Terms of Service

By accessing or using Enclave (“the Service”), you agree to be legally bound by these Terms of Service (“Terms”) and our Privacy Policy. If you do not agree to these Terms, do not use the Service.

These Terms apply to all users of the Service, including users of the web platform and the Enclave CLI.

Enclave is a secrets management platform that allows developer teams to securely store, version, and distribute environment variables and application secrets. The Service includes:

• A web-based dashboard for managing projects, environments, and team members.
• A REST API for programmatic access.
• A command-line interface (CLI) for Git-like secrets management workflows.

To use the Service, you must authenticate via Google or GitHub OAuth. You are responsible for all activity that occurs under your account. You must notify us immediately of any unauthorized use of your account.

You must be at least 13 years old to use the Service. By creating an account, you represent that you meet this age requirement.

Each project may have up to 5 members (including the owner) in the current version of the Service. This limit may change in the future.

You agree not to use Enclave to:

• Store data that is illegal, harmful, threatening, abusive, or defamatory.
• Store credentials that belong to systems or services you are not authorized to access.
• Attempt to gain unauthorized access to the Service, its servers, or any systems connected to the Service.
• Probe, scan, or test the vulnerability of any part of the Service without prior written permission.
• Use the Service in a manner that could damage, disable, overburden, or impair the infrastructure.
• Reverse-engineer, decompile, or disassemble any part of the Service beyond what is permitted by applicable law.
• Resell or sublicense access to the Service to third parties without explicit permission.

We reserve the right to suspend or terminate accounts that violate these acceptable use guidelines, without prior notice.

You own your data. The secrets, project configurations, and environment variables you store in Enclave remain your property at all times. We do not claim any ownership, license, or right over the content of your secrets.

You are solely responsible for the secrets you store and their appropriateness for use within the Service. You grant us the limited right to process your data solely to provide the Service (e.g., encrypting and storing it on your behalf).

You are responsible for ensuring you have the right to store any secrets or credentials in the Service (e.g., API keys, database passwords, etc. that belong to services you operate or are authorized to use).

We implement industry-standard security measures including AES-256-GCM envelope encryption at rest, HttpOnly session cookies, CSRF state verification on OAuth flows, rate limiting, and session fingerprinting.

However, no system is perfectly secure. You are responsible for:

• Keeping your personal access tokens (PATs) confidential.
• Revoking tokens that may have been compromised.
• Controlling which team members have access to your projects.
• Using the enc run command instead of pulling secrets to disk where possible to minimize plaintext exposure.

If you discover a security vulnerability, please report it responsibly to ankit@ankitbhavarthe.xyz before public disclosure.

We strive to maintain high availability, but the Service is provided on an “as is” and “as available” basis. We do not guarantee uninterrupted or error-free operation of the Service.

We reserve the right to perform maintenance, upgrades, or changes to the Service at any time, which may result in temporary unavailability. We will attempt to provide advance notice of planned maintenance where practical.

The Enclave platform, including its web interface, API, CLI, design, branding, and underlying code (excluding your data), is owned by Ankit Bhavarthe and protected by applicable intellectual property laws.

The Enclave CLI is open-source and available at github.com/Ankit-2563/enclave-cli. Use of the open-source code is governed by its respective license.

You may not use the Enclave name, logo, or branding in any way that suggests endorsement or affiliation without prior written consent.

THE SERVICE IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

YOU USE THE SERVICE AT YOUR OWN RISK. YOU ARE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR SYSTEMS OR LOSS OF DATA THAT RESULTS FROM USE OF THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ANKIT BHAVARTHE OR ENCLAVE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, DATA, GOODWILL, SERVICE INTERRUPTION, COMPUTER DAMAGE, OR SYSTEM FAILURE, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OR INABILITY TO USE THE SERVICE.

OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID US (IF ANY) IN THE 12 MONTHS PRECEDING THE CLAIM.

You may stop using the Service at any time. You may request deletion of your account and data by contacting us at ankit@ankitbhavarthe.xyz.

We reserve the right to suspend or terminate your access to the Service at any time, with or without cause, with or without notice, for conduct that we determine violates these Terms or is harmful to other users, us, third parties, or the integrity of the Service.

Upon termination, your right to use the Service immediately ceases. Sections of these Terms that by their nature should survive termination (including Sections 8–12) shall survive.

These Terms are governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions. Any disputes arising from these Terms or the Service shall be subject to the exclusive jurisdiction of the courts located in India.

We may revise these Terms from time to time. When we make material changes, we will update the “Last updated” date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Terms.

If you disagree with the revised Terms, your sole remedy is to stop using the Service and request account deletion.

If you have any questions about these Terms, please contact us:

• Email: ankit@ankitbhavarthe.xyz
• Website: ankitbhavarthe.xyz