Terms of Service

Version 2026.1 · Last Revised: October 2026 · Pending Attorney Review

Welcome to Family Safe Vault (myVault), operated by [Family Safe Vault Inc. / Company Name] ("Company", "we", "us", or "our"), incorporated and governed under the laws of [State/Province, Country / Jurisdiction]. By creating an account, selecting a free trial, or accessing any service, you ("User", "Member", or "Family Owner") agree to be bound by these Terms of Service.

1. Account Types & Roles

Family Safe Vault offers two primary account categories:

Solo Accounts (Standard 1TB, Premium 2TB): Individual accounts designed for a single vault owner to store private passwords, personal documents, photos, contacts, and medical profiles.
Family Accounts (Family Plus 2TB, Family Max 5TB): Pooled accounts consisting of one Family Owner and up to 5 invited members (up to 6 total members).
Free Shared Accounts (Invited Members): Free-of-charge accounts provided exclusively to individuals invited by a Family Owner. Free Shared accounts receive personal storage strictly limited to the allocation granted by the Family Owner, plus access to shared folders designated by the owner. Invited members may optionally subscribe to their own independent Solo Standard or Premium plan to add dedicated storage on top of their family allocation.

2. Member & Owner Responsibilities

2.1 Individual Member Responsibilities

Each member is solely responsible for managing and safeguarding their own vault credentials. This includes your Master Password, Security PIN, Security Questions, and Emergency Vault Recovery Key. Because of our zero-knowledge architecture, no member of our staff or database administration team can recover or reset your master encryption keys.

2.2 Family Owner Responsibilities

The Family Owner maintains sole administrative responsibility for the family subscription plan, invoice payments, and the division of the family storage pool. The Family Owner designates which folders are shared and allocates storage quotas from the pooled capacity to individual member personal vaults.

2.3 Allocated Storage Terms & Member Removal

Storage allocated to a member from the family pool is a discretionary benefit provided by the Family Owner's active subscription. If the Family Owner cancels their subscription, downgrades their plan, or removes a member from the family group, the member's allocated storage ends. In such an event, the member is provided a 30-day grace period to export their personal data or subscribe to an independent Solo plan before their vault enters read-only status.

2.4 Good Standing Obligation

Every account owner is required to keep their account in good standing. Good standing requires maintaining valid billing information, timely payment of renewal fees, adherence to storage allowances, and compliance with our Acceptable Use Policy.

Zero-Knowledge Security & Cryptographic Disclosure

Cryptographic Architecture Disclosure · Client-Side Enforcement

"Our staff and database administrators cannot read your vault contents. Items are decrypted only for the vault owner and authorized members, when needed."

1. Technical Implementation

All passwords, secret notes, document attachments, photos, videos, contacts, and medical entries are encrypted locally on your device prior to transmission. Cryptographic operations utilize industry-standard primitives:

AES-GCM 256-Bit: Authenticated symmetric encryption for individual vault items and file payloads.
PBKDF2-HMAC-SHA256 / Argon2: High-iteration client-side key derivation deriving User Master Keys (UMK) from your master password and individual cryptographic salt.
RSA-OAEP 4096-Bit: Asymmetric public-key cryptography enabling secure, zero-knowledge sharing of the Family Vault Key (FVK) among authorized family members without revealing master passwords.

2. Permanent Data Loss Risk

Safeguard Your Master Password & Recovery Key:

Because we do not store, possess, or have access to your encryption keys, a forgotten master password coupled with a lost Emergency Vault Recovery Key will result in permanent, irreversible data loss. Our staff cannot decrypt, reset, or recover your encrypted vault items under any circumstances.

Data Retention & Deletion Policy

Notice Ladder · 90-Day Retention Timeline · Cryptographic Purge

To protect user privacy and manage system resources, Family Safe Vault enforces a strict, predictable data lifecycle policy for inactive and unpaid accounts.

1. The 90-Day Retention Timeline

Accounts that become inactive, whose 30-day trial expires without selecting a plan, or whose subscription renewal remains unpaid enter a 3-month (90-day) retention window. During this period, automated reminder notices are sent according to the following schedule:

Day 1

Notice of Trial Expiry or Payment Failure User notified via registered email. In-app warning banner activated. Vault remains accessible for review and export.

Day 30

Mid-Period Notice & Renewal Reminder Reminder sent detailing the remaining 60 days before scheduled data deletion.

Day 60

Account Lock & Read-Only Enforcement Vault enters read-only lockout mode. New uploads disabled. Export remains available. 30-day final countdown begins.

Day 80

Final 10-Day Pre-Purge Warning Urgent notification dispatched. Prominent countdown banner displayed in vault interface.

Day 83

7-Day Final Call Notice Final automated electronic reminder prior to immutable queue placement.

Day 90

Permanent Cryptographic Purge All encrypted vault records, attachments, media files, and derived keys are permanently and irreversibly destroyed from primary databases and backups. No staff member opens, downloads, or reviews the data before deletion.

2. Voluntary Cancellation

Voluntary subscription cancellations follow the identical 90-day retention timeline following the conclusion of the prepaid service period, allowing subscribers an ample window to export their records or reactivate their subscription.

3. Prompt 0 Global Guardrail Exemption

Permanent Exemption for Lifetime Access Accounts:

In accordance with system guardrails, accounts holding an active lifetime grant (grant_key = 'lifetime_access' AND revoked_at IS NULL) and accounts subject to active legal holds are strictly exempt from the 90-day deletion ladder, inactivity purges, and past-due locks.

Privacy Policy

Data Minimization · Zero Plaintext Collection

[Company Name] is committed to preserving the fundamental digital privacy of our users. Our business model relies on subscription revenue, not data harvesting, advertising, or analytics tracking.

1. Information We Collect

Encrypted Vault Data: We store encrypted ciphertext representing passwords, files, and records. We do not hold the cryptographic keys required to decipher this content.
Account Credentials: Hashed passwords (derived via PBKDF2/SHA-256), cryptographic salts, username, and email address for identification and recovery.
Audit & Legal Compliance Records: In accordance with regulatory guidelines, we record timestamps, IP addresses, and user-agent strings upon Terms of Service acceptance, password modifications, and security events.

2. Third-Party Payment Processors

All financial transactions are handled directly through our certified payment partner, Stripe. Family Safe Vault never collects, stores, or processes credit card numbers or bank account credentials on our internal servers.

Acceptable Use Policy

Safe & Lawful Storage Standards

Users agree not to use Family Safe Vault to store, transmit, or distribute:

Child sexual abuse material (CSAM) or any exploitative content;
Malicious software, worms, trojans, ransomware, or keyloggers;
Unlawful material in violation of applicable federal, state, or international laws in [Jurisdiction];
Content designed to inflict denial-of-service or overburden infrastructure.

Violation of these standards may result in immediate account termination without refund, subject to applicable law.

Admin Security Question Reset Service

Manual Verification · $9.99 Administrative Fee · Zero-Knowledge Safeguard

As a last resort for users who have lost their Security Question answers but still possess valid identity verification documents, Family Safe Vault offers a manual Admin Security Question Reset Service.

1. Service Details & Safeguards

$9.99 Administrative Fee: A non-refundable fee charged via Stripe covers the costs of identity verification review and deters unauthorized account takeover attempts.
3–5 Business Day Security Window: A mandatory safety waiting period during which confirmation notifications and a one-click cancellation link are delivered to the account's registered email address.
Two-Person Admin Rule: Every reset request requires independent review and dual authorization from both a Super Admin and a System Administrator.
Zero-Knowledge Preservation: Administrators NEVER view, reset, or modify your Master Password, PIN, or private vault encryption keys. This service merely resets the security questions so the verified user can re-establish recovery questions using their master credentials.