Terms of Use

01 Acceptance of terms

These Terms of Use ("Terms") constitute a legally binding agreement between you ("User", "you" or "your") and x2y Devs Tools Ltd, a company incorporated in Nairobi, Kenya ("x2y", "we", "us" or "our"), governing your access to and use of the x2y Devs Tools software suite, including but not limited to x2y AV Ultimate, x2y Authenticator, Code Leak Detector, SiteDirective, x2y SDK, x2y Extractor, x2y Devs Pad and x2y GitIgnore Generator (collectively, the "Software"), as well as our documentation, websites at x2ydevs.xyz and sdk.x2ydevs.xyz, and any related services (collectively, the "Services").

By downloading, installing, accessing or using the Software or Services, you represent that you are at least 18 years of age (or the age of legal majority in your jurisdiction), that you have the legal capacity to enter into this agreement, and that you agree to be bound by these Terms. If you are using the Software on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

If you do not agree to these Terms, you must not download, install, access or use the Software or Services. Continued use following any published revision of these Terms constitutes acceptance of the revised Terms.

02 Definitions

03 Licence grant

Subject to your continued compliance with these Terms, x2y grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to download, install and use the Software for your personal or internal business purposes, strictly in accordance with the licence tier applicable to each product.

3.1 Proprietary products

x2y AV Ultimate, x2y Authenticator, Code Leak Detector, SiteDirective, x2y Extractor, x2y Devs Pad and x2y GitIgnore Generator are distributed as proprietary software under a donationware model. As of 1 July 2026, all proprietary products are available at no cost. From 1 September 2026, Code Leak Detector transitions to a one-time paid licence of USD $29 per seat. Copies of Code Leak Detector obtained prior to that date remain free to use indefinitely under the terms in effect at the time of acquisition.

You may install the Software on devices you own or control. You may not rent, lease, sublicense, sell, redistribute or otherwise transfer the Software except as expressly permitted by these Terms or applicable law.

3.2 Open-source components

The x2y SDK is distributed under the MIT Licence. Your use of the x2y SDK is governed by the MIT Licence text accompanying the package, which supersedes these Terms to the extent of any conflict solely with respect to the SDK. Third-party open-source components bundled within the Software (including ClamAV, YARA and their signature databases) are governed by their respective licences, which are reproduced in the documentation accompanying each product.

04 Restrictions

Except as expressly permitted by these Terms or by applicable mandatory law, you agree not to, and not to permit any third party to:

• Reverse-engineer, decompile, disassemble or otherwise attempt to derive the source code of any Proprietary Product, except to the extent required by applicable law for interoperability;
• Modify, adapt, translate or create derivative works based on the Proprietary Software;
• Remove, alter or obscure any copyright, trademark, licence or other proprietary notice contained in the Software;
• Circumvent, disable or interfere with any security, integrity-checking or licence-enforcement mechanism in the Software;
• Use the Software to violate any applicable law, regulation or third-party right, including to distribute malware, conduct unauthorised intrusion, or exfiltrate data you are not authorised to access;
• Resell, sublicense or operate the Software as a managed service for third parties without x2y's prior written consent;
• Use the Software in safety-critical, life-support, military, nuclear or other high-risk applications where failure could lead to death, personal injury or catastrophic damage.

The restrictions in this Section 4 do not apply to the x2y SDK or other Open-Source Components to the extent the applicable open-source licence permits the activity.

05 Pricing and payment

All proprietary products in the x2y suite are offered free of charge from 1 July 2026. Beginning 1 September 2026 at 00:00 East Africa Time (UTC+3), Code Leak Detector will require a one-time licence fee of USD $29 per seat. The fee is payable once per installation; there are no recurring charges, subscriptions or renewal obligations.

Payments, where applicable, are processed through third-party payment providers (itch.io, Microsoft Commerce and others). x2y does not store payment card data. All sales are final unless otherwise required by applicable consumer-protection law. Refund requests, where legally available, must be directed to the relevant distribution channel within the period prescribed by that channel's policy.

x2y reserves the right to change pricing for future releases upon reasonable notice published on the product page and in the changelog. Price changes do not affect copies already acquired under a prior pricing tier.

06 Privacy and telemetry

x2y is engineered around a zero-telemetry architecture. The Software does not collect, transmit, store or process Telemetry of any kind. Specifically:

• No analytics, crash reports, usage metrics, device fingerprints or diagnostic payloads are transmitted from the Software to x2y or any third party;
• No account, registration, email address or authentication is required to download, install or use any product in the suite;
• User Data — including files scanned by Code Leak Detector, archives opened by x2y Extractor, repositories analysed by x2y GitIgnore Generator, secrets stored in x2y Authenticator, and traffic observed by the x2y SDK — is processed entirely on your device and never leaves it as a result of the Software's operation;
• Distribution channels (Microsoft Store, itch.io, Uptodown, APKPure, npm, GitHub) may collect their own data pursuant to their respective privacy policies, over which x2y has no control.

The only network activity generated by the Software is the activity you explicitly initiate — for example, API calls made by your own application through the x2y SDK, or websites crawled by SiteDirective at your direction. x2y does not observe, log or receive this traffic.

For full details, see our Privacy Policy.

07 Updates and support

x2y may, from time to time, release updates, patches, security fixes and new versions of the Software. Updates distributed through the Microsoft Store are delivered automatically by that platform. Updates distributed through itch.io, GitHub and other channels are available at your discretion; the Software does not download or apply updates without your explicit action.

x2y provides best-effort community support through GitHub issues, the documentation portal and the support email address listed in Section 17. Support is provided on an as-available basis and does not constitute a service-level commitment. x2y is not obligated to provide updates, bug fixes, continued availability or backward compatibility for any version of the Software, except as required by applicable law.

08 Intellectual property

The Software, Services, documentation, trademarks, logos, interface designs and underlying technology are owned by x2y Devs Tools Ltd or its licensors and are protected by Kenyan and international copyright, trademark, patent and other intellectual-property laws. Nothing in these Terms transfers any ownership interest in the Software or Services to you; you receive only the limited licence described in Section 3.

The "x2y", "x2y Devs Tools", "AV Ultimate", "SiteDirective" and associated logos are trademarks of x2y Devs Tools Ltd. You may not use these marks except as expressly permitted by these Terms or with x2y's prior written consent. Third-party trademarks referenced in the Software or documentation (including ClamAV, YARA, Gitleaks, TruffleHog, Microsoft, itch.io and others) are the property of their respective owners and are used here solely for identification.

You retain all rights, title and interest in your User Data. x2y claims no ownership over User Data and, because the Software processes User Data locally without transmission, x2y has no technical ability to access, copy or use it.

09 Disclaimer of warranties

Without limiting the foregoing, x2y does not warrant that the Software will detect every secret, threat, vulnerability or broken link; that the Software will be uninterrupted, error-free, secure or free from malicious code introduced by third parties; that the Software will meet your requirements; or that any defects will be corrected. Security tools, including x2y AV Ultimate and Code Leak Detector, are aids to — not substitutes for — a comprehensive security programme.

Some jurisdictions do not allow the exclusion of implied warranties, so the above exclusions may not apply to you in full. In such jurisdictions, x2y's warranties are limited to the minimum extent required by law.

10 Limitation of liability

x2y's aggregate liability arising out of or relating to these Terms, the Software or the Services — whether in contract, tort or otherwise — is limited to the greater of (a) the amount you actually paid to x2y for the specific Software giving rise to the claim in the twelve (12) months preceding the event, or (b) USD $50. Where no payment has been made (as is the case for all free-tier products), the limit is USD $50.

The limitations in this Section 10 do not apply to liability that cannot be lawfully limited under applicable law, including liability for death or personal injury caused by negligence, fraud, or gross misconduct.

11 Indemnification

You agree to indemnify, defend and hold harmless x2y, its directors, officers, employees, agents and affiliates from and against any and all claims, liabilities, damages, losses, costs and expenses (including reasonable legal fees) arising out of or relating to: (a) your use of the Software or Services in violation of these Terms or applicable law; (b) your violation of any third-party right, including intellectual-property, privacy or contractual rights; (c) any User Data you process using the Software; or (d) your negligence, fraud or wilful misconduct.

