Terms & Conditions

1.The Service

Rivault is a zero-knowledge encrypted secrets vault designed to allow you to store sensitive information (including but not limited to passwords, API keys, addresses, payment details, identification documents, and other personal data — collectively, “Vault Data”) and selectively grant access to such data to artificial intelligence agents, third-party software, browsers, and integrations (collectively, “Agents”) on your behalf.

The Service includes, without limitation:

• The Rivault web application and account dashboard.
• Client-side and server-side encryption of Vault Data.
• WebAuthn / passkey / biometric (e.g., Face ID, Touch ID) authentication.
• Agent-facing APIs, API keys (e.g., rv_live_*), and authorization tokens.
• Public authorization, form, and hybrid request flows accessible by URL.
• Adapters and integrations for third-party platforms, including without limitation Anthropic Claude (via the Model Context Protocol), OpenAI ChatGPT, OpenClaw, Telegram, and any future platforms (collectively, “Third-Party Platforms”).
• Sensitivity-level features (including L1 server-encrypted and L2 client-encrypted items) and any associated user-authorization workflows.

We reserve the right to modify, suspend, discontinue, or impose limits on any part of the Service at any time, with or without notice, and without liability to you or any third party.

2.Eligibility

You must be at least eighteen (18) years of age and have the legal capacity to enter into a binding contract in your jurisdiction. You represent and warrant that (a) all registration information you submit is accurate and current; (b) you will keep it accurate and current; and (c) your use of the Service does not violate any law or regulation applicable to you.

3.Account, Passkeys, and Security

3.1Your responsibility. You are solely and exclusively responsible for safeguarding your account credentials, passkeys, biometric devices, recovery codes, secret keys, emergency kits, master passwords, encryption keys, API keys, OAuth tokens, and any other authentication factors (collectively, “Credentials”). You must not share your Credentials with any person or system other than as expressly contemplated by the Service.

3.2Zero-knowledge architecture. You acknowledge and agree that Rivault employs a zero-knowledge encryption architecture for certain Vault Data. This means Rivault does not have, and cannot recover, your encryption keys or your plaintext Vault Data. If you lose your Credentials, your data will be permanently and irrecoverably lost. You assume the entire risk of such loss, and Rivault shall have no liability for it whatsoever.

3.3Notice of compromise. You must notify us immediately at security@rivault.ai of any actual or suspected unauthorized access to or use of your account, Credentials, or Vault Data. You remain responsible for all activity occurring under your account, whether or not authorized by you, until we confirm receipt of such notice and have a reasonable opportunity to act.

3.4No backup obligation. Rivault is not a backup service and does not guarantee that any Vault Data will be retained, recoverable, or restorable. You are solely responsible for maintaining your own backups.

4.Acceptable Use

You agree not to, and not to permit any Agent, employee, contractor, or other third party acting on your behalf to:

1. store any Vault Data in violation of any law, regulation, contractual obligation, or third-party right (including, without limitation, any data subject to HIPAA, PCI-DSS, GDPR, CCPA, FERPA, GLBA, export-control laws, or sanctions);
2. use the Service to store, transmit, or facilitate any unlawful, infringing, defamatory, harassing, or fraudulent content;
3. reverse engineer, decompile, disassemble, or attempt to derive the source code, encryption schemes, or underlying ideas of the Service, except to the extent such restriction is prohibited by applicable law;
4. circumvent, disable, or otherwise interfere with security, rate-limiting, or authentication features;
5. probe, scan, or test the vulnerability of the Service without our prior written consent (security research must be coordinated via security@rivault.ai);
6. use any automated system (including bots, scrapers, or Agents) to access the Service in a manner that exceeds reasonable human use, the rate limits we publish, or the limits of your subscription tier;
7. resell, sublicense, time-share, or offer the Service as a managed service to third parties without our prior written consent;
8. impersonate any person or entity, or misrepresent your affiliation with any person or entity;
9. introduce viruses, worms, malware, or other harmful code into the Service;
10. use the Service in any jurisdiction or by any person prohibited by U.S. or other applicable export, sanctions, or embargo laws.

We may suspend, terminate, throttle, or remove your access (in whole or in part) at any time, with or without notice, if we believe in our sole discretion that you have violated these Terms.

5.AI Agents, Integrations, and Third-Party Platforms

5.1You authorize Agents at your own risk. When you grant an Agent access to your Vault Data — whether by issuing an API key, completing a Face ID authorization, granting OAuth consent, installing an MCP server or skill, or otherwise — you authorize that Agent to retrieve, process, transmit, store, and act upon such Vault Data on your behalf. Rivault has no control over Agents or Third-Party Platforms and disclaims all responsibility and liability for their behavior, security, retention, logging, training, output, or downstream use of your Vault Data.

5.2No endorsement. References to or integrations with Anthropic, OpenAI, OpenClaw, Telegram, or any other Third-Party Platform do not constitute endorsement, partnership, or warranty by Rivault as to such third party.

5.3Agent memory and logs. While the Service may instruct Agents to redact Vault Data from memory and logs after task completion, Rivault cannot enforce such instructions on Third-Party Platforms and does not warrant that any Agent will comply.

5.4Use of Agents to commit fraud or other unlawful acts. You are solely responsible for any actions taken by Agents using your Vault Data, including, without limitation, financial transactions, account access, communications sent, contracts entered into, or any unlawful conduct. You agree to indemnify Rivault for any such actions pursuant to Section 14.

6.Subscriptions, Fees, and Payment

6.1Fees. Certain features of the Service may require payment of fees, including subscription fees, usage-based fees, or one-time charges (collectively, “Fees”). All Fees are set forth on our pricing page and are quoted in U.S. dollars unless otherwise stated. We may change Fees at any time, effective on your next billing cycle.

6.2Auto-renewal. Subscriptions automatically renew at the end of each billing period until cancelled. You authorize us and our payment processors to charge your designated payment method on each renewal.

6.3No refunds. Except where required by law, all Fees are non-refundable, and we do not provide refunds or credits for partial periods, unused features, downgrades, or account terminations.

6.4Taxes. Fees are exclusive of taxes. You are responsible for all taxes, duties, and similar governmental assessments associated with your use of the Service.

6.5Suspension for non-payment. We may suspend or terminate your access for non-payment without further notice.

7.Beta, Preview, and Free-Tier Features

Any feature labelled as alpha, beta, preview, experimental, free-tier, or similar (a “Beta Feature”) is provided “AS IS” without any warranty whatsoever and may be modified, suspended, or removed at any time. We disclaim all liability arising from your use of Beta Features.

8.Intellectual Property

8.1Our IP. Rivault and its licensors own and retain all right, title, and interest in and to the Service, including all software, algorithms, designs, trademarks, logos, and documentation. Except for the limited license expressly granted in Section 8.2, no rights are granted to you.

8.2Limited license. Subject to your compliance with these Terms and payment of applicable Fees, Rivault grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Service for your internal personal or business use.

8.3Your Vault Data. You retain all right, title, and interest in and to your Vault Data. You grant Rivault a limited, worldwide, royalty-free license to host, process, transmit, encrypt, decrypt (only to the extent necessary for L1 retrieval flows), and back up your Vault Data solely as necessary to provide the Service.

8.4Feedback. If you provide us with suggestions, ideas, or feedback (“Feedback”), you grant us a perpetual, irrevocable, royalty-free, worldwide license to use such Feedback for any purpose without obligation or compensation to you.

9.Privacy

Our collection and use of personal information in connection with the Service is described in our Privacy Policy at /privacy, which is incorporated by reference. By using the Service, you consent to the collection, use, and disclosure of your information as described in the Privacy Policy.

10.Security; No Warranty of Security

10.1Our security efforts. We implement industry-standard administrative, technical, and physical safeguards (including AES-256-GCM encryption, argon2 hashing, WebAuthn, rate limiting, and OAuth 2.0 with PKCE) designed to protect Vault Data.

10.2No guarantee. Notwithstanding the foregoing, no method of transmission over the internet or method of electronic storage is 100% secure. Rivault makes no representation, warranty, or guarantee that the Service or any Vault Data will be free from breach, intrusion, interception, malware, ransomware, phishing, insider threat, supply-chain attack, zero-day exploit, cryptographic failure, or any other form of unauthorized access, disclosure, alteration, or destruction (each, a “Security Incident”), and Rivault expressly disclaims any such guarantee.

10.3No liability for Security Incidents. To the fullest extent permitted by applicable law, Rivault shall have no liability of any kind, whether in contract, tort (including negligence), statute, or otherwise, arising from or relating to any Security Incident, data breach, data leak, hacking, unauthorized access, or loss, alteration, or destruction of Vault Data, regardless of cause or theory of liability. You expressly assume all such risks.

11.Disclaimers

The Service, including all software, APIs, integrations, and documentation, is provided on an “AS IS” and “AS AVAILABLE” basis, with all faults, and without warranty of any kind, whether express, implied, statutory, or otherwise. To the maximum extent permitted by applicable law, Rivault, its affiliates, and its licensors specifically disclaim all implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, reliability, availability, and any warranties arising from course of dealing or usage of trade.

Without limiting the foregoing, Rivault does not warrant that (a) the Service will meet your requirements; (b) the Service will be uninterrupted, timely, secure, or error-free; (c) any Vault Data will be accurate, reliable, or preserved; (d) any defect or error will be corrected; (e) any Agent or Third-Party Platform will function as expected; or (f) the Service is free of viruses or other harmful components.

Some jurisdictions do not allow the exclusion of certain warranties; in such jurisdictions, the foregoing exclusions apply only to the maximum extent permitted by law.

12.Limitation of Liability

12.1Excluded damages. To the maximum extent permitted by applicable law, in no event shall Rivault, its affiliates, officers, directors, employees, agents, licensors, or suppliers be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, goodwill, business opportunity, use, data (including Vault Data), cryptocurrency, funds, or other intangible losses, arising out of or in connection with these Terms or the Service, whether based on contract, tort (including negligence), strict liability, statute, or any other theory, and whether or not Rivault has been advised of the possibility of such damages.

12.2Cap. In no event shall Rivault’s total cumulative liability arising out of or relating to these Terms or the Service exceed the greater of (a) one hundred U.S. dollars (US$100), or (b) the total Fees you actually paid to Rivault for the Service during the twelve (12) months immediately preceding the event giving rise to the claim.

12.3Essential basis. You acknowledge that the Fees reflect the allocation of risk set forth in these Terms and that Rivault would not provide the Service on these economic terms without these limitations. The limitations in this Section 12 form an essential basis of the bargain and apply even if any limited remedy fails of its essential purpose.

12.4Jurisdictional carve-out. Some jurisdictions do not allow the exclusion or limitation of certain damages. To the extent any such exclusion or limitation is held unenforceable, Rivault’s liability shall be limited to the minimum extent permitted by applicable law.

13.Assumption of Risk

You expressly acknowledge and agree that:

1. the storage and transmission of sensitive information online involves inherent and unavoidable risks;
2. authorizing Agents to access Vault Data may result in unauthorized, fraudulent, or unintended use of that data;
3. cryptographic systems, biometric authenticators, and authentication protocols are not infallible;
4. Third-Party Platforms may be compromised, may change their policies, may retain data contrary to instructions, or may discontinue service;
5. you bear sole responsibility for evaluating these risks and selecting which Vault Data, if any, to store in the Service.

14.Indemnification

You agree to defend, indemnify, and hold harmless Rivault, its affiliates, and each of their respective officers, directors, employees, contractors, agents, licensors, and suppliers from and against any and all claims, demands, actions, losses, damages, liabilities, costs, and expenses (including reasonable attorneys’ fees and court costs) arising out of or relating to: (a) your use of, or inability to use, the Service; (b) your Vault Data; (c) your Agents’ actions or omissions; (d) your violation of these Terms; (e) your violation of any law or third-party right; or (f) any Security Incident affecting your account that arises in whole or in part from your acts, omissions, or Credentials. Rivault reserves the right to assume the exclusive defense and control of any matter subject to indemnification, in which event you will cooperate with Rivault’s defense.

15.Termination

15.1By you. You may terminate your account at any time by following the instructions in your account settings or contacting support@rivault.ai.

15.2By us. We may suspend or terminate your access to the Service at any time, with or without cause, and with or without notice. Upon termination, your right to use the Service ceases immediately, and we may delete your Vault Data without further notice or liability.

15.3Survival. Sections 3.2, 4, 5, 8, 10–14, 16–20 (and any other provision that by its nature should survive) will survive termination.

16.Force Majeure

Rivault shall not be liable for any failure or delay in performance to the extent caused by events beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, government action, pandemic, labor disputes, internet, telecommunications, or utility failures, denial-of-service attacks, ransomware, supply-chain compromise, or failures of any Third-Party Platform.

17.Binding Arbitration; Class-Action Waiver

Please read this section carefully. It affects your legal rights.

17.1Agreement to arbitrate. Any dispute, claim, or controversy arising out of or relating to these Terms or the Service (a “Dispute”) shall be resolved exclusively by binding individual arbitration administered by JAMS (or, if unavailable, the American Arbitration Association) under its then-current rules, in [CITY, STATE], before a single arbitrator. Judgment on the award may be entered in any court of competent jurisdiction.

17.2Class-action waiver. You and Rivault each waive any right to bring or participate in any class, collective, consolidated, or representative action. The arbitrator may not consolidate more than one person’s claims and may not preside over any form of representative or class proceeding.

17.3Jury trial waiver. You and Rivault each knowingly and voluntarily waive the right to a trial by jury.

17.430-day opt-out. You may opt out of this Section 17 by emailing legal@rivault.ai within thirty (30) days of first accepting these Terms, with the subject line “Arbitration Opt-Out” and including your full legal name and account email.

17.5Exceptions. Either party may bring (a) an individual action in small-claims court, or (b) an action seeking injunctive or equitable relief for infringement or misappropriation of intellectual property in any court of competent jurisdiction.

17.6Limitation. Any Dispute must be filed within one (1) year after the cause of action arose, or it will be permanently barred.

18.Governing Law and Venue

These Terms are governed by the laws of the State of California, United States, without regard to its conflict-of-laws principles. Subject to Section 17, the exclusive venue for any action not subject to arbitration shall be the state or federal courts located in San Francisco County, California, and each party irrevocably consents to personal jurisdiction therein.

19.Modifications to the Terms

We may modify these Terms at any time. We will post the revised Terms on the Service and update the “Last updated” date. Material changes will be communicated via email or in-product notice at least seven (7) days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised Terms. If you do not agree, you must stop using the Service.

20.Miscellaneous

20.1Entire agreement. These Terms, together with the Privacy Policy and any order forms or written agreements signed by both parties, constitute the entire agreement and supersede all prior or contemporaneous agreements, communications, or understandings.

20.2Severability. If any provision is held invalid or unenforceable, the remaining provisions will remain in full force and effect, and the invalid provision will be modified to the minimum extent necessary to make it enforceable.

20.3No waiver. Our failure to enforce any provision will not be a waiver of that provision.

20.4Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms to an affiliate or in connection with a merger, acquisition, or sale of assets.

20.5No agency. Nothing in these Terms creates a partnership, joint venture, employment, or agency relationship.

20.6Notices. Notices to you may be sent to the email associated with your account. Notices to Rivault must be sent to legal@rivault.ai with a copy to 5810 Mission Street, San Francisco, CA 94112, USA.

20.7U.S. government users. The Service is “commercial computer software” subject to FAR 12.212 and DFARS 227.7202.

20.8Export. You will comply with all applicable export, re-export, and sanctions laws.

20.9Headings. Headings are for convenience only and do not affect interpretation.

21.Contact