Terms of Service

1. The Service

Vault is a zero-knowledge encrypted storage and administrative platform. "Zero-knowledge" means content you store is encrypted on your own device before transmission, using keys derived from your credentials that we do not possess. We are architecturally unable to access the plaintext content of your stored data.

The Service is offered in two contexts:

• Personal Vault — individual encrypted storage for personal use.
• Organizational Accounts — administrative and record-keeping tools for private membership associations and their affiliated bodies, including membership rosters, role and membership records, treasury/dues administration, and related institutional functions, used by an organization's designated administrators.

2. Eligibility and accounts

• You must be at least 18 years old to create an account.
• You are responsible for maintaining the confidentiality of your credentials. Because of the Service's zero-knowledge design, we cannot reset or recover your encryption keys or password on your behalf — loss of your credentials may result in permanent loss of access to your encrypted content. You acknowledge and accept this risk as an inherent consequence of the Service's privacy architecture.
• You are responsible for all activity that occurs under your account.
• Organizational Account administrators are responsible for managing member access, roles, and permissions within that organization's account, and for the accuracy of institutional records they maintain.

3. Subscriptions, billing, and payment

• Certain features require a paid subscription or one-time payment, as described at the point of purchase.
• Payment processing. Payments are processed by Stripe. Pix payments in Brazil are handled by Stripe's local partner, EBANX, and appear under that name on your bank statement.
• Cancellation. You can cancel at any time from your Plan page. Cancelling stops future charges; your plan stays active until the end of the period you have already paid for. There are no cancellation fees. Except as described below or required by law, payments already made are not refunded.
• Long-term/prepaid plans, where offered, are billed as described at purchase and are non-refundable except as required by applicable law or expressly stated at purchase.
• Right of withdrawal (consumers in Brazil). If you are a consumer in Brazil, you may withdraw within 7 days of the purchase of a subscription or a one-time plan and receive a full refund of the amount we charged, as provided in article 49 of the Brazilian Consumer Defense Code (Law 8.078/1990). To do so, write to [email protected].
• We reserve the right to change pricing for future billing periods with advance notice.
• Taxes, bank fees and exchange. Prices are shown in the currency you are charged in. Your bank, card issuer or payment provider may add taxes or fees, such as Brazil's IOF on international transactions, as well as exchange-rate differences. These are set and collected by them, not by Vault.

4. Acceptable use

You agree not to:

• Use the Service for any unlawful purpose, including using encrypted storage to store or distribute content that is illegal to possess or distribute under applicable law
• Attempt to circumvent, disable, or interfere with the security features of the Service
• Attempt to gain unauthorized access to another user's account or an Organizational Account you are not authorized to access
• Reverse-engineer, decompile, or attempt to extract the source code of the Service except as permitted by law
• Use the Service to transmit malware or engage in activity that disrupts the Service for other users
• Impersonate another person or organization, or misrepresent your affiliation with an Organizational Account

We reserve the right to suspend or terminate accounts that violate these terms. Because we cannot inspect the encrypted content of your Vault, enforcement of this section relies on other available signals (e.g., reports, metadata, legal process) rather than content review — a direct consequence of our zero-knowledge design that you acknowledge and accept.

5. Organizational Accounts — additional terms

• An Organizational Account's designated administrators control certain permissions and visibility settings for that organization's members within the tools the Service provides for that purpose.
• Hathworth does not adjudicate internal governance, membership, or disciplinary disputes within an Organizational Account. Such matters are governed by the organization's own bylaws and internal processes.
• A parent/governing organization's administrative access does not extend, by default, into a subordinate organization's private records beyond what the Service's permission model and the subordinate organization's own administrators expressly allow.
• Content stored in a member's Personal Vault remains private to that member and is not visible to Organizational Account administrators unless the member affirmatively shares it through a feature designed for that purpose.

6. Intellectual property

The Service, including its software, design, and branding, is owned by Hathworth, Inc. and protected by applicable intellectual property laws. You retain all rights to the content you store; we claim no ownership over it, and — consistent with our zero-knowledge architecture — have no technical means to access it in any event.

7. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, HATHWORTH DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE AGAINST ALL POSSIBLE THREATS, THOUGH WE MAINTAIN COMMERCIALLY REASONABLE SECURITY PRACTICES CONSISTENT WITH THE ARCHITECTURE DESCRIBED IN OUR PRIVACY POLICY.

Due to the zero-knowledge design of the Service, we have no ability to back up or recover your encryption keys. You are solely responsible for securely retaining your credentials and any recovery materials provided to you.

8. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, HATHWORTH SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, PROFITS, OR GOODWILL, ARISING FROM YOUR USE OF THE SERVICE. HATHWORTH'S TOTAL LIABILITY FOR ANY CLAIM ARISING FROM THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID TO HATHWORTH IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

Nothing in these Terms limits liability that cannot be limited under applicable law, including consumer protection law in your jurisdiction where such law applies (see Section 11).

9. Termination

• You may delete your account at any time. Deletion is processed as described in our Privacy Policy. Deleted files and accounts are deleted from active storage after a 30-day recovery period. Backup copies are purged within a further 30 days.
• We may suspend or terminate your access for violation of these Terms or as required by law, with notice where reasonably practicable.
• Non-payment does not delete your files immediately: your paid plan ends and your account moves to the free Starter plan, as described in "After your subscription ends" below.
• After your subscription ends. When a paid plan ends, your account moves to the free Starter plan. Your files stay in your vault in read-only mode: you can open and download them, but you cannot upload new files while your storage is above the Starter limit. We keep them for one month for each month you paid, with a minimum of 3 months and a maximum of 12 months after your plan ends. We will email you 30 days and 7 days before this period ends. You can reactivate your plan at any time before then and keep everything. After it ends, files above the Starter limit may be deleted. Deleted files are kept in a 30-day recovery period and then deleted from active storage. Backup copies are purged within a further 30 days. The 30-day recovery period applies to files in your personal vault stored by us. Files kept in storage you connect yourself, and documents in shared organization vaults, are deleted when removed. Because your files are end-to-end encrypted, we can never read them, during or after these periods. If you delete your account, your files are deleted as described in our Privacy Policy.
• Provisions that by their nature should survive termination (including Sections 6, 7, 8, and 11) survive.

10. Changes to the Service and these Terms

We may modify the Service or these Terms from time to time. Material changes to these Terms will be communicated via email or prominent notice before taking effect. Continued use of the Service after changes take effect constitutes acceptance.

11. Governing law and dispute resolution

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-laws principles, except as follows:

• If you are located in the United States, you retain all rights and protections afforded to you under applicable state consumer protection and privacy law (including CCPA/CPRA and equivalent state laws), which apply notwithstanding this governing-law clause.
• If you are located in the European Economic Area, you retain all mandatory protections afforded to you under GDPR and applicable local consumer protection law, which apply notwithstanding this governing-law clause.
• If you are located in the United Kingdom, you retain all mandatory protections afforded to you under UK GDPR, the Data Protection Act 2018, and applicable UK consumer protection law, which apply notwithstanding this governing-law clause.
• If you are located in Switzerland, you retain all mandatory protections afforded to you under the Swiss FADP and applicable Swiss consumer protection law, which apply notwithstanding this governing-law clause.
• If you are located in Brazil, you retain all rights and protections afforded to you as a consumer under the Código de Defesa do Consumidor (CDC) and as a data subject under the LGPD, which apply notwithstanding this governing-law clause, and you may bring claims in the courts of your domicile in Brazil as permitted by Brazilian law.
• If you are located in Angola, you retain all mandatory protections afforded to you as a data subject under Law No. 22/11 (Lei de Proteção de Dados Pessoais), which apply notwithstanding this governing-law clause.
• If you are located in Canada, you retain all mandatory protections afforded to you under PIPEDA, Quebec's Law 25 if applicable, and applicable Canadian consumer protection law, which apply notwithstanding this governing-law clause.
• If you are located in Australia, you retain all mandatory protections afforded to you under the Privacy Act 1988 and applicable Australian consumer protection law, which apply notwithstanding this governing-law clause.
• If you are located in New Zealand, you retain all mandatory protections afforded to you under the Privacy Act 2020 and applicable New Zealand consumer protection law, which apply notwithstanding this governing-law clause.
• If you are located in South Africa, you retain all mandatory protections afforded to you under POPIA and applicable South African consumer protection law, which apply notwithstanding this governing-law clause.
• If you are located in India, you retain all mandatory protections afforded to you under the Digital Personal Data Protection Act, 2023, to the extent its provisions are in force, and applicable Indian consumer protection law, which apply notwithstanding this governing-law clause.
• For all other users, any dispute arising from these Terms shall be subject to the exclusive jurisdiction of the state or federal courts located in Delaware, United States.

12. Miscellaneous

• If any provision of these Terms is found unenforceable, the remaining provisions remain in full effect.
• These Terms, together with our Privacy Policy, constitute the entire agreement between you and Hathworth regarding the Service.
• You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets.

Contact

Hathworth, Inc.
913 N Market Street
Wilmington, DE 19801
United States
Email: [email protected]