Terms of Service

For subscriptions bought in the developer portal (paid through Stripe and sold through Link), billing, plan changes, cancellation and failed payments are covered in section 5.

1. Who we are and what these terms cover

These terms are an agreement between you (the customer, including the organization you represent) and Enigma Vault ("Enigma Vault", "we", "us"), 30 Broad St., Suite 14114, New York, NY 10004, United States. They cover the Enigma Vault API (Card Vault, Data Vault and File Vault), the developer portal at portal.enigmavault.io and the documentation. By creating a portal account, subscribing to a product or using the API you accept these terms. If you subscribe through AWS Marketplace, the AWS Marketplace terms govern payment and the rest of these terms govern the service; section 5 applies only to subscriptions bought in the developer portal.

2. Accounts and credentials

You need a portal account with a verified email address and multi-factor authentication. Each subscription gives you one client ID and client secret for one product. You are responsible for keeping credentials confidential, for everything done with them, and for the people and systems in your organization that use them. Tell us at once at support@enigmavault.io if you believe a credential has been exposed; you can rotate client secrets yourself in the portal.

3. Acceptable use

You may use the service only for lawful purposes and in line with the documentation. You must not attempt to access other customers' data, interfere with the service, probe or test it without written permission, or use it to store or process data you have no right to. Where you store payment card data with Card Vault, you remain responsible for your own obligations under the PCI DSS, including for any system of yours that receives full card numbers through the raw card data scope.

4. Plans, allowances and overage

In the developer portal each product is offered on four monthly plans: Lite ($0 per month), Starter ($49 per month), Growth ($249 per month) and Business ($499 per month). Enterprise plans are agreed in a separate contract. On AWS Marketplace each product is offered on the plans and prices shown on the listing. Every plan includes a monthly allowance (for example, in the developer portal, 1,000 requests on Card Vault Lite, 20,000 on Starter, 250,000 on Growth and 1,000,000 on Business; Data Vault and File Vault allowances are listed on the pricing page and in the portal). On Card Vault and Data Vault, requests beyond the allowance in a month on a paid plan are billed per request at the plan's overage rate shown on the pricing page. Lite in the developer portal is a free plan for development and testing, has no overage charge and is not intended for production use. Once a Lite subscription has used its monthly allowance, it stops serving requests until the next billing period (usage is checked hourly, so a few requests beyond the allowance may still be served). A Card Vault Lite subscription can hold up to 100 stored cards, a Data Vault Lite subscription up to 100 stored data tokens and a File Vault Lite subscription up to 5 GB of stored files; requests that would exceed those limits are refused. On File Vault in the developer portal, storage beyond the Business allowance (5,000 GB) is billed per GB-month at the Business overage rate shown on the pricing page; a GB-month is the average of the daily stored-GB readings over the billing period, less the allowance, in whole GB. File Vault on AWS Marketplace has no overage charge. Prices are in US dollars and exclude tax. Allowances reset at the start of each billing period and do not carry over.

5. Billing for subscriptions bought in the developer portal

Monthly subscriptions. A subscription starts when you complete checkout and renews automatically every month on the same day until you cancel it. The monthly plan price is charged at the start of each period. Overage used during a period is charged on the invoice issued at the end of that period, at the rate of the plan in effect during that period.

Annual subscriptions. Starter, Growth and Business can also be bought with annual billing. An annual plan is charged in full at the start of each annual term and renews automatically for another year on the same date unless you cancel it before the renewal date. The plan's allowance still applies to each month of the term, and overage is charged monthly, on an invoice issued at the end of each monthly period, at the rate of the plan in effect during that period. Annual fees already paid are not refunded, except where the law requires it or a refund is made by Link under its own policies. Lite is available with monthly billing only.

Who you pay. Subscriptions bought in the developer portal are sold through Link, a service of Stripe, which acts as the seller of record for the payment. You pay Link, Link issues the invoices and receipts, and Link's terms and privacy policy, shown at checkout, also apply to the payment. These terms continue to govern the Enigma Vault service itself.

Payment method. You can pay by card, by card wallet (such as Apple Pay or Google Pay), with Link or, in some countries, with a local payment method offered at checkout. Payment details are entered on Stripe's pages only; we do not see or store them. A Lite plan needs no card.

Tax. As seller of record, Link calculates, collects and remits sales tax, VAT or similar taxes where they apply. They are added at checkout and on each invoice based on the billing address you provide. Keep your billing address and any tax identification number current in the billing portal.

Changing plans. You can switch a subscription to another plan of the same product, or between monthly and annual billing, in the developer portal. On a monthly subscription a change takes effect at the next renewal; the current period is not prorated, and overage in the current period is billed at the current plan's rate. On an annual subscription, a move to a higher plan takes effect straight away: we charge the higher plan's annual price for the rest of the current annual term, less the unused part of the annual fee already paid, to your payment method on file, and overage from then on is billed at the higher plan's rate. A move to a lower plan, or from annual to monthly billing, takes effect at the annual renewal. A move from monthly to annual billing takes effect at the next monthly renewal, when the first annual fee is charged. A pending change can be cancelled before it takes effect.

Automatic upgrades. Each paid plan in the developer portal includes a limit on stored tokens (Card Vault and Data Vault: 10,000 on Starter, 100,000 on Growth and 1,000,000 on Business) and on stored files (File Vault: 150 GB on Starter, 1,000 GB on Growth and 5,000 GB on Business). Stored tokens are counted once a day and storage once an hour. When a Starter or Growth subscription reaches its limit, we move it to the next plan straight away and charge the difference for the rest of the current billing period (on an annual plan, the next plan's annual price for the rest of the current annual term, less the unused part of the annual fee already paid) to your payment method on file; from then on the new plan's price, allowance and overage rates apply. We email you when this happens. You can switch to a lower plan from the next renewal once your usage fits within it. Business subscriptions are not moved automatically: File Vault storage beyond 5,000 GB is billed as set out in section 4, and we will contact you about an Enterprise plan.

Cancellation. You can cancel a subscription at any time from the billing portal. Cancellation takes effect at the end of the current period, which for an annual plan is the end of the paid annual term: you keep access until then, the client ID is deactivated when the period ends, and any overage used in the final month is billed on the final invoice. Plan charges already paid, monthly or annual, are not refunded, except where the law requires it or a refund is made by Link under its own policies. We may cancel a subscription in line with section 6 or on 30 days' notice.

Failed payments. If a renewal or overage payment fails, we and Stripe will notify you by email and retry the payment over the following three weeks. Your service continues during the retries. If every retry fails the subscription is cancelled and the client ID is deactivated. Pay the open invoice, or add a working card in the billing portal, to avoid that.

Switching from AWS Marketplace. An existing AWS Marketplace client can be moved to billing in the developer portal. The client ID, secret and settings stay the same. Once the new subscription is active we cancel the AWS Marketplace agreement on our side so that you are not billed twice; nothing changes if you do not switch.

Invoices and disputes. Invoices and receipts are sent by email and are available in the billing portal. Tell us within 30 days of an invoice if you believe it is wrong. Any refund we agree to is made through Link to the original payment method. Prices may change with at least 30 days' notice by email; a change applies from your next renewal after the notice period.

6. Suspension and termination

We may suspend or terminate access with immediate effect if credentials are misused, if these terms are breached, if use threatens the security or availability of the service, or if payment is overdue after the retries in section 5. You may stop using the service at any time by cancelling your subscriptions. After termination, stored data is deleted in line with our data retention practice described in the documentation; export anything you need before cancelling.

7. Service levels, security and support

We operate the service to a 99.99% monthly availability target and publish status at enigmavault.statuspage.io. Our security and privacy practices are described in the Security Policy and Privacy Policy linked in the footer, and independent reports (SOC 2 Type II and PCI DSS Attestation of Compliance) are available to customers with an active subscription from the portal's Artifacts page. Support is by email at support@enigmavault.io; response targets depend on your plan as shown on the pricing page.

8. Data and privacy

You own the data you store with the service. We process it only to provide the service, under the Privacy Policy, and we do not use it for any other purpose. You are responsible for having the right to store the data you submit and for giving any notices your own users are owed.

9. Warranties and liability

The service is provided as described in the documentation. Except as stated in these terms, we make no other warranties, express or implied. To the extent permitted by law, our total liability for all claims in any 12-month period is limited to the amounts you paid us in that period, and neither party is liable for indirect, consequential or special damages. Nothing in these terms limits liability that cannot be limited by law.

10. Changes to these terms

We may update these terms. We will give at least 30 days' notice by email for changes that are material to you; continuing to use the service after the notice period means you accept the updated terms. The current version is always at this address.

11. Governing law and contact

These terms are governed by the laws of the State of New York, United States, and disputes are brought in the courts of New York County. Questions about these terms: support@enigmavault.io or (877) 977-2083.