Terms of Service

Terms of Service

These Terms of Service form a binding agreement between you and Ciphek, Inc., a Delaware corporation (“Ciphek”, “we”, “us”), governing your use of the service at ciphek.com. By creating an account or using the service, you accept these terms.

Read the Privacy Policy alongside these terms — it explains what data we hold, what we cannot see, and how we handle your rights.

Eligibility

You must be at least 16 years old to create a Ciphek account. If you are under 18 in your jurisdiction, you confirm that a parent or legal guardian has reviewed these terms with you. Ciphek is not directed to children.

You may not use Ciphek if you are subject to comprehensive sanctions imposed by the United States, the European Union, or the United Kingdom.

Your account

Each account belongs to one natural person. You are responsible for keeping your master password and recovery mnemonic confidential. Ciphek treats anyone presenting your credentials as you.

If you suspect unauthorized access, change your master password immediately. Because of zero-knowledge encryption, Ciphek cannot detect unauthorized decryption — only you can.

Acceptable Use Policy

Ciphek prohibits the following uses of the service. Violation may result in account termination and, where applicable, cooperation with law enforcement.

• Storing or distributing child sexual abuse material (CSAM). Ciphek is required to preserve and report such material under 18 U.S.C. § 2258A and equivalent laws in other jurisdictions.
• Distributing malware, ransomware, phishing kits, or content designed to compromise computer systems.
• Evading sanctions, embargoes, or export controls administered by the United States, the European Union, or the United Kingdom.
• Hosting content whose distribution is itself unlawful in your jurisdiction (for example, uncleared third-party copyrighted works hosted for redistribution).
• Attempting to circumvent rate limits, quota enforcement, or the cryptographic boundary of the service (including reverse-engineering for the purpose of bypassing client-side encryption).

Ciphek cannot inspect your encrypted content. Reports of policy violation are evaluated based on metadata available to the service (account age, payment patterns, quota anomalies, abuse reports from third parties, lawful process). Detection of CSAM specifically is limited to user reports and external lawful process — by design, we cannot scan plaintext. We disclose this honestly.

Loss of master password

By creating an account you confirm you understand that loss of the master password and the BIP39 recovery mnemonic permanently and irreversibly destroys access to your encrypted vault. This is the cost of zero-knowledge architecture and Ciphek cannot relax it without abandoning the security model.

Subscriptions and billing

Ciphek offers a Free tier with 5 GB of encrypted storage at no cost. Free accounts may be deleted by you at any time and may be deleted by Ciphek after 12 consecutive months of inactivity, with at least 30 days advance notice to your email.

The Pro tier is sold as a monthly or yearly subscription. Pricing is published at ciphek.com/pricing and may change with at least 30 days notice to subscribers. Subscriptions renew automatically until you cancel.

We accept payment by card via Stripe and by cryptocurrency (BTC and other supported coins) via NOWPayments. Tax inclusion or exclusion follows the law of the billing address.

Pro subscribers exceeding the included quota incur metered overage at the rate published on ciphek.com/pricing. Overage is billed in arrears via the same payment method as the base subscription.

Refunds

First-time Pro purchases qualify for a full refund if you request one in writing within 7 days of the charge. Refund requests go to support@ciphek.com.

After the 7-day window, monthly Pro subscriptions are not pro-rated. Cancelling a monthly subscription stops renewal at the end of the current billing period; no refund is issued for the remainder of the period.

Yearly Pro subscribers may request a pro-rated refund within 30 days of charge if the account has used less than 1 GB of storage and has fewer than 5 sign-in sessions in that period — this threshold prevents refund abuse on subscriptions used to migrate large vaults.

Cryptocurrency payments processed through NOWPayments are non-refundable. Crypto settlements are irreversible at the protocol level; Ciphek cannot return cryptocurrency it has already settled. This is disclosed at checkout before crypto payment is initiated.

Service availability

Ciphek does not promise a service-level agreement at this time. We operate the service on a best-effort basis with multi-region hosting on Fly.io and global edge caching on Vercel. Extended outages are communicated via a status banner on ciphek.com when the public site itself is reachable.

Termination

You may delete your account at any time from vault → settings → delete account. Account deletion is irreversible and erases your encrypted vault, encrypted metadata, and account record on the schedule described in the Privacy Policy.

Ciphek may terminate or suspend your account for violation of the Acceptable Use Policy, non-payment after a 30-day grace period, or fraud. We provide notice except where notice would create imminent legal risk to Ciphek or third parties.

Disclaimers and limitation of liability

Ciphek is provided “as is” and “as available” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement, except where applicable law disallows such disclaimers.

To the maximum extent permitted by applicable law, Ciphek's aggregate liability arising from or related to your use of the service is capped at the amount you paid Ciphek in the 12 months preceding the claim, or USD 100, whichever is greater. This cap does not apply to liability arising from gross negligence, willful misconduct, or claims that cannot be capped under applicable law.

Neither party is liable for indirect, incidental, consequential, special, or punitive damages, including lost profits or lost data, even if advised of the possibility.

You will indemnify Ciphek against third-party claims arising from your violation of these terms, including third-party intellectual-property claims arising from content you upload.

Governing law and disputes

These terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-laws principles. Any dispute arising from these terms or your use of the service will be resolved exclusively in the state or federal courts located in Delaware, and the parties consent to personal jurisdiction in those courts.

Each party waives the right to a trial by jury in any proceeding arising from these terms, to the extent permitted by law.

If any provision of these terms is held unenforceable, the remainder remains in effect.

Changes to these terms

Ciphek may update these terms from time to time. Material changes will be communicated to active accounts by email at least 30 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the service after the effective date constitutes acceptance of the updated terms.

Contact

Questions about these terms go to support@ciphek.com. The contracting entity is Ciphek, Inc. (a Delaware corporation), with its principal place of business in Delaware, USA.