Terms of Service

1. Introduction

Welcome to LockPulse ("we," "us," or "our"). LockPulse is a zero-knowledge password manager that provides secure credential storage and management services. By accessing or using our services, you agree to be bound by these Terms of Service ("Terms").

Please read these Terms carefully before using LockPulse. If you do not agree to these Terms, you must not access or use our services.

2. Acceptance of Terms

By creating an account, accessing, or using LockPulse services, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. These Terms constitute a legally binding agreement between you and LockPulse.

You must be at least 18 years old or the age of majority in your jurisdiction to use our services. By using LockPulse, you represent and warrant that you meet this requirement.

3. Service Description

LockPulse is a zero-knowledge password manager built using advanced cryptographic protocols including:

• libsodium for client-side encryption
• OPAQUE protocol for password authentication without server-side password knowledge
• AES-256 encryption for credential storage
• Argon2id key derivation for master password hashing

We provide credential storage, project-based organization, team collaboration features, and secure credential sharing capabilities.

4. Zero-Knowledge Security Model

CRITICAL: We Cannot Recover Your Master Password or Decrypt Your Data

LockPulse operates on a zero-knowledge architecture, which means:

• Your master password is never transmitted to our servers
• All encryption and decryption occurs client-side in your browser
• We store only encrypted data that we cannot decrypt
• If you forget your master password, your data is permanently unrecoverable
• We cannot reset, recover, or provide access to your encrypted credentials

⚠️ Warning: You are solely responsible for remembering and safeguarding your master password. Loss of your master password results in permanent loss of access to all encrypted data.

5. Account Registration and Security

To use LockPulse, you must:

• Provide a valid email address
• Choose a unique username
• Create a strong master password
• Optionally provide your full name

You agree to:

• Provide accurate and complete information
• Maintain the security of your account credentials
• Keep your master password confidential and secure
• Notify us immediately of any unauthorized access
• Not share your account with others
• Be responsible for all activities under your account

6. User Responsibilities

You are responsible for:

• Master Password Management: Creating, remembering, and protecting your master password
• Backup: Maintaining offline backups of critical credentials if desired
• Device Security: Ensuring devices used to access LockPulse are secure
• Data Accuracy: Ensuring the accuracy of credentials you store
• Compliance: Using the service in compliance with applicable laws

7. Acceptable Use Policy

You agree NOT to:

• Use the service for any unlawful purpose
• Store illegal content or credentials for illegal activities
• Attempt to compromise the security or integrity of our systems
• Reverse engineer, decompile, or disassemble our software
• Use automated scripts to create accounts or abuse the service
• Interfere with or disrupt our services or servers
• Violate any applicable laws or regulations
• Infringe on intellectual property rights
• Share credentials for accounts you don't own or have authorization to access

8. Data Encryption and Storage

Encrypted Data: All your credentials (titles, usernames, passwords, notes, URLs) are encrypted client-side before transmission to our servers using AES-256 encryption.

What We Store (Encrypted):

• Encrypted credential data (title, password, username, notes, URL, tags)
• Encrypted project data
• Encrypted service data
• Wrapped encryption keys (encrypted with your master password derivative)
• Cryptographic nonces and ciphertexts
• KDF parameters for key derivation

What We Store (Unencrypted - Necessary for Service Operation):

• Email address (for account verification and notifications)
• Username (for login identification)
• Full name (optional, for personalization)
• Email verification status
• Account creation and update timestamps
• Session data (device ID, device name, IP address, last active time)
• Authentication logs (login attempts, password changes, session activities)
• Activity logs (resource access patterns, metadata about encrypted resources)
• OPAQUE protocol registration record (cryptographic commitment, not your password)

9. Intellectual Property

All content, features, and functionality of LockPulse, including but not limited to text, graphics, logos, icons, images, audio clips, digital downloads, data compilations, and software, are the exclusive property of LockPulse and are protected by international copyright, trademark, patent, trade secret, and other intellectual property laws.

You retain all rights to the data you store in LockPulse. We claim no intellectual property rights over your encrypted content.

10. Service Availability and Modifications

We strive to provide continuous service availability but do not guarantee uninterrupted access. We reserve the right to:

• Modify, suspend, or discontinue any aspect of the service
• Perform scheduled or emergency maintenance
• Update features and functionality
• Change pricing or introduce new features

We will provide reasonable notice for significant changes when possible.

11. Termination

Your Right to Terminate: You may delete your account at any time through your profile settings. Upon deletion:

• All your data will be permanently deleted
• This action is irreversible
• You will lose access to all stored credentials

Our Right to Terminate: We reserve the right to suspend or terminate your account if:

• You violate these Terms of Service
• You engage in fraudulent or illegal activities
• We are required to do so by law
• Continued service poses a security risk

12. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED.

We disclaim all warranties, including but not limited to:

• Merchantability, fitness for a particular purpose, and non-infringement
• Uninterrupted, timely, secure, or error-free service
• Accuracy or completeness of content
• Protection against unauthorized access or data breaches

While we implement industry-standard security measures, no system is completely secure. You use the service at your own risk.

13. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL LOCKPULSE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES.

This includes but is not limited to:

• Loss of data (including encrypted credentials)
• Loss of profits or business opportunities
• Unauthorized access to your account
• Service interruptions or errors
• Loss of master password resulting in data inaccessibility

Our total liability shall not exceed the amount you paid to us in the 12 months preceding the event giving rise to liability, or $100 USD, whichever is greater.

14. Indemnification

You agree to indemnify, defend, and hold harmless LockPulse, its officers, directors, employees, and agents from any claims, liabilities, damages, losses, and expenses, including reasonable attorney's fees, arising out of or in any way connected with:

• Your access to or use of the service
• Your violation of these Terms
• Your violation of any rights of another party
• Your content or data stored in the service

15. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions.

Any disputes arising out of or relating to these Terms or the service shall be subject to the exclusive jurisdiction of the courts located in [Your City], India.

For international users, you also agree to comply with local laws regarding online conduct and acceptable content.

16. Dispute Resolution

In the event of any dispute, claim, or controversy arising from these Terms:

• Both parties agree to first attempt resolution through good-faith negotiation
• If negotiation fails, disputes shall be resolved through binding arbitration
• Arbitration shall be conducted in accordance with Indian Arbitration and Conciliation Act, 1996
• Each party shall bear their own costs unless otherwise determined by the arbitrator

17. Changes to These Terms

We reserve the right to modify these Terms at any time. When we make changes:

• We will update the "Last Updated" date
• We will notify you via email or in-app notification
• Significant changes will be highlighted
• Continued use after changes constitutes acceptance

If you do not agree to modified Terms, you must discontinue use and delete your account.

18. Export Controls and Sanctions

LockPulse uses strong encryption technology. You agree to comply with all applicable export control laws and regulations, including but not limited to:

• Not accessing the service from countries subject to trade sanctions
• Not using the service if you are on any prohibited party lists
• Complying with encryption export regulations in your jurisdiction

19. Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.

20. Entire Agreement

These Terms, together with our Privacy Policy and Disclaimer, constitute the entire agreement between you and LockPulse regarding the use of our services and supersede all prior agreements and understandings.

21. Contact Information

If you have questions about these Terms, please contact us at: