Legal

Terms of Service

Last updated: May 2025 (draft)

Draft — pending lawyer review. This document is a working draft based on Termly/iubenda boilerplate adapted to DataVault’s specific architecture (Drive-backed storage, BYOAI, optional encryption, Lemon Squeezy as merchant of record). It must be reviewed by a qualified attorney before public deployment, especially for: Belgian/EU consumer protection rights (mandatory 14-day withdrawal right, conformity, statutory warranties), liability limitations enforceable under Belgian law, and the interaction with the Lemon Squeezy merchant agreement.

Document versionStatusLast updated
0.1 (draft)Pre-launch2026-05-02

1. Acceptance

By creating an account or using DataVault (the “Service”), you agree to these Terms of Service (“Terms”). If you don’t agree, don’t use the Service.

The Service is provided by Quillen Labs (“we”, “us”), the studio behind DataVault. Address: [Belgian residential address — to be filled before publication]. Contact: [email protected].

2. The Service in plain words

DataVault is a personal knowledge management application. You sign in with your Google account, the Service creates a DataVault folder in your own Google Drive, and you author content (notes, notebooks, documents, CVs, cover letters, plot outlines, personas) that lives in that folder. Optional features include:

  • Client-side encryption of your vault on Drive.
  • AI Companion (BYOAI), which lets you connect your own API key from Gemini, OpenAI, Anthropic, or OpenRouter to assist your writing.
  • Cross-platform clients: a web app, a Windows desktop app (built with Tauri), and an Android app (built with Capacitor).

3. Beta period and Pro tier

The Service is currently in closed beta. During the beta:

  • All users are treated as Pro, with all features enabled, at no charge.
  • We may apply rate limits, soft caps on storage / AI calls, and other reasonable safeguards to keep the Service stable.
  • We may change feature scope, redesign features, or remove features that don’t survive testing. We’ll communicate material changes in-app.

When the beta ends, the Service will move to a Free + Pro tier model. At that time we will:

  • Notify all signed-in users in-app and by email at least 30 days before the change.
  • Give you the opportunity to export your vault and continue using a reduced free tier without losing data.
  • Honor any “founder’s pricing” or grandfathering commitments we publish during the beta.

4. Your account

To use the Service you need a Google account. You agree:

  • The account is yours and you keep its credentials secure.
  • You’re responsible for everything done under your account.
  • You’re at least 16 years old. (See the Privacy Policy §9.)

If you suspect your account is compromised, sign out, change your Google password, and revoke DataVault’s access in your Google account. Contact us if you need additional help.

5. Your content stays yours

Anything you create, upload, or store via DataVault — your notes, documents, CVs, cover letters, plot outlines, personas, attachments, encryption keys you generate, AI prompts you write — is yours. We claim no ownership over it.

You grant us a narrow, non-exclusive, revocable license to:

  • Display your content back to you in the user interface.
  • Store the technical session metadata + encryption-key data described in the Privacy Policy.

That license ends when you delete the data or stop using the Service. We do not analyze, mine, train AI on, or otherwise use your vault content for any purpose other than operating the Service for you.

6. Acceptable use

You agree not to use the Service to:

  • Store or distribute content that violates applicable law, including child sexual abuse material, content infringing on others’ intellectual property, or content used to facilitate fraud, harassment, or discrimination.
  • Reverse-engineer, scrape, or interfere with the technical operation of the Service.
  • Resell or sublicense access to the Service without our written permission.
  • Circumvent rate limits, security mechanisms, or feature gates.
  • Use the AI Companion in a way that violates the upstream AI provider’s acceptable-use policy.

We may suspend accounts that violate this section. For severe or repeated violations we may delete the account; we will give you the opportunity to export your vault first wherever practicable.

7. AI Companion (Bring Your Own AI)

The AI Companion is optional. To use it you connect your own API key from a third-party AI provider. When you do:

  • Your prompts go directly from your device to the provider you picked. They do not pass through our servers.
  • Your AI provider’s terms apply to anything you send through the AI Companion. Read their terms before sending sensitive content.
  • You pay your AI provider, not us. We don’t resell tokens.
  • AI output is statistical, not factual. Don’t treat it as legal, medical, financial, or other professional advice.

8. Subscription billing (post-beta)

After the beta ends, paid subscriptions will be processed by Lemon Squeezy as the merchant of record. Lemon Squeezy collects payment, files EU VAT, and handles refunds within their refund window. The Lemon Squeezy Terms of Service and Privacy Policy apply to the billing relationship.

Belgian/EU consumers retain the 14-day right of withdrawal (Code de droit économique Art. VI.47 et seq.) for distance contracts. Subscriptions purchased online may be cancelled within 14 days for a full refund unless you have already substantively used the service in that window — see the withdrawal form in your Account → Subscription page when paid plans go live.

We will publish detailed pricing and billing terms in this document before the first paid subscription is sold.

9. Service availability and warranties

We aim for high availability but the Service is provided “as is” and “as available” without warranties beyond those required by Belgian/EU law.

To the extent permitted by law, we disclaim all implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

For Belgian and EU consumers, the statutory two-year warranty for non-conformity of digital services (Code de droit économique Art. VI amendments transposing Directive (EU) 2019/770) remains intact and is not waivable. If the Service materially fails to perform as described, contact us for remedy.

10. Limitation of liability

To the maximum extent permitted by Belgian law, we are not liable for:

  • Indirect, incidental, consequential, special, or exemplary damages.
  • Loss of revenue, profit, business, or data except to the extent the loss results from our gross negligence or willful misconduct.
  • Damages caused by your AI provider, Google, Cloudflare, Railway, Lemon Squeezy, or any third party listed in the Privacy Policy §5 acting outside the scope of our control.

Our total cumulative liability for any claim related to the Service is limited to the greater of (a) the amount you paid us in the 12 months preceding the claim, or (b) €100, except for claims arising from our gross negligence, willful misconduct, or our inability to limit liability under Belgian law (e.g., personal injury, fraud), where liability is uncapped.

This limitation applies to liability of every kind: contract, tort (including negligence), strict liability, statutory, or otherwise.

11. Termination

You can stop using the Service at any time by signing out and deleting the DataVault folder from your Drive (or using Account → Reset Account). See the Privacy Policy §7 for what happens to your backend data on deletion.

We can suspend or terminate your account if you materially breach these Terms. We will give you reasonable notice and the chance to export your vault unless the breach is severe (e.g., illegal content, security abuse).

We reserve the right to discontinue the Service. If we do, we will give signed-in users at least 60 days’ notice and ensure the export flow remains functional through that window.

12. Changes to these Terms

We will post material changes here, bump the version in the table at the top, and update the “Last updated” date. For changes that affect your rights or obligations (e.g., introducing the paid tier), we will notify signed-in users in-app and by email at least 30 days before the change takes effect. Continued use of the Service after a change is acceptance of the updated Terms.

13. Governing law and jurisdiction

These Terms are governed by Belgian law, with EU consumer protection rights preserved for users located in the EU.

Disputes will be submitted to the competent courts of Brussels, Belgium, except where mandatory consumer protection law gives EU consumers the right to bring proceedings in their country of residence — in which case that right is preserved.

EU consumers can also use the EU Online Dispute Resolution platform: https://ec.europa.eu/consumers/odr/

14. Contact

  • General questions: [email protected].
  • Legal / compliance: same address, subject “Legal: ”.