Terms & Conditions
Last updated: July 11, 2026
1. Acceptance of Terms
By accessing or using SosVault (“the Service”), including the website, web application, APIs, and all related features, you (“the User”) agree to be bound by these Terms and Conditions (“Terms”). If you do not agree to these Terms in their entirety, you must not access or use the Service.
These Terms constitute a legally binding agreement between you and SosVault. Your use of the Service is also governed by our Privacy Policy, which is incorporated herein by reference.
2. Description of Service
SosVault is an emergency digital safety net platform that provides the following features:
- Encrypted Vaults: Zero-knowledge, client-side AES-GCM encrypted file storage for documents, images, videos, crypto keys, medical records, and other digital assets.
- Emergency SOS: Instant SMS alerting of pre-designated trusted contacts with a secure, token-based emergency group chat.
- Emergency Group Chat: End-to-end encrypted real-time messaging between you and your trusted contacts during an active SOS event, with support for text, image, video, and location sharing.
- Proof of Life Verification: Real-time video recording with a randomly generated verification phrase, allowing trusted contacts to confirm the user's identity and wellbeing.
- AI-Powered Security Questions: Personalized security questions generated through an interactive conversation with DeepSeek AI, used for identity verification during emergency access.
- AI-Powered Vault Setup: Interactive AI-assisted memory recall, powered by DeepSeek, to derive vault encryption keys from personal memories.
- Emergency Access (Panic Login): Account recovery pathway using email, phone number, date of birth, and AI-generated security questions when normal authentication methods are unavailable.
- Multiple Authentication Methods: WebAuthn passkeys, Google OAuth, magic link email, and two-factor authentication via TOTP or SMS.
- Fraud and Scam Detection: Automated monitoring of emergency chat communications for suspicious financial requests and scam patterns, with alerting of chat participants.
3. Zero-Knowledge Architecture
SosVault employs a zero-knowledge architecture. This means:
- All file contents are encrypted on your device using AES-GCM encryption before transmission to our servers.
- Encryption and decryption occur exclusively on the client side. We never possess, store, or have access to your unencrypted files, vault contents, or encryption keys.
- Your vault encryption keys are derived from personal memories provided during vault setup. We do not store these memories, the derived keys, or any mechanism to reconstruct them.
- Emergency chat messages are end-to-end encrypted. We relay encrypted message blobs between participants and cannot decrypt or read your conversations.
- We do not store your passwords in plaintext or in any recoverable form.
As a consequence of this architecture: you are solely and exclusively responsible for remembering your vault unlock phrases, security question answers, and any other credentials required to access your data. SosVault cannot recover, reset, or bypass your encryption. Loss of your credentials means permanent, irreversible loss of access to your encrypted data. You acknowledge and accept this limitation as an essential feature of our security model, not a defect.
4. AI-Powered Features and Third-Party AI Services
SosVault integrates with DeepSeek, a third-party artificial intelligence service, to provide the security question onboarding and vault key setup features. By using these features, you acknowledge and agree that:
- Information you share during the AI onboarding conversation is transmitted to DeepSeek's API for processing. We minimize data exposure by transmitting only the conversational prompts necessary to generate your security questions.
- DeepSeek is a third-party service operated independently of SosVault. We do not control DeepSeek's data handling practices, infrastructure, or security. Your use of any AI-powered feature constitutes acceptance of any risks associated with third-party AI processing.
- AI-generated content, including security questions and conversational prompts, may contain errors, inaccuracies, biases, or inappropriate content. SosVault does not warrant the accuracy, appropriateness, or safety of any AI-generated output.
- We do not store your raw conversation transcripts with DeepSeek long-term. Your final security questions and answers are stored encrypted on our servers.
- AI services may be subject to outages, deprecation, or changes in functionality beyond our control. SosVault reserves the right to modify, replace, or discontinue AI-powered features at any time.
5. User Responsibilities
As a User of SosVault, you are responsible for:
- Credential Management: Safeguarding all login credentials, passkeys, recovery information, vault unlock phrases, and security question answers. SosVault cannot recover these for you.
- Account Information Accuracy: Providing and maintaining accurate, current, and complete account information, including email address and phone number. Inaccurate contact information may prevent you from accessing the Service in an emergency.
