Terms of Service — archived draft

API Boardroom — private preview terms, version 2026-11-01-local-vault-draft-1. This preview accepts synthetic credentials only. Real-key use is pending independent security review, physical-device and operational acceptance, and explicit owner authorization. Purchases are not enabled in this preview. API Boardroom organizes public provider links and offers an optional encrypted personal vault. You can browse the directory without storing API keys. Android vault contents and associated private lists are stored locally with encryption, without cloud synchronization. Account authentication, accepted-terms records, verification email, billing and operational records are separate server-side services. Listed providers are independent; their availability, prices, API access and terms can change. Their API charges are not included in an API Boardroom subscription. Boardroom does not execute provider requests with your stored credentials. Use accounts and credentials you are authorized to manage. Do not abuse the service, attack other users, upload illegal content or attempt unauthorized access. You retain ownership of your content and permit its processing only to provide the service. Password and compatible passkey/authenticator support protect account access. Android device authentication protects local key operations. A separate recovery passphrase protects the vault key, and a separate phone-held random value key protects stored secrets and local password/note documents. The passphrase and 24 recovery words are not sent to the service. Hardware protection depends on the device; a compromised unlocked phone can expose displayed data. These controls do not constitute independent certification or a promise of absolute security. The Android vault is local-only. No new vault content is synchronized to our cloud. Older server copies, accepted agreements and provider backups are not erased simply by installing this revision; legacy cleanup requires a separately verified and authorized procedure. Passwords and plain-text notes are stored encrypted on the device. Notes can grow within available device storage with technical memory, page and disk safeguards; images and document attachments are excluded. Complete encrypted backup/export is optional and uses storage chosen by you, including compatible USB drives. A backup is a point-in-time copy, not automatic synchronization. Keep a verified backup and recovery information separately. Device loss, clearing app data or uninstalling can permanently lose local contents without a recoverable backup. Account-password recovery cannot decrypt the vault. An exported copy is not erased when you delete an app entry or account, and deleting an exported file does not delete live vault contents. Fingerprint-only records cannot recover values that were never retained. The proposed consumer offer is 14 days of full access for eligible Play users, then the localized subscription price displayed by Google Play; the existing configured U.S. offer is US$3.99/month or US$34.99/year, automatically renewing unless cancelled. Google Play determines offer eligibility and charge dates. Cancel future renewals at any time through Subscription settings or directly in Google Play without a required call, survey or explanation. If the verified effective cancellation time is within 48 hours inclusive after the first successful paid subscription charge, including after the trial, we will issue a full refund of that first charge through Google Play. Notification or reconciliation delay does not consume this window. Qualifying cancellations enter processing; uncertain history or a network result may require manual reconciliation without changing the guarantee. No charge means no refund is needed. This voluntary guarantee does not restart on ordinary renewals and does not restrict stronger rights under law or Google Play. Requested cancellation, verified cancellation, submitted refund, confirmed refund and bank credit are separate outcomes. A full refund can end paid features. Existing data retrieval/export remains available under the published retention policy; cancellation does not delete encryption keys. Apple distribution is planned, not currently available. No Apple price, trial, purchase flow or additional voluntary refund guarantee is offered by this preview. If Apple in-app purchases are enabled, the final purchase screen and applicable Apple terms will identify the actual offer; manage Apple subscriptions through Apple account settings and request Apple-processed refunds through Apple. The Google Play first-charge commitment above applies to the stated Play offer and is not silently extended to Apple purchases. Mandatory consumer rights remain unaffected. Where applicable, Apple’s standard end-user license agreement supplements these service terms; no custom Apple license or approved App Store submission is represented. The preview is provided for evaluation and may be interrupted for maintenance. No guarantee of uninterrupted availability or absolute security is made. This does not exclude mandatory consumer rights, responsibility that cannot legally be limited, or our express refund commitments. No arbitration requirement, class-action waiver or punitive indemnity is introduced by these preview terms. Verified account deletion removes active server account records and legacy server vault/private-list content without waiting for a subscription or refund to settle. Local vault cleanup and user-controlled backups are separate: the app must clearly confirm any local deletion, and cannot recall exported copies. It queues a request to cancel renewals of linked Google Play subscriptions. A queued request is not Google confirmation: check or cancel directly through Google Play, especially during a service outage. Minimal billing records, including a pseudonymous account binding, purchase token and charge/cancellation/refund evidence, remain separately to complete reconciliation. These records are not anonymous. Their justified retention period, access policy and legal basis require owner/legal review before consumer launch. Protected deletion tombstones suppress restored accounts; hosted backup expiry and restore procedures still require operational verification. Deleting Boardroom records does not revoke provider credentials. Export before deletion. Final consumer launch requires legal-operator/contact details, launch-country review, confirmed retention commitments, a monitored cancellation/refund/support workflow and approved final policies. Age/eligibility rules, governing law, permitted liability limits and jurisdiction-specific privacy obligations also require qualified legal review. These draft terms are not the final commercial agreement. Material updates will be presented for acceptance for new applicable service use; cancellation, support, deletion and existing-data export must remain accessible without accepting revised terms.