Commit36b4cbdunknown_key
feat: Legal framework + legal pages served from website
feat: Legal framework + legal pages served from website Legal documents (attorney-review-ready templates): - Terms of Service: user content ownership, intelligence feature disclaimers, DMCA compliance, limitation of liability, arbitration clause, class action waiver - Privacy Policy: GDPR/CCPA compliant, data collection disclosure, cookie policy (minimal — session only), data retention, user rights (access, deletion, export, portability) - Acceptable Use Policy: prohibited content/activities, enforcement actions - Corporate setup guide: LLC vs C-Corp comparison, trademark filing steps, DMCA agent registration, cost estimates - MIT License for the platform code - Legal pages served at /terms, /privacy, /acceptable-use with markdown rendering - Footer links on every page: Terms, Privacy, Acceptable Use - Copyright notice in footer IMPORTANT: These are templates/deterrents. Attorney review required before launch. The templates save ~$2,000-$4,000 in drafting costs — attorney only needs to review and customize. https://claude.ai/code/session_013wpQ5iX7qU6zy6PrtML3fP
8 files changed+586−136b4cbdb61412f810b22be27191587caedde5fe7
8 changed files+586−1
AddedLICENSE+21−0View fileUnifiedSplit
@@ -0,0 +1,21 @@
1MIT License
2
3Copyright (c) 2026 Gluecron
4
5Permission is hereby granted, free of charge, to any person obtaining a copy
6of this software and associated documentation files (the "Software"), to deal
7in the Software without restriction, including without limitation the rights
8to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9copies of the Software, and to permit persons to whom the Software is
10furnished to do so, subject to the following conditions:
11
12The above copyright notice and this permission notice shall be included in all
13copies or substantial portions of the Software.
14
15THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21SOFTWARE.
Addedlegal/AUP.md+70−0View fileUnifiedSplit
@@ -0,0 +1,70 @@
1# Gluecron Acceptable Use Policy
2
3**Last updated: April 12, 2026**
4
5## Overview
6
7This Acceptable Use Policy ("AUP") applies to all users of Gluecron. Violation
8of this policy may result in suspension or termination of your account.
9
10## Prohibited Content
11
12You may NOT use Gluecron to store, host, or distribute:
13
141. **Malware:** viruses, trojans, ransomware, spyware, or any malicious software
15 designed to harm systems or steal data
16
172. **Stolen content:** code, data, or materials obtained through unauthorized
18 access, hacking, or theft
19
203. **Illegal content:** materials that violate any applicable law, including
21 but not limited to child exploitation material, content promoting terrorism,
22 or materials violating export control laws
23
244. **Infringing content:** code or materials that violate copyright, trademark,
25 patent, or other intellectual property rights of others
26
275. **Sensitive personal data:** Social Security numbers, credit card numbers,
28 medical records, or other regulated personal data (except through
29 purpose-built, encrypted features)
30
31## Prohibited Activities
32
33You may NOT use Gluecron to:
34
351. **Attack other systems:** launch DDoS attacks, port scanning, brute force
36 attacks, or any unauthorized access attempts against third-party systems
37
382. **Mine cryptocurrency:** use our compute resources for cryptocurrency mining
39
403. **Send spam:** use the Service to send unsolicited bulk communications
41
424. **Circumvent security:** attempt to bypass authentication, rate limiting,
43 or other security measures
44
455. **Abuse resources:** use excessive bandwidth, storage, or compute resources
46 in a way that degrades service for other users
47
486. **Impersonate:** create accounts or repositories to impersonate other
49 individuals or organizations
50
517. **Automate abusively:** run automated tools that place excessive load on
52 the Service (reasonable CI/CD and API usage is permitted)
53
54## Reporting Violations
55
56To report a violation of this AUP, contact: [ABUSE EMAIL]
57
58We will investigate reports promptly and take appropriate action.
