TERMS OF SERVICE

Governing your use of the Hacka platform and services

Last updated: 25 June 2026

Fifty Seven Digital Limited trading as Hacka | Registered in England and Wales | support@hacka.co.uk

These Terms of Service (“Terms”) constitute a legally binding agreement between you, whether personally or on behalf of an entity (“you” or “Customer”), and Fifty Seven Digital Limited, registered in England and Wales, trading as Hacka (“we”, “us”, or “our”), governing your access to and use of the Hacka security scanning platform and associated services available at www.hacka.co.uk (the “Services”).
You agree to these Terms by registering an account, placing an order, or initiating a scan. IF YOU DO NOT AGREE, YOU MUST STOP USING THE SERVICES IMMEDIATELY.
If you are entering into these Terms on behalf of a business or other legal entity, you represent that you have authority to bind that entity, in which case “you” refers to that entity.

1. Definitions

“Business User” means a Customer using the Services in the course of a trade, business, craft, or profession.
“Consumer” means an individual Customer acting wholly outside any trade, business, craft, or profession.
“Scan” means a single execution of the Hacka analysis pipeline against a submitted repository or codebase.
“Scan Output” means the security report, findings, compliance indicators, and associated artefacts produced by a Scan.
“Submitted Code” means any source code, repository, archive, or codebase you submit to the Services for analysis.
“Subscription” means a recurring paid plan giving access to the Services for a defined billing period.

2. Eligibility and Account

You must be at least 18 years old to use the Services. By using the Services you confirm you meet this requirement.
2.1 Account Registration
To access the Services you must create an account. You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. You must notify us immediately at support@hacka.co.uk if you become aware of any unauthorised use of your account.
2.2 Accurate Information
You represent and warrant that all registration and account information you provide is truthful, accurate, and current, and that you will keep it updated.
2.3 Business and Consumer Users
Some provisions of these Terms apply differently depending on whether you are a Consumer or a Business User. Where a provision distinguishes between the two, this is stated explicitly. Where no distinction is made, the provision applies to all Customers. If you are a Consumer, nothing in these Terms affects your statutory rights under the Consumer Rights Act 2015 or any other applicable consumer protection legislation.

3. Permitted Use and Licence

Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Services for your internal business or personal purposes.
3.1 Licence Restrictions
You must not:
• Sublicense, resell, or commercially exploit the Services or any part of them without our prior written consent;
• Reverse engineer, decompile, or disassemble any part of the Services except as permitted by applicable law;
• Modify, adapt, or create derivative works based on the Services;
• Use automated tools to access the Services other than through our documented API;
• Remove or obscure any proprietary notices or branding within the Services;
• Use the Services in any way that violates applicable law or the rights of any third party.

4. Authorised Scanning and Acceptable Use

4.1 Code Ownership
By submitting code for scanning, you represent and warrant that:
• You are the owner of the Submitted Code, or you hold all necessary rights and permissions to submit it for security analysis;
• Where the code is owned or managed by a third party, you have obtained that third party’s explicit permission to submit it;
• You will not submit code belonging to another person or organisation without authorisation.
4.2 Scan Output Use
Scan Outputs – including any proof-of-concept exploit descriptions, vulnerability traces, and remediation guidance – are provided solely to help you understand and remediate security issues in your own code. You must not use any Scan Output to attack, compromise, gain unauthorised access to, or otherwise harm any live system, network, or third-party service. Such use may constitute a criminal offence under the Computer Misuse Act 1990 or equivalent legislation in your jurisdiction.
4.3 Prohibited Activities
You must not use the Services to:
• Attack, compromise, or gain unauthorised access to any system, network, or service;
• Harass, extort, threaten, or coerce any individual or organisation using Scan Outputs;
• Submit repositories containing intentionally malicious code designed to interfere with our infrastructure;
• Upload or transmit viruses, malware, ransomware, or other malicious software;
• Interfere with or disrupt the integrity or performance of the Services;
• Circumvent, disable, or interfere with any security or authentication controls;
• Use the Services in violation of any applicable export control, sanctions, or data protection law;
• Access the Services from any jurisdiction listed in Section 13 (Prohibited Territories).
Computer Misuse Act 1990: All exploit-related outputs produced by the Services are generated within Hacka’s own isolated infrastructure and are provided to assist you in remediating vulnerabilities in your own code. Using such outputs to attack any live system without explicit authorisation from the system owner is a criminal offence under the Computer Misuse Act 1990. We reserve the right to report suspected criminal misuse to relevant authorities.

