Terms of Service

1. Definitions

• Service means the Secrevo product (dashboard at app.secrevo.com, API at api.secrevo.com, CLI, SDKs).
• Workspace means a Secrevo account scoped to one customer organization.
• Customer, you means the entity that signs up.
• Customer Data means everything you store in the Service: secret values, metadata, audit, identities, members, agents.
• Secrevo, we, us means the operator described in our Privacy Policy.

2. Accounts and acceptable use

You are responsible for everything that happens under your Workspace. Keep your sign-in credentials safe; you must notify us promptly if you discover unauthorized access. Do not use the Service to host unlawful content, attack third parties, or attempt to break our access controls.

3. License

For the duration of an active subscription we grant you a non-exclusive, non-transferable license to use the Service for your internal business purposes. We retain all intellectual property rights in the Service itself; you retain all rights in your Customer Data.

4. Plans, fees, taxes

The plans and prices listed on the pricing page are the current offer. Plans renew automatically on the same cadence (monthly or annual) until you cancel. Prices are net of taxes; you are responsible for any VAT, GST or sales tax that applies to your jurisdiction.

5. Payment, refunds, downgrades

Payment is charged via Stripe at the start of each billing period. We do not pro-rate refunds — if you cancel mid-period, the Service stays available until the end of the period and renewal stops. Downgrades take effect at the end of the period. Identities suspended by a downgrade are preserved (read-only) and reactivate when you upgrade again.

6. Termination

You can terminate at any time from /billing. We can terminate or suspend a Workspace if it materially breaches these Terms (for example, illegal content, repeated abuse of our infrastructure) — we will give you reasonable notice and an opportunity to cure unless the breach is severe and immediate.

On termination we keep your Customer Data for 30 days so you can export it on request, then delete it from the primary database. Encrypted backups roll out within 60 additional days.

7. Service availability

We aim for high availability and publish live status at /status. Enterprise plans receive a signed SLA with uptime targets and credits; non-enterprise plans are best-effort.

8. Security

See the Security overview for our technical controls. We treat security incidents seriously and notify affected customers without undue delay (and within 72 hours of confirmation if personal data of EU/UK residents is involved).

9. Confidentiality

Your Customer Data, your sub-processors lists, and any non-public information shared with us in the course of using the Service are treated as confidential. We do not disclose it except as required to operate the Service or by law.

10. Warranties and disclaimers

The Service is provided "as is" to the maximum extent permitted by law. We disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement. Without limiting the foregoing, we do not warrant that the Service will be uninterrupted, error-free, or that it will detect every misuse of secrets stored in it.

11. Limitation of liability

Subject to mandatory law, our total liability under these Terms is capped at the fees you paid for the Service in the 12 months preceding the claim. We are not liable for indirect, incidental, consequential, special or punitive damages, lost profits, or lost data — even if advised of the possibility.

12. Indemnification

You will defend us from third-party claims arising out of (a) your Customer Data, (b) your use of the Service in violation of these Terms or applicable law. We will defend you from third-party claims that the Service, used as documented, infringes a valid intellectual-property right of the claimant.

13. Changes to the Terms

We will update these Terms when our offering or sub-processors change materially. Changes are announced to the workspace billing contact at least 30 days before they take effect. Continued use after the effective date counts as acceptance.

14. Governing law

These Terms are governed by the laws of the seller's home jurisdiction, without regard to conflict-of-laws principles. Disputes are resolved in the competent courts of that jurisdiction. Enterprise customers may negotiate a different governing law as part of a signed master agreement.

15. Entire agreement

These Terms, together with the Privacy Policy, the Data Processing Addendum (if applicable), and any signed order form, are the entire agreement between you and Secrevo regarding the Service.