Effective date: 18 July 2026.
1. Agreement and Acceptance
These Terms of Use (the "Terms") are a binding agreement between TaskGoblin Limited ("TaskGoblin", "we", "us") and the organisation or person using the Services (the "Customer", "you"). You accept the Terms by creating an account, connecting an integration, or using the Services. If you accept on behalf of an organisation, you represent that you have authority to bind that organisation, and "you" refers to it. The Services are intended for business and professional use, and you must be at least 16 years old to use them.
2. Definitions
- Services — the TaskGoblin platform: an AI coding-agent service that, when triggered from a connected tool, (a) reviews merge/pull requests and posts findings, and (b) autonomously writes code in an isolated sandbox, commits, pushes, and opens merge/pull requests.
- Agent — the automated AI worker (including the
taskgoblin[bot]and@taskgoblinidentities) acting on your repositories and connected tools. - Review Output — findings, inline comments, severity and category classifications, suggested code changes, and merge/pull-request description summaries the Agent produces when reviewing. Review Output is advisory only.
- Generated Code — code, commits, branches, and merge/pull requests the Agent writes and pushes.
- Output — Review Output and Generated Code, collectively.
- Organisation — your tenant on the platform; the billable unit.
- Customer Data — everything you route to the Services: repository contents, issues, comments, merge/pull-request discussions, Slack messages, instructions, and account data.
- Third-Party Platforms — GitLab, GitHub, Linear, Slack, and other services you connect.
3. Provision of the Services; Accounts
We grant you a non-exclusive, non-transferable right to use the Services for your internal business purposes during your subscription. Sign-in is via GitLab or GitHub OAuth; you are responsible for the security of those accounts, for your credentials (password, two-factor authentication, passkeys), and for all activity under your Organisation. You must keep your account information accurate. The Services are under active development: we may update them continuously, and features may change or be offered in beta form, in which case they are provided as-is.
4. Third-Party Platform Authorisations
By connecting a Third-Party Platform you authorise TaskGoblin to act on your behalf through that platform's API using the OAuth or App scopes you grant — including reading repositories and issues, cloning code, creating branches, pushing commits, opening and commenting on merge/pull requests, posting inline review comments, editing merge/pull-request descriptions, assigning the Agent as a reviewer, updating issues, and posting messages — whenever the Agent is triggered by your configuration or activity (assigning an issue to the Agent, @taskgoblin mentions, labels, automatic merge/pull-request review, loops). You, not TaskGoblin, are responsible for (a) having the rights to grant that access (for example to organisation-owned repositories), (b) your configuration of triggers — including loops that run without a human in the loop — and (c) complying with each Third-Party Platform's own terms. Disconnecting an integration revokes our access going forward.
Automatic review
Once a git integration is connected, the Agent automatically reviews every merge/pull request that is opened, reopened, or updated with new commits, across all repositories that integration covers, with no further per-request or per-repository opt-in. On GitLab, we register a webhook on every project in the connected namespace; on GitHub, we cover every repository the App installation grants. The way to control review scope is the scope of the connection itself — which namespace or installation you connect, and which repositories the GitHub App may access — or disconnecting the integration. The Agent posts under its own bot identity, may add itself as a reviewer on GitLab, and edits the merge/pull-request description to carry its summary. It never approves or requests changes and does not gate your merge process.
Auto-fix
Replying @taskgoblin fix to one of the Agent's review comments authorises it to commit and push a fix directly to that merge/pull request's branch using your Organisation's connected credentials. This is the one review-initiated action that modifies your code.
5. AI Processing; LLM Providers
The Agent is powered by third-party large-language-model providers (currently Anthropic, OpenAI, and Google). To perform a run — review and code-writing alike — the Agent clones the repository and has access to the full working tree, not merely the diff under review, and transmits the code, issue text, and conversation context it reads to the applicable provider. By triggering the Agent you instruct and authorise this processing. TaskGoblin does not use Customer Data to train artificial-intelligence models.
6. Output — Ownership and Responsibility
As between you and TaskGoblin, you own the Output, and TaskGoblin assigns to you any interest it may have in it. AI systems may generate similar output for other customers; you receive no rights in another customer's output.
Generated Code. You are solely responsible for reviewing, testing, and approving Generated Code before merging or deploying it. It is produced by AI without human review by TaskGoblin and may be incorrect, insecure, non-functional, or unsuitable, and may carry third-party licence obligations if it resembles existing code. Merging is your decision and your risk.
Review Output. Review Output is advisory and not exhaustive. Although the Agent classifies findings by category — including security — and severity, a review is not a security audit, penetration test, or compliance assessment. The absence of a finding is not an assurance that a defect, vulnerability, or licence problem does not exist; findings may be wrong, duplicative, or irrelevant; suggested changes are proposals you must evaluate. You remain responsible for your own code quality, security, and review obligations, and nothing in the Services substitutes for human review.
7. Acceptable Use
You must not: use the Services for unlawful purposes; submit infringing or harmful content, or data you lack the rights to submit; reverse engineer or scrape the Services; circumvent usage limits or organisation isolation; or use the sandbox for anything other than the Agent's work on your repositories (no cryptomining, attack tooling, or spam). Do not route special categories of personal data through the Services (such as health, financial-account, government-identifier, or children's data) — the platform is not designed or certified for it. We may suspend access for violations, abuse, or credible security risk.
8. Fees, Subscriptions, and Usage Limits
Paid plans (currently Pro and Max, monthly or yearly) are billed per Organisation in advance through Stripe and renew automatically until cancelled. You may cancel at any time via the billing portal, effective at the end of the current billing period; there are no refunds for partial periods except where required by law. Upgrades and downgrades are prorated per Stripe's mechanics. A Free plan exists with limited usage. All plans are subject to fair-use and usage limits; we may throttle or pause Agent runs when limits are exceeded. Prices may change with at least 30 days' notice, effective at your next renewal. Taxes are your responsibility. Payment card data is handled by Stripe and never stored by TaskGoblin.
9. Term, Suspension, and Termination
These Terms apply while your account exists. You may terminate by cancelling your subscriptions and deleting your Organisation and account. We may suspend the Services immediately for security, abuse, non-payment, or legal requirement, and may terminate for material breach that remains uncured 30 days after notice. On termination, integration tokens are revoked and deleted, sandboxes are destroyed, and Organisation data is deleted or scheduled for deletion as described in the Privacy Policy. Sections that by their nature survive termination (including intellectual property, disclaimers, limitation of liability, and governing law) survive.
10. Intellectual Property
TaskGoblin owns the Services, the underlying software, and its branding. You own Customer Data and grant TaskGoblin a limited licence to process it solely to provide the Services. You may give us feedback, which we may use without obligation. TaskGoblin may use aggregated, de-identified usage data (such as token usage and run statistics) to operate and improve the Services.
11. Confidentiality and Data Protection
Each party will protect the other's non-public information. Your code is treated as confidential and disclosed only as needed to provide the Services (sandbox infrastructure, LLM providers, and the subprocessors listed in the Privacy Policy) or as required by law, with notice where lawful. Personal data handling is governed by the Privacy Policy.
12. Disclaimers
The Services are provided "as is" and "as available". We do not warrant that Output is accurate, secure, complete, or fit for any purpose — AI systems produce unexpected results — nor that the Services will be uninterrupted, since they depend on Third-Party Platforms and LLM providers we do not control.
13. Indemnification
You will indemnify TaskGoblin against claims arising from Customer Data, your use of Output, your breach of these Terms, or your violation of a Third-Party Platform's terms. TaskGoblin will indemnify you against third-party claims that the Services as such (excluding Customer Data, Output, and third-party components) infringe intellectual-property rights; as remedies we may modify or replace the Services, or refund prepaid fees.
14. Limitation of Liability
Neither party is liable for indirect or consequential damages, including lost data, lost profits, and the consequences of merging or deploying Output. TaskGoblin's total liability is capped at the fees you paid in the 12 months preceding the claim, or US$100 if you are on the Free plan. These limits do not apply where the law does not allow them to be limited.
15. Marketing
We may identify you by name and logo as a TaskGoblin customer unless you opt out by written notice.
16. General
These Terms are governed by the laws of New Zealand, and disputes are subject to the exclusive jurisdiction of the courts of New Zealand. We may update these Terms; for material changes we will give notice by email or in-product, and continued use after the effective date constitutes acceptance. You may not assign these Terms without our consent. These Terms are the entire agreement regarding the Services; if a provision is unenforceable, the rest remains in effect, and a failure to enforce is not a waiver. Notices to TaskGoblin go to [email protected]; notices to you go to your account email. These Terms are published in several languages; the English version controls.