5. Scanning Services

5.1 How Scanning Works
When you submit code for scanning, you grant us a limited, temporary licence to access, process, and analyse that code solely to deliver your Scan Output. Submitted Code is processed in ephemeral, isolated compute environments. Your source code files are not retained by us after scan processing is complete.
Scan Outputs – including reports, vulnerability findings, and associated analysis artefacts – are stored until you delete them or until you delete your account, whichever comes first.
5.2 Scan Results
Scan Outputs are the product of automated analysis and are provided for informational purposes only. You should review and validate all findings in the context of your specific codebase and environment before taking any action. We do not warrant that Scan Outputs are complete or that all identified issues represent genuine, exploitable vulnerabilities.
5.3 Compliance Indicators – Not Legal Advice
Important: Compliance-related outputs – including indicators relating to UK GDPR, HIPAA, PCI-DSS, PSTI Act 2022, Cyber Essentials, FCA SYSC, DORA, and other regulatory frameworks – are technical compliance indicators only. They identify code-level patterns that may be relevant to regulatory obligations. They do not constitute legal advice, legal opinions, or a compliance audit. Hacka is not a law firm and is not regulated by the Solicitors Regulation Authority. You must seek independent qualified legal counsel before relying on any compliance output for regulatory, contractual, enforcement, or litigation purposes.
5.4 Limitations
Automated security analysis has inherent limitations. Scan Outputs may include findings that are not genuine vulnerabilities in your specific deployment context (false positives), and may not identify all vulnerabilities present in the Submitted Code (false negatives). We make no warranty as to the completeness or accuracy of any Scan Output.

6. Subscriptions and Payment

Certain features of the Services require a paid Subscription or per-scan credit purchase. Applicable pricing and tier details are displayed on the Site at the time of purchase.
• All prices are stated exclusive of VAT unless otherwise indicated. VAT is applied at the prevailing UK rate where applicable.
• Subscriptions are billed via Stripe on a recurring basis (monthly or annually as selected). By subscribing, you authorise us to charge your designated payment method on each renewal date.
• You may cancel your Subscription at any time. Cancellation takes effect at the end of the current billing period. No further charges will be made after the cancellation effective date.
• Per-scan credits are non-transferable and expire as stated at the time of purchase.
• We reserve the right to change pricing with reasonable advance notice. For existing subscribers, a price change takes effect at the start of the next billing period after notification.

6.1 Refunds – Business Users
If you are a Business User, we do not provide refunds for unused Subscription periods or unused credits, except where required by applicable law or where we have failed to deliver the Services as described in these Terms.
6.2 Refunds – Consumer Users
If you are a Consumer, you may have a right to cancel within 14 days of purchase under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, unless you have expressly requested that the Services commence within that cancellation period and they have done so. Where we fail to perform the Services with reasonable care and skill, you may be entitled to repeat performance or a price reduction under the Consumer Rights Act 2015.

7. Intellectual Property

The Services, platform, software, documentation, design, and associated content are proprietary to Fifty Seven Digital Limited and protected under the Copyright, Designs and Patents Act 1988 and applicable international intellectual property law. The h<ck>. wordmark, logo, and brand assets are our trademarks. Nothing in these Terms grants you any right to use our trademarks without our prior written consent.
You retain all intellectual property rights in your Submitted Code. Scan Outputs generated from your submission are provided to you and owned by you, subject to these Terms. We do not claim ownership of your code or your reports.

8. Data and Privacy

We collect and process personal data in accordance with our Privacy Policy and our Data Processing Agreement, both incorporated into these Terms by reference. The Privacy Policy describes what data we collect, the lawful bases on which we process it, how long we retain it, and your rights as a data subject under UK GDPR.
You are responsible for ensuring that any personal data contained within Submitted Code is submitted with appropriate authority and in compliance with applicable data protection law.

9. Account Security

You are responsible for maintaining the security of your account credentials and for all activity under your account. You must not share credentials with any third party. We are not liable for any loss arising from your failure to maintain credential security. Notify us immediately at support@hacka.co.uk of any suspected unauthorised access.

10. Disclaimer of Warranties

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICES ARE PROVIDED ON AN “AS-IS” AND “AS-AVAILABLE” BASIS. WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, AND NON-INFRINGEMENT.
WE DO NOT WARRANT THAT: (A) THE SERVICES WILL MEET YOUR REQUIREMENTS; (B) THE SERVICES WILL BE AVAILABLE WITHOUT INTERRUPTION OR ERROR; (C) SCAN OUTPUTS WILL BE COMPLETE, ACCURATE, OR FREE FROM FALSE POSITIVES OR FALSE NEGATIVES; OR (D) ANY COMPLIANCE INDICATOR CONSTITUTES LEGAL ADVICE OR GUARANTEES REGULATORY COMPLIANCE.
If you are a Consumer, nothing in this section affects your statutory rights under the Consumer Rights Act 2015.

11. Limitations of Liability

11.1 Business Users
TO THE FULLEST EXTENT PERMITTED BY LAW, WHERE YOU ARE A BUSINESS USER, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES; LOSS OF PROFIT, REVENUE, DATA, OR BUSINESS; OR LOSS OF ANTICIPATED SAVINGS – EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES.
Our total aggregate liability to Business Users for all claims arising out of or related to these Terms or the Services shall not exceed the total fees paid by you in the twelve (12) months immediately preceding the event giving rise to the claim.
11.2 Consumer Users
If you are a Consumer, we do not exclude or limit our liability in any way that would be unlawful. We do not limit our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any matter that cannot lawfully be limited under the Consumer Rights Act 2015.
11.3 All Users
Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot lawfully be limited or excluded.

