Operated by KRYPTHQ LTD, a company registered in England and Wales (company number 17254962), with registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.
These Terms of Service ("Terms") govern your access to and use of Krypt (the "Service"), provided by KRYPTHQ LTD, a company registered in England and Wales ("Krypt", "we", "us", or "our").
By creating an account, accessing, or using the Service, you agree to these Terms. If you do not agree, do not use the Service.
1. The Service
1.1 What Krypt does
Krypt is a developer secrets management platform. It allows you to securely store, organize, and share environment variables, API keys, and other sensitive configuration values ("Secrets") across projects, environments, and team members.
1.2 Service availability
We aim to provide a reliable Service but do not guarantee uninterrupted access. Scheduled maintenance, third-party outages, or unforeseen issues may cause downtime.
[REVIEW] No formal SLA is offered at this stage. If/when an SLA is introduced (e.g., for enterprise plans), it will be referenced here.
1.3 Changes to the Service
We may add, modify, or remove features at any time. We will not materially reduce the core functionality of paid plans without reasonable notice.
2. Eligibility and accounts
2.1 Eligibility
You must be at least 16 years old and have the legal capacity to enter into a contract. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms.
2.2 Account registration
You must provide accurate, current information when creating an account, and keep it up to date.
2.3 Account security
You are responsible for:
- Keeping your login credentials confidential.
- All activity that occurs under your account.
- Notifying us promptly at hello@krypthq.com if you suspect unauthorized access.
We are not liable for any loss arising from your failure to safeguard your credentials.
2.4 One person per account
Each individual account is for a single user. Sharing login credentials is prohibited. Team collaboration features are provided through team workspaces, not by sharing accounts.
3. Acceptable use
You agree not to:
- Use the Service to store or transmit content that is illegal, infringing, defamatory, or harmful.
- Attempt to gain unauthorized access to the Service, other users' accounts, or any underlying infrastructure.
- Reverse-engineer, decompile, or attempt to extract source code from the Service, except where permitted by law.
- Use the Service to send spam, phishing, malware, or any malicious payload.
- Interfere with the operation of the Service, including by overloading, flooding, or denial-of-service.
- Resell, sublicense, or commercially redistribute the Service without our written permission.
- Use the Service to violate the rights of any third party, including privacy or intellectual property rights.
- Use automated means to scrape or extract data, except via our documented APIs and within rate limits.
We may suspend or terminate accounts that violate these rules. Serious violations may be reported to law enforcement.
4. Plans, billing, and payments
4.1 Free and paid plans
The Service is offered on a free tier and one or more paid tiers (collectively, the "Pro plan"). Plan features and limits are described on krypthq.com.
[REVIEW] Confirm exact plan names, limits, and pricing before launch and ensure they match this clause.
4.2 Subscription billing
Paid plans are billed on a recurring monthly basis through our payment processor, Stripe. By subscribing, you authorize us (via Stripe) to charge your chosen payment method on each renewal until you cancel.
4.3 Taxes
Prices are shown exclusive of VAT or other applicable taxes unless stated otherwise. You are responsible for any taxes that apply in your jurisdiction. Where we are required to collect VAT, we will add it to your invoice.
4.4 Cancellation
You may cancel your subscription at any time from within your account settings. Cancellation takes effect at the end of the current billing period. You will retain access to paid features until the end of that period.
4.5 Refunds
Subscription fees are non-refundable for partial periods, except as set out below or where a refund is otherwise required by applicable law.
14-day consumer cancellation right. If you are an individual purchasing the Service in a personal capacity (not as a business), you have the right to cancel within 14 days of starting your subscription and receive a full refund of fees paid in that period, even if you have begun using the Service. This right does not apply to business customers. To exercise this right, email hello@krypthq.com within 14 days of subscribing.
[REVIEW] The 14-day consumer cancellation right is now expressly granted above. Confirm with counsel: (a) the mechanism we use to identify consumer vs business customers (e.g., a checkbox at signup, or VAT/business-name presence at checkout), and (b) whether any further notices are required under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013.
4.6 Failed payments
If a payment fails, we may retry it. If we cannot collect payment after a reasonable number of attempts, we may suspend or downgrade your account.
4.7 Price changes
We may change prices for paid plans. We will give you at least 30 days' notice by email before any price change affects your subscription. If you do not agree, you may cancel before the new price takes effect.
5. Intellectual property
5.1 Krypt's rights
We own all rights, title, and interest in the Service, including the software, design, branding, documentation, and any feedback or suggestions you provide. Nothing in these Terms transfers ownership of the Service to you.
5.2 Your rights
You retain all rights in the Secrets and other content you store in the Service ("Customer Content"). You grant us a limited, non-exclusive, worldwide, royalty-free license to host, store, encrypt, transmit, and process your Customer Content solely to provide the Service to you.
5.3 Your responsibilities
You represent that you have all necessary rights to store your Customer Content in the Service and that doing so does not violate any law or third-party rights.
5.4 Feedback
If you give us feedback or suggestions, you grant us a perpetual, irrevocable, royalty-free license to use it without obligation to you.
6. Confidentiality and security of Secrets
6.1 Encryption at rest
We encrypt all stored Secret values at rest using industry-standard encryption.
6.2 No access without consent
We do not access, view, or use the plaintext content of your Secrets except:
- With your explicit, contemporaneous consent (for example, if you ask us to debug a specific issue).
- Where strictly necessary for security incident response and we are legally permitted to do so.
- Where required by law, court order, or other binding legal process.
6.3 Staff confidentiality
Our personnel and contractors are bound by confidentiality obligations and access controls.
[REVIEW] Add specific encryption details (algorithm, key management, key separation) once finalized, and reference any future SOC 2 / ISO 27001 status.
7. Privacy and data protection
Your use of the Service is also governed by our Privacy Policy, which describes how we collect, use, and share personal data, and our use of sub-processors.
We act as a data processor in respect of personal data you submit as Customer Content, and as a data controller for account, billing, and usage data we collect directly. A separate Data Processing Agreement (DPA) is available on request.
[REVIEW] Provide a standard DPA (with UK IDTA / SCCs as appropriate) for business customers before launch.
8. Third-party services
The Service relies on third-party providers (such as Clerk, Supabase, Stripe, Resend, Railway, and Vercel). We are not responsible for the acts or omissions of those providers. Their availability and performance may affect the Service.
You may also choose to integrate the Service with third-party tools. Your use of those tools is governed by their own terms and privacy policies.
9. Warranties and disclaimers
9.1 Limited warranty
We will provide the Service with reasonable care and skill.
9.2 Disclaimer
To the fullest extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, whether express, implied, or statutory, including warranties of merchantability, fitness for a particular purpose, non-infringement, or uninterrupted operation. We do not warrant that the Service will be error-free or that any defects will be corrected.
9.3 Statutory rights
Nothing in these Terms excludes or limits any rights you may have as a consumer under UK law that cannot lawfully be excluded.
10. Limitation of liability
10.1 Excluded losses
To the fullest extent permitted by law, we will not be liable for:
- Loss of profits, revenue, business, goodwill, or anticipated savings.
- Loss or corruption of data, beyond direct restoration costs.
- Indirect, incidental, special, consequential, or punitive damages.
- Loss arising from your failure to maintain backups of your own Secrets.
10.2 Liability cap
Our total aggregate liability to you under or in connection with these Terms in any 12-month period will not exceed the greater of: (a) the fees you paid to us in the 12 months immediately preceding the event giving rise to the claim, or (b) £100.
10.3 Exceptions
Nothing in these Terms limits liability for:
- Death or personal injury caused by negligence.
- Fraud or fraudulent misrepresentation.
- Any other liability that cannot be limited or excluded under applicable law.
11. Indemnification
You agree to indemnify and hold harmless Krypt, its operator, and personnel from any third-party claims, losses, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to:
- Your Customer Content.
- Your use of the Service in violation of these Terms or applicable law.
- Your infringement of any third-party right.
We will notify you promptly of any such claim and, at your expense, allow you to control the defense and settlement, provided that any settlement does not impose a non-monetary obligation on us without our consent.
12. Suspension and termination
12.1 Termination by you
You may stop using the Service and close your account at any time via account settings or by emailing hello@krypthq.com.
12.2 Termination by us
We may suspend or terminate your access:
- Immediately, if you materially breach these Terms (including the Acceptable Use rules in Section 3).
- For non-payment, after a reasonable cure period.
- On 30 days' written notice for any other reason, including if we decide to discontinue the Service.
12.3 Effect of termination
On termination:
- Your right to use the Service ends immediately.
- We will retain your Customer Content for 30 days, in line with our obligations under UK GDPR and the EU Data Act, after termination, during which you may export it via
GET /api/me/exportor by contacting us. - After 30 days, we will delete your Customer Content from active systems, subject to retention requirements set out in our Privacy Policy.
12.4 Survival
Sections that by their nature should survive termination (including intellectual property, confidentiality, liability, indemnification, and governing law) will survive.
13. Modifications to these Terms
We may update these Terms from time to time. For material changes, we will give you at least 30 days' notice by email or by an in-Service notice before the changes take effect. Continued use of the Service after the effective date of the updated Terms constitutes acceptance. If you do not agree, you may cancel your subscription before the changes take effect.
Non-material changes (such as clarifications or corrections) may take effect immediately.
14. Governing law and disputes
14.1 Governing law
These Terms and any dispute arising out of or in connection with them are governed by the laws of England and Wales.
14.2 Negotiation first
Before bringing a formal claim, the parties agree to attempt in good faith to resolve any dispute by negotiation. Either party may initiate this by writing to the other (in our case, hello@krypthq.com).
14.3 Courts
Subject to Section 14.2, the courts of England and Wales have exclusive jurisdiction over any dispute, except that we may bring proceedings to enforce our intellectual property rights in any jurisdiction.
[REVIEW] If you market significantly to consumers in other UK nations or in the EU, mandatory consumer protection rules in their home jurisdiction may still apply notwithstanding this clause. Confirm with counsel.
15. EU/EEA users
If you are located in the European Economic Area, you acknowledge that Krypt operates from the United Kingdom and that the United Kingdom currently benefits from a European Commission adequacy decision. If that adequacy decision is revoked or modified, we will update this section and notify affected users by email. We do not currently appoint an EU representative under Article 27 GDPR; if your use of the Service requires us to do so, please contact hello@krypthq.com before subscribing.
16. General
16.1 Entire agreement
These Terms, together with the Privacy Policy and any documents referenced in them, are the entire agreement between you and Krypt regarding the Service.
16.2 Severability
If any provision of these Terms is held to be unenforceable, the remaining provisions will remain in full force and effect.
16.3 No waiver
Our failure to enforce any provision is not a waiver of our right to do so later.
16.4 Assignment
You may not assign or transfer these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, reorganization, or sale of assets. We will give you reasonable notice of any such assignment.
16.5 No partnership
Nothing in these Terms creates any agency, partnership, joint venture, or employment relationship between you and us.
16.6 Force majeure
We are not liable for any failure or delay in performance caused by events beyond our reasonable control, including acts of God, war, terrorism, civil unrest, labor disputes, internet or utility failures, or actions of third-party providers.
17. Contact
Questions about these Terms?
Email: hello@krypthq.com Operator: KRYPTHQ LTD Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF