LEGAL

Terms and Conditions

Last updated: 19 August 2026

Important summary

VibeSweeper provides an independent review of a single software code repository. Our report contains opinions, findings, and recommendations across seven defined review sections.

A VibeSweeper review is not a comprehensive audit, certification, or guarantee. We may not identify every issue, our findings may not be conclusive, and we cannot guarantee that changes made in response to our recommendations will resolve every issue or achieve a particular result.

We may cancel a review and refund the fee if the supplied repository is too large, inaccessible, unsafe, incomplete, or otherwise unsuitable for the service.

An optional second sweep may be purchased separately within six months after delivery of the initial report. It assesses like-for-like functionality. New or materially changed functionality is outside its scope unless agreed separately and may incur an additional fee.

The remainder of these terms provides further information and forms part of the contract.

1. About VibeSweeper

VibeSweeper is a trading name of:

Neon Mountain Ltd
Company number: 14814912
Registered address: 9–10 Cross Street, Preston, PR1 3LT
Email: support@neonmountain.co.uk

In these terms, “VibeSweeper”, “Neon Mountain”, “we”, “us”, and “our” refer to Neon Mountain Ltd.

2. About these terms

These terms apply whenever a customer purchases a VibeSweeper initial review or second sweep.

By placing an order, the customer confirms that they have read and accepted these terms. A contract is formed when we send an order confirmation.

If an order confirmation expressly conflicts with these terms, the order confirmation takes priority to the extent of that conflict.

A “consumer” is an individual purchasing the service wholly or mainly for purposes outside their trade, business, craft, or profession. A “business customer” is any other customer.

3. The initial review

The initial review consists of our assessment of the repository and delivery of the written report. Once the report has been delivered, the initial review has been fully performed.

Following delivery, we also offer one complimentary wash-up call to discuss the report. The call is optional, has no separate monetary value, and is not part of the paid review service. Not holding or attending the call does not prevent the initial review from being complete.

The report is organised into these seven sections:

1. Architecture & Structure
2. Security & Access
3. Data & Integrity
4. Code Health & Maintainability
5. Testability
6. Production Readiness
7. Sweep Plan

The Sweep Plan prioritises or summarises recommended actions arising from the other sections. It does not expand the review beyond the seven sections.

The initial review costs:

• £499 excluding VAT for business customers; or
• £598.80 including VAT for consumers.

The initial review fee does not include a second sweep.

4. Services not included

Unless expressly agreed in writing, the review does not include:

• changing, repairing, deploying, or operating the customer’s software;
• implementing or supervising recommendations;
• continuous monitoring or support;
• penetration testing or formal security certification;
• testing live infrastructure or systems;
• examining data, configurations, services, integrations, or infrastructure not contained in or reasonably evidenced by the repository;
• reviewing more than one repository;
• guaranteeing legal, regulatory, or industry compliance; or
• providing legal, financial, regulatory, insurance, medical, engineering, or other regulated professional advice.

5. Supplying the repository

We will discuss with the customer an appropriate method for granting access to or securely sharing the repository.

The customer must provide timely access to a single repository and any credentials, documentation, configuration information, or reasonable explanations needed to understand it.

Unless agreed otherwise in writing, an order covers only one repository. A repository containing multiple materially separate products or codebases may be treated as more than one repository.

The customer must ensure that:

• they own the repository or have authority to provide it to us;
• we are permitted to access and analyse it;
• our review will not breach any obligation owed to another person;
• any information and access supplied are accurate, current, and reasonably complete;
• the repository does not knowingly contain malicious material intended to harm our systems or personnel; and
• they are authorised to provide any personal data or other protected material contained in it.

The customer should remove unnecessary personal data, production data, passwords, private keys, access tokens, credentials, and other secrets before providing access.

We may pause the review and ask the customer to remove or replace sensitive information or remedy an access problem.

6. Repository suitability and our right to cancel

The VibeSweeper service is designed for repositories that can reasonably be assessed using our standard review process.

We may decline, pause, or cancel a review if we reasonably determine that the repository:

• is too large or complex for the service purchased;
• is inaccessible or cannot be processed using our available review methods;
• is incomplete, corrupted, encrypted, or substantially composed of generated or compiled files;
• contains malicious, unlawful, or unsafe material;
• requires unsupported credentials, tools, systems, infrastructure, or specialist expertise;
• contains multiple repositories, products, or materially separate codebases;
• cannot be reviewed safely or lawfully;
• differs materially from how it was described when the order was placed; or
• is otherwise unsuitable or unusable for a VibeSweeper review.

If we cancel for one of these reasons, we will notify the customer and refund the review fee paid, including where work has already begun. This refund will be the customer’s remedy for cancellation under this section, except where applicable law requires otherwise.

