Legal
Terms of Service
The agreement between you and Woden AI for Woden Service Desk (connected to GitHub or standalone), DocBot, TagBot, the optional AI connector, and IRIS once it is sold.
Last updated 29 September 2026. For how we handle your data, see the privacy policy.
1. Acceptance of terms
By installing, accessing or using our products (the "Services"), you agree to these Terms of Service (the "Terms"). If you disagree with any part of them, do not use the Services. The Services are provided by Woden AI Ltd, a company registered in England and Wales under number 16869601, with its registered office at 167-169 Great Portland Street, London, England, W1W 5PF, VAT number 509 1545 95 ("Woden AI", "we", "us").
These Terms are a legally binding agreement between you (an individual or an entity) and Woden AI. If you use the Services on behalf of an organisation, you represent that you have the authority to bind that organisation.
2. The Services
2.1 Woden Service Desk
Woden Service Desk is a customer service desk and delivery board: a customer portal with your organisation's name and your own portal address, tickets, a board, SLA tracking, time tracking and estimates, insights, a knowledge base, team notes and notifications. It runs in one of two ways, and the difference matters for what we hold and who bills you.
Connected to GitHub. Installed as a GitHub App (listed on GitHub Marketplace as "Service Desk & Project Sync"), the desk holds each ticket and keeps it in step, both ways, with a GitHub issue in your repositories and with your GitHub Projects board, and the knowledge base can be backed by markdown in your repository. It builds on your existing GitHub workflow and data.
Standalone. No GitHub account and no GitHub App. You create an organisation with an email address or Google sign-in, and the tickets, boards and knowledge base are held by us. Every feature above is present; the things that are GitHub's own (repository links, branch creation, a repository-backed knowledge base) are not part of it.
The free plan covers 3 boards, 1 repository, 2 admins, 2 agents and 5 customers with every feature included. Paid plans lift those limits and are listed on the pricing page. Each plan is charged as one flat fee for the organisation: there is no per-agent, per-seat or per-user charge, and no charge that varies with how many tickets you raise. Customers of your desk sign in with Microsoft Entra External ID (email and password, or Google), or GitHub.
2.2 DocBot
DocBot is a GitHub App (listed as "AI Document Creator") that writes and updates Markdown documentation for the files a pull request changes and commits it to a _docs/ folder in your repository, using Azure OpenAI. It includes a free tier of 500,000 tokens per account so you can evaluate it in real repositories. Paid tiers are launching after GitHub Marketplace verification and are listed on the pricing page.
2.3 TagBot
TagBot is a free GitHub App (listed as "PR Insights Tagger") that labels pull requests with size, type, risk and complexity and posts a summary comment. It uses no AI. It is provided free of charge.
2.4 Third-party AI connector (optional)
Woden Service Desk offers an optional connector that lets you link your own AI tool (such as Claude or ChatGPT) to your notes, your dashboard analytics and your tickets. It is off until you connect it, and is enabled solely at your direction, under your own account with that provider. When you enable it, the content it exposes is transmitted to and processed by your chosen AI provider (such as Anthropic or OpenAI) under that provider's own terms and privacy policy, not these Terms. It sees your notes, the same figures your dashboard shows (including ticket titles and who they are assigned to), and the tickets you can already see in the portal — including a ticket's own description when you ask for one, and a ticket's replies only if your organisation switches that on — and your feature requests with their vote counts, never who voted. It never sees attachments. On customer tickets it can set the board column, category, labels, dates, estimates and assignees, and cannot raise, rename, rewrite, reprioritise, resolve or close one; on your team's development tickets it can also raise, rename, edit, reprioritise and open or close them, under that person's name, and it can link a feature request to the development tickets that deliver it. It can add internal notes if your organisation switches that on. If your organisation switches that on too, it can delete a development ticket when that person asks, which removes it from the desk (the record is kept until the organisation is deleted) — only one they raised (an admin, any development ticket) and never one with sub-issues; a linked GitHub issue is closed, not deleted. It cannot reply to a customer, delete a customer ticket or a feature request, or change the labels the desk acts on. Each capability requires both your own grant in your AI tool and your organisation's permission, which an admin sets in Integrations and can withdraw for everybody at any time; an organisation that has not changed that setting permits every capability except reading replies, adding internal notes and deleting development tickets. You are responsible for your use of the connector, for having the rights to send that content to the provider, and for the provider's terms. Woden AI operates no AI model on content sent through the connector and is not responsible for the receiving provider's processing, availability or output.
2.5 IRIS (applies once IRIS is sold)
IRIS is a macOS application: a personal assistant that answers questions, reads documents and notes, replies to mail and Teams, and drives coding agents, by voice or typed. It is not yet sold. When it is, the following applies.
- Licence. A licence is one seat per Mac, keyed on that Mac's hardware identity. Your licence key is entered once in the app. You may move a licence to another Mac by releasing the current one from within the app.
