Terms, EULA, Privacy & notices

Entity (placeholder): The Vault Company / getxvault.com

Product: X-Vault

Status: DRAFTS for attorney review — not executed legal documents

Last updated: 2026-07-23

Critical flag (updated 2026-07-23)

PyMuPDF / AGPL path resolved in code: X-Vault now uses pypdf (BSD) + pypdfium2 (BSD/Apache) instead of PyMuPDF.

Counsel should still review the OSS NOTICE and confirm no AGPL crept back in via OCR extras (RapidOCR / ONNX) before a formal paid installer ships.

Master list — what you need

A. Customer-facing (website + installer)

B. Sales & payments

C. Company / formation (attorney)

D. Product / technical compliance

E. Internal ops (not public)

Suggested publishing map

Draft status

Next after attorney: Replace placeholders ([ENTITY], [STATE], effective date), paste into site #privacy / #terms, add #eula / #oss / #refunds, then redeploy.

Product / site: getxvault.com (X-Vault marketing and sales)

Operator: [LEGAL ENTITY NAME] (“we,” “us,” “Company”)

Effective date: [DATE]

Status: DRAFT — for attorney review. Not binding until published by the Company.

1. Agreement

By accessing or using https://www.getxvault.com (the “Site”), requesting a purchase, or contacting us through the Site, you agree to these Terms of Service (“Terms”). If you do not agree, do not use the Site.

Software you download or install is licensed under the separate End User License Agreement (EULA). If there is a conflict about software use, the EULA controls. If there is a conflict about Site use or purchases, these Terms control.

2. Who we are / who we are not

• We provide information about X-Vault, a local encrypted document tool aimed at veterans and others organizing personal records (including VA-claim-related documents).
• We are not the U.S. Department of Veterans Affairs, DoD, or any government agency.
• We do not provide legal, medical, benefits, or claims advice.
• Using the Site or product does not create an attorney–client or fiduciary relationship.

3. Eligibility

You must be at least 18 years old (or the age of majority where you live) to purchase a license. You represent that information you submit is accurate.

4. Accounts and communications

The Site may not require a login. If you email us (e.g. contact@getxvault.com) or submit an order request, you authorize us to respond about your inquiry, order, or support.

5. Purchases and licenses

• Paid plans (e.g. Veteran Care, Standard) are sold as annual software licenses, delivered as a license key, subject to the EULA.
• Prices are listed on the Site and may change prospectively.
• Payment processing (when enabled) may be handled by Stripe or another processor under their terms.
• Until payment links are live, orders may be completed by email/invoice. A license key is issued after payment is confirmed.
• License keys are for the purchaser’s authorized use as stated in the EULA (typically one primary user / household machine set as defined there).

6. Free tier

A free tier with usage limits may be offered. Free use is still subject to the EULA, Privacy Policy, and these Terms. We may change free limits with notice on the Site or in the app.

7. Hardship / discounts

We may offer hardship or veteran-related discounts at our discretion. Approval of a discount does not waive these Terms or the EULA.

8. Intellectual property

Site content (text, logos, design, trademarks including “X-Vault” and related marks) is owned by the Company or licensors. You may not copy, scrape for commercial reuse, or frame the Site without permission, except as allowed by fair use or other applicable law.

9. Acceptable use of the Site

You may not:

• Attempt to break, scrape abusively, or overload the Site
• Use the Site to send malware, spam, or unlawful content
• Impersonate the Company or misrepresent affiliation with VA/DoD
• Use automated means to harvest license keys or pricing for resale fraud

Additional product restrictions are in the Acceptable Use & User Restrictions and EULA.

10. Third-party links

The Site may link to third parties (Stripe, font CDNs, email providers). We are not responsible for their content or practices. Their terms and privacy policies apply to those services.

11. Disclaimers

THE SITE IS PROVIDED “AS IS.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. We do not warrant uninterrupted or error-free Site availability.

12. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY AND ITS OWNERS, OFFICERS, AND CONTRACTORS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOST PROFITS, ARISING FROM SITE USE. OUR TOTAL LIABILITY FOR SITE-RELATED CLAIMS IN ANY 12-MONTH PERIOD WILL NOT EXCEED THE GREATER OF (A) AMOUNTS YOU PAID US FOR LICENSES IN THAT PERIOD OR (B) USD $100.

Some jurisdictions do not allow certain limitations; in those places, limits apply to the fullest extent allowed.

13. Indemnity

You will defend and indemnify the Company against claims arising from your misuse of the Site, fraud, or violation of these Terms, except to the extent caused by our willful misconduct.

14. Privacy

See our Privacy Policy. Personal data you send via forms or email is handled as described there.

15. Changes

We may update these Terms by posting a new version on the Site with a revised effective date. Continued use after posting constitutes acceptance, except where law requires additional consent.

16. Governing law; disputes

These Terms are governed by the laws of the State of [Connecticut / STATE], excluding conflict-of-law rules. Exclusive venue for disputes is the state or federal courts located in [Hartford County, CT / COUNTY], unless mandatory consumer law says otherwise. [Optional: arbitration clause — attorney to draft.]

17. Contact

Email: contact@getxvault.com

Mailing address: [BUSINESS ADDRESS]

*Draft only. Have counsel finalize before publishing.*

Software: X-Vault (desktop/local application, including the local daemon and user interface)

Licensor: [LEGAL ENTITY NAME] (“Licensor,” “we,” “us”)

Effective date: [DATE]

Status: DRAFT — for attorney review. Not binding until adopted and presented for acceptance.

1. License grant

Subject to this EULA and timely payment (for paid tiers), Licensor grants you a limited, revocable, non-exclusive, non-transferable (except as allowed in §10) license to:

• Install and run X-Vault on computers you own or control
• Use the software for your personal, household, or internal business document organization

This is a license to use software, not a sale of the software or of Licensor’s intellectual property.

2. License tiers

Features and caps may change for future versions; material reductions to paid entitlements during an active paid term will be handled per the Refund Policy or by counsel-approved notice.

3. License keys

• Paid licenses are activated by a license key issued by us.
• Keys are confidential; do not publish or sell keys.
• Sharing a key beyond the authorized use below is a material breach.
• Keys are validated locally in the application; we do not operate a continuous “phone home” license server. We may still refuse renewal or support for keys obtained fraudulently.

Authorized use (default — attorney to confirm): one individual purchaser (or household) and reasonable personal devices; not for multi-seat office redistribution unless a separate multi-user agreement is purchased.

4. Local processing; your data

X-Vault is designed so that your documents and vault contents remain on your device under your passphrase/encryption, except when you choose to export, share, email, or upload elsewhere.

We do not claim ownership of your documents. You are responsible for backups, passphrase security, and lawful possession of materials you store.

5. Restrictions (enforceable license conditions)

You may not:

1. 1. Reverse engineer, decompile, or circumvent license, encryption, or free-tier limits except where mandatory law expressly permits (and then only to the limited extent required).
2. 2. Remove proprietary notices, trademarks, or OSS attribution screens.
3. 3. Rent, lease, sublicense, or provide X-Vault as a hosted multi-tenant service to third parties.
4. 4. Use X-Vault to violate law (including unauthorized access to others’ data).
5. 5. Misrepresent X-Vault output as official VA, DoD, or court determinations.
6. 6. Use the software to develop a competing product by systematically extracting non-public program logic beyond ordinary use (attorney to refine).
7. 7. Redistribute the installer or binaries except as we expressly allow (e.g. sharing a download link to our Site is OK; re-hosting cracked builds is not).

See also Acceptable Use & User Restrictions.

6. Open source components

X-Vault includes or depends on third-party open source software. Those components are licensed to you under their licenses (MIT, Apache-2.0, BSD, AGPL, etc.), not under this proprietary EULA. See OSS NOTICE. Nothing in this EULA limits your rights under those OSS licenses as to those components alone.

Important: One dependency (PyMuPDF / MuPDF) is dual-licensed AGPL / commercial. Licensor’s distribution model must comply with Artifex terms or use a different library. Counsel must clear this before commercial shipment.

7. Ownership

Licensor and its licensors retain all right, title, and interest in X-Vault (code, UI, branding, documentation), excluding your documents and excluding OSS components owned by their authors.

8. No professional advice; no VA affiliation

X-Vault helps organize and analyze documents you provide. It does not:

• Guarantee claim outcomes
• Replace a VSO, attorney, or clinician
• Constitute medical or legal advice
• Affiliate you with the U.S. Department of Veterans Affairs

9. Updates; support

We may provide updates. Updates may be required for security or license validation changes. Support is provided on a commercially reasonable basis via email unless a separate support contract exists.

10. Transfer

You may not transfer a paid license without our written consent, except as required by law (e.g. certain consumer transfer rights). Free tier rights are personal and non-transferable.

11. Term and termination

• Free license: continues until terminated.
• Paid license: continues for the paid term unless terminated earlier for breach.
• On material breach (including key abuse), we may terminate the license. You must stop use and destroy copies of keys you are not entitled to use.
• Sections that by nature should survive (ownership, disclaimers, liability limits, restrictions) survive termination.

12. Disclaimer of warranties

EXCEPT WHERE PROHIBITED, X-VAULT IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT EXTRACTION, SEARCH, OR ANALYSIS WILL BE COMPLETE OR ERROR-FREE.

13. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, LICENSOR’S TOTAL LIABILITY ARISING FROM THIS EULA OR THE SOFTWARE WILL NOT EXCEED THE AMOUNTS YOU PAID FOR THE LICENSE IN THE TWELVE (12) MONTHS BEFORE THE CLAIM (OR $0 IF FREE). WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR LOSS OF DATA, EVEN IF ADVISED OF THE POSSIBILITY.

Your backups matter. Local encryption means lost passphrases can mean permanent data loss; we are not liable for passphrase loss.

14. Export and sanctions

You represent you are not prohibited under U.S. export or sanctions laws from receiving the software.

15. Governing law

Laws of [Connecticut / STATE], courts in [venue], unless mandatory consumer protections apply otherwise. [Arbitration optional — counsel.]

16. Entire agreement

This EULA, plus the Privacy Policy, Refund Policy (for purchases), and Acceptable Use document, are the complete agreement regarding the software. Website Terms cover Site use.

17. Acceptance

By installing, running, or entering a license key, you accept this EULA. If the app presents a click-wrap “I Agree,” that acceptance is binding.

18. Contact

contact@getxvault.com · [ADDRESS]

*Draft only. Have counsel finalize; resolve PyMuPDF licensing before paid distribution.*

Product / site: getxvault.com and X-Vault application

Controller: [LEGAL ENTITY NAME] (“we,” “us”)

Effective date: [DATE]

Status: DRAFT — for attorney review. Not binding until published.

1. Scope

This Policy describes how we handle personal information when you:

• Visit getxvault.com
• Email us or request a purchase / hardship discount
• Download, install, or use X-Vault

It is written for a local-first product: vault documents are meant to stay on your device.

2. Short version

3. Information we collect

3.1 Information you give us

• Name, email address, message content (contact, support, hardship)
• Order details (plan, amount, veteran status attestation if you claim Veteran Care)
• Payment details are typically collected by Stripe (or similar); we receive confirmation, not full card numbers, when using Stripe Checkout / Payment Links

3.2 Information collected automatically on the Site

Depending on hosting configuration:

• IP address, browser type, device type, referring URL
• Pages visited, timestamps
• Cookies or similar technologies [list if enabled]

3.3 Information processed only on your device (app)

X-Vault may store locally (examples):

• Encrypted vault data and indexes
• App preferences
• License key string in local storage
• Paths you configure for storage

We do not operate a cloud sync of vault contents. If a future feature adds optional cloud sync, we will update this Policy before enabling it.

3.4 Information we do not intentionally collect via the app

We do not intentionally upload your PDFs, medical records, or claim files to our servers during normal operation.

4. How we use information

• Respond to inquiries and provide support
• Fulfill purchases and deliver license keys
• Prevent fraud and abuse
• Improve the Site and product (aggregated / non-vault feedback)
• Comply with law and enforce agreements
• Send transactional messages (receipts, key delivery). Marketing emails only with consent or as allowed by law [confirm].

5. Legal bases (if GDPR/UK GDPR may apply)

If you are in the EEA/UK: contract performance, legitimate interests (security, product improvement), consent (where required), and legal obligation.

6. Sharing

We may share personal information with:

We do not sell your personal information. We do not sell vault documents (we don’t have them in normal operation).

7. Retention

• Support/order emails: [e.g. 3–7 years for tax/commercial records — CPA/counsel]
• Site logs: per host defaults or [period]
• Vault data: retained on your device until you delete it

8. Security

We use reasonable administrative and technical measures for systems we control (email, Site, license issuance). Your vault security depends heavily on your passphrase, device security, and backups. No method is 100% secure.

9. Your choices and rights

Depending on your location (CT, CA CCPA/CPRA, EEA, etc.), you may have rights to access, correct, delete, or export personal information we hold, or to opt out of certain processing.

Request: contact@getxvault.com

We will not discriminate against you for exercising privacy rights.

California: We do not sell or share personal information for cross-context behavioral advertising as those terms are commonly defined — [confirm if any ad pixels are added].

10. Children

Not directed to children under 13 (or 16 where applicable). We do not knowingly collect children’s data.

11. International transfers

If you access the Site from outside the U.S., your information may be processed in the United States.

12. Third-party services

Stripe, Vercel, font providers, and email hosts have their own privacy policies. Review those when you use those services.

13. VA / health data note

You may store sensitive health or benefits documents locally. Because we do not receive those files in normal use, we are generally not acting as a HIPAA “business associate” for your vault contents. This product is not a substitute for clinical systems. Counsel should confirm HIPAA posture for any future cloud features.

14. Changes

We will post updates to this Policy with a new effective date. Material changes may be highlighted on the Site.

15. Contact

Email: contact@getxvault.com

Postal: [ADDRESS]

[Optional privacy contact / DPO if required]

*Draft only. Inventory actual cookies/analytics before publish. Align with final entity name.*

Applies to: getxvault.com and X-Vault software

Status: DRAFT — for attorney review

How this fits: These rules are meant to be license conditions and Site rules you can enforce (suspend keys, refuse support, terminate licenses, pursue fraud). They are not a substitute for criminal law.

1. Permitted use

You may use X-Vault to:

• Store and organize your own personal or household documents
• Analyze PDFs you lawfully possess (including your VA claim records)
• Use free or paid features within the stated tier limits

2. Prohibited use (enforceable restrictions)

You may not:

3. What is often hard to enforce (set expectations)

Be honest with counsel and customers:

4. Veteran Care attestation

If you purchase Veteran Care, you represent that you are a veteran or otherwise eligible under the criteria we publish. False attestation is grounds to reclassify the license to Standard pricing or terminate.

5. Export of your data

You may export or delete your local vault data at any time using the app/OS. Restrictions above do not block you from accessing your documents.

6. Relationship to other docs

Violations of this document are violations of the Website Terms and/or EULA, as applicable.

7. Reporting abuse

Email: contact@getxvault.com

Subject line: Abuse or License fraud

*Draft only. Counsel should align restrictions with CT/US consumer law and click-wrap acceptance in the app.*

Product: X-Vault annual licenses (Veteran Care, Standard)

Status: DRAFT — for attorney review

Effective date: [DATE]

1. Annual licenses

Paid plans are annual software licenses. Unless stated otherwise at checkout, renewal is manual (you repurchase) rather than auto-renewing — [confirm when Stripe is configured].

2. Refund window (proposed default)

Attorney should confirm whether CT/remote software sales need a different cooling-off rule or specific disclosure.

3. How to request

Email contact@getxvault.com with:

• Order email / approximate date
• Plan (VT49 / STD129)
• Reason
• License key (last 4 characters only is OK if preferred)

We aim to respond within 5 business days.

4. Effect of refund

If refunded, the license key may be invalidated. You must stop using paid features.

5. Free tier

Free tier has no purchase to refund.

6. Chargebacks

Contact us before filing a chargeback when possible. Friendly fraud / key theft disputes may result in permanent refusal of future licenses.

*Draft only. Publish alongside checkout once Stripe is live.*

Product: X-Vault

Status: DRAFT inventory — verify versions before each release

Last reviewed: 2026-07-23

X-Vault includes or depends on third-party software. Those components are copyright of their respective authors and licensed under the terms below. This NOTICE is not legal advice.

Proprietary X-Vault code remains under the Company EULA, except where an OSS license governs a specific component.

Runtime dependencies (permissive)

Python itself is licensed under the PSF License Agreement (see https://docs.python.org/3/license.html).

Optional OCR engine (installed on first OCR use if configured): rapidocr-onnxruntime and ONNX Runtime — confirm licenses before bundling in a paid installer.

Removed / no longer shipped

License families

What to ship each release

1. 1. Freeze versions (pip freeze) and re-scan licenses
2. 2. Include this NOTICE in the installer zip and link from the Site
3. 3. In-app About → Open source licenses screen (recommended)

Suggested customer-facing blurb (Site footer)

X-Vault © [YEAR] [ENTITY]. All rights reserved.

Third-party open source components are used under their licenses — see Open Source Notices.

Not affiliated with the U.S. Department of Veterans Affairs.

*Regenerate this inventory when dependencies change.*