12. Indemnification

To the extent permitted by law, you agree to indemnify and hold harmless Fifty Seven Digital Limited and its officers, directors, employees, and affiliates from and against any third-party claims, liabilities, damages, and expenses (including reasonable legal costs) arising from:
• Your breach of these Terms;
• Your submission of code that you were not authorised to submit;
• Your violation of any applicable law, regulation, or third-party rights;
• Your use of Scan Outputs to harm, threaten, or gain unauthorised access to any third-party system.
This indemnification obligation does not apply to losses caused by our own negligence or breach of these Terms.

13. Prohibited Territories and Export Controls

The Services may not be accessed or used by any person or entity located in, incorporated in, or ordinarily resident in any jurisdiction subject to comprehensive UK, EU, or US sanctions, including but not limited to: Cuba, Iran, North Korea, Syria, Russia, Belarus, or any region where applicable sanctions law prohibits access to the Services.
You represent and warrant that: (a) you are not located in or ordinarily resident in any prohibited territory; (b) you are not listed on any UK, EU, or US sanctions or export control list; and (c) you will not provide access to the Services to any person or entity subject to such restrictions.
We reserve the right to restrict or terminate access to any account if we have reasonable grounds to believe these requirements are not met.

14. Term and Termination

These Terms remain in effect while you use the Services. We may suspend or terminate your access if you materially breach these Terms, if required by law, or if we reasonably consider it necessary to protect the security or integrity of the platform or other users.
We will give you reasonable notice of termination where practicable, except where immediate termination is required to address a serious breach, a security incident, or a legal obligation. If you are a Consumer, we will give you a reason for termination.
On termination, your right to access the Services ceases immediately. Sections 4, 5, 7, 10, 11, 12, 15, 16, and 17 survive termination.

15. Governing Law and Jurisdiction

These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes) are governed by and construed in accordance with the laws of England and Wales.
15.1 UK and EEA Users
If you are located in the United Kingdom or the European Economic Area, the courts of England and Wales have jurisdiction over any dispute arising under these Terms, subject to the consumer provisions below.
15.2 United States Users
If you are located in the United States, these Terms are governed by the laws of England and Wales. You consent to the non-exclusive jurisdiction of the courts of England and Wales. Nothing in these Terms constitutes an agreement to arbitrate – we do not operate binding arbitration clauses. Where you are a California resident, we acknowledge your rights under the California Consumer Privacy Act (CCPA); see our Privacy Policy for details.
15.3 Australian Users
If you are located in Australia, nothing in these Terms excludes, restricts, or modifies any right or remedy, or any guarantee, warranty, or other term or condition, implied or imposed by the Australian Consumer Law that cannot lawfully be excluded or limited. Where our liability cannot be excluded, it is limited to the greatest extent permitted by law.
15.4 Canadian Users
If you are located in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Your rights in respect of personal data are set out in our Privacy Policy.
15.5 All Consumer Users
Regardless of jurisdiction, if you are a Consumer you retain the right to bring proceedings in the courts of your country of habitual residence, and you benefit from any mandatory consumer protection provisions applicable in that country that cannot be waived by contract. The courts of England and Wales have non-exclusive jurisdiction over any claim a Consumer brings against us.

16. Changes to These Terms

We may update these Terms from time to time. We will give you reasonable advance notice of material changes – by email or by a prominent notice on the Site – before they take effect. For Business Users, changes take effect at the start of the next billing period following notification. For Consumer Users, you may terminate before the change takes effect if you do not accept it. Your continued use of the Services after the effective date constitutes acceptance.

17. Miscellaneous

These Terms, together with our Privacy Policy, Cookie Policy, and Data Processing Agreement, constitute the entire agreement between you and us in respect of the Services.
If we fail to exercise or enforce any right or provision, that failure is not a waiver.
If any provision is found unlawful, void, or unenforceable, it shall be severed and the remaining provisions continue in full force.
We may assign our rights and obligations under these Terms at any time. You may not assign your rights without our prior written consent.
We are not liable for any failure or delay in performance caused by circumstances beyond our reasonable control, including acts of God, internet outages, or third-party service failures.
No joint venture, partnership, employment, or agency relationship is created between you and us as a result of these Terms.

18. Contact Us

For questions about these Terms or to exercise any rights, please contact:
Fifty Seven Digital Limited (trading as Hacka)
Email: support@hacka.co.uk
Website: www.hacka.co.uk
Registered in England and Wales. Companies House number: 10964537

“I scan every client project before delivery now. It takes five minutes and I bill it as due diligence. Twice it’s caught something I would have missed.”

Priya, freelance developer

“Hacka has become a key part of how we approach software quality at Code Galaxy. It gives our development team clear visibility of potential vulnerabilities within the systems we build, allowing us to address risks early and with confidence.

The real value is in how it prioritises what matters. Instead of generic alerts, we get a structured view of risk, which helps us focus on building robust, well-tested software for our clients without slowing down delivery.”

Nicky, Code Galaxy