments without authorization, nor will you use Furnace in violation of the Computer Fraud and Abuse Act (CFAA), the Indian Information Technology Act, 2000, or any other applicable cybersecurity laws;
You will not use Furnace for any unlawful, harassing, or malicious purpose;
You understand that build scripts or test commands executed by local verification gates run with your machine's permissions, and you will only run checks on code you have inspected.

Indemnification: You agree to defend, indemnify, and hold harmless Furnace and Vishwas Mehta against any third-party claims, liabilities, damages, losses, costs, and reasonable legal fees arising out of: (a) your violation of these Terms; (b) your unauthorized scanning or submission of third-party assets; (c) your application's actual operation or distribution in production; or (d) any third-party claims brought by your users, clients, or investors.

8. Non-Endorsement & Third-Party Non-Reliance

A Furnace audit report, CLI pass verdict, or countersigned stamp represents an internal technical assessment between Furnace and the Customer.

Not an Endorsement: A report or verdict does not constitute an endorsement, safety rating, commercial recommendation, or investment advice regarding any project, company, software, or digital token.
No Third-Party Beneficiaries: Furnace reports are prepared exclusively for Customer's internal technical use. Third parties (including Customer's end users, business partners, insurers, and investors) may not rely upon any Furnace report or verdict as proof of safety, and Furnace disclaims all liability to any such third parties.

9. Pricing, Audits & 14-Day Refund Policy

Founding Launch Audit ($99 founding price for first 10, then $299): Paid one-time via Gumroad. Includes automated analysis plus manual review by the founder.

Money-Back Guarantee on Audits: If our Founding Launch Audit report finds zero actionable security flaws, credential exposures, authorization gaps, or pre-launch blockers that require remediation before launch, you are entitled to a full 100% refund upon written request within 14 days of receiving your report.

Furnace Pro ($19/project/month): Billed monthly via Gumroad. You can cancel your subscription at any time via Gumroad. If Furnace fails to run or execute checks on your supported codebase within 14 days of your initial purchase, you may request a full refund of your first monthly payment.

10. Code Privacy, Zero Cloud Uploads & Intellectual Property

Zero Cloud Uploads: The Furnace CLI tool is engineered to run locally on your machine. It does not transmit your source code, proprietary algorithms, or repository files to any external remote servers or third-party cloud systems.

Launch Audit Confidentiality: When you purchase a Launch Audit and provide code access (via private repository invitation or secure zip archive), we treat your intellectual property with strict confidentiality:

Your code is used exclusively to conduct your Launch Audit;
Your code is never shared, licensed, or sold to third parties;
Your code is never used to train public machine learning or AI models;
Copies of your source code on our local review machine are permanently deleted upon completion of your audit or immediately upon your written request.

Intellectual Property Rights: Customer retains 100% ownership of its source code and applications. Furnace retains 100% ownership of its verification software, CLI engines, gate packs, test suites, and heuristics. Customer is granted a perpetual, non-exclusive license to use, display, and share the audit report for its legitimate business purposes.

11. Governing Law, Dispute Resolution & 1-Year Claim Window

Informal Resolution: If you have any dispute, concern, or claim, you agree to contact us first at vyommehta197@gmail.com and attempt to resolve the issue informally and in good faith before initiating any formal proceedings.

Governing Law: These Terms shall be governed by and construed in accordance with the laws applicable to the founder's principal place of operation, without giving effect to any principles of conflicts of law.

One-Year Claim Limitation Period: TO THE MAXIMUM EXTENT PERMITTED BY LAW, ANY CAUSE OF ACTION OR CLAIM ARISING OUT OF OR RELATING TO THESE TERMS, THE SERVICES, OR AN AUDIT REPORT MUST BE FILED WITHIN ONE (1) YEAR AFTER THE CAUSE OF ACTION AROSE, OR BE FOREVER BARRED.

Class Action Waiver: YOU AND FURNACE AGREE THAT ANY CLAIMS OR PROCEEDINGS SHALL BE BROUGHT ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING.

12. Entire Agreement & Severability

Entire Agreement: These Terms constitute the entire agreement between you and Furnace regarding the subject matter hereof and supersede all prior or contemporaneous communications, sales pitches, website copy, marketing claims, sample reports, or agreements, whether oral or written. No marketing statement, badge, slogan, or informal communication shall be construed as an express warranty, guarantee, or modification of these Terms.

Severability: If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be enforced to the maximum extent permissible, and the remaining provisions shall remain in full force and effect.

13. Contact Information

If you have questions about these Terms of Service or need to request a refund under our money-back guarantee, please contact:

Furnace
Operator: Vishwas Mehta
Email: vyommehta197@gmail.com / vyshwas.work@gmail.com
Website: https://vyshwas.github.io/furnace-site/