59
60## Enforcement
61
62We may take any of the following actions in response to violations:
63- Warning
64- Temporary suspension of account or repository
65- Permanent termination of account
66- Removal of content
67- Reporting to law enforcement (for illegal activity)
68
69We strive to provide notice before taking action, except in cases of
70serious or immediate threat.
Addedlegal/PRIVACY.md+129−0View fileUnifiedSplit
@@ -0,0 +1,129 @@
1# Gluecron Privacy Policy
2
3**Last updated: April 12, 2026**
4
5## 1. Introduction
6
7This Privacy Policy describes how [YOUR LEGAL ENTITY NAME] ("Company," "we,"
8"us") collects, uses, and shares information when you use Gluecron ("Service").
9
10## 2. Information We Collect
11
12### 2.1 Information You Provide
13- **Account information:** username, email address, display name, bio
14- **Repository content:** code, files, issues, pull requests, comments
15- **SSH keys:** public keys for authentication
16- **Payment information:** processed by Stripe (we never store card numbers)
17
18### 2.2 Information Collected Automatically
19- **Log data:** IP address, browser type, operating system, referring URL,
20 pages visited, timestamps
21- **Git operations:** push/pull/clone metadata (timestamps, refs, not content)
22- **Usage data:** features used, repository interactions, search queries
23- **Device information:** device type, screen resolution, time zone
24
25### 2.3 Information from Intelligence Features
26- **Code analysis results:** health scores, security scan results, dependency
27 graphs (computed on your code, stored as metadata)
28- **Auto-repair logs:** which repairs were applied and when
29- **Push analysis:** risk scores, breaking change detection results
30
31## 3. How We Use Your Information
32
33We use your information to:
34- Provide, maintain, and improve the Service
35- Process transactions and send related information
36- Send technical notices, updates, and support messages
37- Respond to your comments and questions
38- Provide and improve Intelligence Features (code analysis, auto-repair)
39- Monitor and analyze usage patterns and trends
40- Detect, prevent, and address fraud, abuse, and technical issues
41- Comply with legal obligations
42
43## 4. How We Share Your Information
44
45We do NOT sell your personal information. We may share information:
46
47- **With your consent:** when you explicitly authorize it
48- **Public repositories:** content in public repos is visible to anyone
49- **Service providers:** hosting (Hetzner/cloud), database (Neon), payment
50 (Stripe), email (for transactional emails only)
51- **Integration partners:** GateTest (code scanning), Crontech (deployment)
52 — only repository metadata, not source code content, unless you enable
53 the integration
54- **Legal requirements:** when required by law, subpoena, or court order
55- **Business transfers:** in connection with a merger, acquisition, or sale
56 of assets (with notice to users)
57
58## 5. Data Security
59
60- Passwords are hashed using bcrypt (never stored in plain text)
61- API tokens are hashed using SHA-256
62- Sessions use cryptographically random tokens
63- All connections use HTTPS/TLS encryption
64- Database connections use SSL
65- Webhook payloads use HMAC-SHA256 signatures
66
67## 6. Data Retention
68
69- **Account data:** retained until you delete your account
70- **Repository data:** retained until you delete the repository
71- **Log data:** retained for 90 days
72- **Deleted accounts:** data is purged within 30 days of account deletion
73- **Backups:** may contain deleted data for up to 90 days
74
75## 7. Your Rights
76
77You have the right to:
78- **Access:** request a copy of your personal data
79- **Correction:** update inaccurate information via account settings
80- **Deletion:** delete your account and all associated data
81- **Export:** export your repositories using standard git tools at any time
82- **Objection:** object to processing of your data for specific purposes
83- **Restriction:** request restriction of processing in certain circumstances
84
85### For EU/EEA Users (GDPR)
86- Legal basis for processing: contract performance, legitimate interests,
87 and consent where applicable
88- You may lodge a complaint with your local supervisory authority
89- Data transfers outside the EU are protected by Standard Contractual Clauses
90
91### For California Users (CCPA)
92- You have the right to know what personal information we collect
93- You have the right to request deletion
94- You have the right to opt out of the "sale" of personal information
95 (we do not sell personal information)
96- We will not discriminate against you for exercising your rights
97
98## 8. Cookies
99
100We use minimal cookies:
101- **Session cookie:** required for authentication (httpOnly, secure)
102- We do NOT use tracking cookies, advertising cookies, or third-party
103 analytics cookies
104
105## 9. Children's Privacy
106
107The Service is not intended for children under 13 (or 16 in the EU).
