Terms of Service

When a job is dispatched to a Latchkey Runner, your code is checked out into a fresh, isolated runner instance provisioned by Latchkey. The runner is destroyed at the end of the job, and no data, artifacts, or state persist between jobs. Latchkey does not store, retain, or use your source code beyond what is required to execute that single job.

AI Scan Runners analyze a monitored repository to detect languages, build tools, package managers, and CI configuration, and return a suggested runner configuration with a confidence score. The scan is a recommendation. You decide whether to approve, modify, or discard the generated configuration before any job is routed to it.

You are responsible for the workloads you run on Latchkey Runners, including the code, dependencies, secrets, and third-party actions you choose to execute. You agree not to use Latchkey Runners for any purpose prohibited by these Terms (see "Prohibited Uses") or by GitHub's terms of service.

Self-healing is enabled by default for every Latchkey organization. Owners and admins can disable self-healing at any time under Settings → Self-Healing Runners. Other members can view the setting but not modify it.

When the self-healing agent engages, it operates on a tightly scoped view of the failing step — stderr, stdout, exit code, and a curated set of manifest files (e.g., package.json, requirements.txt, Cargo.toml). The agent does not have access to your source code. Its available actions are limited to a vetted allowlist; it cannot run arbitrary commands, modify your code, or persist anything outside the build environment.

Self-healing operates on a best-effort basis. We do not guarantee that any given failure will be successfully diagnosed or remediated, and you remain responsible for reviewing your build outcomes. Additional time consumed by self-healing is billed at the standard per-minute rate of the runner the failing step is using.

To use Latchkey, you must register for an account and integrate the Service with your CI/CD provider (e.g., via GitHub OAuth).

You grant Latchkey the necessary permissions to access, read, and analyze your CI/CD pipeline data, workflow YAML files, and runner telemetry solely for providing the Service. Permissions are scoped to the minimum required for the features you use.

The Latchkey GitHub App has write access to the repositories you choose to monitor for the limited purpose of creating pull requests on your behalf when you explicitly request one (for example, by clicking "Create PR" on an optimization insight). Latchkey will not push commits, merge code, or modify your repositories without your explicit, per-action consent. You review and merge any pull request Latchkey creates.

If you use Latchkey Runners, you direct your workflow jobs to Latchkey's infrastructure by setting the corresponding runs-on label in your workflow YAML. You remain solely responsible for the workloads you execute on Latchkey Runners and for ensuring those workloads comply with these Terms, GitHub's terms, and all applicable law.

You are responsible for maintaining the confidentiality of your account credentials and for safeguarding any secrets, tokens, or credentials you provide to Latchkey Runners through GitHub Actions.

Latchkey retains all rights to the Service, including our AI models, algorithms, and underlying code.

You retain ownership of your data. You grant us a limited license to use it to provide the Service, including the generation of account-specific insights.

To improve Latchkey for all users, we may use anonymized metadata (such as job durations and failure patterns) for model training, provided such data cannot be traced back to you or your workspace. We do not use your proprietary logs or source code to train global, multi-tenant AI models.

Latchkey may use aggregated, non-identifiable data to improve its predictive models. Users on Scale or Enterprise tiers may request to opt-out of global model training by contacting legal@latchkey.dev.

All third-party names, logos, product names, and trademarks referenced in our content are the property of their respective owners. Any such reference is for identification, commentary, and comparison purposes only and constitutes nominative fair use. It does not imply any affiliation with, sponsorship by, or endorsement by the trademark owner, and does not imply that Latchkey is endorsed by or affiliated with those owners.

Comparative statements are made in good faith and are based on information Latchkey believes to be accurate at the time of publication, drawn from publicly available sources such as each third party's own documentation, pricing pages, and public announcements, as of the date indicated on each page. Third-party features, pricing, availability, and terms change frequently and are outside Latchkey's control. Latchkey does not warrant that such information is current, complete, or error-free, and you should verify any third-party detail directly with the relevant provider before relying on it.

Comparative content may reflect Latchkey's own views and opinions and is provided for general informational purposes only. It is not a representation, warranty, or guarantee regarding any third party or its products or services, and it is not a substitute for your own independent evaluation. Latchkey is not responsible for decisions made in reliance on this content.