Terms of Service

1. Service

The operator provides browser-based, end-to-end encrypted sharing of team server and infrastructure credentials, along with membership controls, device management, and a signed change history (audit log). Because of the end-to-end encrypted design, the operator cannot read the content of the credentials you store — see the Privacy Policy.

2. Definitions

• A user is a member who agrees to these terms and uses the service.
• The master password is the password you set to encrypt and decrypt your vault. It never leaves your device and is not stored on the operator's servers.
• A vault is your encrypted collection of credentials (resource name, account ID, password, host address, notes).
• A group is a team of users who share vault items.

3. Posting and amendment of these terms

The operator posts these terms on the service. They may be amended within the limits of applicable law; the effective date and the reason are announced at least 7 days in advance, or 30 days in advance where the change is unfavourable to users.

4. Accounts and eligibility

• You sign up by confirming a valid email address through a magic link.
• You are responsible for keeping your account, devices, and master password secure, and you may not transfer or lend them to anyone else.
• If you become aware of unauthorised use of your account, notify the operator immediately and take the necessary steps, such as revoking the device remotely.
• Use the service only where you are lawfully authorised to manage the credentials involved.

5. Acceptable use

• Do not impersonate or misappropriate another person's account, device, or information.
• Do not exploit vulnerabilities or attempt to bypass or damage integrity verification.
• Do not use the service for unlawful purposes or purposes contrary to public order and morals.
• Do not infringe the rights of the operator or of any third party, including your organisation's policies or third-party terms.

6. Master password and the impossibility of recovery

7. Team administration and revocation

Group owners control membership and roles. Removing a member blocks future access and rotates the group key, but it cannot erase plaintext that the member legitimately viewed or copied beforehand. After revoking access, administrators should also rotate the underlying real credential; the service marks affected items and prompts for that rotation.

8. Limitation of liability

• The operator is not liable, to the extent permitted by applicable law, for damage arising from causes beyond its reasonable control, including force majeure, matters attributable to the user (such as a lost master password), and unlawful acts of third parties.
• The operator honestly discloses both the scope and the limits of its integrity protections (device signatures and the audit log) in the Privacy Policy and the security pages, and makes no guarantee beyond those disclosed limits. In particular, signed and hash-chained records support accountability but are not guaranteed to constitute complete legal evidence, because a modified or offline client may prevent some client-generated events from reaching the service.
• For the free plan, the operator is not liable except where applicable law provides otherwise. Liability for the paid plan follows applicable law and section 9 of these terms.

9. Fees, payment, withdrawal of subscription, and refunds

• Plans. The service is offered as a free plan (Free) and a paid plan (Pro). The free plan is limited to 2 groups, 50 items per group, 5 members per group (including invitations that have not yet been accepted), and 30 days of audit retention. The paid plan is not subject to those limits. Enterprise and public-sector deployments are governed by a separate agreement.
• Fees. Pro costs KRW 5,000 per user per month, excluding VAT, when billed annually; monthly billing costs KRW 6,000 per user per month, excluding VAT. The amount actually charged, its currency, and the tax applied are those shown on the checkout screen, which you can review before paying.
• Payment processor. Payment for the paid plan is handled by Paddle.com Market Ltd (United Kingdom) as merchant of record, which manages billing, tax handling, and payment methods. The operator does not collect or store your card number or other payment details. The personal data provided to Paddle and its international transfer are disclosed in section 6 of the Privacy Policy.
• Billing cycle and automatic renewal. The paid plan renews automatically at the end of each billing period you selected (monthly or annual) and is charged to the payment method on file. You may cancel at any time, and after cancelling you keep the paid features until the end of the period you have already paid for.
• Withdrawal of subscription. Under article 17 of the Korean Act on Consumer Protection in Electronic Commerce you may withdraw your subscription within 7 days of payment. Article 17(2) of the same Act allows that right to be restricted in certain cases, such as where you have substantially used the paid features during that period; the operator will tell you in advance where a restriction applies.
• Refunds. If you have not used the paid features within the withdrawal period, the full amount is refunded. Where an annual subscription is cancelled after the withdrawal period, the remaining term is refunded after deducting the value of the period already used and any penalty permitted by law. Monthly subscriptions run to the end of the paid period and are not refunded pro rata. Where the service was unavailable through the operator's fault, the corresponding amount is refunded or the subscription term is extended. Refunds are made to the original payment method, following the payment processor's procedures.
• Failed payment. If a charge fails, the paid features remain available during the processor's retry (dunning) period. If retries ultimately fail and the subscription is cancelled, the account moves to the free plan and the free-plan limits apply from that point.
• Price changes. The operator may change fees and plan limits, giving at least 30 days' notice under section 3. Changed fees apply from the first renewal after the announcement, and you may cancel before then.
• Questions. Billing and refund enquiries go to [email protected] and receive a response within three business days.

10. Availability and changes

Features and limits may change under section 3. The operator may suspend the service for maintenance, security, legal compliance, or material misuse, giving notice where practical.

11. Termination and restriction of use

• You may terminate the agreement at any time by deleting your account; personal data is then destroyed in accordance with the Privacy Policy, except for records the operator must retain by law.
• The operator may restrict use where you breach section 5, after prior notice or, in urgent cases, with notice given afterwards.

12. Governing law, jurisdiction, and operator information

These terms are governed by and construed in accordance with the laws of the Republic of Korea, and disputes relating to use of the service follow the procedures prescribed by applicable Korean law. Where this English text and the Korean text differ, the Korean text prevails.

• Published: [to be completed: publication date] / Effective: [to be completed: effective date]
• Trade name: unbundio
• Representative: [to be completed: representative name]
• Business registration number: [to be completed: business registration number]
• Mail-order sales registration number: [to be completed: mail-order sales registration number]
• Address: [to be completed: registered business address]
• Phone: [to be completed: business phone number]
• Email: [email protected]
• Payment processor: Paddle.com Market Ltd (United Kingdom)