Terms of Service

1. Who we are

Kryptic is operated by Theka.dev SINGLE MEMBER P.C. (Theka.dev ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε.), trading as Theka.dev, a Private Company (IKE / Ι.Κ.Ε.) - Single-member registered in Greece (GEMI 194371006000, VAT EL803312906) - referred to below as "Kryptic", "we" or "us". These terms govern your use of the Kryptic cloud service at kryptic.dev and app.kryptic.dev. The MIT-licensed components (daemon, language packages, encryption engine) are governed by their own open-source licenses, not these terms.

2. The service

Kryptic is a secrets management platform for development teams: encrypted storage of application secrets, delivery to developer machines through the Kryptic daemon, and delivery to CI/CD systems through machine identities. We provide the service with reasonable skill and care, at the service level of your plan.

3. Accounts and organizations

You must provide accurate registration information and keep your credentials confidential. The organization owner controls membership, roles and billing. You are responsible for activity performed with your credentials and for the content of the secrets you store.

4. Acceptable use

You may not use Kryptic to store or distribute unlawful content, to attack or disrupt the service or other tenants, to circumvent plan limits, or to resell the service without a written agreement. Security research against Kryptic is welcome only through our disclosure program ([email protected]).

5. Plans, trials and payment

Paid plans are billed per developer seat, monthly, through Stripe. Fourteen-day trials convert to the Free plan unless you subscribe. Fees are exclusive of VAT where applicable. You may cancel at any time from the billing portal; access to paid features continues until the end of the paid period. Downgrading never locks you out of your own secrets.

6. Your data and confidentiality

Your secrets remain yours. They are encrypted end-to-end on your own devices before they reach us, and we hold no key that can decrypt them - we store and deliver ciphertext only. This also means we cannot recover your secret values if you lose your vault passphrase, recovery code, and all enrolled devices. We treat all customer data as confidential and do not sell it.

7. Availability and support

Service level targets and support channels depend on your plan as described on the pricing page. Scheduled maintenance is announced in advance where practical.

8. Liability

To the maximum extent permitted by law, our total liability arising out of the service in any 12-month period is limited to the amounts you paid us in that period. We are not liable for indirect or consequential damages. Nothing in these terms limits liability that cannot be limited under applicable law.

9. Termination

You can delete your organization at any time. We may suspend or terminate access for material breach of these terms with reasonable notice where possible. On termination we provide a 30-day window to export your secrets.

10. Changes and governing law

We may update these terms with 30 days' notice for material changes. These terms are governed by Greek law; the courts of Greece have exclusive jurisdiction, without prejudice to mandatory consumer protections. Questions: [email protected].