- Entitlement. The app holds a short-lived signed entitlement it verifies offline and refreshes about once a day. A licence server that did not answer is not an expired licence: the app keeps working for a grace period of fourteen days. When a licence has genuinely lapsed, the app still opens, says why, and offers renewal; nothing degrades silently.
- What the licence and update checks send. The licence key, a hardware identifier, the chip (not the Mac's name), OS and app version; and, for updates, the app's name and version and the updater's version, with no profile of the Mac. Nothing else.
- Bring your own models. IRIS does not include, resell or pay for any AI model or coding agent. It runs on the local models you install on your Mac. A cloud agent is optional; if you use one, you sign in with your own API key and your use of it is governed by its provider's terms. IRIS carries what you say to the tools you have connected; the voice layer runs on your Mac, a local model's work stays on it, and cloud coding work goes to the agent you chose. The quality of answers and code depends on the models you choose.
- Billing. IRIS is sold by Paddle.com Market Limited as merchant of record (see 6.2).
3. GitHub Marketplace
Where a Service is installed from GitHub Marketplace, by using it you also agree to GitHub's Terms of Service and the applicable Marketplace policies. A standalone Service Desk has no GitHub App installed, stores its tickets, boards and history with us, and GitHub's terms do not apply to it.
4. Accounts and access
For DocBot, TagBot and a Service Desk connected to GitHub, you need a GitHub account with permission to install GitHub Apps on the repositories concerned. For a standalone Service Desk you do not need a GitHub account: you create an organisation with an email address or Google account and sign in through Microsoft Entra External ID. Customers of your desk sign in separately. In every case you are responsible for the security of your own credentials; Woden AI never holds a password.
5. Privacy and data protection
Our collection, use and protection of your data is governed by our Privacy Policy, which is part of these Terms. In short:
- your source code is never stored by us; DocBot processes it in the request, TagBot reads the file list only, and the Service Desk reads only the markdown you publish;
- we collect the minimum needed to provide the Services;
- data is hosted in Microsoft Azure, UK South, encrypted in transit and at rest;
- we are designed to meet our obligations under UK and EU data protection law;
- you can delete your Service Desk data yourself (and export it, on a desk connected to GitHub), and uninstalling a GitHub App stops data collection;
- we never send your content to a third-party AI provider unless you opt in to the connector (2.4).
Our security posture, and what we do not claim, is on the security page.
6. Subscriptions and payment
6.1 Free services
TagBot is free with no usage limits. DocBot's free tier provides 500,000 tokens per account plus a share of a monthly pool shared by all free accounts, subject to the fair usage policy in 6.4. Woden Service Desk's free plan includes every feature, including your name and your own portal address, within the limits in 2.1. We may change or withdraw free services with reasonable notice.
6.2 Paid services
Woden Service Desk offers Pro and Unlimited plans, and an Advanced plan that is not yet on sale. Every feature is available on every plan; paid plans differ from the free plan only by raising its limits (projects, repositories, admins, agents and customers), except that the Advanced plan's Woden-run AI and automation are not yet built and have no published price. DocBot paid tiers lift the monthly token allowance and are listed on the pricing page; they launch after GitHub Marketplace verification.
There are two billing routes, and an account uses exactly one. A Service Desk shows which under Settings, Plan and billing.
- GitHub Marketplace, for DocBot and for desks installed from GitHub that pay through the Marketplace. Fees are priced in USD, billed monthly and collected by GitHub. Upgrades, downgrades and cancellation happen in the Marketplace, and GitHub's own terms and refund handling apply to those transactions.
- Paddle, for any desk that pays us directly (every desk without GitHub, and a desk installed from GitHub that chooses to) and for IRIS. Paddle.com Market Limited is the merchant of record: they are the seller for that transaction, they handle sales tax and VAT in your jurisdiction, and their buyer terms apply alongside these. Plans paid through Paddle are priced in GBP at the same numbers as the USD Marketplace plans, and are listed at woden-ai.com/pricing/standalone. Your local currency is shown where Paddle supports it, monthly or annually.
Trials. Woden Service Desk paid plans begin with a 7-day free trial. DocBot paid tiers begin with a 14-day GitHub Marketplace trial, once per account, and revert to the free tier at expiry. After a trial, fees are charged for the period ahead. If you change your mind you have 30 days from the charge to ask for a full refund, for any reason, on anything Paddle bills — monthly or annual. After that a period already running is not refunded except where the law requires otherwise. You may cancel at any time and keep access until the end of the period you have paid for. Our Refund Policy has the detail, including how to ask and what happens after a serious outage.
6.3 Price changes
We may change our prices with 30 days' notice to existing customers. Continued use of a paid service after a change takes effect is acceptance of the new price.
6.4 Fair usage: DocBot free tier
- Per-account allocation. Each account (GitHub user or organisation) receives 500,000 tokens for the life of the account, roughly enough to document 80 to 100 files.
- Monthly pool. All free-tier accounts share a monthly pool of 250,000,000 tokens that resets on the first day of each month.
- Order of use. DocBot checks your own allocation first, then that the shared pool has capacity, before processing a request.
