Terms of Service

1. Acceptance of Terms

By accessing and using Crivvi ("the Service"), you accept and agree to be bound by the terms and provision of this agreement. If you do not agree to these Terms of Service, please do not use the Service.

2. Description of Service

Crivvi provides a secure platform for sharing sensitive information through encrypted, self-destructing links. Our service includes:

• Client-side AES-256-GCM encryption for text and files
• One-time use links that self-destruct after viewing
• Configurable expiration times and view limits
• Optional passcode protection
• Team collaboration features
• REST API access for developers

3. Security Architecture

Crivvi prioritizes security with client-side encryption. For text secrets and files under 2GB, encryption and decryption occur entirely in your browser using AES-256-GCM. Encryption keys are stored in URL fragments that are never transmitted to our servers.

Large Files (over 2GB): To ensure compatibility across all devices and browsers, files larger than 2GB are decrypted on our servers during download. Your encryption key is transmitted securely for this single operation and is not stored. This allows reliable downloads on mobile devices, older browsers, and systems with limited memory.

4. User Responsibilities

You agree to:

• Use the Service only for lawful purposes
• Not upload malicious content, malware, or illegal material
• Not abuse the Service through automated means or excessive requests
• Keep your account credentials secure
• Not share account access with unauthorized users
• Comply with all applicable laws and regulations

5. Prohibited Content

You may not use the Service to share:

• Illegal content or content that violates any laws
• Malware, viruses, or malicious code
• Content that infringes on intellectual property rights
• Content that harasses, threatens, or harms others
• Child sexual abuse material (CSAM)
• Content used for fraud, phishing, or scams

We reserve the right to terminate accounts that violate these terms and cooperate with law enforcement as required.

6. Subscription Plans and Billing

Crivvi offers paid subscription plans with different features and limits:

• Subscriptions are billed monthly via Stripe
• You may cancel at any time through the customer portal
• Cancellations take effect at the end of the current billing period
• No refunds for partial months
• Storage quotas and limits are enforced per plan
• Exceeding quotas will prevent creation of new secrets

7. Data Retention and Deletion

Secrets are automatically deleted when: (1) they are viewed and the view limit is reached, (2) the expiration time is reached, or (3) you manually delete them. We run automated cleanup processes to ensure expired secrets are permanently removed from our systems.

8. Service Availability

We strive to provide reliable service but do not guarantee 100% uptime. The Service is provided "as is" without warranties of any kind. We are not liable for any damages resulting from service interruptions, data loss, or inability to access the Service.

9. Limitation of Liability

To the maximum extent permitted by law, Crivvi and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from your use of the Service.

10. Account Termination

We reserve the right to suspend or terminate your account at any time for violations of these Terms of Service, abusive behavior, or illegal activity. Upon termination, all your secrets and data will be deleted.

11. Modifications to Terms

We may modify these Terms of Service at any time. We will notify users of significant changes via email or through the Service. Continued use of the Service after changes constitutes acceptance of the modified terms.

12. API Usage

API access is subject to rate limits and usage quotas based on your subscription plan. Abuse of the API, including excessive requests or automated attacks, may result in API key revocation and account termination.

13. Governing Law

These Terms of Service shall be governed by and construed in accordance with the laws of the United States, without regard to its conflict of law provisions.

14. Contact

For questions about these Terms of Service, please contact us through our support channels.