Terms of Service

1. Acceptance of Terms

By creating an Ironlox account or using any Ironlox service, you agree to be bound by these Terms of Service. If you do not agree, do not create an account or use the service.

2. Service Description

Ironlox is a zero-knowledge password management service. All vault data (passwords, credit cards, notes, identities, file attachments) is encrypted on your device using AES-256-GCM before transmission to our servers. We cannot decrypt or access your plaintext data under any circumstances. The service is provided "as is" with no guarantee of uninterrupted availability.

3. User Responsibilities

• You are solely responsible for safeguarding your master password. We cannot recover or reset it.
• Maintain accurate and up-to-date account information.
• Do not use the service for illegal activities or to store illicit content.
• Export your vault data periodically as a backup. We are not responsible for data loss.
• You must be at least 13 years old to use the service.

4. Free and Premium Tiers

The free tier provides core password management features (unlimited passwords, unlimited devices, autofill, password generator). Premium features (TOTP 2FA authenticator, file attachments up to 2 GB, vault health reports, priority support) require a paid subscription. On downgrade from Premium to Free, access to Premium-only features is immediately revoked. Stored file attachments exceeding the free tier limit may be deleted after a 30-day grace period.

5. Billing and Payment

Premium subscriptions are billed in advance on a monthly or annual basis through Stripe. You may cancel at any time. Cancellation takes effect at the end of the current billing period. Refunds are not provided for partial billing periods, except where required by law. We reserve the right to change pricing with 30 days' notice.

6. Limitation of Liability

Ironlox is provided "as is" without warranty of any kind, express or implied. We are not liable for any damages arising from use or inability to use the service, including but not limited to data loss, security breaches resulting from user negligence, or third-party actions. Our total liability shall not exceed the amount you paid us in the 12 months preceding the claim. Some jurisdictions do not allow these limitations — they may not apply to you.

7. Account Termination

You may terminate your account at any time through the dashboard. We may suspend or terminate accounts for violation of these terms, illegal activity, or non-payment. On termination, data is permanently deleted after the 7-day grace period described in our Privacy Policy.

8. Changes to Terms

We may update these terms from time to time. Material changes will be communicated via email at least 30 days before taking effect. Continued use after changes take effect constitutes acceptance. If you disagree with the changes, you must terminate your account before they take effect.