https://envless.cloud/assets/Legal.tVIeR7TS.js

1import{j as e}from"./jsx-runtime.u17CrQMm.js";import{r as s}from"./chunk-BV7QT456.BQ71lt_D.js";import{k as r}from"./jwt-generator.DZpDpWmD.js";const i=[{heading:"Introduction",body:'Welcome to Envless. These Terms of Service ("Terms") govern your access to and use of the Envless platform, including our command line interface (CLI), cloud dashboard, APIs, SDKs, browser extensions, and any related services (collectively, the "Services"). By creating an account, signing in, installing the CLI, or otherwise using the Services, you agree to be bound by these Terms. If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to that organization.'},{heading:"Our Services",body:"Envless is an end-to-end encrypted environment variable and secrets management platform. We help developers, teams, and organizations securely store, synchronize, and share configuration values across projects, environments, and team members. Because variables are encrypted on your device before they reach our servers, Envless cannot read the contents of your secrets, and neither can any third party that might gain access to our infrastructure. The Services include project and environment management, team access controls, variable change history, developer tooling, and analytics about your own usage."},{heading:"Accounts and Eligibility",body:"To use most features of Envless you must create an account and be at least 16 years old, or the age of digital consent in your jurisdiction if higher. You agree to provide accurate, current, and complete information during registration and to keep that information up to date. You are responsible for safeguarding your workspace passphrase, encryption keys, API keys, CLI tokens, and any other credentials associated with your account. Because of our end-to-end encryption model, certain credentials cannot be recovered by Envless if lost, and losing them may result in permanent loss of access to your encrypted data."},{heading:"Plans, Billing, and Renewals",body:"Envless offers Free, Dev, Team, and Enterprise plans with different limits on products, projects, environments, custom domains, version history, and team members. Paid plans are billed in advance on a monthly or yearly cycle through our payment processor and renew automatically until cancelled. You authorize us to charge your payment method for all fees due. Fees are non-refundable except where required by law or expressly stated. If you exceed your plan limits, certain features (such as creating additional products, projects, or environments, claiming custom domains, or inviting more team members) may be restricted until you upgrade or reduce usage. We may change pricing on prospective renewal terms by providing reasonable notice before the change takes effect."},{heading:"Acceptable Use",body:"You agree to use Envless only for lawful purposes and in accordance with these Terms. You must not (a) use the Services to store, transmit, or process content that is illegal, infringing, malicious, or that violates the privacy or rights of others; (b) attempt to bypass our security controls, encryption, or access tiers; (c) reverse engineer, decompile, or attempt to extract source code from the Services except to the extent expressly permitted by law; (d) use the Services to send spam, distribute malware, or run denial-of-service activity; (e) share your account or resell access to the Services without our written consent; or (f) use the Services in any way that could damage, disable, overburden, or impair our infrastructure. We may suspend or terminate accounts that violate this section."},{heading:"Your Content and Data",body:'You retain all rights to the environment variables, configuration values, project metadata, and other content you submit to Envless ("Your Content"). You grant Envless a limited, worldwide, non-exclusive license to host, store, transmit, and back up Your Content solely as necessary to provide the Services to you. Because variable values are end-to-end encrypted, the license we exercise over those values is limited to storing and transmitting the ciphertext. You are solely responsible for ensuring you have the right to store and share Your Content with the team members and integrations you authorize.'},{heading:"Team Access and Shared Workspaces",body:"The Team and Enterprise plans allow you to invite team members into shared workspaces. The workspace owner or administrator is responsible for managing roles and permissions, removing access when team members leave, and ensuring that team members comply with these Terms. Worksp

1ace administrators may have access to change history, billing information, and metadata about variables and environments. Envless is not responsible for actions taken by team members you have authorized, including the export or rotation of secrets."},{heading:"CLI, SDKs, and Third-Party Integrations",body:"Envless provides a CLI and SDKs to help you integrate secrets into your local development, CI/CD pipelines, and runtime environments. You are responsible for keeping these tools updated, for the security of the machines on which they are installed, and for the configuration of any third-party services (such as cloud providers, CI systems, or version control hosts) that you connect to Envless. We are not responsible for the availability, security, or behavior of third-party services."}],c=[{heading:"Service Availability and Modifications",body:"We work hard to keep Envless reliable, but the Services are provided on a continuous best-effort basis and may occasionally be unavailable due to maintenance, updates, or events outside our control. We may add, modify, or discontinue features at any time. If we make a materially adverse change to a paid plan, we will provide reasonable advance notice. The CLI and SDKs are designed to allow you to continue retrieving previously synced values even during brief platform outages where applicable."},{heading:"Suspension and Termination",body:"You may stop using Envless at any time and cancel your subscription from the dashboard. We may suspend or terminate your access to the Services if you breach these Terms, if your account is used in a way that creates legal, security, or reputational risk for Envless or other users, or if we are required to do so by law. Upon termination, your right to use the Services ends immediately. We will retain encrypted data for a limited period to allow for export or reactivation, after which it may be permanently deleted."},{heading:"Disclaimers",body:'The Services are provided "as is" and "as available", without warranties of any kind, whether express, implied, or statutory, including warranties of merchantability, fitness for a particular purpose, title, and non-infringement. Envless does not warrant that the Services will be uninterrupted, error-free, or completely secure. While we use industry-standard encryption and security practices, no system is perfectly secure, and you are responsible for maintaining appropriate backups and key management practices.'},{heading:"Limitation of Liability",body:"To the maximum extent permitted by applicable law, Envless and its affiliates, officers, employees, and suppliers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including loss of profits, data, secrets, business opportunities, or goodwill, arising out of or related to your use of or inability to use the Services. Our aggregate liability for any claim arising out of or related to these Terms or the Services will not exceed the greater of (a) the amounts paid by you to Envless in the twelve months preceding the event giving rise to the claim, or (b) one hundred U.S. dollars."},{heading:"Indemnification",body:"You agree to defend, indemnify, and hold harmless Envless and its affiliates from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to (a) your use of the Services, (b) Your Content, (c) your violation of these Terms, or (d) your violation of any rights of a third party."},{heading:"Governing Law and Disputes",body:"These Terms are governed by the laws applicable to where Envless is established, without regard to conflict-of-laws principles. You agree that any dispute arising out of or related to these Terms or the Services will be brought exclusively in the competent courts of that jurisdiction, except where local consumer protection laws give you the right to bring proceedings in your country of residence."},{heading:"Changes to These Terms",body:"We may update these Terms from time to time to reflect changes to the Services, our business, or legal requirements. When we make material changes, we will notify you by email, through the dashboard, or by other reasonable means before the changes take effect. Your continued use of the Services after the effective date of the updated Terms constitutes acceptance of the changes. If you do not agree, you should stop using the Services and may cancel your account."}],p=[...i,...c],g={heading:"Contact",body:"We aim to respond to all legal inquiries within five business days. If you have questions about these Terms of Service, please email the team at"},f=[{heading:"Introduction",body:"Your privacy matters, and at Envless it is fundamental to how the platform is built. This Privacy Policy explains what information we collect when you use Envless, how we use that information, who we share it with, and the choices you have. Envless is an end-to-e

1nd encrypted secrets management platform: variable values you store with us are encrypted on your device before they ever reach our servers, which means we cannot read them, and neither can a third party that might gain access to our infrastructure."},{heading:"Services We Provide",body:"Envless provides a CLI, cloud dashboard, APIs, and SDKs that let developers and teams manage environment variables and secrets across projects and environments. To make this work, we process two broad categories of information: account and operational data that we can read (such as your email address, workspace membership, and usage metrics), and end-to-end encrypted payloads that we cannot read (the actual values of your variables and any metadata you have chosen to encrypt)."},{heading:"Cookies and Similar Technologies",body:"We use a small number of strictly necessary cookies and similar local storage technologies to keep you signed in, remember your dashboard preferences, and protect against fraud and abuse. We also use third-party product analytics to understand how the site and dashboard are used and where people get stuck: Google Analytics for aggregate traffic measurement, and Hotjar and Microsoft Clarity for usage analytics and session recording, which capture page interactions such as clicks, scrolling, and navigation. Session recording is disabled on our free developer tool pages, so nothing you type or paste into those tools is ever recorded or transmitted. These providers process this data on our behalf as described in their own privacy policies. We do not use advertising cookies and we do not sell your data. You can clear cookies in your browser at any time, though doing so will sign you out of the dashboard."},{heading:"Account Information",body:"When you create an Envless account we collect basic information such as your name, email address, the account identifier from the provider you signed in with, and (for paid plans) billing details handled by our payment processor. Sign-in is passwordless, so there is no account password and we never store one or a hash of one. If you turn on two-factor authentication we additionally store your authenticator seed, encrypted, and SHA-256 hashes of your recovery codes. We use this information to create and secure your account, communicate with you about the Services, process payments, and provide customer support. Billing information is processed by a PCI-compliant payment provider; we do not store full payment card numbers on our servers."