Terms of Service

1. The agreement

These terms are an agreement between you and Apostolos Chasiotis, trading as DockVault ("DockVault", "we", "us"). They apply to the DockVault website, the customer portal, and every workspace we run for you (your own DockVault, where your people keep their files in vaults; together, the "service"). By creating an account you accept them. If you accept them for an organisation, you confirm that you may bind it, and "you" means that organisation.

DockVault is not a company: it is run by the person named above, who is the party to these terms. If a company takes DockVault over, we may transfer this agreement to it; it is then bound by these terms, your rights under them do not change, and we tell you before it happens.

How we handle personal data is described in our Privacy Policy. Section 10 of these terms covers the data you store in your vaults.

2. Your account

• Give accurate details and keep them current. You must be at least 16 years old.
• Keep your password to yourself and turn on two-step sign-in (Settings). You are responsible for what is done with your account until you tell us it has been misused, unless the misuse is our fault; write to support@dockvault.io as soon as you suspect it.
• You may invite colleagues to your account as owners, administrators, billing members or read-only members (Settings, Team). Each signs in with their own password and acts within their role. The account's owners are responsible for who they let in and for what members do in the account, and an account always keeps at least one owner.
• Your workspaces have their own administrators and users, which you manage. We cannot sign in to a workspace for you, and we cannot recover a zero-knowledge vault's data if its keys are lost (section 8).

3. The service

You apply for a workspace in the portal, choosing its plan, size and region. We review each application and may approve it in the region you chose or decline it with a reason. An approved workspace waits for you to start it; we set it up when you do.

We keep your workspaces running in the region you chose. We may move a workspace to another server in the same region for maintenance, capacity or recovery, and tell you if its address changes.

We improve the service over time. We may change or remove features, but we will not remove a feature your plan includes during a period you have paid for without offering a fair alternative or a refund of that period.

4. The free beta

DockVault is in a free beta while paid plans are prepared. While the beta lasts:

• It is free. No charge is made for any plan or workspace, and we ask for no payment details. We still review each application (section 3).
• No service level. We run the service with care and aim to keep it available, but we do not guarantee availability, performance or support response times, and features may change.
• Keep your own copies of anything you cannot afford to lose; backups are made as your plan says, but they are not a substitute for your own (section 8).
• Liability is limited to €100. Because the beta is free, the most we owe you for anything that goes wrong is €100 in any 12 months; section 12 says this and what the law never allows to be limited.
• The beta can end. We tell you in the portal and by email at least 30 days before it ends, with what paid plans will cost and what happens to your account and workspaces if you do not choose one.
• Paid plans only by your choice. Nothing is ever charged because the beta ended: a paid plan starts only if you choose one and give payment details. You can also export your data and close your account before the beta ends.

You accept these beta terms when you apply for a workspace during the beta; the portal records when, and which version.

5. Plans, billing and cancellation

This section applies once paid plans exist, after the free beta (section 4). Nothing in it is charged during the beta.

• Prices and what each plan includes are shown on the Plans page when you choose a plan.
• When billing starts: once you have chosen a paid plan and given payment details (section 4), billing for a workspace on that plan starts when it is approved and you start it, or 3 days after approval if you have not started it by then. You accept this when you apply, and the portal shows the date for each approved workspace.
• Paid plans are billed monthly in advance through our payment provider, Stripe. You authorise us to charge your payment method for each period. Prices include or exclude taxes as shown at checkout.
• Changing plans takes effect straight away, and the price is adjusted for the rest of the period. If a smaller plan allows fewer workspaces than you run, the extra ones keep running for 7 days and are then stopped; you are told which ones.
• You can cancel on the Billing page. Cancellation takes effect at the end of the paid period; until then the service continues.
• If a payment fails, we tell you and try again. If it is still unpaid 14 days after we told you, we may suspend the account until it is paid (section 11).
• Payments are not refunded for part of a period, except where the law requires it or where we end the service for a reason that is not your breach of these terms, in which case we refund the unused part of the period.

If you are a consumer in the EU, you may have a right to withdraw within 14 days of subscribing. You ask us to start the service during that period when you start a workspace; if you then withdraw, we refund the payment less the part for the days the service was provided.

6. Your content

What you and your users store in your vaults ("your content") stays yours. You give us only the permission we need to store, process, back up and transmit it to run the service for you.

We do not look at your content. We access a workspace only:

• to run, back up, restore, move or repair it;
• when you ask us to, or when you turn on operator log access for your account;
• when the law requires us to, in which case we tell you first unless the law forbids it.

Content in a zero-knowledge vault is encrypted in your users' browsers before it reaches us; we hold no key for it and cannot read it. Content in a standard vault is encrypted at rest with a key held by the workspace's server.

You are responsible for having the right to store your content and for how you and your workspace's users use it.

7. Acceptable use

You may not use the service to, or allow anyone to:

• store or share content that is illegal, including child sexual abuse material, or that infringes someone else's rights;
• distribute malware or run phishing, spam or fraud;
• attack, probe or overload the service, other customers or anyone else, or get around its limits or security;
• resell the service or give access to it outside your organisation and your workspaces' users without our written permission.

Security research is welcome if you tell us first at support@dockvault.io, test only your own account and workspaces, and give us reasonable time to fix what you find before telling others.

Reporting illegal content. Anyone may tell us about content in the service they believe is illegal, by writing to abuse@dockvault.io with:

• why you believe the content is illegal;
• where it is: the workspace's address and anything else that helps us find it;
• your name and email address (not needed if the report concerns child sexual abuse material);
• a statement that you believe, in good faith, that the report is accurate and complete.

We confirm that we received it. A person reviews each report without undue delay, and we tell you what we decided and how to contest it. We do not scan content or use automated tools to moderate it; content in a zero-knowledge vault is encrypted with keys we do not hold, so we act on what a report shows us. Where content suggests a threat to someone's life or safety, we inform the authorities.

8. Security and backups

We protect the service with encryption in transit and at rest, isolation between customers, access controls and monitoring, and we back up each workspace as its plan says and keep off-site copies of our own systems. The Privacy Policy lists the measures.

You keep your own copies of anything you cannot afford to lose, keep your vaults' recovery codes, and choose a plan with the backups you need. A deleted workspace can be restored from the portal for 7 days; after that it is gone. We cannot recover data from a zero-knowledge vault whose keys are lost.

If a security incident affects your data we tell you without undue delay, with what we know and what we are doing about it.

9. Availability and support

We aim to keep the service available at all times but do not promise uninterrupted service unless we have agreed a service level with you in writing (during the free beta there is none: section 4). Maintenance, moves and upgrades can briefly interrupt a workspace; we announce planned work that affects you in the portal when we can. Support is by email at support@dockvault.io.

10. Data processing for your vaults

For personal data in your content, you are the controller and we are your processor under the EU General Data Protection Regulation (GDPR, Article 28). This section is our data processing agreement. These terms and your use of the service are your documented instructions to us.

• Subject matter and duration: hosting your workspaces and their content for as long as you use the service, and until the deletion described in section 11 is complete.
• Nature and purpose: storing, backing up, restoring, moving and transmitting your content, only to provide the service to you.
• Types of personal data: whatever you and your users put in your vaults (files, their names and folders, shares), which may include special categories of data, and your workspaces' user accounts (names, email addresses, sign-in data).
• The people concerned: your workspaces' users, and anyone whose data appears in your content, such as your staff, customers, suppliers and contacts.

We:

• process that data only to provide the service, on your instructions, unless the law requires otherwise (we then tell you first, unless the law forbids it), and tell you if we believe an instruction breaks the GDPR or other data protection law;
• make sure everyone who can access it is bound to confidentiality;
• keep the security measures described in the Privacy Policy (Article 32);
• use only the sub-processors listed in the Privacy Policy, bind each by contract to the same data protection obligations and remain responsible to you for them, tell you 30 days before adding or replacing one, and let you end the service if you object;
• help you, as far as we can given what we can see, to answer requests from the people the data is about, and with your obligations on security, breach notification, data protection impact assessments and prior consultation (Articles 32 to 36);
• tell you without undue delay of a personal data breach affecting your content;
• when the service ends, let you download your content first, then delete it (section 11), unless the law requires us to keep it;
• give you the information you need to show that these obligations are met, and allow reasonable audits on 30 days' notice.

Each workspace runs in the region you choose for it. Its backups are stored encrypted on our own systems in the European Union (see the Privacy Policy).

11. Suspension and ending the service

You may stop at any time: delete your account yourself in Settings in the portal, which deletes its workspaces with it, or ask support@dockvault.io to close it.

We may suspend your account or a workspace if you break these terms, if a payment is overdue as described in section 5, or if it puts the service, other customers or others at risk. Unless the risk is urgent, we give you a chance to fix it first. We may end the agreement on 30 days' notice, or straight away for a serious breach.

Whenever we restrict, suspend or end an account or a workspace, or remove or disable content, we tell you, with our reasons: what we did and for how long, the facts, the rule in these terms or the law it is based on, and whether it followed a report. A person makes every such decision. You can contest it by writing to support@dockvault.io within six months; a person who did not make it reviews it, and you may also use the out-of-court and court remedies the law gives you.

When your account is closed, your workspaces and account data are deleted from our systems straight away (the 7-day recovery of a deleted workspace does not apply) and from our encrypted backups within about 45 days. Before you close it, download your data in Settings and copy anything you want to keep out of your vaults. We keep billing records as long as tax law requires.

12. Warranties and liability

We provide the service with reasonable skill and care. Apart from that and what the law does not allow us to exclude, the service is provided "as is".

Neither of us is liable to the other for indirect or consequential loss, or for lost profits, revenue or data that could have been avoided by keeping backups. Our total liability in any 12 months is limited to the amounts you paid us in those 12 months, or €100 if that is more.

These limits do not apply to liability for death or personal injury caused by negligence, for fraud, for intent or gross negligence, or to anything else the law does not allow to be limited, and they do not affect your statutory rights as a consumer.

13. Changes to these terms

We may update these terms. We tell you of a material change in the portal and by email at least 30 days before it takes effect; if you do not agree, you may end the service before then without charge for the time after the change. The date at the top shows the current version.

Changes of October 5, 2026: the terms say that DockVault is run by a person, who is the party to them, and that the agreement may move to a company that takes DockVault over, with your rights unchanged (section 1); billing starts only once you have chosen a paid plan (section 5); how to report illegal content and what we do with a report (section 7); section 10 is now a complete data processing agreement; we give reasons for any suspension or removal, and you can contest it (section 11); our liability is never capped below €100 (section 12); and the contacts for users and authorities (section 15). Nothing changes in how the service works.

Changes of October 4, 2026: what you order is now called a workspace (the vaults are what your people create inside it), and the terms name who runs DockVault and that the laws of Greece govern them. Nothing else changed.

Changes of October 3, 2026: the free beta (section 4) was added, plans, billing and cancellation (section 5) now apply once paid plans exist, you can close your account yourself in Settings, and you can invite colleagues to your account with roles (section 2).

14. Governing law

These terms are governed by the laws of Greece, and its courts decide disputes. If you are a consumer, you keep the protection of the mandatory law of the country where you live and may also bring a claim there.

15. Contact

DockVault is provided by Apostolos Chasiotis, trading as DockVault. Questions about these terms, and our point of contact for users of the service: support@dockvault.io.

Reports of illegal content: abuse@dockvault.io (section 7). Point of contact for authorities of the EU member states, the European Commission and the European Board for Digital Services (Digital Services Act, Article 11): legal@dockvault.io, in Greek and English.