Terms of Use

1. General Provisions

1.1. These Terms govern all use of VegaCrypt, including anonymous transfers, registered accounts, company (organization) workspaces, and official integrations we provide.

1.2. By accessing or using the service, you confirm that you agree to these Terms. If you use VegaCrypt on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

1.3. The service is not intended for children under the age of 16.

2. Purpose of the Service and Data Deletion

2.1. VegaCrypt is designed for secure, private, and time-limited transfer of files, text messages, voice messages, and video messages.

2.2. Depending on the features you use, the service may include:

• Outbound transfers protected by Password Access, Dual-Key Link, or Send to VegaCrypt user (Vault);
• Encrypted Inbox for Vault deliveries;
• Safebox channels, so invited guests can send encrypted content to you without creating an account;
• Company workspaces on an organization subdomain;
• Official clients and integrations we make available, including the web application and the Outlook add-in (Secure Attach).

2.3. VegaCrypt is not long-term cloud storage and not a shared drive. Transfer content is retained only as needed to complete the transfer, according to the lifetime, first-access, and plan limits that apply to that item.

2.4. Transfer files and messages are deleted when any of the following occurs, depending on the settings and feature in use: after the first download or view (if that option is enabled), when the selected storage period expires, or when the sender or authorized account holder removes the item. Maximum retention depends on account type and plan and is stated on the website. The current maximum transfer lifetime is 30 days, except where a company workspace is configured otherwise within the limits shown in the product.

2.5. Account records, Encrypted Inbox items, Safebox settings, billing records, and similar operational data are kept while needed to provide the service and as required by law. They are not subject to the same short lifetime as an anonymous one-time transfer.

3. Privacy, Accounts, and User Responsibility

3.1. Registration is not required for basic Password Access transfers.

3.2. If you create an account, you provide an email address and a password, or you sign in through a supported single sign-on provider (such as Google or LinkedIn). You may also set an Encryption Master Password (EMP) and a recovery code to unlock Vault keys. EMP and the recovery code are not your sign-in password. Account password reset is performed by email.

3.3. We process information needed to operate the service, including email addresses, session and security cookies, recipient or invite emails you enter, company profile data, and billing records. We do not sell personal data. Details are set out in the Privacy Policy.

3.4. Payment cards are processed by our payment provider (Stripe). VegaCrypt does not store full card numbers. We store subscription and invoice records needed to provide paid plans.

3.5. Transfer content is encrypted on the user’s device before upload. VegaCrypt stores ciphertext and related technical metadata. We do not have the keys required to decrypt transfer content and do not inspect its plaintext.

3.6. The user who uploads or sends data is fully responsible for its content, for complying with applicable law, and for keeping credentials, links, passwords, EMP, and recovery codes confidential.

4. Prohibited Content and Actions

4.1. It is prohibited to use the service to transfer data containing:

• Illegal content;
• Malicious software (viruses, spyware, and similar);
• Pornographic materials;
• Materials that infringe copyrights or other intellectual property rights, or that otherwise violate applicable law, including United States law.

4.2. You are fully responsible for complying with all applicable laws when using the service.

4.3. You may not attempt to hack the service, bypass restrictions, gain unauthorized access, probe, scrape, or overload the service. You may not use bots, unofficial scripts, or unofficial APIs without our prior written permission. Use of the official web application, the official Outlook add-in, and other official integrations we provide is permitted.

4.4. Violation of these Terms may result in immediate suspension or termination of access and, where appropriate, a report to relevant authorities.

5. Access to Data and Recovery

5.1. If a transfer link, link fragment, password, EMP, or recovery code is lost, access to the related content cannot be restored. VegaCrypt does not store those secrets in a form that allows us to recover them.

5.2. How access is delivered depends on the method you choose:

• Password Access. The sender receives the link and transfer password and is responsible for sharing them securely.
• Dual-Key Link and Outlook Secure Attach. The intended recipient receives an access email and must complete email verification. Part of the key remains only in the link fragment and is not stored by VegaCrypt in recoverable form.
• Send to VegaCrypt user (Vault) and Safebox. The recipient opens the content in Encrypted Inbox and/or via an email link, using EMP.

5.3. VegaCrypt does not publish or distribute transfer links or passwords on its own. Anyone who receives a valid link or credential from you can access the content until it expires or is removed.

6. Technical Aspects

6.1. File size, file count, voice and video duration, retention, cooldown, and related limits depend on account type, plan, and (for companies) organization settings. Current limits are shown in the product and on the pricing pages.

6.2. VegaCrypt is offered through the web application and through official integrations we publish, including the Outlook add-in. Available features may differ by client.

6.3. Technical security logs (such as IP address, operating system, and browser type) are kept for security and service monitoring, stored for no more than 15 days, and are not used to profile users. Account, billing, company administration, and support records are retained separately as needed to operate the service.

7. Limitation of Liability

7.1. VegaCrypt makes reasonable efforts to keep the service available, but does not guarantee uninterrupted, error-free, or continuous availability. To the fullest extent permitted by law, we are not liable for loss, delay, or unavailability of data caused by technical reasons, equipment or software failures, third-party services, lost credentials, or circumstances beyond our reasonable control.

7.2. VegaCrypt is not responsible for user actions related to the transfer, content, sharing, or use of data, including any disclosure that occurs after you share a link or credential.

7.3. The service is provided “as is” and “as available,” without warranties of any kind except those that cannot be excluded under applicable law.

8. Changes to the Terms

8.1. We may change these Terms at any time.

8.2. The current version is always available on the website. Continued use of the service after changes are published means acceptance of the new version.

9. Contact

9.1. For questions about these Terms or the service, contact us via the form on the website, by email at [email protected], or — if you have an account — through Support tickets in the application.