Veracode

Veracode Terms of Use: Key Points and Risks

> Important limitation: The Terms incorporate a separate Privacy Statement, but that statement is not included here. Consequently, the specific categories of personal data collected, retention periods, legal bases, and detailed user privacy rights cannot be determined from this document alone.

1. Data Collection and Usage

• Personal information submitted through the Services is handled according to Veracode’s Privacy Statement, which supposedly explains:
• What data is collected
• Why and how it is collected, stored, used, and shared
• User rights and complaint/contact procedures
• Users must provide information that is true, accurate, complete, and current. Veracode may terminate access if information becomes false, outdated, or incomplete.
• Veracode may monitor use of the Services and user submissions, although it has no obligation to do so.
• Veracode may alter, remove, refuse to post, or disclose submissions and the circumstances surrounding them for operational, legal, security, enforcement, or other purposes.
• Users should not submit confidential information, trade secrets, or proprietary information through the Services, except information necessary to place an order.
• Information voluntarily posted in forums may become public. Veracode disclaims responsibility for third-party misuse of publicly disclosed information.

2. User Rights Regarding Data

The Terms do not independently grant specific access, deletion, correction, portability, objection, or opt-out rights. Those rights, if available, are governed by the separate Privacy Statement and potentially applicable privacy laws.

Users may stop using the Services if they do not accept revised Terms, but this is described as their sole remedy for rejecting changes.

3. Sharing with Third Parties

Veracode may disclose user submissions and related transmission circumstances:

• To operate the Services
• To protect Veracode, its affiliates, personnel, suppliers, licensors, users, or visitors
• To comply with laws or government requests
• To enforce the Terms
• For other purposes at Veracode’s discretion

The Terms also refer to sharing practices in the Privacy Statement, which is not supplied.

Third-party websites, services, and social-media login providers may be accessible through the Services. These third parties are outside Veracode’s control, and their own terms and privacy policies apply. Use of them is at the user’s own risk.

4. AI/ML Training

The Terms do not state whether user data, submissions, forum content, code, or other information is used to train artificial-intelligence or machine-learning models.

Users should review the Privacy Statement and any applicable Separate Terms, product agreements, beta agreements, or enterprise contracts for an answer. The broad monitoring and submission-disclosure language does not, by itself, clearly authorize AI training, but it also does not expressly prohibit it.

5. Key User Obligations and Restrictions

Users must:

• Comply with privacy, data-protection, intellectual-property, and other applicable laws.
• Protect usernames and passwords and promptly report suspected unauthorized access.
• Ensure submitted information is accurate and that they have the rights necessary to submit it.
• Avoid transferring account credentials or allowing unauthorized access.
• Respect other users and use judgment when interacting with third parties.
• Avoid copying, modifying, scraping, framing, reverse engineering, redistributing, selling, sublicensing, or creating derivative works from the Services or Content.
• Avoid submitting confidential or proprietary information.

Ideas or suggestions submitted to Veracode may be used, modified, reproduced, displayed, and distributed irrevocably and without compensation.

For corporate users, the organization is responsible for ensuring employees follow the Terms and remains liable for their acts and omissions.

6. Liability and Disputes

• Services and Content are provided “as is”, without warranties regarding accuracy, reliability, uninterrupted operation, compatibility, or fitness for purpose.
• Veracode disclaims responsibility for damage to devices or loss of data resulting from use or downloads.
• Veracode excludes liability for indirect, consequential, punitive, exemplary, incidental, special, lost-profit, lost-data, loss-of-security, and unauthorized-interception damages, to the extent permitted by law.
• Maximum liability is generally limited to the amount paid by the user for the applicable Services.
• The user must defend and indemnify Veracode and related parties for claims arising from the user’s breach or misuse of the Services.
• Veracode may terminate access at any time, with or without notice, and without liability.
• Massachusetts law governs. Disputes must generally be brought exclusively in courts located in Middlesex County, Massachusetts.

7. Changes and Notices

• Veracode may change the Terms at any time, with or without prior notice.
• Revised Terms become effective when posted. Continued use constitutes acceptance.
• Notices may be provided by website posting, email, regular mail, or links displayed through the Services.
• Veracode may also change, suspend, restrict, or discontinue Services, pricing, or availability at any time, generally without liability.

Practical takeaway: The most significant unresolved issue is the missing Privacy Statement. Users should review it—particularly its data-sharing, retention, international-transfer, deletion, and AI-training provisions—before submitting personal, confidential, customer, or source-code information.