- Trusted Contact Selection: Carefully selecting your trusted contacts. You are responsible for the accuracy of the phone numbers you provide and for informing your contacts about their role in your emergency plan.
- Device Security: Maintaining the security of devices used to access SosVault. A compromised device may expose your encryption keys or session data.
- Backup: Independently maintaining backups of critical data stored in SosVault vaults. While we maintain redundant server infrastructure, you should not rely on SosVault as your sole copy of irreplaceable data.
- Lawful Use: Complying with all applicable local, national, and international laws and regulations.
- Content: All content you upload, store, or transmit through the Service. You retain all rights to your content, but you grant us the limited right to store and transmit it as necessary to provide the Service.
6. Account Security
- You are responsible for all activity that occurs under your account, whether authorized by you or not.
- You must immediately notify us of any unauthorized use of your account or any other breach of security.
- We strongly recommend enabling two-factor authentication (TOTP or SMS) and registering a WebAuthn passkey for your account.
- The Emergency Access (Panic Login) pathway is designed as a last-resort access method. It relies on personal knowledge (security questions) that, if compromised, could allow unauthorized access. You assume the risk that someone with knowledge of your personal history could potentially answer your security questions.
7. Acceptable Use
You agree not to use the Service for any of the following:
- Any unlawful purpose or in violation of any applicable law or regulation.
- Storing, transmitting, or distributing illegal content, including but not limited to child sexual abuse material, content that infringes intellectual property rights, or content related to terrorism, violence, or hate speech.
- Harassing, abusing, threatening, or impersonating other users, trusted contacts, or SosVault personnel.
- Interfering with or disrupting the Service, its servers, or its networks.
- Attempting to gain unauthorized access to other users' accounts, data, or vaults.
- Using the Service to transmit malware, viruses, ransomware, or any other malicious code.
- Using the SOS or emergency chat features for non-emergency purposes, pranks, or false alarms.
- Automated or excessive use that imposes unreasonable load on our infrastructure (scraping, data mining, denial of service).
- Reverse engineering, decompiling, or attempting to extract the source code of the Service.
We reserve the right, at our sole discretion, to suspend or terminate any account that violates these Terms, without prior notice or liability. We may also report illegal activity to appropriate law enforcement authorities.
8. Emergency Service Limitations
SosVault is not a replacement for emergency services. In a life-threatening emergency, you should contact local emergency services (911, 112, 999, or your local equivalent) directly. SosVault does not contact emergency services on your behalf. The SOS feature alerts your pre-designated trusted contacts only. We make no guarantee regarding response times, delivery of SMS messages, or the availability of your trusted contacts.
- SMS delivery depends on third-party telecommunications infrastructure beyond our control. Messages may be delayed, filtered, or not delivered.
- Your trusted contacts may be unavailable, may not see the alert, or may choose not to respond.
- The Service may be unavailable due to maintenance, outages, network issues, force majeure events, or other circumstances.
9. DISCLAIMER OF WARRANTIES
THE SERVICE IS PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, SOSVAULT EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:
- IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
- WARRANTIES THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, ERROR-FREE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.
- WARRANTIES THAT ANY DEFECTS OR ERRORS WILL BE CORRECTED.
- WARRANTIES THAT THE SERVICE WILL MEET YOUR REQUIREMENTS OR EXPECTATIONS.
- WARRANTIES REGARDING THE ACCURACY, RELIABILITY, COMPLETENESS, OR TIMELINESS OF ANY INFORMATION, CONTENT, OR AI-GENERATED OUTPUT PROVIDED THROUGH THE SERVICE.
- WARRANTIES THAT THE SECURITY MEASURES EMPLOYED BY THE SERVICE ARE IMPENETRABLE OR INVULNERABLE TO BREACH.
- WARRANTIES THAT ENCRYPTED DATA WILL REMAIN CONFIDENTIAL UNDER ALL CIRCUMSTANCES.
- WARRANTIES THAT SOS ALERTS OR SMS MESSAGES WILL BE DELIVERED, RECEIVED, OR ACTED UPON.
- WARRANTIES THAT EMERGENCY CHAT OR PROOF OF LIFE FEATURES WILL FUNCTION AS INTENDED IN ALL SCENARIOS.
- WARRANTIES THAT FRAUD DETECTION WILL IDENTIFY ALL SCAMS OR PREVENT ALL FINANCIAL LOSS.
