1. Acceptance of Terms

By accessing and using this website and service (the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, please do not use the Service. We reserve the right to modify these Terms at any time. Your continued use of the Service following the posting of revised Terms means that you accept and agree to the changes.

2. Description of Service

Ellipticc is an end-to-end encrypted (E2EE), post-quantum cryptography (PQC), zero-knowledge cloud storage and collaboration platform. The Service allows users to securely store, manage, and share files online with the guarantee that:

All encryption and decryption occur exclusively on your device. Ellipticc cannot access or view your files.
Your encryption keys never leave your device. We cannot decrypt your data, even if we wanted to.
Filenames are encrypted. Ellipticc never sees your actual file or folder names in plain text.
We maintain zero knowledge of your content. This is architectural, not just operational.

The Service includes account creation, file management, secure sharing capabilities, and related features. All data transmission is protected using post-quantum cryptographic algorithms (NIST-standardized CRYSTALS-Kyber and Dilithium) to protect against current and future quantum threats.

3. User Accounts

3.1 Account Creation

To use the Service, you must create an account and provide accurate, complete, and current information (such as your email and name). You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Your password is never sent to or stored by our servers, not even as a hash. Instead, our system uses the OPAQUE secure authentication protocol, which allows you to log in without your password ever being revealed, transmitted, or recoverable by us.

3.2 Account Eligibility

You must be at least 13 years of age to use this Service. If you are under 18, you represent that you have obtained parental consent to use the Service.

3.3 Account Termination

We reserve the right to terminate or suspend your account at any time if you violate these Terms, engage in fraudulent behavior, or if required by law. Upon termination, your access to the Service will be immediately revoked, and your encrypted data will be securely deleted within 30 days unless you request earlier deletion.

4. Billing, Payments, and Cancellations

4.1 Subscriptions

Paid subscriptions are billed in advance on a recurring basis (monthly or annually). Your subscription will automatically renew at the end of each billing cycle unless you cancel it before the renewal date.

4.2 Payment Failure & Grace Period

If a payment fails, we will attempt to process the payment for a Grace Period of 20 days. During this period, your service will remain fully active, and you will retain full access to your data and features. We will notify you of the failure so you can update your payment method.

4.3 Non-Payment & Downgrade

If payment is not successfully received by the end of the 20-day Grace Period, your account will automatically downgrade to the Free Plan.

If your storage usage is below the Free Plan limit (e.g., 5GB), your service continues normally.

If your storage usage exceeds the Free Plan limit, your account will enter a Restricted Access (Read-Only) state. You will be able to view and download your files, but you will not be able to upload new files or edit existing ones.

4.4 Data Retention & Deletion

If your account remains in a Restricted Access (Over Quota) state for 30 continuous days following the downgrade, we reserve the right to securely delete your encrypted data to bring your account within the Free Plan limits. We are not responsible for any data loss resulting from non-payment and subsequent account overage.

4.5 Cancellation

You may cancel your subscription at any time. Cancellation will take effect at the end of your current billing period. We do not provide refunds or credits for partial billing periods.

4.6 Data Storage Infrastructure

Your encrypted data is stored using Backblaze B2 Cloud Storage, utilizing their highly resilient Vaults architecture. Data is physically stored in the following regions:

eu-central-003 (Amsterdam, NL) - Compliant with EU data protection regulations.
us-west-004 (Stockton, CA) - For redundancy and US-based access.

This infrastructure provides 99.999999999% (11 nines) annual durability through erasure coding and redundant storage across multiple physical locations. We utilize this enterprise-grade durability to ensure your data remains safe, available, and protected against hardware failures.

5. User Responsibilities

5.1 Acceptable Use

You agree to use the Service only for lawful purposes and in a way that does not infringe upon the rights of others or restrict their use and enjoyment of the Service. Prohibited behavior includes:

Harassing or causing distress or inconvenience to any person
Obscene or offensive statements or statements that cause offense to any user
Disruption of the normal flow of dialogue or operations within the Service
Obtaining unauthorized access to confidential information or systems
Intentionally or unintentionally violating any laws, rules, or regulations applicable to the Service
Attempting to reverse-engineer, decrypt, or bypass the security measures of the Service

5.2 Content Responsibility

You are solely responsible for the content you upload, store, and share through the Service. You represent and warrant that you own or have the necessary rights to all content you upload and that your content does not violate any laws, regulations, or third-party intellectual property rights. You agree not to upload illegal content, malware, or material that infringes on others' rights.

6. Account Security

You are responsible for all activity on your account. You agree to keep your password confidential and secure, immediately notify us of any unauthorized use, and log out when using shared or public devices. We implement industry-standard security measures, including end-to-end encryption and post-quantum cryptography.

Important Limitation: Because we are a zero-knowledge service, we cannot recover your account if you lose your password or encryption keys. We have no way to decrypt your data if you forget your password. Consider storing your password in a secure password manager or keeping a backup in a secure location.

7. Intellectual Property Rights

You retain all ownership rights to the content you upload to the Service. By uploading content, you grant us a limited license to store, maintain, transmit, and deliver your encrypted content to you and to authorized recipients you specify. This license is solely for the purpose of providing the Service and does not grant us any right to view, use, or commercialize your content.

All materials provided by the Company, including software, design, documentation, and branding, are the exclusive property of Ellipticc and protected by copyright law. You agree not to reproduce, distribute, modify, or reverse-engineer any proprietary materials without authorization.

8. Zero-Knowledge Commitment

Ellipticc is designed as a zero-knowledge service. This means:

We cannot view your files: All content is encrypted on your device before transmission to our servers.
We cannot see your filenames: Filenames are encrypted using your device-side encryption keys.
We cannot access your encryption keys: Encryption keys are generated and stored only on your device.
We cannot recover your data: If you lose your password, forget your encryption keys, or forget your two-factor authentication, we cannot help you recover your files or account.
We cannot decrypt data for legal requests: Even if we receive court orders, subpoenas, or government requests to provide unencrypted data, we are technically incapable of doing so because we do not have access to encryption keys.

This design is intentional and is our core value proposition. Your privacy and security are protected because we are technically incapable of accessing your data, regardless of external pressures.

9. Data Loss & Responsibility

You are responsible for maintaining backups of your encryption keys and passwords. Because Ellipticc has no knowledge of your passwords or encryption keys, we cannot recover your data if you lose them. While we maintain automated backups of encrypted data on our servers, we cannot help you access your data if you forget your password or lose your encryption keys.

We recommend:

Using a secure password manager to store your password
Writing down recovery codes and storing them in a safe location
Enabling two-factor authentication and backing up recovery codes
Never sharing your password or recovery codes with anyone

10. Limitation of Liability

The Service is provided "as is" and "as available" without warranties of any kind. We disclaim all warranties, including implied warranties of merchantability and fitness for a particular purpose. We do not guarantee that the Service will be error-free or uninterrupted.

To the fullest extent permitted by law, Ellipticc shall not be liable for indirect, incidental, special, consequential, or punitive damages, or for any matter beyond our reasonable control, including data loss caused by your loss of passwords or encryption keys. Our total liability shall not exceed the amount you have paid to us in the 12 months preceding the claim.

11. Changes to the Service

We may modify, suspend, or discontinue the Service or any features at any time with notice. We will make reasonable efforts to notify users of material changes. Your continued use of the Service following notice of changes constitutes your acceptance of the modified Service.

12. Compliance & Legal Access

Ellipticc complies with applicable laws and legal obligations. However, due to our zero-knowledge architecture, we have strict limitations on what we can provide:

We may disclose encrypted files and encrypted metadata when required by valid court orders or subpoenas.
We can provide account metadata (email, account creation date, IP addresses) when legally required.
We cannot provide decrypted files or unencrypted data, even if required by law, because we have no access to encryption keys.
We cannot force users to surrender encryption keys. Your encryption keys exist only on your device.

This architectural limitation is a feature of our zero-knowledge design and provides inherent protection against unauthorized access to your data.

13. Data Retention & Deletion

You can delete your account and all associated encrypted data at any time through your account settings. Upon deletion, we securely remove all encrypted files and account data from our servers within 30 days. This deletion is permanent and irreversible.

If your account is terminated by us, we retain encrypted data for 30 days to allow you to recover your account. After 30 days, data is permanently deleted.

14. Third-Party Services and Links

The Service may integrate with or link to third-party services. We are not responsible for the availability, accuracy, security, or content of third-party services or their privacy practices. We encourage you to review the terms and privacy policies of third-party services before using them.

15. Termination

We may terminate or suspend your account immediately if you violate these Terms, engage in fraudulent behavior, if your account is inactive for an extended period, or if we are required to do so by law. Upon termination, your access to the Service ceases immediately, and encrypted data is deleted per Section 13.

16. Dispute Resolution & Governing Law

These Terms are governed by the laws of Delaware, United States, without regard to conflicts of law principles. Any disputes arising from or related to these Terms or the Service shall be resolved through binding arbitration administered by JAMS (Judicial Arbitration and Mediation Services) in accordance with its Comprehensive Arbitration Rules & Procedures, rather than in court.

The arbitration shall take place in Wilmington, Delaware. Each party shall bear its own costs and attorneys' fees, unless the arbitrator determines otherwise. You waive the right to trial by jury and the right to participate in class action litigation.

17. Contact Information

For questions about these Terms of Service, please contact us at:

Email: [email protected]

Website: ellipticc.com

By using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service and accept the zero-knowledge nature of our platform.