Draft · v0.12.2

Palladin Terms of Service

Polish version: Regulamin. The Polish version is binding, without limiting mandatory consumer rights.

§1. Provider and scope

1. Palladin is a password and secret manager that also supports AI Agents authorized by the user.
2. The provider is Patryk Roguszewski, trading as Patryk Roguszewski IT Solutions, registered in Poland’s CEIDG, NIP 8241804773, REGON 366380826. Service address: ul. Szkolna 11G/1, 05-091 Ząbki, Poland. Contact: patryk.roguszewski@palladin.io, tel. +48 517 777 441.
3. These Terms are available free of charge before contracting, in a form that can be saved and reproduced.

§2. Definitions

Consumer protections also apply to sole traders where a particular provision grants them, including non-professional contracts under Article 7aa of Poland’s Consumer Rights Act. B2B-only restrictions do not override those rights.

§3. Service and Plans

1. Palladin supports storage and synchronization of encrypted Entries, import and local export, authorized sharing, Agent Access controls and event records. Availability depends on the client release and Plan disclosed before contracting.
2. Family is for private use by up to six members of one household. Professional use requires the appropriate B2B offering. Team charges for human seats, not Agents; Enterprise may have individually agreed terms.
3. A Plan may limit scale and administrative features. It does not remove Access security controls. “Unlimited” means no tariff limit; technical restrictions protecting the service and other users still apply and must not conceal a commercial limit.

§4. Requirements and updates

1. You need a device and operating system supported by the chosen release, internet access for sign-in and synchronization, and an e-mail account. The web panel requires a supported up-to-date browser, JavaScript and local storage access. We provide app, extension and CLI requirements at download and before purchase; clients do not all have the same features.
2. Local data may allow reading after unlock without current synchronization. Being offline does not guarantee the latest changes or immediate enforcement of remote revocation.
3. We provide updates, including security updates, needed for conformity for the period required by law and inform you about them. Install them within a reasonable time. Failure to update limits liability only on the conditions provided by law, not automatically.

§5. Keys and zero-knowledge

1. Entry contents and presentation are encrypted and decrypted on-device. The backend has no keys to read them. Zero-knowledge does not cover all data: we process account information, authorization structure and logs, among other data. The Privacy Policy explains the scope and exceptions.
2. Protect your Master Password, Recovery Key, devices and exports. Losing your Master Password and available recovery route, including your Recovery Key, may permanently prevent Vault decryption. Palladin cannot recreate missing keys. Recovering e-mail access or sign-in alone does not restore Vault data.
3. An unlocked app, an export, and data entered into a website may be read by a person or software with relevant device or website access. These security limitations do not exclude our responsibility for our own errors.

§6. Agents and extension

1. An Agent acts on your behalf. Before approving, check the recipient, data scope and use method. Authorization to read Entry descriptions is separate from access to secrets.
2. You may share selected Entries or an entire Vault with an Agent. Entire-Vault access requires trust similar to that placed in a Vault member: the Agent can decrypt its data, and retrieval limits do not protect it against a Vault-key holder.
3. Revocation blocks further authorized retrieval but cannot remove keys or data already copied. Following suspected Agent compromise, revoke access, change affected credentials and renew Vault protections.
4. Depending on the use method you choose, a secret may reach an AI model, a running program or a website form. You choose the Agent’s providers and environment; this does not make them Palladin subprocessors.
5. The unlocked extension may automatically fill the first empty login form on an exact-match HTTPS host, without a click in a field. It neither overwrites values nor submits the form. A related host requires a one-operation Entry choice. The website and its scripts may read entered values. Saving an Entry and filling a card require an explicit action.

§7. Permitted use and restrictions

1. Do not use Palladin for unlawful access, data theft, harassment, attacks or unlawful content. Security research is covered by the Vulnerability Disclosure Policy.
2. We may proportionately restrict a feature or account to contain a threat or serious breach. Where circumstances permit, we first inform you and allow the cause to be remedied. Immediate action is allowed where delay threatens security or the law requires it.
3. We provide the reason, scope and available remedies, unless disclosure is legally prohibited. Send illegal-content notices to the contact in §1 with the location, reasons, contact details and a good-faith statement. Do not send secrets. The contact for users and authorities supports Polish and English and communication with a human.
4. You may appeal a decision by e-mail within six months for human reconsideration. This voluntary process does not mean Palladin is a public online platform and does not limit court proceedings or other statutory remedies.

§8. Contract, purchase and termination

1. The account agreement is formed by accepting these Terms and activating the account. Optional consent is not a condition of an account.
2. You may create an account from age 13. A person aged 13–17 needs documented approval from their legal representative for the agreement and use of the service before activation.
3. Minors obtain paid access only by invitation to Family purchased on an adult’s account; the adult manages payments. Minors do not buy an individual Plan or subscription or start a trial independently. This does not restrict the free Benefit in paragraph 15.
4. The Family purchaser or manager is not necessarily the child’s representative; purchase and invitation do not replace required approval. Contract approval is not analytics or marketing consent. None of these roles automatically grants access to another member’s private Vaults or keys; sharing needs separate authorization, subject to mandatory rules on representation and protection of minors.
5. Before ordering, you receive the Plan scope, total price, taxes, currency, period, renewal terms, technical requirements and seller identity. The order must unambiguously indicate an obligation to pay. Contract confirmation and required information will be supplied on a durable medium. Purchasing a paid Plan forms a separate contract under the terms the seller provides before ordering; confirmation identifies the seller and the date of conclusion.
6. Web purchases use the Paddle entity identified at checkout as seller/Merchant of Record; mobile purchases use Apple App Store or Google Play. Channel terms do not limit statutory rights or Palladin’s responsibility for its service. Payment providers do not receive Vault keys from us.
7. Monthly or annual subscriptions are paid in advance and renew for the same period until cancelled. Cancel through the purchase channel; access normally ends with the paid period. Uninstalling an app does not cancel a purchase.
8. Developer, Family and Team Starter each have one 14-day trial per user or organization, subject to paragraphs 2–4. The trial is free and requires no card or other payment method. It creates no subscription or automatic charges, including after it ends. Continued paid access requires a separate purchase.
9. Consumers may withdraw from a distance contract within 14 days of conclusion, without giving reasons. For a paid Plan, the period starts when its purchase contract is concluded, not when the account was previously created. An unambiguous statement sent before the deadline is sufficient. For a Palladin contract use the e-mail or address in §1; Paddle/Apple/Google purchase matters may also be directed to the relevant seller. You may use the model withdrawal form, but it is optional. Not using a store form or tool does not remove statutory rights. Starting to use a continuous service does not itself waive withdrawal.
10. If you expressly request paid service to begin before the withdrawal period ends and receive the required information, a proportionate charge for service until withdrawal may apply, only as permitted by law. Refunds due are made within 14 days of receipt of the statement, using the original payment method unless another method is agreed without extra cost. A general “digital content” consent does not remove statutory digital-service rights.
11. You may terminate the account agreement and request erasure through §1. We verify identity and authority over the data, taking other Organization members’ rights into account; leaving an Organization does not erase others’ data or the whole Organization.
12. We may terminate for a valid reason, such as discontinuing the service or a serious unremedied breach, on at least 30 days’ notice, except urgent §7 cases. We will enable data retrieval within legal and security limits. If paid service ends without a breach on your part, we refund the unused period proportionately.
13. Downgrading does not cause deletion solely because new limits are exceeded. You retain reading, export and Access revocation while additions may be restricted.
14. B2B Customers ensure purchasing authority and lawful data and permissions in their Organization. Processing is governed by the DPA regardless of tariff name. Individually agreed Enterprise terms take precedence, subject to law and the DPA.
15. A verified waitlist entry preceding account creation may provide a personal Developer month under the separate promotion terms. It requires no card, is not a trial, creates no subscription or charges and grants no Organization Plan. Afterwards, the independently applicable Plan remains, or Free if there is no other entitlement.

§9. Data and liability

1. You retain rights to your data. You authorize only operations needed to provide the service, maintain security and meet legal obligations.
2. We are responsible for proper contractual performance. Risks in §5–6 do not excuse our own acts, defective safeguards or service nonconformity.
3. Only in B2B and as legally permitted, liability for ordinary negligence covers actual loss up to fees for the 12 months preceding the event; lost profits are excluded. This restriction does not cover intent, gross negligence, confidentiality, data protection or liability that cannot legally be limited. It does not prejudice the special protections in §2.

§10. Complaints and conformity

1. Send complaints to §1 with the issue and information identifying the matter. Do not send passwords, keys or secrets. Telephone contact alone is insufficient for a sensitive instruction without identity verification.
2. Consumers receive a response on a durable medium within 14 days; no response within that period means the complaint is accepted under Article 7a of Poland’s Consumer Rights Act. We refer technical and payment matters to the relevant entity without shifting our own obligations.
3. For a nonconforming digital service, you may require conformity and, in statutory cases, a price reduction or withdrawal. This includes required updates. Diagnostic cooperation should be reasonable, secure and minimally burdensome.
4. Consumer advisers and competent alternative dispute-resolution bodies provide assistance; see UOKiK. This does not impose arbitration or waive access to courts.

§11. Export and switching

1. You can export Entries locally to CSV/JSON. Decryption requires an unlocked client; the file may contain plaintext secrets. Protect it and remove unnecessary copies.
2. Switching providers is free. The notice period is up to two months, transition is normally up to 30 days, and retrieval remains available for at least 30 days afterwards. The export specification defines scope, exceptions, termination and erasure. GDPR and other statutory rights remain independent.

§12. Privacy

The Privacy Policy explains data, purposes, legal bases, recipients and rights; the Cookie Policy explains local storage and analytics choices. We provide this information before collection.

§13. Changes

1. Terms may change for a specific valid reason: changes to law, security, necessary technology/provider or the offering. Changes must correspond to that reason and cannot be retroactive.
2. Material changes will be notified on a durable medium at least 30 days in advance, with the text, reason, date and termination right. Urgent security actions do not authorize arbitrary commercial changes.
3. Changes needed for conformity are free; other service changes under this section also impose no additional costs on consumers. For another change materially adversely affecting use, consumers may terminate free of charge within 30 days of the change or notice, whichever is later, unless they can retain an unchanged service free of charge.
4. A new price does not affect a paid period. Consumer renewal at a higher price requires prior active acceptance; without it, renewal does not occur. B2B receives at least the notice in paragraph 2 unless more favorable terms are agreed.

§14. Law and language

Polish law applies. Consumers retain mandatory protection under the law of their habitual residence and statutory court jurisdiction. Only B2B disputes may be assigned to the court for the provider’s seat, where legally permitted. Polish is binding; translation does not limit consumer rights.