Terms of Service

Agreement

By creating an account or using Dotkeep you agree to these Terms and to our Privacy Policy. If you do not agree, please do not use the service. If you use Dotkeep for an organisation, you confirm you may accept these Terms on its behalf.

The service

Dotkeep is a vault for storing and organising secrets such as API keys, tokens and environment variables, and for sharing them with teammates. Dotkeep is early software. Features may change, and some things are not built yet (see what is not available).

By default, values are encrypted on the server with a key the server holds. This protects you if the database is copied, but it is not end-to-end encryption. You can turn on end-to-end encryption in Settings, in which case we cannot read your values and cannot recover them if you lose your passphrase and recovery key. Please read how your data is protected and decide whether it fits what you store.

Your account

• You must be at least 16 and give accurate information, including a working email address.
• Keep your password, recovery codes and signed-in devices secure. You are responsible for activity under your account.
• Tell us promptly if you think your account has been compromised.
• You can delete your account at any time in Settings.

Your secrets

You own what you store. We claim no rights over it. You give us only the permission needed to store, encrypt, process and show it to you and the people you share it with, so that the service works.

You are responsible for having the right to store what you put in Dotkeep, and for who you share it with. A member you remove may still have copied values they saw before. If a secret may have been exposed, rotate it at its source.

Acceptable use

Please do not:

• use Dotkeep to store or share anything unlawful, or credentials you have no right to hold;
• try to access another user’s data, or probe, scan or test the service’s security without our written permission;
• get around rate limits or other protections, or disrupt or overload the service;
• reverse engineer the service, or use it to build a competing product from our systems;
• use automated means to create accounts or to send spam.

We may suspend or remove accounts that break these rules, after warning you where it is reasonable to do so.

Availability and backups

We aim to keep Dotkeep running but do not promise it will always be available or error free. We may change, pause or stop features, and will try to give notice for changes that affect you.

Keep your own backup. Use the whole-vault backup in Dotkeep and store the file safely, because it holds values in plain text. Do not make Dotkeep the only place a critical secret lives.

No warranty

Dotkeep is provided “as is” and “as available”, without warranties of any kind, to the extent the law allows. We do not warrant that it will be uninterrupted, error free or free from security vulnerabilities.

Limit of liability

To the extent the law allows, Dotkeep and the people behind it are not liable for indirect or consequential loss, or for loss of data, profits or business, arising from your use of the service. Our total liability for any claim is limited to the amount you paid us in the 12 months before it arose, which for a free account is zero. Nothing here limits liability that cannot lawfully be limited.

Ending your use

You can stop using Dotkeep and delete your account whenever you like. We may suspend or end your access if you break these Terms or put the service or other users at risk. When an account is deleted, its data is removed as described in the Privacy Policy.

Changes to these Terms

We may update these Terms. If a change is meaningful, we will update the date at the top and tell you by email or in the app before it takes effect. Using Dotkeep after that means you accept the new Terms.

Contact

Questions about these Terms? Email legal@dotkeep.com.