Legal

Terms of Service

These terms are a contract between you (or the organization you represent) and MLI Technologies, Halifax, Nova Scotia, Canada ("VaultKeep", "we"). By creating an account or using vaultkeep.dev you agree to them. If you are accepting on behalf of a company, you confirm you may bind it.

We have kept the language plain. The sections on liability and disputes are the ones your lawyer will want to read.

1. The service

VaultKeep takes scheduled, encrypted copies of the Supabase databases and Storage buckets you connect, stores them in VaultKeep-managed storage or in a storage destination you provide, periodically test-restores them into an isolated environment and reports the result, and restores them on your instruction into an empty target you designate. Features vary by plan as described on the pricing page.

VaultKeep is not a replacement for the safeguards your database provider offers (such as point-in-time recovery), and we recommend keeping more than one independent copy of important data.

2. Your account

• You need a valid email address. Sign-in is by emailed link; keep your mailbox secure, because anyone who controls it controls your account.
• You are responsible for everyone you invite to your organization and for what they do with the roles you give them.
• You must be at least 16 and able to enter a contract.
• One person may hold several accounts; an account may not be shared between people.

3. Your data and your credentials

• You own your data. We claim no rights over the contents of your backups, and we only process them to provide the service (see the Privacy Policy).
• You are responsible for the credentials you give us being valid, for granting only the access we need (a read-only database role is enough for backups), and for rotating them if you believe they are compromised.
• You confirm that you are allowed to give us access to the databases and files you connect, and that backing them up does not violate anyone else's rights or any law that applies to you.
• Protected health information is not permitted. VaultKeep does not currently sign Business Associate Agreements under HIPAA. Do not connect a project that contains PHI. We will tell you when this changes.
• If you configure your own storage destination, you are responsible for that bucket, its permissions, its cost and its retention. We write to it and delete from it on your instructions; we do not manage it.

4. Acceptable use

You agree not to:

• use VaultKeep to store or distribute content that is illegal where you or we operate, or that you have no right to;
• attempt to access other customers' data, probe or disrupt the service, or circumvent plan limits;
• resell the service or use it to provide a competing backup service without our written agreement;
• reverse-engineer the service except where the law allows it regardless of this clause.

We may suspend an account that breaks these rules. We will tell you why and give you a chance to fix it unless doing so would put other customers at risk.

5. Plans, fees and billing

• Prices are shown on the pricing page in US dollars and exclude any applicable taxes, which we add where the law requires.
• Paid plans renew automatically, monthly or yearly, until you cancel. Payments are processed by Stripe; we do not store card numbers.
• Upgrades take effect immediately and are prorated; you are shown the exact amount and must confirm before your card is charged. Downgrades take effect at the end of the current billing period, and unused time is credited to your next invoice.
• Cancelling moves you to the Free plan at the end of the period you have paid for. Backups beyond the Free plan's limits are deleted under the Free plan's retention.
• Refunds are governed by the Refund Policy.
• We may change prices with at least 30 days' notice by email. Changes apply from your next renewal after the notice period; if you disagree, cancel before then.
• If a payment fails, we retry and email you. After 14 days of non-payment we may move the organization to the Free plan.

6. Free plan

The Free plan is provided as-is, may be changed or withdrawn, and is limited as described on the pricing page. We may delete Free organizations that have had no sign-in and no connected project for 12 months, after emailing the owner 30 days in advance.

7. Our commitments

• We will provide the service with reasonable skill and care, and will keep the security measures described in the Privacy Policy in place or replace them with equivalents.
• We will notify you without undue delay of a security incident affecting your data.
• We will give you at least 30 days' notice before discontinuing the service or a material feature, and during that time you can export your backups (they are standard pg_dump archives).

We do not promise that every backup will succeed or that every restore will work. The weekly verification exists precisely because backups fail, and its purpose is to tell you when they do. You remain responsible for checking your dashboard and alerts and for keeping independent copies of data you cannot afford to lose.

8. Availability and changes

We aim for high availability but do not offer an uptime guarantee on self-serve plans. We may modify the service; we will not remove core functionality (scheduled backups, verification, restore) without the notice in section 7. Service-level commitments, if any, are set out in a separate written agreement.

9. Intellectual property

The VaultKeep service, software, documentation and brand are ours or our licensors'. You get a non-exclusive, non-transferable right to use them under these terms. Feedback you send us may be used without obligation.

10. Confidentiality

Each side will keep the other's non-public information confidential and use it only for this agreement. This survives termination for three years; for backup contents, indefinitely.

11. Disclaimer of warranties

Except as expressly stated in these terms, the service is provided "as is" and "as available". To the fullest extent permitted by law we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement. Some jurisdictions do not allow these exclusions, in which case they apply to the extent permitted.

12. Limitation of liability

To the fullest extent permitted by law:

• neither side is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, however caused, even if advised of the possibility;
• our total liability under or in connection with these terms in any 12-month period is limited to the fees you paid us in that period (or US$100 if you are on the Free plan).

These limits do not apply to liability that cannot be limited by law, to either side's breach of confidentiality, or to your payment obligations.

13. Indemnity

You will defend and indemnify us against third-party claims arising from data you connect to the service or from your breach of sections 3 or 4. We will defend and indemnify you against third-party claims that the service, used as permitted, infringes their intellectual property.

14. Term and termination

• These terms apply while you have an account.
• You can end them at any time by deleting your organization in Settings, which destroys credentials immediately and queues backups for deletion, and then emailing us to close the account.
• We can end them with 30 days' notice, or immediately for a material breach that is not fixed within 14 days of notice, or immediately if required by law.
• Sections 3 (data ownership), 10 to 15 survive termination.

15. General

• Governing law and disputes: these terms are governed by the laws of the Province of Nova Scotia and the federal laws of Canada applicable in it, and the courts of Nova Scotia, Canada have exclusive jurisdiction, without affecting mandatory consumer protections where you live.
• Notices: to you, by email to the organization owner; to us, at support@vaultkeep.dev.
• Assignment: you may not assign these terms without our consent; we may assign them to a successor of our business.
• Entire agreement: these terms, the Privacy Policy and the Refund Policy are the whole agreement, and replace earlier ones. If a clause is unenforceable, the rest stands.
• Changes: we may update these terms. For material changes we email account owners at least 14 days before they take effect; continuing to use the service after that is acceptance.

Contact

MLI Technologies · Halifax, Nova Scotia, Canada · support@vaultkeep.dev