- Pool exhaustion. If the pool runs out before month end, free-tier processing pauses until it resets and you are told in the pull request comment. Paid tiers are not affected by the pool.
- Reasonable use. The free tier is for genuine documentation. We may investigate and restrict accounts engaged in token farming, deliberately wasteful use, or circumvention of fair usage controls.
Your usage is shown on every DocBot comment and in the portal.
7. Acceptable use
7.1 Permitted uses
- Generating and maintaining documentation for software projects.
- Labelling and triaging pull requests.
- Running customer support and delivery work for your organisation.
- Talking to your own coding agents and inbox, once IRIS is sold.
- Learning and teaching in software development contexts.
7.2 Prohibited uses
You agree not to use the Services to:
- break the law or infringe intellectual property, privacy or other rights;
- transmit malicious code or attempt to compromise the security of the Services or anyone else's systems;
- reverse engineer, decompile or extract the source code of the Services, except where the law permits it;
- generate content that is harmful, abusive, threatening, harassing, defamatory, obscene, discriminatory, misleading or fraudulent;
- exceed reasonable usage, farm tokens, create multiple accounts to circumvent fair usage, or manipulate billing or usage tracking;
- disrupt, overload or impair the Services or their infrastructure;
- access accounts, repositories or data you do not have permission to access;
- scrape, mine or collect data for purposes unrelated to the Services.
7.3 Content and moderation
- Azure OpenAI's built-in content filtering applies to DocBot output.
- You can report concerning content or behaviour through our support page; we investigate reports within 48 hours.
- Violations may result in a warning, temporary suspension or termination, and you may appeal by contacting support.
7.4 Intended use and limitations
- The Services are supporting tools and require human oversight. DocBot documentation may contain errors and must be reviewed before it is relied on; TagBot's labels are signals, not judgements; IRIS reads back before it acts and asks rather than guesses, but you remain responsible for what you approve.
- The Services are not intended for life-critical, safety-critical or legal-rights-critical systems, and do not provide legal, medical, financial or professional advice.
- AI models have limited context and may miss broader architectural considerations; documentation may not cover every function or edge case.
7.5 Enforcement
Violations may result in a written warning, a suspension of 7 to 30 days for repeated or moderate violations, or immediate permanent termination without refund for serious violations (illegal activity, security breaches, repeated abuse). We may pursue legal action for violations causing harm or damage.
8. Intellectual property
Woden AI retains all rights, title and interest in the Services. You are granted a limited, non-exclusive, non-transferable licence to use them in accordance with these Terms. You retain all rights to your repository content, tickets, notes and data. Generated documentation and analysis results are yours to use under a perpetual licence, subject to continued compliance with these Terms.
9. Availability and support
We make reasonable efforts to keep the Services available but do not guarantee uninterrupted access and publish no uptime figure. Live health is on the status page. Free-tier DocBot availability may be subject to the monthly pool in 6.4. Support for every product is through our support page and support@woden-ai.com; we aim to respond within two working days.
10. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, WODEN AI SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA OR USE, INCURRED BY YOU OR ANY THIRD PARTY, WHETHER IN CONTRACT OR TORT, EVEN IF WODEN AI HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Our total liability for claims arising from the Services shall not exceed the amount you paid us in the twelve months preceding the claim. Nothing in this section limits liability that cannot be limited by law.
11. Indemnification
You agree to indemnify Woden AI against claims, damages and expenses (including reasonable legal costs) arising from your use of the Services, your breach of these Terms, or your infringement of third-party rights, including your use of the optional AI connector and the content you choose to send through it.
12. Termination
Either party may end these Terms at any time. You end them by uninstalling our GitHub Apps, deleting your Service Desk organisation, cancelling any paid subscription and, for IRIS, ceasing to use the app. We may terminate for breach of these Terms, or discontinue a Service, with reasonable notice.
13. Changes to these Terms
We may modify these Terms. Material changes will be communicated through the Services or by email, and the date at the top of this page will change. Continued use after a change takes effect is acceptance of the modified Terms.
14. Governing law
These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising out of or in connection with them. Nothing in this clause removes statutory rights or protections, including data protection rights, available to you under the mandatory laws of your country of residence.
15. Related policies
- Privacy Policy: how we collect, use and protect your data.
- Refund Policy: trials, cancellation and refunds.
- Security: where data lives, what we store, and what we do not claim.
- Woden Service Desk, DocBot and TagBot on GitHub Marketplace.
- GitHub's policies.
16. Contact
Woden AI Ltd, 167-169 Great Portland Street, London, England, W1W 5PF. One address for everything: support@woden-ai.com, or the support page. Put "Privacy", "Security" or "Abuse" in the subject so it is handled first.
17. Severability
If any provision of these Terms is found unenforceable, the remaining provisions remain in force, and the unenforceable provision is modified to the minimum extent necessary or severed.
18. Entire agreement
These Terms, with our Privacy Policy and Refund Policy and any supplemental terms you agree to for specific features, are the entire agreement between you and Woden AI regarding the Services and supersede all prior agreements and understandings.