These Terms govern the use of the service VaultSide (the “Service”), consisting of a web app, Progressive Web App (PWA), and Chrome browser extension, available at vaultside.cre8flow.de. The Service is provided by:

By creating an account you agree to these Terms and to the privacy policy.

2. Description of the Service

The Service is a personal productivity application for the secure, client-side-encrypted management of notes, to-do lists, credentials, data tables, and similar content. It is available in a free tier and in optional paid tiers.

The specific feature scope is shown in the in-product description at the time of use. We may develop, change, or discontinue individual features as long as it is reasonable for the user and does not materially impair the main service.

3. Conclusion of contract and account

The user contract is concluded once you have successfully registered (creating an account and confirming your e-mail address). The user warrants that the information provided is truthful and complete and keeps it up to date.

The user is required to keep their login credentials confidential and protect them from third-party access. In case of suspected misuse the user must change the password immediately and inform us without undue delay.

4. Master password and encryption

Important: Confidential content is encrypted exclusively on the client side (AES-GCM with a key derived from your master password using PBKDF2 with 310,000 iterations). Your master password never leaves your device and is unknown to us.

If you forget your master password, we cannot recover your encrypted content. A reset is technically impossible. You are responsible for storing your master password safely.

5. Free and paid tiers

Basic use is free. Optional paid tiers with extended functionality may be available. Prices and included benefits are shown transparently within the Service.

Where paid tiers are offered, the relevant billing period starts with order confirmation. You may cancel a paid tier at any time to the end of the current billing period; fees already paid will not be refunded pro-rata, unless mandatory statutory provisions (e.g. consumer right of withdrawal) provide otherwise.

Right of withdrawal for consumers

You have the right to withdraw from the contract within fourteen days without giving reasons. The withdrawal period is fourteen days from the day the contract was concluded. To exercise your right of withdrawal you must inform us by means of a clear statement (e.g. e-mail) of your decision. E-mail: legal@vaultside.de.

The right of withdrawal expires prematurely if the service was fully performed with your express consent before the end of the withdrawal period and you acknowledged that, by performance, you lose your right of withdrawal.

6. User obligations

The user undertakes not to misuse the Service, in particular:

• not to store or transmit unlawful, offensive, violence-glorifying, hate-mongering, youth-endangering or pornographic content;
• not to infringe third-party rights (in particular copyright, trademark, personality, and data protection rights);
• not to launch malware, spam, or automated attacks against the Service or its infrastructure;
• not to consume the resources provided disproportionately (e.g. by creating excessive numbers of accounts or test data).

In case of violations, we reserve the right to suspend the account temporarily or, in case of serious violations, to terminate the contract for cause.

7. Availability

We strive for the highest possible availability of the Service but do not guarantee a specific availability rate. Maintenance, software updates or disruptions outside our control (e.g. at the hosting provider, back-end provider, or telecommunications services) may result in temporary limitations.

8. Liability

We are liable without limitation for damages arising from injury to life, body or health based on a negligent or intentional breach of duty, and for other damages based on an intentional or grossly negligent breach of duty.

In cases of ordinary negligence we are liable only for breach of essential contractual obligations (so-called cardinal duties). Essential contractual obligations are those whose fulfilment is essential for the proper performance of the contract and on whose observance the user regularly relies and may rely. In such cases liability is limited to typical, foreseeable damage.

Any further liability is excluded. Liability under the German Product Liability Act remains unaffected.

Because content is encrypted exclusively on the client side (see section 4), we accept no liability in particular for the loss of encrypted content as a consequence of a forgotten master password. Please make backups of your data wherever the app offers export functionality.

9. Data protection

The processing of personal data is governed exclusively by our privacy policy.

10. Term and termination

The free user contract is concluded for an indefinite period. The user may delete their account at any time; the Service provides a corresponding function, or an informal e-mail to legal@vaultside.de is sufficient.

We may terminate the user contract with reasonable notice, in particular if we permanently discontinue the Service. The right to terminate for cause without notice remains unaffected.

After termination of the contract your account data will be deleted, unless statutory retention obligations apply.

11. Amendments to the Terms

We reserve the right to amend these Terms where required for legal, technical, or economic reasons. We will inform you of any amendment at least six weeks before it takes effect, in text form (e.g. by e-mail or in-app). If you do not object to the amended Terms within this period they are deemed accepted; we will draw your attention to this consequence in the notice separately. If you object, the contract continues under the previous Terms; we then reserve the right to terminate the contract with proper notice.

12. Final provisions

The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods. Mandatory consumer-protection provisions of the country in which the user has their habitual residence remain unaffected.

If the user is a consumer residing in the EU, the statutory places of jurisdiction apply. Otherwise, to the extent legally permissible, the exclusive place of jurisdiction for all disputes arising out of or in connection with this contract is our registered seat.

Should individual provisions of these Terms be or become ineffective, the validity of the remaining provisions remains unaffected.