clavitor/clavitor.ai/templates/terms.tmpl

{{define "terms"}}
<div class="hero container">
    <p class="label mb-3">Legal</p>
    <h1 class="mb-4">Terms of Service</h1>
    <p class="mb-4 text-sm text-tertiary">Last updated: February 2026</p>
</div>

<hr class="divider">

<div class="section container">
    <div class="prose prose-width">

        <h2>1. Acceptance</h2>
        <p>By using Clavitor (the "Service"), you agree to these terms. If you don't agree, don't use the Service.</p>

        <h2>2. Description</h2>
        <p>Clavitor is a password manager with three-tier encryption: Vault Encryption (at rest), Credential Encryption (per-field, server-side), and Identity Encryption (per-field, client-side). The hosted service stores encrypted vault data on your behalf. The self-hosted version (Elastic License 2.0) runs entirely on your own infrastructure.</p>

        <h2>3. Accounts</h2>
        <p>You are responsible for maintaining the security of your account credentials and authenticator device. We cannot recover Identity fields if you lose access to your WebAuthn authenticator — the mathematical design prevents it.</p>

        <h2>4. Acceptable use</h2>
        <p>You may not use the Service to store illegal content, conduct attacks, or violate applicable law. We reserve the right to suspend accounts that violate these terms.</p>

        <h2>5. Payment, Trial & Price Lock</h2>
        <p>Hosted service is billed annually (or monthly for Team 100+ plans). All paid plans include a 7-day free trial; you may cancel anytime during the trial at no charge. After the trial or upon annual renewal, you have 7 days from any payment to request a full refund — no questions asked, instant. After 7 days, no refunds are issued.</p>
        <p>Pricing tiers are published at <a href="/pricing">clavitor.ai/pricing</a> and incorporated by reference. Annual plans (Personal, Family, Pro, Team 10, Team 25) are billed once per year. Monthly billing is available for Team 100 and above.</p>

        <p><strong>Price for life guarantee.</strong> The price you pay when you subscribe is your price forever — as long as your subscription remains active. We will never increase <em>your</em> rate. Not after a year. Not after five years. Not after inflation hits 20%. We may raise prices for <em>new</em> subscribers, but your rate is locked in your currency, at your tier, for the lifetime of your active subscription.</p>

        <p><strong>How it works.</strong> If you subscribed at $12/year for Personal, you pay $12/year in 2030. If you subscribed Team 100 at $1,499/year, you pay $1,499/year in 2035. This applies to your specific tier and currency. If you upgrade to a higher tier, you pay the <em>then-current</em> rate for that new tier — and <em>that</em> price locks for life. If you downgrade, you pay the then-current rate for the lower tier.</p>

        <p><strong>The catch.</strong> Price-for-life applies only to <em>active</em> subscriptions. If you cancel, you forfeit your locked rate. If you re-subscribe later, you pay the then-current published rate. This is our incentive to keep you happy — and your incentive to stay subscribed.</p>

        <p><strong>All currencies — exchange rate locked.</strong> This guarantee applies whether you pay in USD, EUR, GBP, CHF, or any currency we support. Your locked price is in the currency of your original subscription. <em>We do not adjust for exchange rate fluctuations in either direction.</em> If you subscribed at €11/year, you pay €11/year forever — even if the Euro strengthens or weakens against other currencies. We absorb the foreign exchange risk; your price never changes.</p>

        <p><strong>No price increases for existing customers.</strong> While prices for new customers may change over time based on market conditions and cost evolution, we commit to never increasing rates for existing, active subscribers. Your initial rate in your currency remains constant for the lifetime of your continuous subscription.</p>

        <h2>6. Auto-Renewal & Payment Failure</h2>

        <p><strong>Auto-renewal is default.</strong> All subscriptions automatically renew at the end of each billing period (annual or monthly). This is not a convenience feature for us — it is a protective measure for you. A lapsed payment triggers the same deletion policy as cancellation. We would rather refund an accidental renewal than delete your vault because a card expired.</p>

        <p><strong>14-day regret period for annual renewals.</strong> If your annual subscription auto-renews and you did not intend to continue, you have 14 days from the renewal date to cancel and receive a full refund. No questions asked, no usage check. This is your "regret the auto-renewal" window. Simply email support@clavitor.ai or cancel through your account settings. We will reverse the charge within 5 business days. Monthly renewals do not include this window — they can be stopped anytime by canceling before the next charge.</p>

        <p><strong>How to turn it off.</strong> You may disable auto-renewal at any time in your account settings. Doing so converts your subscription to "manual renewal." Your vault remains active until the end of your current billing period. At that point, if not renewed, the cancellation and deletion policy (Section 10) takes effect — including the 7-day warning email before deletion. Disabling auto-renewal does not trigger the 14-day regret period; that applies only to auto-renewals that have already occurred.</p>

        <p><strong>Failed payments & the 14-day retry window.</strong> If your payment method fails at renewal:</p>
        <ul>
            <li><strong>Day 0:</strong> Renewal fails. We email you immediately. Your vault stays active.</li>
            <li><strong>Days 1–14:</strong> Our payment processor (Paddle) automatically retries. You may update your payment method during this window. Your vault remains fully active.</li>
            <li><strong>Day 15:</strong> After 14 days of failed retries, your subscription enters cancellation status. The 7-day warning email is sent immediately.</li>
            <li><strong>Day 22:</strong> Cancellation takes effect. Your vaults are permanently deleted per Section 10.</li>
        </ul>

        <p><strong>No "suspended" state.</strong> We do not freeze, pause, or suspend vaults for non-payment. A vault is either active (full access) or deleted (permanent). This binary approach protects our architecture: we do not retain decrypted access credentials for dormant accounts.</p>

        <p><strong>Reactivation is new.</strong> If your vault is deleted after non-payment, you may create a new subscription. Your old vaults cannot be restored — even from compliance backups, which are destroyed 30 days post-deletion per Section 10. The 14-day regret period for annual renewals does not apply to reactivation after deletion; once deleted, the data is gone.</p>

        <h2>7. Data ownership</h2>
        <p>Your vault data is yours. We claim no rights to it. You can export or delete it at any time.</p>

        <h2>8. Service availability</h2>
        <p>We aim for high availability but make no uptime guarantees. Scheduled maintenance will be announced in advance. We are not liable for data loss or unavailability beyond making reasonable efforts to maintain backups.</p>

        <h2>9. Encryption limitations</h2>
        <p>Credential fields (server-encrypted) provide strong encryption at rest and in transit. Identity fields (client-encrypted) provide an additional layer that even we cannot break. However, no system is perfectly secure. You use the Service at your own risk.</p>

        <h2>10. Cancellation & Data Deletion</h2>
        <p><strong>How cancellation works.</strong> You may cancel your subscription at any time through your account settings or by emailing support@clavitor.ai. Cancellation takes effect at the start of your next billing period — your service continues normally until that date, then ends.</p>

        <p><strong>What happens at cancellation.</strong> When your cancellation takes effect, all your vaults are <em>immediately and permanently deleted</em> from our active systems. This deletion is instant and irreversible. There is no grace period, no "trash bin," and no ability to undo this action once begun.</p>

        <p><strong>Your warning.</strong> We will email you 7 days before your cancellation takes effect, reminding you to export your vault data. This is your final opportunity to preserve your passwords and credentials. We strongly recommend exporting before you cancel.</p>

        <p><strong>Compliance backups.</strong> To meet our legal and regulatory obligations, we retain encrypted backups for a maximum of 30 days after deletion. These backups exist solely for compliance purposes and are <em>not available for restoration</em>. You cannot request your data from these backups. After 30 days, even these compliance copies are permanently destroyed.</p>

        <p><strong>When we terminate you.</strong> We may suspend or terminate accounts that violate these terms. In cases of abuse, illegal activity, or security threats, we may terminate immediately without the 7-day warning. The same deletion and backup policies apply.</p>

        <p><strong>Self-hosted users.</strong> This cancellation policy applies only to hosted (paid) service. Self-hosted Community Edition users manage their own data retention and deletion.</p>

        <h2>11. Limitation of liability</h2>
        <p>The Service is provided "as is." To the maximum extent permitted by applicable law, we are not liable for indirect, incidental, or consequential damages arising from your use of the Service.</p>

        <h2>12. Governing law</h2>
        <p>These terms are governed by the laws of Switzerland. Disputes will be resolved in the courts of Zürich, Switzerland.</p>

        <h2>13. Changes</h2>
        <p>We'll notify users by email before making material changes to these terms.</p>

        <h2>Contact</h2>
        <p>Questions? Email <a href="mailto:legal@clavitor.ai">legal@clavitor.ai</a>.</p>
    </div>
</div>
{{end}}