12 Termination

These Terms remain in effect until terminated by either party. You may terminate these Terms at any time by uninstalling and destroying all copies of the Software in your possession or control. x2y may terminate or suspend your licence immediately, without prior notice, if you materially breach these Terms, if required by law, or if x2y ceases to offer the Software.

Upon termination, your licence to use the Proprietary Software ceases immediately and you must uninstall and destroy all copies. Sections 2, 4, 6, 8, 9, 10, 11, 13, 14, 15 and 16 survive termination. Termination does not affect any rights you hold in Open-Source Components under their respective licences, nor any refund rights mandated by applicable law.

13 Export compliance

The Software may be subject to export-control laws and regulations of Kenya, the United States and other jurisdictions. You represent that you are not located in, organised under the laws of, or ordinarily resident in any country subject to comprehensive trade sanctions, and that you are not listed on any government denied-party list. You agree not to export, re-export, transfer or disclose the Software except in compliance with all applicable export-control laws.

Code Leak Detector and x2y AV Ultimate include cryptographic functionality (AES-256 archive handling and signature verification). You are responsible for complying with any local restrictions on the import, possession or use of cryptographic software.

14 Governing law and dispute resolution

These Terms are governed by and construed in accordance with the laws of the Republic of Kenya, without regard to its conflict-of-law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Any dispute, controversy or claim arising out of or relating to these Terms, the Software or the Services — including questions of existence, validity, breach or termination — will first be attempted to be resolved through good-faith negotiation for a period of thirty (30) days following written notice from the aggrieved party. If negotiation fails, the dispute will be finally resolved by arbitration administered under the rules of the Nairobi Centre for International Arbitration (NCIA), by a single arbitrator appointed in accordance with those rules. The seat of arbitration is Nairobi, Kenya, and the language of the proceedings is English. The arbitral award is final and binding.

Nothing in this Section 14 prevents either party from seeking injunctive or other equitable relief in a court of competent jurisdiction to protect its intellectual-property rights or confidential information, nor does it waive any non-waivable consumer rights under the law of your habitual residence.

15 Changes to these terms

x2y may revise these Terms from time to time to reflect changes in the Software, business practices, legal requirements or industry standards. When we make material changes, we will update the "Effective" date at the top of this page, publish a notice in the product changelog, and, where practicable, surface an in-product notice on next launch. Material changes that reduce your rights will, where required by law, be accompanied by an opportunity to review and, if you do not accept, to cease use and request a refund within the statutory period.

Your continued use of the Software or Services after the effective date of any revision constitutes acceptance of the revised Terms. Prior versions of these Terms are archived and available on request.

16 General provisions

• Entire agreement. These Terms, together with the Privacy Policy and any product-specific licence notices, constitute the entire agreement between you and x2y regarding the Software and Services, and supersede all prior or contemporaneous communications, proposals or representations, oral or written.
• Severability. If any provision of these Terms is held invalid, illegal or unenforceable by a tribunal of competent jurisdiction, the remaining provisions remain in full force and effect, and the invalid provision is reformed to the minimum extent necessary to make it valid and enforceable while preserving its intent.
• Waiver. No failure or delay by x2y in exercising any right, power or remedy under these Terms operates as a waiver, nor does any single or partial exercise preclude further exercise of that or any other right.
• Assignment. You may not assign or transfer these Terms or your licence without x2y's prior written consent. x2y may assign these Terms freely, including in connection with a merger, acquisition, reorganisation or sale of assets. Any attempted assignment in violation of this clause is void.
• No agency. Nothing in these Terms creates a partnership, joint venture, agency or employment relationship between you and x2y.
• Force majeure. Neither party is liable for delay or failure in performance caused by events beyond its reasonable control, including acts of God, war, terrorism, strikes, internet outages, governmental action or pandemics.
• Notices. Notices to x2y under these Terms must be sent to the contact address in Section 17 and are deemed received on the second business day after dispatch. Notices to you may be sent to any email address you provide or posted on the product page or documentation portal.
• Language. The English version of these Terms is the authoritative version. Translations, if provided, are for convenience only and do not prevail over the English text in the event of inconsistency.

17 Contact

Questions about these Terms, licence enquiries, legal notices and takedown requests should be directed to the contacts below. We aim to acknowledge legal correspondence within five (5) business days.