Terms of Service

Pure Protocol — Not a Custodian

VaultPass is a cryptographic protocol, not a custodian. We never hold or control your funds or wallets, and your seed phrases are encrypted on your device before anything reaches us — in normal operation we do not access your unencrypted vault contents.

VaultPass operates exclusively as software infrastructure: an automated timer, an encryption layer, and a delivery mechanism for ciphertext. We are not a custodian, broker, trustee, financial institution, money services business, or escrow service under any applicable law. No regulatory framework governing digital asset custody applies to VaultPass because VaultPass never has custody.

All encryption and decryption occurs on your device using AES-256-GCM. VaultPass servers store only encrypted ciphertext and your key shards — each shard encrypted at rest with secrets held outside the database. In normal operation we never access your plaintext. Because automated inheritance requires us to deliver your vault to your heir when you can no longer act, our infrastructure necessarily holds the encrypted components used for that release — so VaultPass is end-to-end encrypted with automated delivery, not a system in which decryption is technically impossible for us.

Non-Custodial Liability

Because VaultPass is non-custodial, we accept zero liability for: loss of cryptocurrency due to forgotten or lost master passwords; incorrect, outdated, or inaccessible heir contact information; failure to maintain active check-in schedules; loss arising from the inherent risks of cryptocurrency ownership; or any claim that VaultPass 'holds' your assets — it does not.

VaultPass is a timer and a delivery mechanism for encrypted information. We are not a custodian, broker, financial institution, or escrow service. We do not insure, custody, or guarantee any digital assets.

Your Responsibilities

You are solely responsible for: maintaining your master password and keeping a secure physical backup; verifying your heir's email address is correct and accessible; maintaining active check-in schedules appropriate to your circumstances; exporting and safely storing your vault backup; and ensuring your heir understands how to use the Heir Portal.

VaultPass is a tool. Its effectiveness depends entirely on the accuracy and currency of the information you provide and the actions you take.

Company Disappears — Continuity Guarantee

In the event VaultPass ceases operations — for any reason — we commit to: providing a minimum 90-day advance notice to all registered email addresses; delivering a full encrypted vault export to each user before shutdown; publishing the decryption specification publicly so any AES-256-GCM compatible tool can be used.

Your encrypted data uses the open, standardized AES-256-GCM format. It is not locked to VaultPass infrastructure. If VaultPass disappears tonight, your heir can decrypt your vault tomorrow using OpenSSL, VeraCrypt, or any other standard AES tool — with your master password as the key.

We are not the lock. We are just the timer. Your data belongs to you, always.

GDPR & Data Privacy

VaultPass is incorporated and operates in Poland, within the European Union. All services fall under GDPR jurisdiction. We collect only: your email address, encrypted vault ciphertext (unreadable by us), check-in timestamps, and payment status (processed entirely by Stripe/BTCPay — we never see card details).

You have full GDPR rights: access, rectification, erasure, portability, and objection. To exercise any right, email [email protected]. We respond within 30 days.

Service Availability

VaultPass provides the service on an 'as-is' basis. While we target 99.9% uptime for check-in reminders and heir delivery, we do not warrant uninterrupted availability. Critical actions (exporting your vault, cancelling a release) should not be deferred until the last moment.

Planned maintenance will be communicated via status.vaultpass.network with a minimum 48-hour notice.

Eligibility & Acceptable Use

You must be at least 18 years old, and of the age of majority in your jurisdiction, to create an account or use VaultPass. VaultPass is not directed at children, and we do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it.

VaultPass may not be used for money laundering, sanctions evasion, tax evasion, or any illegal activity under EU law or the laws of the user's jurisdiction. We reserve the right to terminate accounts that violate applicable law without prior notice.

User-Generated Content & Vault Contents

Users are solely responsible for all content stored in their vault, including but not limited to: wallet instructions, seed phrases, personal notes, inheritance wishes, and any other data. VaultPass does not monitor, filter, moderate, or review encrypted vault contents.

Because your vault is end-to-end encrypted, VaultPass cannot access or inspect your vault contents. You bear sole responsibility for ensuring your vault contents comply with applicable law and do not contain illegal materials, hate speech, or other prohibited content.

VaultPass is not liable for any illegal, offensive, or harmful content you choose to store in your vault. The responsibility and liability for vault contents rests entirely with the user.

Amendments

We may update these Terms. Material changes will be communicated by email with 30 days' notice. Continued use of VaultPass after the effective date constitutes acceptance. If you do not accept amended Terms, you may export your vault and delete your account before the effective date.

Contact & Governing Law

These Terms are governed by Polish law and, where applicable, EU law. Legal inquiries: [email protected] · VaultPass · Warsaw, Poland · European Union.