10. LIMITATION OF LIABILITY
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL SOSVAULT, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AFFILIATES, CONTRACTORS, OR LICENSORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES WHATSOEVER, INCLUDING BUT NOT LIMITED TO:
- LOSS OF DATA, LOSS OF ACCESS TO DATA, OR DATA CORRUPTION.
- LOSS OF ENCRYPTION KEYS, PASSWORDS, OR ACCESS CREDENTIALS.
- LOSS OF DIGITAL ASSETS, CRYPTOCURRENCY, OR FINANCIAL INSTRUMENTS.
- LOSS OF REVENUE, PROFITS, BUSINESS, GOODWILL, OR ANTICIPATED SAVINGS.
- PERSONAL INJURY, BODILY HARM, OR DEATH.
- EMOTIONAL DISTRESS OR PSYCHOLOGICAL HARM.
- PROPERTY DAMAGE OR LOSS OF PROPERTY.
- IDENTITY THEFT, FRAUD, OR UNAUTHORIZED ACCESS TO YOUR PERSONAL INFORMATION.
- FINANCIAL LOSSES ARISING FROM SCAMS, FRAUD, OR COERCION, WHETHER DETECTED BY OUR FRAUD DETECTION SYSTEMS OR NOT.
- FAILURE OF SOS ALERTS TO BE DELIVERED, RECEIVED, OR ACTED UPON.
- FAILURE OF EMERGENCY ACCESS TO FUNCTION CORRECTLY OR TO GRANT ACCESS WHEN NEEDED.
- DAMAGES ARISING FROM THIRD-PARTY SERVICES, INCLUDING BUT NOT LIMITED TO DEEPSEEK AI, SMS GATEWAYS, OAUTH PROVIDERS, OR AUTHENTICATION SERVICES.
- DAMAGES ARISING FROM SERVICE INTERRUPTIONS, OUTAGES, BUGS, SECURITY VULNERABILITIES, DATA BREACHES, OR UNAUTHORIZED ACCESS.
- DAMAGES ARISING FROM THE ACTIONS OR INACTIONS OF YOUR TRUSTED CONTACTS.
- DAMAGES ARISING FROM YOUR FAILURE TO MAINTAIN BACKUPS OF YOUR DATA.
- DAMAGES ARISING FROM YOUR RELIANCE ON THE SERVICE AS A SOLE SOURCE OF CRITICAL INFORMATION OR AS A SUBSTITUTE FOR EMERGENCY SERVICES.
THIS LIMITATION OF LIABILITY APPLIES REGARDLESS OF THE LEGAL THEORY ON WHICH THE CLAIM IS BASED, INCLUDING BUT NOT LIMITED TO CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR OTHERWISE, EVEN IF SOSVAULT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IF, NOTWITHSTANDING THE FOREGOING, SOSVAULT IS FOUND LIABLE FOR ANY DAMAGES, OUR TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR YOUR USE OF THE SERVICE SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNT YOU HAVE PAID TO SOSVAULT IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100.00 USD), TO THE EXTENT SUCH A LIMITATION IS PERMITTED BY APPLICABLE LAW.
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES OR THE LIMITATION OR EXCLUSION OF LIABILITY FOR CERTAIN DAMAGES. ACCORDINGLY, SOME OF THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU. IN SUCH JURISDICTIONS, SOSVAULT'S LIABILITY IS LIMITED TO THE MAXIMUM EXTENT PERMITTED BY LAW.
11. Indemnification
You agree to indemnify, defend, and hold harmless SosVault, its officers, directors, employees, agents, affiliates, contractors, and licensors from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to:
- Your use of or access to the Service.
- Your violation of these Terms.
- Your violation of any third-party rights, including intellectual property, privacy, or publicity rights.
- Any content you upload, store, or transmit through the Service.
- Your violation of any applicable law or regulation.
12. No Responsibility for User Content or Conduct
SosVault does not control, endorse, or assume responsibility for any content uploaded, stored, or transmitted by users through the Service. You understand that by using the Service, you may be exposed to content that is offensive, inaccurate, or otherwise objectionable. SosVault shall not be responsible or liable for any content posted by users, trusted contacts, or any third party.
