Terms of Service

Last updated: October 23, 2026

1. Acceptance of the terms

By creating an account or using php2shell you agree to these Terms of Service, the Privacy Policy, the Refund Policy, the Acceptable Use Policy and the License Agreement. If you do not agree with them, do not use the service.

2. What the service does

php2shell analyses PHP source code for compatibility problems when moving to a newer PHP version, proposes automatic code changes, parses PHPUnit output and generates reports. It is a developer tool. It is not a security audit service, it is not a vulnerability detection product and it does not certify that a system is secure.

3. Your account

• You must provide accurate registration information and keep your credentials confidential.
• You are responsible for everything that happens with your account, including the projects you analyse.
• Tell us promptly if you suspect unauthorised access to your account.
• You must be old enough to enter a contract in your jurisdiction, or have the consent of a parent or guardian.

4. Plans, licences and token credits

php2shell is sold in exactly two ways: a recurring licence subscription, or a one-time prepaid token quality pack. They are separate products with separate billing rules, and this section describes both.

Plan	Price	Billing	What it unlocks
Free	$0	No charge, never renews	The compatibility scan, the runtime advisory check, the issue list with file and line numbers and the HTML report.
Fixer	$29 per month or $290 per year	Subscription, renewed automatically until cancelled	Everything in Free, plus the dry-run diff preview, the one-click automatic fixing, the change summary and the PDF export.
Fixer + Verify	$99 per month or $990 per year	Subscription, renewed automatically until cancelled	Everything in Fixer, plus the batch project handling and the PHPUnit verification.

A token quality pack is a one-time purchase, not a subscription: 10 credits for $9, 50 credits for $39 or 200 credits for $129. One credit covers one AI assisted review and the remaining balance is visible in your dashboard.

• A licence key unlocks the paid features of your plan on the account it is activated on.
• Licence keys are personal. Reselling, sharing or publishing a licence key is prohibited.
• Token quality pack credits are prepaid analysis credits. One AI assisted review consumes one credit.
• Credits are consumed when an answer is returned and are not refundable, except where the Refund Policy says otherwise.

5. Subscriptions, renewal and cancellation

The licence plans above are subscriptions. A subscription renews automatically at the end of each billing period until you cancel it.

• By selecting a plan you authorise the recurring charge for that plan only, at the price shown at checkout.
• You can cancel at any time from the subscription page. No further charge is made after the cancellation.
• When you cancel, your access continues until the end of the billing period you have already paid for.
• The Free plan never renews and never charges.
• Token quality packs are not subscriptions. A pack is paid for once, is never renewed and is never charged automatically. Buying another pack later is a separate one-time payment.
• Prices may change with at least 30 days notice to existing subscribers.

Refunds are handled according to the Refund Policy.

6. Payment terms

Payments are processed by Waffo Pancake, our default payment channel and a PCI-DSS certified payment processor. Creem is retained as a backup payment channel.

• You pay the fees of the plan you choose, in the currency shown at checkout.
• You provide accurate billing information.
• Card details are entered on the payment processor's hosted checkout and are handled by the payment processor. Your card data never reaches the php2shell servers and we never store it.

Taxes, VAT and GST are handled by the payment provider and included where the law requires it.

7. Disclaimer and limitation of liability

php2shell is provided "as is", without warranty of any kind. The analysis is produced automatically on a best-effort basis. Automatic changes are generated by rule based transformations that follow the Rector upgrade rule sets, but they are not guaranteed to be correct, complete or safe for your specific application. False positives and false negatives are possible.

You are responsible for reviewing every change and for validating it in a test environment before it reaches production. php2shell does not guarantee that an upgrade is free of runtime errors, data loss or business interruption, and we are not liable for any loss or damage arising from the use of the service, including lost profits, lost data, downtime or a failed upgrade.

The AI assisted analysis is generated by a third party model. It can be wrong. It is a second opinion, not a guarantee, and it must never be the only basis for a production change.

The AI assisted review is powered by the DeepSeek deepseek-chat model, accessed through the DeepSeek API. The platform pays the model provider out of the prepaid token quality pack credits, so you never hold a provider account and you never provide an AI API key.

Nothing in these terms limits liability that cannot be limited by law.

8. Acceptable use

You may not use the service to break the law, to attack third party systems, to upload malware or to infringe the rights of others. The full list is in the Acceptable Use Policy.

9. Intellectual property

php2shell, its interface, its rule set and its documentation belong to us. You keep all rights in the code you analyse. You may use the reports and the diffs for your own projects.

10. Termination

You can stop using the service and delete your account at any time. We may suspend or terminate an account that breaches these terms, the Acceptable Use Policy or the law. On termination you lose access to the fixer and to any remaining credits.

11. Changes to these terms

We may update these terms. Material changes are announced on the site and by email to registered accounts at least 30 days before they take effect. Continuing to use the service after that date means you accept the updated terms.

12. Governing law and contact

These terms are governed by the laws that apply to the place where the operator of php2shell is established, without prejudice to mandatory consumer protections of your country of residence. For any question, including a dispute, write to support@php2shell.top.