Please read these terms carefully before using The Sealed Vault.
By creating an account or using The Sealed Vault, you represent that you are at least 18 years of age and have the legal capacity to enter into a binding agreement. If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.
The Sealed Vault provides the following core functionality:
Access to The Sealed Vault is by invitation or administrator approval only. Registration does not guarantee immediate access — all accounts require approval from the Service administrator before vault features become accessible.
The Sealed Vault LLC CANNOT RECOVER LOST PASSPHRASES — vault contents encrypted with a forgotten passphrase are permanently inaccessible. You are solely responsible for maintaining the confidentiality and safekeeping of your passphrase, emergency override answer, and account credentials. You agree to notify us immediately of any unauthorised use of your account.
The Sealed Vault uses AES-256-GCM encryption with PBKDF2 key derivation (200,000 iterations) to protect vault contents. All encryption and decryption occurs in your browser — your passphrase and plaintext content are never transmitted to or stored on our servers.
While we implement industry-standard security measures, no method of electronic storage or transmission is 100% secure. You acknowledge this inherent risk.
You agree NOT to use The Sealed Vault to:
We reserve the right to suspend or terminate accounts that violate these terms without prior notice.
You retain full ownership of all content you store in The Sealed Vault. Because your content is encrypted before reaching our servers, we cannot access, read, modify or use your vault contents for any purpose. By using the Service, you grant us a limited, non-exclusive licence to store and transmit your encrypted data solely for the purpose of providing the Service.
Your encrypted vault data is stored on Google Firebase servers. We retain your data for as long as your account is active. Upon account closure, your vault data will be deleted within 30 days. You may delete individual vaults at any time from within the application. Once a vault is deleted, it cannot be recovered.
The Sealed Vault targets a 99.9% Monthly Uptime Percentage. In the event of a documented failure to meet this target, eligible users on paid subscription tiers may request a Service Credit equal to 10% of their monthly fee for that period, which shall be the sole and exclusive remedy for such failure.
The Service may be temporarily unavailable due to maintenance, upgrades or circumstances beyond our reasonable control including Firebase infrastructure issues. Planned maintenance will be communicated in advance where possible. The 99.9% uptime target excludes scheduled maintenance windows and force majeure events.
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, THE SEALED VAULT LLC AND ITS OPERATORS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION LOSS OF DATA, LOSS OF VAULT CONTENTS DUE TO FORGOTTEN PASSPHRASES, OR BUSINESS INTERRUPTION, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Our total aggregate liability for all claims arising out of or related to these Terms will not exceed the greater of (i) the total fees paid by you to us during the twelve (12) months immediately preceding the event giving rise to the liability, or (ii) five hundred dollars ($500). The foregoing limitation shall not apply to liability for death, personal injury or gross negligence where prohibited by law.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. WE DISCLAIM ALL WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT.
The Sealed Vault is not a substitute for professional legal, medical or financial advice. Documents stored in the Service do not constitute legally binding instruments unless properly executed under applicable law.
You agree to indemnify, defend and hold harmless The Sealed Vault LLC and its operators from any claims, damages, losses, liabilities, costs and expenses (including reasonable legal fees) arising from your use of the Service, violation of these Terms or infringement of any third-party rights.
We reserve the right to modify or discontinue the Service at any time with reasonable notice. We may update these Terms periodically. Material changes will be communicated via email to registered users at least 14 days before taking effect. Your continued use of the Service after changes constitutes acceptance of the revised Terms.
Data Processing Addendum: To the extent that The Sealed Vault processes any Personal Data (as defined in the GDPR) on your behalf in the provision of the Service, the terms of the Data Processing Addendum ("DPA") located at https://sealed-vault.com/dpa shall apply and are hereby incorporated by reference into these Terms. In the event of any conflict between these Terms and the DPA, the DPA shall prevail solely with respect to the processing of such Personal Data.
GDPR & CCPA Compliance: To the extent that The Sealed Vault processes Personal Data protected by the GDPR or CCPA, the parties agree to the terms of the DPA, which includes Standard Contractual Clauses (SCCs) to ensure adequate protection for international data transfers.
Data Processing Addendum (DPA):
https://sealed-vault.com/dpa
Google Firebase Sub-Processor DPA:
https://cloud.google.com/terms/data-processing-addendum
The Sealed Vault is built on Google Firebase, subject to Google's own terms of service and privacy policy. By using our Service, you also agree to be bound by Google's applicable terms. We are not responsible for the practices of third-party services used to operate the Service.
These Terms shall be governed by and construed in accordance with the laws of the State of New York, United States of America, without regard to its conflict of law principles.
Any disputes arising from these Terms or the Service shall first be attempted to be resolved through good-faith negotiation between the parties for a period of no less than 30 days. If unresolved, disputes shall be submitted to binding arbitration in New York, NY under the rules of one of the following arbitration bodies, at the election of the claimant:
The arbitration shall be conducted in the English language. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction. Nothing in this section shall prevent either party from seeking emergency injunctive relief in a court of competent jurisdiction in New York.