108We do not knowingly collect information from children under these ages.
109
110## 10. International Data Transfers
111
112Your data may be processed in the United States and other countries where
113our service providers operate. We ensure appropriate safeguards are in
114place for international transfers.
115
116## 11. Changes to This Policy
117
118We may update this Privacy Policy from time to time. We will notify you
119of material changes via email or in-app notification at least 30 days
120before they take effect.
121
122## 12. Contact Us
123
124For privacy inquiries:
125- Email: [PRIVACY EMAIL]
126- Address: [COMPANY ADDRESS]
127
128For GDPR inquiries, our Data Protection Contact can be reached at:
129[DPO EMAIL]
Addedlegal/SETUP-GUIDE.md+120−0View fileUnifiedSplit
@@ -0,0 +1,120 @@
1# Gluecron Legal & Corporate Setup Guide
2
3## IMPORTANT DISCLAIMER
4This document provides a starting framework only. It is NOT legal advice.
5You MUST have an attorney review everything before launch. These templates
6give your attorney a head start, which saves you money.
7
8---
9
10## 1. COMPANY STRUCTURE RECOMMENDATION
11
12### Recommended: Delaware C-Corp (if seeking VC/investment)
13- Standard for tech startups
14- Investors expect it
15- Clear equity/stock structure
16- Can issue stock options to future employees
17
18### Alternative: LLC (if bootstrapping)
19- Simpler, cheaper to set up
20- Pass-through taxation (no double tax)
21- Can convert to C-Corp later when raising
22- Good for solo founder getting revenue first
23
24### Action Steps:
251. Register with your state's Secretary of State ($50-$150)
262. Get an EIN from IRS (free, irs.gov, takes 5 minutes)
273. Open a business bank account (keep personal and business separate)
284. If Delaware C-Corp: use Stripe Atlas ($500) or Clerky — they handle everything
29
30---
31
32## 2. KEY AGREEMENTS YOU NEED
33
34### a) Terms of Service (see TERMS.md)
35### b) Privacy Policy (see PRIVACY.md)
36### c) Acceptable Use Policy (see AUP.md)
37### d) DMCA Policy (required for hosting user content)
38### e) Data Processing Agreement (for EU users / GDPR)
39
40---
41
42## 3. INTELLECTUAL PROPERTY PROTECTION
43
44### Trademark
45- File "GLUECRON" as a trademark with USPTO
46- Cost: $250-$350 per class (do Class 42: software services)
47- Can file yourself at trademark.uspto.gov
48- Takes 8-12 months but protection dates back to filing
49
50### Domain Protection
51- Secure: gluecron.com, gluecron.io, gluecron.dev, gluecron.ai
52- Also grab social handles: @gluecron everywhere
53
54### Copyright
55- Your code is automatically copyrighted when written
56- Add copyright headers to source files
57- Register with US Copyright Office for extra protection ($65)
58
59### Patents (later, with attorney)
60- The intelligence layer (auto-repair, health scoring, zero-config CI)
61 may be patentable as novel software methods
62- Provisional patent application: $1,600-$3,000 with attorney
63- Gives you 12 months to file full patent
64
65---
66
67## 4. CRITICAL LEGAL REQUIREMENTS FOR A CODE HOSTING PLATFORM
68
69### DMCA Safe Harbor (MUST HAVE before launch)
70- Register a DMCA agent with the US Copyright Office
71- Cost: $6 per filing
72- Required to get safe harbor protection (you're not liable for
73 what users host on the platform)
74- Register at: https://www.copyright.gov/dmca-directory/
75
76### Section 230 Protection
77- You're a platform, not a publisher
78- Your ToS must make clear users are responsible for their content
79- Don't editorialize or curate user repos (safe harbor)
80
81### GDPR Compliance (if any EU users)
82- Privacy policy must disclose data collection
83- Users must be able to delete their account and data
84- Data processing agreement for business users
