Please read these terms carefully before using The Sealed Vault.
By creating an account or using The Sealed Vault, you represent that you are at least 18 years of age and have the legal capacity to enter into a binding agreement. If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.
The Sealed Vault provides the following core functionality:
Access to The Sealed Vault is by invitation or administrator approval only. Registration does not guarantee immediate access — all accounts require approval from the Service administrator before vault features become accessible.
The Sealed Vault, LLC CANNOT RECOVER LOST PASSPHRASES — vault contents encrypted with a forgotten passphrase are permanently inaccessible. You are solely responsible for maintaining the confidentiality and safekeeping of your passphrase, emergency override question and answer, and account credentials. You agree to notify us immediately of any unauthorised use of your account.
The Sealed Vault uses AES-256-GCM encryption with PBKDF2 key derivation (200,000 iterations) to protect vault contents. All encryption and decryption occurs in your browser — your passphrase, plaintext vault contents, and emergency override question and answer are never transmitted to or stored on our servers in readable form. We store only encrypted ciphertext and cannot decrypt any of it.
While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. You acknowledge this inherent risk.
You agree NOT to use The Sealed Vault to:
We reserve the right to suspend or terminate accounts that violate these terms without prior notice.
You retain full ownership of all content you store in The Sealed Vault. Because your content is encrypted before reaching our servers, we cannot access, read, modify or use your vault contents for any purpose. By using the Service, you grant us a limited, non-exclusive licence to store and transmit your encrypted data solely for the purpose of providing the Service.
Your encrypted vault data is stored on Google Firebase servers. We retain your data for as long as your account is active. Upon account closure, your vault data will be deleted within 30 days. You may delete individual vaults at any time from within the application. Once a vault is deleted, it cannot be recovered.
The Sealed Vault targets a 99.9% Monthly Uptime Percentage. In the event of a documented failure to meet this target, eligible users on paid subscription tiers may request a Service Credit equal to 10% of their monthly fee for that period, which shall be the sole and exclusive remedy for such failure.
The Service may be temporarily unavailable due to maintenance, upgrades or circumstances beyond our reasonable control including Firebase infrastructure issues. Planned maintenance will be communicated in advance where possible. The 99.9% uptime target excludes scheduled maintenance windows and force majeure events.
Access to paid tiers of the Service is subject to monthly or annual Subscription Fees as set forth at the time of purchase. Unless otherwise agreed, Subscription Fees are billed in advance on a recurring basis through our payment processor, Stripe. Stripe may offer Stripe Link, an optional feature for saving payment details across Stripe merchants for faster future checkout. If you choose to use Link, your saved payment information is managed by Stripe under Stripe's Link Terms. Receipts and payment confirmations may reference "Link" as the payment method even when a credit or debit card was used.
Auto-renewal. Paid subscriptions automatically renew at the end of each billing period unless cancelled before the renewal date. By subscribing, you authorise us to charge your selected payment method on a recurring basis until you cancel.
Refunds. Subscription Fees are non-refundable except where required by law. If you cancel, your subscription remains active until the end of the current billing period; no partial refunds are issued for unused time. Plan upgrades and downgrades made through Stripe are prorated automatically.
Cancellation. You may cancel your subscription at any time through the Stripe Customer Portal accessible from your account, or by contacting us at contact@sealed-vault.com. Cancellation takes effect at the end of the current billing period; you retain access to paid features until that date.
Failed payments. If we are unable to process a recurring payment, we will notify you and your access to paid features may be suspended until payment is received. If a valid payment method is not provided within fourteen (14) days of notice, we may suspend or terminate your paid subscription.
Price changes. Prices and fees may change at the time of the next renewal upon reasonable prior notice. Continued use after a price change takes effect constitutes acceptance of the new price.
You are responsible for any applicable taxes and statutory fees associated with your subscription.
The Sealed Vault shall not be liable for any failure or delay in performance caused by events beyond our reasonable control, including but not limited to natural disasters, fire, flood, earthquake, power outages, war, terrorism, civil unrest, labour disputes, governmental actions, internet or hosting infrastructure failures, or acts of regulatory authorities (a "Force Majeure Event"). We will use commercially reasonable efforts to resume normal operations and will notify users of significant outages where possible. If a Force Majeure Event continues for more than thirty (30) consecutive days, either party may terminate affected obligations upon written notice.
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE SEALED VAULT LLC AND ITS OPERATORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION LOSS OF DATA, LOSS OF VAULT CONTENTS DUE TO FORGOTTEN PASSPHRASES, OR BUSINESS INTERRUPTION, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Our total aggregate liability for all claims arising out of or related to these Terms shall not exceed the total fees paid by you to us during the twelve (12) months immediately preceding the event giving rise to the liability. The foregoing limitation shall not apply to liability for death, personal injury, fraud, gross negligence, or wilful misconduct, where prohibited by law.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. WE DISCLAIM ALL WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT.
The Sealed Vault is not a substitute for professional legal, medical or financial advice. Documents stored in the Service do not constitute legally binding instruments unless properly executed under applicable law.
You agree to indemnify, defend and hold harmless The Sealed Vault, LLC and its operators from any claims, damages, losses, liabilities, costs and expenses (including reasonable legal fees) arising from your use of the Service, violation of these Terms or infringement of any third-party rights.
We reserve the right to modify or discontinue the Service at any time with reasonable notice. We may update these Terms periodically. Material changes will be communicated via email to registered users at least 14 days before taking effect. Your continued use of the Service after changes constitutes acceptance of the revised Terms.
Data Processing Addendum: To the extent that The Sealed Vault processes any Personal Data (as defined in the GDPR) on your behalf in the provision of the Service, the terms of the Data Processing Addendum ("DPA") located at https://sealed-vault.com/dpa shall apply and are hereby incorporated by reference into these Terms. In the event of any conflict between these Terms and the DPA, the DPA shall prevail solely with respect to the processing of such Personal Data.
GDPR & CCPA Compliance: To the extent that The Sealed Vault processes Personal Data protected by the GDPR or CCPA, the parties agree to the terms of the DPA, which includes Standard Contractual Clauses (SCCs) to ensure adequate protection for international data transfers.
Data Processing Addendum (DPA):
https://sealed-vault.com/dpa
Google Firebase Sub-Processor DPA:
https://cloud.google.com/terms/data-processing-addendum
The Sealed Vault is built on Google Firebase, subject to Google's own terms of service and privacy policy. By using our Service, you also agree to be bound by Google's applicable terms. We are not responsible for the practices of third-party services used to operate the Service.
These Terms shall be governed by and construed in accordance with the laws of the State of New York, United States of America, without regard to its conflict of law principles.
Any disputes arising from these Terms or the Service shall first be attempted to be resolved through good-faith negotiation between the parties for a period of no less than 30 days. If unresolved, disputes shall be submitted to binding arbitration in New York, NY under the rules of one of the following arbitration bodies, at the election of the claimant:
The arbitration shall be conducted in the English language. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. Nothing in this section shall prevent either party from seeking emergency injunctive relief in a court of competent jurisdiction in New York.
Entire Agreement. These Terms, together with the DPA and any referenced policies, constitute the entire agreement between you and The Sealed Vault, LLC regarding the Service and supersede any prior agreements on the same subject matter. In the event of any conflict, the order of priority shall be: (i) the DPA, (ii) these Terms, (iii) any referenced policies.
Severability. If any provision of these Terms is held to be invalid, illegal or unenforceable, the validity, legality and enforceability of the remaining provisions shall not in any way be affected or impaired.
Waiver. No delay or failure by either party to exercise any right under these Terms shall constitute a waiver of that right or any other right. Any waiver of a breach of any provision shall not be construed as a waiver of any subsequent or other breach.
Survival. Provisions that by their nature should survive termination — including those relating to confidentiality, intellectual property, limitation of liability, indemnification, and governing law — shall survive termination or expiration of these Terms.