Instead of cancelling, we may offer a revised service, scope, timescale, or price. The customer does not have to accept that offer, and we will not charge an additional amount without the customer’s express agreement.

7. Delivery estimate

We aim to deliver the initial report within five working days after receiving usable access to the repository and any information reasonably required to begin.

This is an estimate rather than a guaranteed deadline.

Working days are Monday to Friday, excluding bank and public holidays in England.

The estimated period does not begin until:

• payment has been received;
• we have usable access to the repository; and
• the customer has provided any information reasonably required to begin.

We are not responsible for delays caused by incomplete or late access, missing information, repository problems, customer changes, third-party systems, or circumstances outside our reasonable control.

If a material delay occurs, we will notify the customer and provide a revised estimate.

8. Nature and limitations of the review

We will perform the review with reasonable care and skill.

Our findings and recommendations represent our professional views based on:

• the repository and information made available to us;
• the seven review sections;
• the condition of the repository at the time of review;
• the access, tools, and review methods reasonably available to us; and
• the practical and time limitations of the service.

Software review involves judgement and has inherent limitations. Therefore:

• findings are opinions and may not be definitive or conclusive;
• reasonable reviewers may reach different conclusions;
• the absence of a finding does not mean that an issue does not exist;
• we do not guarantee that every error, defect, vulnerability, data risk, architectural problem, maintainability concern, or production issue will be identified;
• findings may be affected by code, data, configuration, infrastructure, dependencies, integrations, or runtime behaviour that are not visible in the repository;
• automated or AI-assisted analysis may produce incomplete or inaccurate results, which we will assess using reasonable professional judgement;
• the repository may change after it has been reviewed; and
• a finding that was accurate when made may later become incomplete or outdated.

The review is not a warranty or guarantee that the software is secure, error-free, compliant, suitable for production, or fit for any particular purpose.

9. Acting on our findings

The customer is responsible for deciding whether, when, and how to act on each finding or recommendation.

Before making or deploying changes, the customer should:

• assess whether the recommendation is appropriate for its circumstances;
• use appropriately qualified people;
• maintain appropriate backups and recovery arrangements;
• test the change in a suitable environment;
• consider its effect on security, data, users, dependencies, integrations, and production systems; and
• obtain specialist professional advice where appropriate.

We do not guarantee that:

• implementing a recommendation will completely resolve the relevant issue;
• implementing all recommendations will resolve every issue in the code;
• a recommendation will be suitable in every technical or commercial context;
• a change will not introduce regressions, incompatibilities, vulnerabilities, data loss, or other unintended consequences; or
• the software will achieve any particular level of security, performance, reliability, maintainability, or production readiness.

Unless separately agreed in writing, we are not responsible for implementing, approving, supervising, or testing changes made in response to the review.

10. Optional second sweep

A customer may purchase an optional second sweep at any time during the six months following delivery of the initial report.

The second sweep is a separate service and separate contract. It costs:

• £299 excluding VAT for business customers; or
• £358.80 including VAT for consumers.

We aim to complete the second sweep within five working days after receiving payment, usable repository access, and any information reasonably required. This is an estimate rather than a guaranteed deadline.

The purpose of the second sweep is to assess relevant changes made in response to the initial report. It is a targeted follow-up assessment and not a new full review. It does not necessarily repeat every aspect of the initial review.

The second sweep is limited to:

• the same repository;
• substantially the same functionality considered during the initial review; and
• changes reasonably connected with the initial findings and recommendations.

Any feature, integration, service, architectural component, workflow, or other functionality introduced or materially expanded after the initial review is outside the scope of the second sweep unless we agree otherwise in writing.

Where new or materially changed functionality can reasonably be separated, we may exclude it from the second sweep. If it materially increases the work required or prevents a meaningful like-for-like assessment, we may:

• offer to review the additional work for a further fee;
• propose a new initial review instead of a second sweep; or
• decline the second-sweep order and refund any second-sweep fee already paid.

We will explain any proposed additional work and price before undertaking it. The customer is not required to purchase it.

The right to purchase a second sweep expires six months after delivery of the initial report. After that date, we may require the customer to purchase a new initial review.

All limitations and customer responsibilities in these terms apply separately to the second sweep.

11. Use of AI and external services

We may use a combination of human review, locally operated tools, local AI models, and cloud-based AI services to help analyse the repository and prepare the report.

Cloud-based AI services may include OpenAI’s ChatGPT and Anthropic’s Claude. We may use whichever models are current and reasonably appropriate when the review is performed.

Where customer code is processed using a cloud-based AI service, we will use an account, service, or configuration under which submitted material is not used to train the provider’s general-purpose models.

We may change the particular tools or models used without notifying the customer, provided that the replacement offers reasonably appropriate confidentiality and data-use protections.

The customer acknowledges that:

• repository content may be processed by these providers for the purpose of supplying the review;
• provider infrastructure may process or store information outside the United Kingdom;
• no automated or AI system is completely accurate or secure; and
• our use of an AI tool does not remove our obligation to perform the service with reasonable care and skill.

Customers must not include unnecessary personal data, credentials, secrets, or production data in the repository.

Our use of personal data is also governed by our privacy notice.

12. Confidentiality and security

We will treat non-public source code and confidential information supplied for a review as confidential.

We will use that information only as reasonably necessary to:

• provide and administer the service;
• operate and secure our systems;
• comply with legal obligations or binding requests from competent authorities;
• establish, exercise, or defend legal rights; and
• create properly anonymised or aggregated material as described in section 15.

We may provide access to employees, contractors, hosting providers, AI providers, and other service providers where reasonably necessary to supply the service. Appropriate confidentiality or data-protection arrangements will apply.

We will use reasonable technical and organisational measures to protect customer materials. However, no storage, processing, or transmission method is completely secure.

Nothing in these terms transfers ownership of the customer’s repository or source code to us.

13. Repository retention and deletion

We may create a local copy of the repository and retain working materials while providing the service.

We will delete local repository copies after the wash-up call or 30 days after delivery of the initial report, whichever occurs first.

If a second sweep is purchased, the customer may need to provide access to the repository again. We will delete local copies used for the second sweep no later than 30 days after delivery of the second-sweep findings.

Deletion from routine backups may occur later as part of the applicable backup rotation. Backup copies will remain protected and will not be used for any new purpose.

We may retain:

• the final report;
• customer communications;
• invoices and transaction records;
• records of the terms accepted;
• limited security or audit records; and
• properly anonymised or aggregated findings.

These records may be retained where reasonably necessary for customer support, legal, accounting, security, insurance, or dispute-resolution purposes.

The customer remains responsible for maintaining its own repository, version history, backups, and recovery arrangements.

14. Payment

The full fee must be paid online and in advance.

We are not required to reserve capacity or begin work until payment has been received in cleared funds.

No additional fee will be charged without the customer’s express agreement.

15. Reports, intellectual property, and anonymised marketing

The customer retains ownership of its repository, software, data, documentation, and other materials.

We retain ownership of our pre-existing and underlying methodologies, processes, templates, tools, know-how, and general review techniques.

Once the applicable fee has been paid, the customer may use, copy, adapt, publish, and share the report as it wishes.

The customer must not:

• present the report as a formal certification, warranty, regulatory approval, or guarantee from VibeSweeper;
• alter or quote the report in a way that materially misrepresents our findings; or
• use our name, logo, or trade marks in a way that falsely suggests endorsement of the customer or its software.

We may use findings, themes, statistics, examples, and extracts derived from a review for marketing, education, social-media posts, videos—including YouTube videos—case studies, service improvement, and similar purposes, provided that the material has been anonymised.

Unless the customer separately agrees otherwise, we will not publish:

• the customer’s identity;
• the name of the repository, product, or project;
• identifiable source code;
• credentials, secrets, or personal data; or
• information that would reasonably enable someone to identify the customer or its repository.

Nothing prevents us from using general knowledge, skills, experience, and techniques retained through performing the review, provided we do not disclose confidential or identifiable customer information.

16. Customer cancellation

16.1 Business customers

A business customer may ask to cancel by emailing support@neonmountain.co.uk.

The fee is refundable if cancellation is received before we begin work. Once work has begun, the fee is non-refundable.

This does not affect:

• our obligation to refund the fee if we cancel under section 6;
• any remedy arising from our breach of contract; or
• any right that cannot lawfully be excluded.

16.2 Consumers

A consumer who orders online or through another distance-selling method will normally have the right to cancel within 14 days after the contract is formed, without giving a reason.

We will not begin work during that period unless the consumer expressly asks us to begin early.

If the consumer expressly asks us to begin during the cancellation period and then cancels before the service has been fully performed, we may charge a reasonable amount proportionate to the service supplied before we received the cancellation.

The consumer will lose the right to cancel once the purchased service has been fully performed, provided that:

• the consumer expressly requested that we begin during the cancellation period; and
• the consumer acknowledged that the cancellation right would be lost upon full performance.

For an initial review, full performance occurs when we have completed the review and delivered the initial report.

A second sweep is a separate contract and carries a separate cancellation period where applicable. We will obtain a new early-start request and acknowledgement if a consumer asks us to begin it within that period.

To cancel, the consumer must send a clear statement to support@neonmountain.co.uk. The model cancellation form at the end of these terms may be used but is not compulsory.

Nothing in this section affects a consumer’s rights where a service is not supplied with reasonable care and skill, is not as described, or otherwise fails to comply with applicable law.

17. Our cancellation rights

In addition to section 6, we may suspend or cancel the service if:

• the customer materially breaches these terms;
• the customer does not provide required access or information;
• continuing would be unlawful or unsafe;
• the repository or customer activity presents a material security risk; or
• the customer infringes or appears likely to infringe another person’s rights.

Where reasonably possible, we will give the customer an opportunity to correct the issue before cancelling.

If we cancel because of the customer’s material breach after work has begun, any refund will be subject to applicable law and may be reduced to reflect work already performed and costs reasonably incurred.

18. Liability

Nothing in these terms excludes or restricts liability for:

• death or personal injury caused by negligence;
• fraud or fraudulent misrepresentation;
• breach of a liability that cannot lawfully be excluded or restricted; or
• a consumer’s statutory rights or remedies.

18.1 Consumers

We are responsible for loss a consumer suffers that is a foreseeable result of our breach of these terms or our failure to use reasonable care and skill.

We are not responsible for:

• loss that was not foreseeable when the contract was formed;
• business loss suffered by a consumer, including loss of profit, revenue, business, opportunity, anticipated savings, or goodwill;
• loss caused by use of the report outside its intended purpose or limitations;
• loss caused by inaccurate, incomplete, or withheld information or access; or
• loss caused by implementation decisions or work undertaken by the customer or another person, except to the extent caused by our failure to use reasonable care and skill.

Nothing in this section affects rights or remedies that a consumer cannot lawfully waive.

18.2 Business customers

Subject to the exclusions at the beginning of this section, we will not be liable to a business customer for:

• loss of profit, revenue, business, contracts, anticipated savings, goodwill, reputation, or opportunity;
• loss, corruption, compromise, or restoration of data;
• business interruption;
• loss arising from changes made in response to a finding or recommendation;
• loss arising from an issue not identified during a review; or
• indirect or consequential loss.

Subject to the exclusions at the beginning of this section, our total aggregate liability arising from or connected with a service, whether in contract, tort—including negligence—misrepresentation, restitution, breach of statutory duty, or otherwise, will not exceed the fee paid to us for the affected service, excluding VAT.

The initial review and any separately purchased second sweep are separate services for the purpose of this liability cap.

The exclusions and limitations in this section apply only to the extent permitted by law.

19. Third-party reliance

The report is prepared for the customer that commissioned it.

The customer may share or publish the report, but doing so does not create a contractual relationship, duty of care, or other responsibility between us and another person.

No third party is entitled to rely on the report without our prior written consent. We accept no responsibility to an unauthorised third party except where the law does not permit that responsibility to be excluded.

20. Complaints and factual corrections

Questions, complaints, and requests to correct possible factual errors should be sent to support@neonmountain.co.uk.

The customer should identify the relevant part of the report and provide enough information for us to investigate.

Where applicable law requires us to repeat or correct a service, reduce the price, or provide a refund, nothing in these terms restricts that right.

21. Events outside our control

Neither party will be responsible for delay or failure caused by circumstances outside its reasonable control.

This does not excuse the customer’s obligation to pay for a service already properly supplied.

If circumstances outside our control prevent us from providing the service for a prolonged period, either party may end the affected contract. We will refund amounts paid for parts of the service that have not been supplied.

22. Changes to these terms

The version accepted when the customer places an order applies to that order.

We may update these terms for future orders. We will not retrospectively change the terms of an existing order without the customer’s agreement, except where required by law and where the change does not materially disadvantage the customer.

23. General provisions

If any provision is found to be unlawful or unenforceable, the remaining provisions will continue in effect.

A delay in enforcing a right does not waive that right.

The customer may not transfer the contract without our written consent. We may transfer the contract as part of a genuine transfer of our business, provided this does not reduce a consumer’s rights.

No person other than the customer and Neon Mountain Ltd has a right to enforce these terms, except where expressly stated otherwise.

24. Governing law and courts

These terms and each contract formed under them are governed by the law of England and Wales.

If the customer is a consumer, they may bring proceedings in the courts available to them under applicable law. Consumers living in Scotland or Northern Ireland retain any mandatory protections that apply where they live.

If the customer is a business, the courts of England and Wales will have exclusive jurisdiction over disputes or claims arising from the contract.

25. Model consumer cancellation form

Complete and return this form only if you are a consumer and wish to cancel during the statutory cancellation period.

To:
Neon Mountain Ltd
9–10 Cross Street
Preston
PR1 3LT
support@neonmountain.co.uk

I give notice that I cancel my contract for the following service:

Service ordered:
Order date:
Customer name:
Customer address:
Order number:
Date:
Signature, if submitted on paper: