Terms of Service | LeanZero

These Terms of Service (“Terms”) govern your use of products and services provided by LeanZero SRL (“we”, “us”, “our”), a limited liability company (societate cu răspundere limitată) registered in Romania.

Legal identification:

Company name: LeanZero SRL
Registered office: Str. Toamnei 23 G, CAM. 1, Loc. Bragadiru, Jud. Ilfov, Cod 077025, Romania
Trade register number: J2025012835002
CUI (Cod Unic de Înregistrare): 51336260
EUID: ROONRC.J2025012835002
Contact: office@leanzero.net

1. Scope

These Terms apply to:

Marketplace Apps — Our Atlassian Marketplace apps CogniRunner, Sentinel Vault and LeanZero Management, and any app we publish later, whether accessed through a free trial, paid license, or evaluation.
Consulting Services — Migrations, AI training, custom Forge app development, and other professional services, unless a separate agreement governs that engagement.
Website — The LeanZero website at leanzero.net and its features (including the AI advisors, practice exams and MCP demo keys).
Goose Swarm and LeanZero Link — Our desktop app and its sign-in service, together with the licence the software is published under.
Open-Source Software — Where noted, specific provisions apply to our open-source releases.

By installing a Marketplace app, engaging our services, or using our website, you agree to these Terms. If you are accepting these Terms on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.

For our Marketplace apps, the Atlassian Marketplace terms and the end-user terms shown on the app’s listing when you install or buy it govern your use of the app. These Terms supplement them only as far as you have accepted them. For consulting, the engagement agreement you sign or accept governs, and these Terms apply where it is silent.

2. Marketplace Apps

2.1 License

Our Marketplace apps are licensed, not sold. Your right to use a Marketplace app is governed by:

These Terms.
The Atlassian Marketplace Terms of Use — which govern your purchase, billing, and refunds through the Marketplace.
The applicable open-source license (if any) — for Sentinel Vault, the Apache License 2.0 in its public repository grants you rights to the source code. These Terms govern your use of the Marketplace version and associated services (including AI integrations and support). CogniRunner and LeanZero Management are proprietary; no source-code rights are granted for them (see section 5.1 for earlier releases).

In case of conflict between these Terms and the Atlassian Marketplace Terms, the Atlassian Marketplace Terms prevail for billing and licensing matters.

Important: our Marketplace apps are third-party applications. LeanZero (not Atlassian) is solely responsible for their functionality, data processing, and support.

2.2 Permitted Use

You may use our Marketplace apps for their intended purpose within your Atlassian Cloud instance. You may not:

Reverse-engineer, decompile, or disassemble the compiled/deployed app (where a product is open source, use the published source code under its license instead).
Use the app in a manner that violates Atlassian’s Acceptable Use Policy.
Resell, sublicense, or redistribute the Marketplace app outside the Atlassian Marketplace.
Use the app to process data in violation of applicable laws, including data protection regulations.

Security research that follows our Vulnerability Disclosure Policy is authorised despite these restrictions, within the limits that policy sets.

2.3 AI-Powered Features

Our apps’ AI features run on Atlassian Forge LLM (Atlassian-hosted models) by default. In CogniRunner, your administrator can instead connect an AI provider of your choice with your own key. By using AI-powered features, you acknowledge that:

AI outputs are not guaranteed to be accurate. AI results are probabilistic. A validator may produce false positives (blocking valid content) or false negatives (allowing invalid content), and generated text, plans or code can be wrong. Do not rely on AI as your only quality control; review the results that matter.
You are responsible for the prompts and configurations you set. The validation criteria are defined by your administrators. LeanZero is not responsible for overly restrictive, permissive, or inappropriate prompts, including prompts that may result in discriminatory outcomes or the processing of sensitive data without appropriate authorization.
Where your data goes. With Forge LLM, prompts stay on Atlassian’s platform. If your administrator connects another AI provider, MCP server or git host in CogniRunner, the content your rules and agents send goes to that service under your own agreement with it, and you are responsible for that choice. See our Privacy Policy for details.
AI providers may change their models, pricing, or policies. We will make reasonable efforts to maintain compatibility and notify you of material changes, but cannot guarantee uninterrupted AI service.

2.4 Agentic Features

Some CogniRunner features act on your behalf. Agentic validation can search your Jira project with JQL. When a CogniRunner administrator or editor enables them, agents (including service desk agents and the Coder) can act in Jira (comment, edit, transition, assign, create and link work items, log work, add watchers and send notification emails), reply to service desk customers, write Confluence pages, and in a connected repository create repositories, commit, open, review and merge pull requests and trigger deployments. Service desk agents can be given Atlassian REST operations an administrator chooses, including deleting work items or changing configuration, each with a person’s approval. You acknowledge that:

The AI decides which searches and actions to run, within the permissions and limits your administrator sets.
Search results and the content of the items an agent works on are sent to the AI provider in use.
Agentic features run within time and step limits but may add latency, for example to workflow transitions.
You are responsible for which agents and actions you enable and for reviewing their work.

2.5 Availability and Support

We aim to keep our Marketplace apps functional and updated, but do not guarantee specific uptime.
Our apps run on Atlassian’s Forge platform. Outages or changes to the Forge platform are outside our control.
Support is available 24 hours a day, 7 days a week, through our support portal, email (office@leanzero.net) and phone. Our Support SLA sets the target times within which a person acknowledges your request; they are targets, not a guaranteed time to resolution.
Security vulnerabilities can be reported under our Vulnerability Disclosure Policy.

2.6 Data Protection

When our Marketplace apps process personal data for you, we act as your processor under our Data Processing Addendum, which forms part of these Terms and applies automatically when you install an app. Each app keeps a backup of its configuration and records on your own Atlassian site; see the Privacy Policy for what it contains and how to delete it.

2.7 Platform Quotas and Limits

Our apps run within Atlassian Forge’s platform quotas and limits (invocation time, memory, storage, request and event rates, Forge LLM usage) and Atlassian’s API rate limits. When a limit is reached, a feature may run more slowly, queue, skip a scheduled run, or stop until the limit resets; a long operation may be split or end early. CogniRunner’s use of Forge LLM is also subject to the AI allowance of your edition, described in its documentation. Large sites may reach these limits sooner.

2.8 Billing

All billing for Marketplace apps is handled by Atlassian through the Atlassian Marketplace. Pricing, refunds, and subscription management are governed by Atlassian’s policies. LeanZero does not process payments for Marketplace apps directly.

3. Consulting Services

3.1 Engagement

Consulting services (migrations, AI training, custom Forge app development) are provided under individually agreed terms. Each engagement will have its own scope, deliverables, timeline, and pricing agreed upon before work begins.

These Terms apply to consulting engagements unless a separate written agreement is signed, in which case the separate agreement prevails.

3.2 Deliverables

Unless otherwise agreed in writing:

Custom code developed during a consulting engagement is owned by the client upon full payment.
LeanZero retains the right to reuse general knowledge, techniques, and non-client-specific code patterns gained during the engagement.
Open-source components used in deliverables remain under their respective open-source licenses.

3.3 Payment

Payment terms for consulting services are agreed upon per engagement. Invoices are issued in accordance with Romanian fiscal regulations.

4. Donations

Donations made through Buy Me a Coffee are voluntary and non-refundable. Donations do not entitle the donor to any specific product, service, feature, or support beyond what is already publicly available.

5. Open-Source Software

5.1 Source Code

Some of our products are released under open-source licenses:

Sentinel Vault — Apache License 2.0, as stated in its repository’s LICENSE file
LeanZero MCP Doc Processor — MIT, as stated in its repository’s LICENSE file
Goose Swarm — Apache License 2.0, as stated in its repository’s LICENSE file

Your use of the source code is governed by the applicable open-source license. These Terms do not restrict or modify the rights granted by those licenses.

CogniRunner and LeanZero Management: both are proprietary products of LeanZero SRL. They are licensed for use through the Atlassian Marketplace under these Terms and the Marketplace Terms of Use (LeanZero Management free of charge), and CogniRunner is also delivered to clients as scoped work under the applicable engagement agreement. Earlier CogniRunner releases published under an open-source license remain under that license as published. LeanZero Management versions up to and including 5.19.0 were listed on the Marketplace under the Apache License 2.0 and remain under it; later versions are proprietary.

5.2 Trademarks

The names “LeanZero”, “CogniRunner”, “Sentinel Vault”, “LeanZero Management”, “LeanZero Link”, and associated logos and branding are trademarks of LeanZero SRL. Open-source licenses do not grant trademark rights. If you create a derivative work, you must:

Use a different name and branding.
Clearly indicate that your product is a derivative and not the original.

5.3 Self-Hosted Instances

If you self-host or fork our open-source software, you are solely responsible for your own instance, including security, compliance, data processing, and support. LeanZero provides no warranty or support for self-hosted instances.

6. Intellectual Property

All LeanZero products, content, trademarks, and materials (excluding open-source code governed by its own license) are the intellectual property of LeanZero SRL. Nothing in these Terms transfers ownership of our intellectual property to you, except as explicitly stated.

7. Limitation of Liability

7.1 To the maximum extent permitted by applicable law, LeanZero’s total aggregate liability for any and all claims arising from or related to our products or services shall not exceed the greater of (a) the fees paid or payable for the affected product or service in the 12 months preceding the event giving rise to the claim, whether paid to LeanZero directly or through the Atlassian Marketplace, and (b) EUR 100.

7.2 To the maximum extent permitted by applicable law, LeanZero is not liable for indirect, incidental, consequential, special, or punitive damages, including but not limited to: loss of data, lost profits, business interruption, or damages arising from AI validation decisions.

7.3 AI results are provided on an “as-is” basis. We do not warrant that validation outcomes, generated content or agent actions will be accurate, complete, or fit for any particular purpose. You are responsible for reviewing and acting on AI results at your own discretion. AI-generated results are probabilistic and should be subject to human review.

7.4 Third-party services. We are not liable for outages, data loss, or policy changes by Atlassian, the AI providers or other services you connect, or other third-party providers.

7.5 Exceptions. The limitations in Sections 7.1 and 7.2 do not apply to:

Liability arising from gross negligence (culpă gravă) or intentional misconduct (dol) under Romanian law;
Liability for death or personal injury caused by negligence;
Liability that cannot be excluded or limited under applicable mandatory law;
Liability towards data subjects or supervisory authorities under Articles 82 to 84 GDPR, which cannot be limited by contract.

7.6 Consumer rights. If you are a consumer within the meaning of EU consumer protection law, these limitations apply only to the extent permitted by applicable mandatory consumer protection legislation, including Romanian Law 193/2000 on unfair clauses in consumer contracts. Your statutory rights are not affected.

8. Warranty Disclaimer

Our products and services are provided “as-is” and “as available.” To the maximum extent permitted by applicable law, we disclaim all warranties, express or implied, including but not limited to:

Merchantability and fitness for a particular purpose.
Uninterrupted or error-free operation.
Accuracy or reliability of AI-powered features.
Compatibility with future versions of Atlassian products.

Consumer rights. If you are a consumer in the EU/EEA, you have mandatory legal guarantee rights under Directive (EU) 2019/770 (Digital Content Directive) that cannot be waived. This disclaimer does not affect those rights.

9. Right of Withdrawal (EU Consumers)

If you are a consumer in the EU/EEA and conclude a contract for services with us at a distance (for example consulting agreed online or by email), you may withdraw within 14 days of the contract’s conclusion without giving a reason, under OUG 34/2014 (transposing Directive 2011/83/EU).

To withdraw, send us a clear statement, for example by email to office@leanzero.net. You may use the model form below, but you do not have to. If you ask us, on a durable medium such as email, to start before the 14 days end, you pay a proportionate amount for what we have done until you withdraw. Once the service is fully performed at your express prior request, and you have acknowledged that you then lose the right of withdrawal, the right no longer applies.

For Marketplace apps: purchases made through the Atlassian Marketplace are governed by Atlassian’s refund policies. Please refer to Atlassian’s Marketplace Terms of Use for withdrawal and refund rights related to Marketplace purchases.

Model withdrawal form (complete and return it only if you wish to withdraw from the contract):

To LeanZero SRL, Str. Toamnei 23 G, CAM. 1, Bragadiru, Ilfov, 077025, Romania, office@leanzero.net:
I/We hereby give notice that I/We withdraw from my/our contract for the provision of the following service: ____
Ordered on / received on: ____
Name of consumer(s): ____
Address of consumer(s): ____
Signature of consumer(s) (only if this form is sent on paper): ____
Date: ____

10. Termination

Marketplace apps: Your license terminates when your Marketplace subscription ends or when you uninstall the app. We may also terminate access for violation of these Terms, with reasonable notice where possible.
Consulting services: Either party may terminate an engagement as specified in the individual engagement agreement.
Effect of termination: Upon termination, your right to use the Marketplace app ceases. Data in Forge storage is handled under Atlassian’s data retention practices after the app is uninstalled. Each app’s backup stays on your Atlassian site until you delete it, as described in our Privacy Policy. Sections that by their nature should survive termination (including Limitation of Liability, Intellectual Property, and Governing Law) will survive.

11. Governing Law and Disputes

These Terms are governed by the laws of Romania, without regard to conflict-of-law principles. Where you are a consumer, mandatory consumer protection laws of your country of residence apply in addition.

Any disputes arising from these Terms shall be resolved by the competent courts of Romania. Before initiating legal proceedings, both parties agree to attempt to resolve disputes amicably through direct communication.

For EU consumers: Nothing in these Terms restricts your right to bring proceedings in the courts of your Member State of residence. You may also turn to an alternative dispute resolution body; the European Commission lists them at consumer-redress.ec.europa.eu. (The EU Online Dispute Resolution platform closed on 20 July 2025.)

For ANPC complaints: Romanian consumers may also file complaints with the National Authority for Consumer Protection (ANPC) at https://anpc.ro, and start an alternative dispute resolution procedure through ANPC’s platform at https://reclamatiisal.anpc.ro.

12. Changes to These Terms

We may update these Terms from time to time. Changes will be posted on this page with an updated “Last updated” date. For material changes that affect your rights, we give at least 30 days’ notice through our website, our products, or by email where we have your address. For business customers, continuing to use our products or services after a change takes effect means you accept it.

For consumers, a change takes effect only if it is required by law or by a change in our products described in the notice, and you may end the contract before it takes effect.

13. Severability

If any provision of these Terms is found to be unenforceable, the remaining provisions remain in full effect. The unenforceable provision will be modified to the minimum extent necessary to make it enforceable while preserving its intent.

14. Entire Agreement

These Terms, together with our Data Processing Addendum, our Support SLA and any individual service agreements, constitute the entire agreement between you and LeanZero SRL regarding the subject matter herein. Our Privacy Policy explains how we process personal data; it is information, not part of this agreement.

15. Content You Post

Comments, guest article and tutorial submissions and published benchmark runs on leanzero.net are hosted by us at your request. Post only content you have the right to share. Do not post illegal content, other people’s personal data without a basis, spam, malware or attack payloads. Comments are published at once; we review guest submissions before publishing. We may remove a comment, decline a submission or remove a benchmark run that breaks these rules, and our automated filter silently drops submissions that look like attacks. When we remove or restrict something you posted, we tell you why where we have your contact details.

Reporting illegal content: email office@leanzero.net with the subject “Content notice”, the page address, why you consider the content illegal, your name and email address (not required for notices about child sexual abuse material) and a statement that your notice is accurate and complete in good faith. We confirm receipt, decide promptly, and tell you what we did.

Under the EU Digital Services Act (Regulation (EU) 2022/2065, Articles 11 and 12), office@leanzero.net is our single point of contact for authorities and for users, in English and Romanian.

16. Contact

For any questions about these Terms:

LeanZero SRL
Email: office@leanzero.net
Website: https://leanzero.net