The terms, in plain English.

1. Who we are

Trenyx is operated by Saurabh Bhatt, a sole proprietor in Ontario, Canada, trading as Trenyx ("Trenyx", "we", "us"). You can reach us at sk@trenyx.io.

2. What the service is

Each month we plant realistic bugs in a copy of your code, one at a time, and run your own test suite against each. You get a score, every planted bug your tests missed, the file and line, and the test that would have caught it. The first month includes getting your suite running and the full report. The free preview is a one-off run on a public repository that shows your score and two of the misses in full.

3. Access to your code

• For a private repository you give us read-only access, usually a read-only deploy key. You can remove it at any time; the next run then doesn't happen.
• We never push to your repository or open branches, pull requests or issues on it.
• You confirm you have the right to share the repository with us for this purpose.
• Don't give us production secrets. Tests run with test values; if your suite needs a database or other service, we start it in a container the way your CI does.

4. Price and payment

• US$400 per month per repository, for your whole team, plus any sales tax that applies.
• You pay monthly in advance through Stripe. We never see or store your card number.
• If we change the price, we tell subscribers by email at least 30 days before it applies to them.
• Free previews cost nothing and commit you to nothing. We run a limited number each week and may decline any request.

5. Cancelling and refunds

• Cancel any time by replying to any report or emailing sk@trenyx.io. Your current month finishes and the next one doesn't run.
• If we can't get your test suite running in your first month, we refund that month in full.
• Otherwise, months that have already run aren't refunded.

6. What the report is, and isn't

The report measures one thing: whether your test suite catches the specific bugs we planted that month. A caught bug means a test that passes on your unmodified code failed with the bug planted, and failed again on a second run. The report is not a security audit or a certification, and it doesn't promise your code is correct or secure. The planted bugs exist only in our private copy; none of them is in your shipped code.

If a run turns up a genuine bug in your shipped code, we tell you privately and separately, free, whether or not you pay. It is never locked behind payment.

7. Your code and your results

• Your code stays yours. The reports we write for you are yours to use as you like.
• We keep your code, results and reports confidential. We never publish them, or your name, without your written permission, and your results never count toward our public numbers unless you opt in.
• To write each month's bug list, your code is read by Anthropic's Claude, with training on our data switched off. It is not sent to any other AI provider.
• We delete the private copy of your code within 30 days after you cancel, or sooner if you ask. Security and data has the detail.

8. Limits of our liability

We run every report carefully, but the service is provided as it is. To the extent the law allows, we are not liable for indirect or consequential losses, such as lost profits, lost data or business interruption, and our total liability for any claim is limited to the fees you paid us in the 3 months before the claim arose.

9. Changes to these terms

If we change these terms in a way that matters, we email subscribers at least 30 days before the change applies to them. The date at the top shows the latest version.

10. Law

These terms are governed by the laws of Ontario and the federal laws of Canada that apply there.

See also the Privacy Policy and Security and data.