Terms of Service

1. Acceptance and eligibility

These Terms of Service ("Terms") are a binding agreement between you and F1v3 Group LLC ("F1v3," "Stax Pass," "we," "us," or "our") governing the Stax Pass applications, website, account services, support, and related services (collectively, the "Service"). By creating an account, clicking to accept, purchasing a subscription, or using the Service, you agree to these Terms and acknowledge the Privacy Policy. If you do not agree, do not use the Service.

You must be at least 13 years old. If you have not reached the age of legal majority where you live, a parent or legal guardian must permit and supervise your use and agree to these Terms for you. You may not use the Service if law prohibits you from receiving it. If you use Stax Pass for an organization, you represent that you have authority to bind that organization; "you" then includes the organization.

2. What Stax Pass provides

Stax Pass provides tools to generate, locally protect, organize, synchronize, retrieve, and selectively share passwords and other records. Available features may include encrypted vault items, secure notes, one-time-password information, small attachments, password import, device approval, recovery, autofill, shared vaults, and account subscriptions.

The Service is designed around a zero-knowledge vault boundary. Our servers may store encrypted records, wrapped-key records, public-key records, identifiers, versions, permissions, sync metadata, and operational records, but do not need readable vault content or raw durable vault keys to operate. Zero knowledge does not mean zero risk, zero metadata, guaranteed anonymity, or guaranteed availability.

Stax Pass is not an identity-verification service, financial institution, emergency service, records custodian, general-purpose cloud drive, legal-compliance service, or guarantee against phishing, fraud, account takeover, data loss, or cyberattack.

3. Your content and your instructions

"Your Content" means passwords, account details, notes, files, personal information, encrypted records, labels, messages, and other material you or an authorized user submit to, import into, create in, or share through the Service. You retain your rights in Your Content.

By placing Your Content in Stax Pass, you knowingly instruct and authorize us to host, copy, transmit, synchronize, back up, delete, and otherwise process its encrypted form and related operational metadata only as needed to provide, secure, and support the Service. When you use sharing features, you additionally instruct us to make the applicable encrypted content and access material available to the recipients and roles you select.

You represent and warrant that you have all rights and lawful authority needed to possess and process Your Content and to disclose it to each person you invite or authorize. You are responsible for obtaining any notice or consent required from another person whose information you store. We do not review Your Content for legality, accuracy, ownership, sensitivity, or suitability, and the zero-knowledge design generally prevents us from doing so.

4. Your security and account responsibilities

You are responsible for all activity conducted through your account or authorized devices except to the extent caused by our breach of these Terms or a duty we cannot lawfully exclude. You agree to:

• use a strong, unique account password and never reuse it for another service;
• keep your account password, recovery phrase, verification codes, private keys, sessions, devices, and local backups confidential and secure;
• store recovery material separately from your unlocked device and verify your recovery setup before relying on it;
• keep device software and Stax Pass updated, use device locking and encryption, and take reasonable steps to keep devices free of malware;
• review trusted devices, account notices, shared-vault members, roles, permissions, and recipients, and promptly remove access that is no longer appropriate;
• verify website addresses, autofill targets, copied values, generated passwords, one-time codes, import results, and exported data before relying on them;
• securely handle and delete plaintext CSV imports, exports, clipboard contents, screenshots, printed copies, and other readable material outside the protected vault;
• provide accurate account and billing information and keep your account email available and current; and
• notify security@stax-pass.com promptly if you suspect unauthorized access, device loss, a vulnerability, or compromise.

Stax Pass support will never need your account password, recovery phrase, raw private keys, or readable vault contents. You should not send that information to us.

5. Security and recovery limits you accept

We will use reasonable efforts to operate safeguards appropriate to the sensitivity of the information we process and to address confirmed security issues. You understand and accept that no software, encryption system, network, storage system, recovery process, or security control is perfect or immune from failure or attack.

In particular:

• Lost access may be permanent. Because we do not hold a backend decryption bypass, we may be unable to restore readable vault content if you forget your password and lose or damage all working recovery and trusted-device access paths.
• Authorized endpoints see plaintext. Content must become readable on an unlocked authorized device. Malware, phishing, screen capture, clipboard monitoring, insecure exports, physical access, or another person using that device can expose it.
• Sharing gives real access. An authorized recipient may decrypt, copy, photograph, export, or independently retain content. Removing access does not claw back copies already made.
• Offline revocation is delayed. Removing a device cuts off its future server access, but a device that remains offline may retain and use locally cached encrypted data until it reconnects or is wiped. Key rotation may be needed for a stronger cryptographic cutoff.
• Imports and exports are high risk. Plaintext files and readable exports are outside the vault while they exist. You are solely responsible for their source, destination, permissions, storage, transmission, and secure deletion.
• Third-party accounts remain third party. We do not control the security, accuracy, availability, or conduct of websites, apps, employers, financial institutions, or other services whose information you save or autofill.

You assume the risks that arise from your voluntary selection, entry, import, disclosure, sharing, copying, export, or handling of Your Content, except to the extent a loss is directly caused by our violation of these Terms or a legal duty that cannot be waived.

6. Limited license and ownership

Subject to these Terms, we grant you a personal, limited, revocable, non-exclusive, non-transferable, non-sublicensable license to install and use the object-code version of the app on devices you own or control for its intended purpose. Family or organizational plan access may be assigned only as the applicable plan permits.

Stax Pass, including its software, interfaces, designs, documentation, trademarks, and other materials, is owned by F1v3 or its licensors and protected by law. Except for the limited license above, no rights are granted. You may not copy, sell, lease, sublicense, distribute, modify, create derivative works from, bypass access controls for, or use the Service to build a competing service, except where applicable law expressly permits an activity despite this restriction.

7. Acceptable use

You may not use the Service to:

• violate law or another person's privacy, publicity, intellectual-property, contractual, or other rights;
• store, transmit, solicit, or facilitate stolen credentials, unauthorized access, fraud, exploitation, abuse, or malicious code;
• access another account or content without authorization or misrepresent your identity or authority;
• probe, scan, disrupt, overload, evade rate limits, bypass security controls, or interfere with the Service, except under a written security-testing authorization from us;
• reverse engineer or extract source code except to the limited extent applicable law expressly allows;
• resell or commercially exploit the Service without our written permission; or
• use automated means that impose unreasonable load or scrape non-public portions of the Service.

We may investigate suspected misuse and suspend or terminate access when reasonably necessary to protect the Service, users, or others, or to comply with law.

8. Trials, subscriptions, billing, and taxes

Plan features, storage, seats, trial length, price, billing interval, renewal terms, and cancellation method are shown at purchase and may vary by platform or region. Unless the purchase screen says otherwise, a paid subscription renews automatically until canceled. You authorize the applicable app store or payment provider to charge the disclosed price and taxes for each renewal.

Cancel through the provider that sold the subscription before the renewal deadline shown by that provider. Deleting the app or stopping use does not cancel a subscription. Refunds are governed by the purchase provider's rules and applicable law. We may change future prices or plan features with legally required notice; a price change applies no earlier than the next permitted renewal.

A free trial is limited to eligible users and may be changed or withdrawn where lawful. When a trial or subscription ends, access may become limited after any disclosed grace period. We will not intentionally use payment status as a reason to expose readable vault content. You remain responsible for exporting or otherwise preserving data you are entitled to keep before access ends.

9. Availability, changes, and beta features

We may maintain, update, replace, limit, or discontinue all or part of the Service. Security or legal needs may require immediate changes. We do not guarantee that the Service will be uninterrupted, error-free, compatible with every device or third-party service, or that every feature will remain available.

Features labeled beta, preview, early access, experimental, or similar are provided for evaluation, may be less reliable, may change without notice, and should not be your only method of preserving critical information. Keep an appropriate independent recovery and continuity plan.

10. Suspension, termination, and account deletion

You may stop using the Service at any time and may request account deletion through the available account controls or by contacting support. Subscription cancellation and account deletion are separate actions.

We may suspend or terminate access if you materially breach these Terms, create security or legal risk, fail to pay applicable charges, or if continued service is no longer commercially or technically reasonable. When practical, we will provide notice and an opportunity to cure or export eligible data, but we may act immediately to prevent harm or comply with law.

Deletion is subject to synchronization, backup, security, fraud-prevention, billing, dispute, and legal-retention requirements described in the Privacy Policy. Deletion cannot erase copies another authorized user already decrypted, copied, or exported.

11. Third-party services and app stores

The Service may interoperate with operating systems, browsers, app stores, email providers, payment services, and websites we do not control. Their terms and privacy practices apply to their services. We are not responsible for third-party acts, omissions, content, security, availability, or changes.

If you downloaded the app from Apple or Google, you acknowledge that these Terms are between you and F1v3, not the app-store provider; F1v3, not the provider, is responsible for the app as required by these Terms. The provider and its subsidiaries are third-party beneficiaries of the portions of these Terms applicable to its store and may enforce them. Nothing here limits any mandatory rights provided by the store's terms or applicable law.

12. Disclaimers

Some jurisdictions do not allow certain warranty exclusions, so some of the above may not apply to you. These Terms do not exclude warranties or consumer rights that cannot lawfully be excluded.

13. Limitation of liability

The exclusions and cap apply regardless of the theory of liability and allocate risk between the parties. They do not apply to liability that cannot lawfully be excluded or limited, which may include liability for fraud, willful misconduct, gross negligence, or certain violations of privacy, data-security, or consumer-protection law depending on the jurisdiction.

14. Indemnity

To the extent permitted by law, you will defend, indemnify, and hold harmless F1v3 and its affiliates, officers, employees, and agents from third-party claims, damages, judgments, penalties, and reasonable costs (including legal fees) arising from your unlawful use of the Service, Your Content, your unauthorized disclosure of another person's information, or your material breach of Sections 3, 4, or 7. This obligation does not apply to the extent a claim is caused by F1v3's own breach, negligence, willful misconduct, or violation of law. We may control the defense and settlement, and you will reasonably cooperate; we will not settle a claim in a way that admits your fault or imposes a non-monetary obligation on you without your consent.

15. Disputes and governing law

Before filing a claim, you and F1v3 agree to send a written description of the dispute and requested resolution to the other party and attempt in good faith to resolve it for 30 days. Send notices to legal@stax-pass.com. This requirement does not prevent either party from seeking urgent injunctive relief or using an eligible small-claims process.

These Terms are governed by the laws of the State of California, without regard to conflict-of-laws rules. Any dispute not resolved informally will be brought exclusively in a state or federal court in California that has jurisdiction over the parties and dispute, and each party consents to personal jurisdiction there. If you are a consumer, this provision does not deprive you of mandatory protections or a forum right provided by the law where you live.

16. Changes to these Terms

We may update these Terms to reflect changes to the Service, risk, business operations, or law. We will post the updated Terms and revise the date above. For a material change, we will provide notice and request renewed acceptance when required. Changes apply prospectively from their effective date. If you do not agree to an updated version, you must stop using the Service and cancel any subscription.

17. General terms

These Terms and the Privacy Policy are the entire agreement about the Service except for an order, enterprise agreement, or additional terms we expressly accept in writing. If a provision is unenforceable, it will be enforced to the maximum lawful extent and the remainder will remain effective. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our written consent; we may assign them in connection with a merger, acquisition, reorganization, or sale of assets. Sections that by their nature should survive termination—including ownership, disclaimers, liability limits, indemnity, disputes, and general terms—will survive.

We are not liable for delay or failure caused by events beyond our reasonable control, but this does not excuse obligations that law does not permit us to avoid. Headings are for convenience only. "Including" means "including without limitation." Electronic notices and records satisfy written-notice requirements where lawful.

18. Contact

Stax Pass is operated by F1v3 Group LLC. Questions about these Terms may be sent to legal@stax-pass.com. General support is available at support@stax-pass.com.