SosVault makes no representations or warranties regarding the conduct, identity, or trustworthiness of any user, trusted contact, or other party you interact with through the Service. Any interactions or transactions with other users are solely between you and such parties.
13. Third-Party Services and Links
The Service may integrate with, rely on, or contain links to third-party services, websites, APIs, and technologies, including but not limited to:
- DeepSeek AI (artificial intelligence processing)
- SMS gateway providers (message delivery)
- Google OAuth (authentication)
- Email delivery services (magic links and notifications)
- WebAuthn/FIDO2 infrastructure (passkey authentication)
SosVault does not control, endorse, or assume responsibility for any third-party service. Your use of any third-party service is at your own risk and subject to that service's own terms and conditions. SosVault shall not be liable for any loss or damage arising from your use of or reliance on any third-party service.
14. Intellectual Property
The SosVault name, logo, branding, website design, software code (excluding open-source components), and all related materials are the exclusive intellectual property of SosVault and are protected by copyright, trademark, and other intellectual property laws. You may not copy, modify, distribute, sell, or create derivative works based on the Service or its branding without our express written permission.
You retain all ownership rights to the content you upload, store, and transmit through the Service (“User Content”). By using the Service, you grant SosVault a limited, worldwide, non-exclusive, royalty-free license to store, transmit, and process your User Content solely as necessary to provide the Service to you. This license terminates when you delete your User Content or your account, subject to standard backup and retention processes.
15. Termination
By You: You may terminate your account at any time by contacting us or using the account deletion functionality within the Service. Upon termination, your encrypted data will be scheduled for deletion in accordance with our data retention policies. Due to our zero-knowledge architecture, we cannot verify the deletion of specific encrypted content, but all server-side account data will be removed.
By SosVault: We reserve the right to suspend or terminate your account and access to the Service at any time, with or without cause, and with or without notice. Grounds for termination include violation of these Terms, illegal activity, extended inactivity, or any conduct that we determine, in our sole discretion, to be harmful to the Service, other users, or third parties.
Effect of Termination: Upon termination, your right to access the Service ceases immediately. Sections of these Terms that by their nature should survive termination (including but not limited to disclaimers of warranties, limitations of liability, indemnification, and intellectual property) shall survive.
16. Modifications to the Service and Terms
Service Modifications: SosVault reserves the right to modify, suspend, or discontinue the Service, or any part thereof, at any time, with or without notice, and without liability to you. This includes adding, removing, or changing features, storage limits, pricing, or any other aspect of the Service.
Terms Modifications: We reserve the right to update or modify these Terms at any time. When we make material changes, we will notify you by email (to the address associated with your account), through the Service interface, or by updating the “Last updated” date at the top of this page. Your continued use of the Service after any modifications constitutes your acceptance of the revised Terms. If you do not agree to the revised Terms, you must stop using the Service.
17. Force Majeure
SosVault shall not be liable for any failure or delay in performance of its obligations under these Terms arising out of or caused by circumstances beyond its reasonable control, including but not limited to: acts of God, natural disasters, war, terrorism, civil unrest, government action, labor disputes, power failures, internet or telecommunications outages, cyber attacks, denial of service attacks, hardware or software failures beyond our reasonable control, or any other event of force majeure.
18. Governing Law and Dispute Resolution
These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which SosVault is established, without regard to its conflict of law provisions. Any dispute arising out of or relating to these Terms or the Service shall be resolved through binding arbitration in accordance with the rules of the applicable arbitration body, unless otherwise required by applicable law.
You agree that any claim or cause of action arising out of or relating to these Terms or the Service must be filed within one (1) year after such claim or cause of action arose, or be forever barred.
19. Severability
If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.
20. Entire Agreement
These Terms, together with our Privacy Policy and any other policies referenced herein, constitute the entire agreement between you and SosVault regarding the Service and supersede all prior agreements, understandings, and communications, whether written or oral.
21. No Waiver
Our failure to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision. Any waiver must be in writing and signed by an authorized representative of SosVault.
22. Assignment
You may not assign or transfer these Terms, or your rights or obligations hereunder, without our prior written consent. SosVault may assign or transfer these Terms, in whole or in part, without restriction or notice to you.
23. Contact
If you have questions about these Terms & Conditions, please contact us through the support channels provided on the SosVault website.