85- Appoint data protection contact
86
87### Export Controls
88- Git hosting may trigger export control considerations
89- Block sanctioned countries if needed
90- Include export compliance in ToS
91
92---
93
94## 5. REVENUE PROTECTION
95
96### Pricing Page Legal
97- "Prices subject to change with 30 days notice"
98- Auto-renewal disclosure (required by many states)
99- Refund policy (keep it simple: prorated refunds on annual)
100
101### Payment Processing
102- Use Stripe — they handle PCI compliance
103- Never store credit card numbers yourself
104- Stripe Atlas can also incorporate your company
105
106---
107
108## 6. COST ESTIMATE (DIY + Attorney Review)
109
110| Item | DIY Cost | With Attorney |
111|------|----------|---------------|
112| LLC filing | $50-$150 | $500-$800 |
113| EIN | Free | Included |
114| ToS + Privacy (template) | Free | $1,500-$3,000 review |
115| DMCA agent registration | $6 | $6 |
116| Trademark filing | $250-$350 | $800-$1,500 |
117| Total minimum to launch | ~$300-$500 | ~$3,000-$5,500 |
118
119The templates below save you $2,000-$4,000 in attorney drafting fees.
120Your attorney only needs to REVIEW and CUSTOMIZE, not write from scratch.
Addedlegal/TERMS.md+186−0View fileUnifiedSplit
@@ -0,0 +1,186 @@
1# Gluecron Terms of Service
2
3**Last updated: April 12, 2026**
4
5## 1. Agreement to Terms
6
7By accessing or using Gluecron ("Service"), operated by [YOUR LEGAL ENTITY NAME]
8("Company," "we," "us"), you agree to be bound by these Terms of Service ("Terms").
9If you do not agree, do not use the Service.
10
11## 2. Description of Service
12
13Gluecron is a code intelligence and hosting platform that provides git repository
14hosting, code analysis, continuous integration, and related developer tools.
15
16## 3. Account Registration
17
183.1. You must provide accurate, complete information when creating an account.
193.2. You are responsible for maintaining the security of your account credentials.
203.3. You must be at least 13 years old (16 in the EU) to use the Service.
213.4. One person or entity may not maintain more than one free account.
22
23## 4. User Content
24
254.1. "User Content" means any code, data, text, or other materials you upload,
26submit, or store on the Service.
27
284.2. You retain all ownership rights to your User Content. We do not claim
29ownership over any User Content.
30
314.3. By using the Service, you grant us a limited license to host, store,
32display, and transmit your User Content solely for the purpose of providing
33the Service to you. This license ends when you delete your Content or account.
34
354.4. You are solely responsible for your User Content and the consequences of
36posting or publishing it. We do not endorse or verify User Content.
37
384.5. You represent that you have all necessary rights to upload your User Content
39and that it does not violate any law or third-party right.
40
41## 5. Acceptable Use
42
435.1. You agree to comply with the Acceptable Use Policy (AUP).
44
455.2. You will not use the Service to:
46- Violate any law or regulation
47- Infringe intellectual property rights
48- Distribute malware or malicious code
49- Host content that promotes violence or illegal activity
50- Interfere with or disrupt the Service
51- Attempt to gain unauthorized access to other accounts or systems
52- Use the Service for cryptocurrency mining
53- Store or transmit sensitive personal data (SSNs, credit card numbers)
54 outside of encrypted, purpose-built features
55
56## 6. Automated Intelligence Features
57
586.1. The Service includes automated code analysis features including but not
59limited to: auto-repair, security scanning, health scoring, dependency
60analysis, and push risk analysis ("Intelligence Features").
61
626.2. Intelligence Features are provided "as is" and may modify code in your
63repositories (e.g., auto-repair commits). You can disable any Intelligence
64Feature through your repository settings.
65
666.3. We do not guarantee that Intelligence Features will detect all issues or
67that automated repairs will be correct. You are responsible for reviewing
68all automated changes.
69
706.4. Intelligence Features do not constitute professional security auditing,
71legal compliance verification, or code review services.
72
73## 7. Payment Terms
74
757.1. Certain features may require a paid subscription.
76
777.2. Fees are billed in advance on a monthly or annual basis.
78
797.3. All fees are non-refundable except as required by law or as explicitly
80stated in our refund policy. Annual plans may receive prorated refunds.
81
827.4. We reserve the right to change pricing with 30 days written notice.
83
847.5. Failure to pay may result in suspension or termination of your account.
85
86## 8. Intellectual Property
87
888.1. The Service, including its original content, features, and functionality,
89is owned by the Company and protected by copyright, trademark, and other laws.
90
918.2. "Gluecron" and associated logos are trademarks of the Company.
92
938.3. Nothing in these Terms grants you rights to use our trademarks.
94
95## 9. Privacy
96
97Your use of the Service is governed by our Privacy Policy, which is
98incorporated into these Terms by reference.
99
100## 10. DMCA and Copyright
101
10210.1. We respect intellectual property rights and comply with the Digital
103Millennium Copyright Act (DMCA).
104
10510.2. If you believe content on the Service infringes your copyright, send
106a DMCA takedown notice to: [DMCA AGENT EMAIL]
107
10810.3. Your notice must include:
109- Your contact information
110- Identification of the copyrighted work
111- Identification of the infringing material and its location
112- A statement of good faith belief
113- A statement under penalty of perjury
114- Your physical or electronic signature
115
11610.4. We will respond to valid DMCA notices promptly and may remove or
117disable access to the allegedly infringing content.
118
119## 11. Termination
120
12111.1. You may terminate your account at any time through account settings.
122
12311.2. We may suspend or terminate your account for violation of these Terms,
124with or without notice.
125
12611.3. Upon termination, your right to use the Service ceases immediately.
127We may delete your data after a reasonable retention period (30 days).
128
12911.4. You may export your repositories at any time using standard git tools.
130
131## 12. Disclaimers
132
13312.1. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES
134OF ANY KIND, EXPRESS OR IMPLIED.
135
13612.2. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE,
137OR ERROR-FREE.
138
13912.3. WE DO NOT WARRANT THAT AUTOMATED INTELLIGENCE FEATURES WILL DETECT
140ALL SECURITY ISSUES OR THAT AUTO-REPAIRS WILL BE CORRECT.
141
142## 13. Limitation of Liability
143
14413.1. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY SHALL NOT BE
145LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE
146DAMAGES, OR ANY LOSS OF PROFITS, DATA, OR GOODWILL.
147
14813.2. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID TO US IN
149THE TWELVE (12) MONTHS PRECEDING THE CLAIM.
150
151## 14. Indemnification
152
153You agree to indemnify and hold harmless the Company from any claims, losses,
154or damages arising from your use of the Service, your User Content, or your
155violation of these Terms.
156
157## 15. Dispute Resolution
158
15915.1. These Terms are governed by the laws of [YOUR STATE], USA.
160
16115.2. Any disputes shall be resolved through binding arbitration under the
162rules of the American Arbitration Association, except that either party may
163seek injunctive relief in court.
164
16515.3. CLASS ACTION WAIVER: You agree to resolve disputes individually and
166waive any right to participate in a class action.
167
168## 16. Changes to Terms
169
170We may modify these Terms at any time. We will notify users of material
171changes via email or in-app notification at least 30 days before they
172take effect. Continued use constitutes acceptance.
173
174## 17. Miscellaneous
175
17617.1. These Terms constitute the entire agreement between you and the Company.
17717.2. If any provision is found unenforceable, the remainder stays in effect.
17817.3. Our failure to enforce a right does not waive that right.
17917.4. You may not assign these Terms. We may assign them in connection with
180a merger, acquisition, or sale of assets.
181
182## Contact
183
184[YOUR COMPANY NAME]
185[ADDRESS]
186[EMAIL]
Modifiedsrc/app.tsx+4−0View fileUnifiedSplit
@@ -19,6 +19,7 @@ import contributorRoutes from "./routes/contributors";
1919import healthRoutes from "./routes/health";
2020import insightRoutes from "./routes/insights";
2121import dashboardRoutes from "./routes/dashboard";
22import legalRoutes from "./routes/legal";
2223import webRoutes from "./routes/web";
2324
2425const app = new Hono();
@@ -75,6 +76,9 @@ app.route("/", insightRoutes);
7576// Command center dashboard
7677app.route("/", dashboardRoutes);
7778
79// Legal pages (terms, privacy, AUP)
80app.route("/", legalRoutes);
81
7882// Explore page
7983app.route("/", exploreRoutes);
8084
Addedsrc/routes/legal.tsx+48−0View fileUnifiedSplit
@@ -0,0 +1,48 @@
1/**
2 * Legal pages — Terms, Privacy, AUP served from the website.
3 */
4
5import { Hono } from "hono";
6import { readFileSync } from "fs";
7import { join } from "path";
8import { Layout } from "../views/layout";
9import { renderMarkdown, markdownCss } from "../lib/markdown";
10import { softAuth } from "../middleware/auth";
11import type { AuthEnv } from "../middleware/auth";
12import { html } from "hono/html";
13
14const legal = new Hono<AuthEnv>();
15
16legal.use("*", softAuth);
17
18function serveLegalPage(title: string, filename: string) {
19 return async (c: any) => {
20 const user = c.get("user");
21 let content: string;
22 try {
23 content = readFileSync(
24 join(process.cwd(), "legal", filename),
25 "utf-8"
26 );
27 } catch {
28 content = `# ${title}\n\nThis page is being prepared. Check back soon.`;
29 }
30
31 const rendered = renderMarkdown(content);
32
33 return c.html(
34 <Layout title={title} user={user}>
35 <style>{markdownCss}</style>
36 <div class="markdown-body" style="max-width: 800px; margin: 0 auto">
37 {html([rendered] as unknown as TemplateStringsArray)}
38 </div>
39 </Layout>
40 );
41 };
42}
43
44legal.get("/terms", serveLegalPage("Terms of Service", "TERMS.md"));
45legal.get("/privacy", serveLegalPage("Privacy Policy", "PRIVACY.md"));
46legal.get("/acceptable-use", serveLegalPage("Acceptable Use Policy", "AUP.md"));
47
48export default legal;
Modifiedsrc/views/layout.tsx+8−1View fileUnifiedSplit
@@ -57,7 +57,14 @@ export const Layout: FC<
5757 </header>
5858 <main>{children}</main>
5959 <footer>
60 <span>gluecron — AI-native code intelligence</span>
60 <span>
61 © {new Date().getFullYear()} gluecron — AI-native code intelligence
62 </span>
63 <div style="margin-top: 6px; display: flex; gap: 16px; justify-content: center; font-size: 12px">
64 <a href="/terms" style="color: var(--text-muted)">Terms</a>
65 <a href="/privacy" style="color: var(--text-muted)">Privacy</a>
66 <a href="/acceptable-use" style="color: var(--text-muted)">Acceptable Use</a>
67 </div>
6168 </footer>
6269 </body>
6370 </html>
6471