Terms & Disclaimer
These terms govern your use of DevGhost. Customers accept them by ticking the acceptance box at registration (or via a re-assent prompt) — see section 14. This is not legal advice.
Version: 2026-06-06
1. Nature of the service
DevGhost is an analytics tool. All metrics (including "Ghost%", effort estimates, work days, and benchmarks) are probabilistic estimates produced by algorithms and language models (AI) from commit metadata and content. They are not a measurement of any person’s real ability, diligence, or value, and are not a statement of fact about any individual. The service is not professional, legal, or HR advice.
2. No accuracy warranty
AI estimates may be inaccurate, incomplete, or wrong. DevGhost does not warrant the accuracy, completeness, reliability, or fitness of the results for any purpose. You use the output at your own risk and must verify it independently before acting on it.
3. No use for decisions about people
The results are not intended and must not be used as the sole or primary basis for hiring, firing, promotion, pay, disciplinary action, ranking for redundancy, or any other decision producing legal or similarly significant effects for an individual. Any such decision requires independent, meaningful human assessment.
4. Your role as data controller
By uploading repositories or connecting accounts, you determine the purposes and means of processing and act as the controller of the relevant developers’ personal data, with DevGhost acting as processor on your instructions. This allocation does not apply in every scenario: when analyzing third-party public repositories, publishing by an administrator, or compiling the public catalog, DevGhost may itself determine purposes/means and act as a controller or joint controller; the final allocation of roles is subject to legal clarification. Where applicable, you are solely responsible for: a lawful basis for processing; informing data subjects (Arts. 13–14 GDPR); carrying out a DPIA where required; consulting workforce bodies (e.g. the Betriebsrat / § 87(1) BetrVG in Germany); and compliance with employment law, the GDPR/BDSG, and the EU AI Act in your jurisdiction.
5. Third-party data and data-subject rights
Analysis results are visible only to you and to those you give access. Public analytics shows anonymized labels instead of names. Any data subject may request access, rectification, removal, or to object to processing; such requests are handled within the controller/processor allocation (see section 4), and DevGhost provides reasonable assistance. See the Privacy page for processors and contact details.
5a. Disclosure via share links
If you create a private share link, it reveals the full identity of developers (names, emails, commit-level detail) to anyone holding the link. You alone decide who receives it and are responsible for that disclosure, including the lawful basis for it and respect for data-subject rights. DevGhost only provides the link mechanism on your instruction; you initiate the disclosure.
6. Transfer to processors and AI providers
Commit content (including source code, messages, and author identity) is sent to third-party infrastructure and language-model providers, including outside your country/the EEA. The current list of sub-processors is on the Privacy page. You confirm you are entitled to submit such content for processing.
7. Confidentiality of what you upload
You are responsible for not submitting secrets, regulated data, or third-party confidential data that you are not permitted to disclose to processors.
8. "As is"
The service is provided "as is" and "as available", without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, and uninterrupted operation.
9. Limitation of liability
To the maximum extent permitted by law, DevGhost is not liable for indirect, incidental, special, or consequential damages, lost profits, or reputational harm. DevGhost’s aggregate liability is limited to the amount you paid for the service in the last 12 months. This limitation does not apply where the law prohibits it (gross negligence, willful misconduct, harm to life or health, and mandatory consumer or data-subject rights).
10. Indemnity
You will indemnify, defend, and hold DevGhost harmless from third-party claims and related losses arising from: (i) your data, or your lack of the rights needed to submit it for processing; (ii) your use of the service not authorized by these terms — including using results as the sole or primary basis for a decision about a person, or without independent, meaningful human assessment, in breach of section 3, or any use involving individuals located in or working from the EU/EEA in breach of section 13; (iii) your negligence or willful misconduct; or (iv) your breach of these terms or your representations. DevGhost will give you prompt notice and reasonable cooperation, and you may control the defense with counsel reasonably acceptable to DevGhost; you may not settle in a way that admits DevGhost’s fault, imposes obligations on DevGhost, or withholds a full release, without DevGhost’s prior written consent. These indemnity obligations are not subject to the limitation in section 9.
11. Miscellaneous
This text is not legal advice. DevGhost may amend these terms; see section 14 (Acceptance and changes).
12. No decision-making by DevGhost
DevGhost does not itself make, implement, or have authority to make employment, HR, legal, or similarly significant decisions about any individual. The service provides analytic estimates and signals for your review. You remain solely responsible for interpreting outputs, conducting independent and meaningful human assessment, and deciding whether, why, and how to act.
13. Scope — intended use and EU/EEA restriction
DevGhost is not designed, documented, marketed, or offered for use in evaluating, monitoring, or supporting decisions about individuals located in, ordinarily working in, employed in, or otherwise protected by EU/EEA employment, worker-protection, data-protection, or AI-system laws. You represent and undertake that you will not use the service, or disclose its outputs, for that purpose unless DevGhost agrees in writing. You are solely responsible for compliance with all laws applicable to your use, including the GDPR / UK GDPR and the EU AI Act. DevGhost may suspend or terminate access and require deletion of affected outputs if it reasonably believes this restriction has been breached.
14. Acceptance and changes
You accept these terms by ticking the acceptance box when you create your account (or via a re-assent prompt). We record the version accepted, the date and time, and the IP address. For material changes, we will ask you to accept the new version before you continue to use the service; if you do not accept, you must stop using it and we may suspend access. For non-material changes, we will post the updated version, which applies from its stated effective date to the extent permitted by law.