We keep your data safe.
Here's our promise.

By creating a KeepSafe account or using any part of the KeepSafe service, you agree to be bound by these Terms of Service ("Terms"). Please read them carefully. If you do not agree, you may not use KeepSafe.

These Terms constitute a legally binding agreement between you and KeepSafe Inc. We may update these Terms from time to time and will provide notice of material changes via email or in-app notification.

• You are responsible for maintaining the confidentiality of your account credentials.
• You are responsible for all activity that occurs under your account.
• You must provide accurate and complete registration information.
• You must notify us immediately of any unauthorised use of your account at security@keepsafe.vercel.app.
• You may not create multiple free accounts to circumvent storage limits.
• Accounts are for individual use only; sharing account credentials is prohibited.

KeepSafe offers a free tier and paid premium plans. Premium subscriptions are billed on a monthly or annual basis.

• All payments are processed securely by Stripe and are non-refundable except as described in our Refund Policy.
• Subscriptions automatically renew unless cancelled at least 24 hours before the renewal date.
• Prices are displayed in USD and may vary by region due to local taxes.
• We reserve the right to change pricing with 30 days' notice to existing subscribers.
• Downgrading from a paid plan to the free tier takes effect at the end of your current billing cycle.

You retain full ownership of all content you store in your KeepSafe vault. By uploading content, you grant us a limited, non-exclusive licence solely to store, transmit, and sync your encrypted data as needed to provide the service.

You represent that you have all necessary rights to store the content in your vault and that doing so does not violate any applicable laws or third-party rights.

You agree not to use KeepSafe to:

• Store or distribute illegal content of any kind
• Violate any applicable law or regulation
• Attempt to gain unauthorised access to our systems or other users' accounts
• Reverse engineer, decompile, or disassemble any part of the service
• Use automated tools to scrape, crawl, or extract data from the service
• Impersonate any person or entity
• Transmit malware, viruses, or other harmful code

Violations may result in immediate account suspension or termination without refund.

To the maximum extent permitted by law, KeepSafe shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, profits, or goodwill, arising out of your use or inability to use the service.

Our total liability to you for any claim arising from these Terms shall not exceed the greater of (a) the amount you paid us in the 12 months preceding the claim, or (b) $100 USD.

These Terms are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Any disputes arising under these Terms shall be subject to binding arbitration.

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you signed in, and understand how you use the site. KeepSafe uses cookies and similar technologies (such as local storage and session tokens) to provide and improve our service.

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling essential cookies will prevent you from signing in to your vault.

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions

For analytics cookies specifically, you can opt out via Account Settings → Privacy → Analytics at any time.

Security is not a feature at KeepSafe — it is the foundation. We have designed our entire architecture around the principle that your data belongs to you and only you. This document outlines the technical and organisational measures we have implemented to protect it.

• Vault data: AES-256-GCM encryption, performed client-side before upload
• Encryption keys: Derived from your master password using PBKDF2 with 600,000 iterations
• Data in transit: TLS 1.3 for all connections between your device and our servers
• Passwords: Hashed with bcrypt (cost factor 12) — we never store your password in plaintext
• Two-Factor Auth: TOTP-based (RFC 6238) with backup recovery codes

• Hosted on AWS with SOC 2 Type II certified data centres
• Multi-region replication for data durability and availability
• Automated daily backups with 30-day retention, stored in a separate encrypted vault
• Web Application Firewall (WAF) and DDoS protection via AWS Shield
• Continuous vulnerability scanning and automated dependency patching
• Strict employee access controls — no employee can access vault contents

We operate a responsible disclosure programme. If you discover a security vulnerability in KeepSafe, we ask that you report it to us privately before public disclosure so we can address it promptly.

In the event of a security incident that affects your account or data, we will:

1. Contain the incident and identify its scope within 4 hours of detection
2. Notify affected users via email within 72 hours of confirmed breach
3. Provide a clear explanation of what happened, what data was affected, and what we are doing about it
4. Cooperate with relevant regulatory authorities as required by applicable law
5. Publish a post-incident report within 30 days for any significant incidents

This Acceptable Use Policy ("AUP") governs what you may and may not store or do with KeepSafe. Our goal is to maintain a safe, secure, and lawful service for all users. Violations of this policy may result in account suspension or termination.

KeepSafe is designed for legitimate personal and professional storage of:

• Personal documents, photos, videos, and audio files
• Business documents, contracts, and records for your own business
• Personal notes, journals, and writing
• Your own passwords, login credentials, and access keys
• Links, bookmarks, and reference materials
• Identification documents for personal reference (not for fraudulent use)

You must not use KeepSafe to store, transmit, or process:

• Illegal content of any kind, including content that violates applicable laws in your jurisdiction
• Child sexual abuse material (CSAM) — zero tolerance; immediate report to authorities
• Malware, spyware, ransomware, or other malicious code
• Content that infringes on the intellectual property rights of others
• Stolen credentials, financial information, or personally identifiable information of third parties without authorisation
• Content that facilitates fraud, identity theft, or financial crimes
• Material that promotes violence, terrorism, or hate speech

We reserve the right to investigate any suspected violation of this AUP. Actions we may take include:

1. Issuing a written warning to your registered email address
2. Temporary suspension of your account pending investigation
3. Permanent termination of your account without refund
4. Referral to law enforcement or other appropriate authorities
5. Legal action where warranted

We want you to be completely satisfied with KeepSafe Premium. If you're not happy, we want to make it right. This Refund Policy outlines the conditions under which we will issue refunds.

1. Email billing@keepsafe.vercel.app with subject line "Refund Request"
2. Include your registered email address and the reason for your refund (optional but helpful)
3. Our team will process your request within 3 business days
4. Approved refunds are returned to your original payment method within 5–10 business days