Heicode Legal Notice & Interpretation

This document explains the scope of application and interpretation rules for Heicode's legal documents, product descriptions, terms of service, privacy policy, security notices, secret vault notice, and commercial plan descriptions.

Scope of Application

This document applies to legal and product policy descriptions displayed on the Heicode website, documentation site, client applications, Manager, Agent platform, related services, plan descriptions, product materials, and support channels.
This document, together with the Privacy Policy, Secret Vault Notice, Terms of Service, Plan Descriptions, and other specific rules, together constitute Heicode's product policy statements to users and customers.
If a customer has separately signed an order, enterprise agreement, data processing agreement, non-disclosure agreement, service-level agreement, or supplementary terms with Heicode or a related entity, the signed agreement takes precedence.

Right of Interpretation & Order of Precedence

To the extent permitted by law, Heicode reserves the right to interpret its product policies, plan descriptions, feature descriptions, billing methodology, resource usage rules, secret vault rules, security requirements, and service boundaries.
This right of interpretation does not exclude or limit any mandatory rights users are entitled to by law, nor does it exclude mandatory requirements of regulators, judicial authorities, or applicable law.
If this document is inconsistent with a signed agreement, the signed agreement shall prevail.
If this document is inconsistent with the current official terms of a model provider, cloud provider, payment provider, deployment provider, or other third-party service, the corresponding third-party service's official terms shall prevail.
If there is a discrepancy between website content, marketing materials, product descriptions, presentations, help documentation, and system prompts, the signed agreement, formal terms of service, privacy policy, order, or the latest officially published document shall prevail.

AI Output & Human Review

Heicode provides AI-assisted software lifecycle capabilities; model outputs, Agent execution results, code suggestions, deployment suggestions, security suggestions, and legal or financial text may contain errors, be incomplete, duplicated, unsafe, or unsuitable for a user's business context.
Before relying on AI output, users should perform human review, testing, examination, and any necessary professional judgment.
In medical, legal, financial, compliance, security, production deployment, data migration, and other high-risk scenarios, AI output should only be used as supporting material, not as the sole basis for decisions.
Users must ensure they have the right to submit relevant data, code, documents, secrets, cloud resources, and third-party materials to Heicode and their chosen model channel.

Third-Party Services & Original Provider Terms

Heicode may call or connect to OpenAI, Anthropic, Google Gemini, Qwen, Alibaba Cloud, cloud services, code hosting services, deployment services, payment services, monitoring services, and other third-party services.
Data processing, retention, training, review, telemetry, support, pricing, quota, and availability rules may vary across providers, plans, regions, authentication methods, APIs, BYOK, proxy, or marketplace channels.
Heicode does not, in this document, commit to any fixed retention period, training policy, ZDR availability, enterprise features, or free/paid behavior of any third-party service.
The terms of service, privacy policy, data processing agreement, usage policy, regional restrictions, fees, and support rules of third-party services are the responsibility of the corresponding third party.
Users using BYOK, a proxy, a cloud marketplace, an enterprise channel, or a self-configured third-party service should confirm they are entitled to use it and accept the data processing, billing, and support rules of the corresponding third-party service.

User Responsibilities

Users may only connect repositories, documents, cloud resources, accounts, SK packages, data, and secrets that they are authorized to use.
Users should protect their account passwords, MFA or verification codes, devices, sessions, API keys, organization invitations, and recovery channels.
Users must not share accounts, sell access, resell credentials, bypass access controls, or bypass approval workflows.
Users must not use Heicode or the underlying model services to engage in illegal activity, unauthorized security testing, data exfiltration, malware, credential theft, infringement, harassment, endangering child safety, evading sanctions, malicious automation, or any use prohibited by a provider's policy.
Before approving production deployments, cloud resource changes, database writes, secret access, external data transfers, or large budget expenditures, users should confirm the resource scope, risks, costs, and execution results.

Service Changes & Availability

Heicode may update features, model routing, the SK library, security controls, pricing, plans, documentation, and service descriptions in response to product iteration, vendor changes, security requirements, compliance requirements, price changes, and operational needs.
Third-party services may independently adjust their terms, models, pricing, regions, retention rules, quotas, interfaces, or availability.
Heicode makes reasonable efforts to maintain service stability, but does not guarantee that all models, third-party services, features, regions, interfaces, or resources will remain continuously available at all times.
Heicode may take necessary measures for planned maintenance, emergency security fixes, third-party service outages, network failures, force majeure, or service changes required by law or regulation.

Limitation of Liability

To the extent permitted by law, Heicode is not liable, beyond what is required by law or a signed agreement, for losses caused by user misconfiguration, improper permission configuration, credential leakage, third-party service changes, third-party service outages, model output errors, failure to perform human review, failure to test, non-compliant use, or use beyond the authorized scope.
Heicode does not provide any guarantee, beyond the official commitments of the third party itself, regarding a third-party service's changes in terms, price changes, service discontinuation, rate limiting, model changes, data processing methods, regional restrictions, review rules, or support capabilities.
Where law or a signed agreement provides otherwise regarding limitation of liability, scope of compensation, or mandatory liability, the corresponding law or agreement shall prevail.

Service Suspension, Restriction & Termination

Heicode may suspend, restrict, or terminate service in cases of illegal activity, violation of model provider policies, unauthorized security testing, data exfiltration, malware, credential theft, fraud, abuse, payment failure, chargebacks, reselling or sharing accounts/credentials, attempts to bypass approval or security controls, requests from a resource owner or administrator, legal orders, immediate security risk, or prolonged dormancy after notice.
If continued access would pose an immediate risk to Heicode, customers, providers, connected resources, or third parties, Heicode may restrict service first, and provide a reasonable review or appeal path where appropriate.
After service suspension, restriction, or termination, secret vault and data retention rules are carried out in accordance with the corresponding Privacy Policy, Secret Vault Notice, order, enterprise agreement, or legal requirements.

Document Updates

Heicode may update this document from time to time to reflect product changes, legal requirements, changes in provider terms, security requirements, and operational rule changes.
After this document is updated, the latest version displayed on the documentation site or website is the current public version.
If an update materially affects user rights or obligations, Heicode will make reasonable efforts to notify users through the product, website, documentation site, email, or an administrator channel.

Legal Notice