}],v=[{heading:"How We Use Information",body:"We use the information we collect to operate, maintain, and improve Envless; to provision your projects, environments, and team workspaces; to enforce plan limits; to detect and prevent abuse, fraud, and security incidents; to communicate important service updates and respond to support requests; and to comply with legal obligations. We do not use the contents of your encrypted variables for any purpose other than storing and synchronizing them on your behalf, because we are not able to read them."},{heading:"Encryption and Security",body:"Variable values you store with Envless are encrypted client-side using authenticated encryption before they are uploaded. Encryption keys are derived from material that stays under your control, so the ciphertext we hold is meaningless without your keys. In addition, all traffic to and from Envless is protected with TLS, data at rest is encrypted on our infrastructure, and access to production systems is restricted, logged, and reviewed. While no system can guarantee perfect security, our architecture is designed so that even a worst-case server compromise does not reveal the contents of your secrets."},{heading:"Sharing of Information",body:"We do not sell, rent, or trade your personal information. We share information only with trusted service providers that help us operate Envless (such as hosting, payment processing, email delivery, and error monitoring), and only under contracts that require them to protect your information and use it solely for the purposes we specify. We may disclose information if required by law, valid legal process, or to protect the rights, safety, or property of Envless, our users, or the public. In the event of a merger, acquisition, or asset transfer, information may be transferred to the new entity subject to this Privacy Policy."},{heading:"Data Retention",body:"We retain account information for as long as your account is active and for a limited period afterwards to comply with legal, accounting, and security obligations. Encrypted variables and project data are retained while your workspace is active and for a short grace peri

1od after cancellation or deletion, during which the workspace can be restored. After that period, the data is permanently deleted from our active systems and removed from backups on a rolling basis."},{heading:"Your Rights and Choices",body:"Depending on where you live, you may have rights to access, correct, export, restrict, or delete the personal information we hold about you, and to object to certain processing activities. You can exercise most of these rights directly from the dashboard, including exporting workspaces and deleting your account. For any request that cannot be completed from the dashboard, contact us using the details below and we will respond in accordance with applicable law."},{heading:"International Transfers",body:"Envless operates globally, and information we collect may be processed in countries other than the one in which you live. When we transfer personal information across borders, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under applicable data protection laws."},{heading:"Children",body:"Envless is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action."},{heading:"Changes to This Policy",body:"We may update this Privacy Policy to reflect changes to the Services, our practices, or legal requirements. When we make material changes, we will notify you by email or through the dashboard before the changes take effect. The latest version will always be available at this URL, with the effective date shown at the top."}],b={heading:"Contact Us",body:"We aim to respond within thirty days, or sooner where required by law. If you have questions about this Privacy Policy, want to exercise your data protection rights, or would like to report a security concern, please email the team at"},d=["Account details such as your name, email address, and display name","Workspace, project, and environment metadata (names, descriptions, member roles)","API usage, sync activity, and audit log entries tied to your account","Billing and subscription information processed through our payment provider"],l=["Operate and improve the CLI, dashboard, APIs, and SDKs that make up Envless","Provision and synchronize your projects, environments, and team workspaces","Enforce plan limits, detect abuse, and protect the platform from fraud and security incidents","Process payments, manage subscriptions, and send invoices","Send essential service updates, security notices, and support communications","Send workspace notification emails, such as a version being published, a teammate joining, an environment being exposed, and billing notices, each of which you can turn off on its own from your notification preferences in the dashboard"],u=["We never sell, rent, or trade your personal data, and we do not share it with third parties for advertising or marketing purposes.","Variable values you store with Envless are end-to-end encrypted on your device before they reach our servers, which means we cannot read the contents of your secrets even if we wanted to.","We may share anonymized, aggregated usage statistics for analytics and product research, but we will never share personally identifiable information without your consent or a clear legal basis.","We retain your account and workspace data for as long as your account is active. You can export your workspaces and request deletion of your account at any time from the dashboard.","We implement industry-standard security controls, including TLS in transit, encryption at rest, strict access controls on production systems, and continuous monitoring, to protect the data we hold on your behalf."],w=({id:t="page-content",children:a})=>e.jsx("section",{id:t,className:"scroll-mt-24 pb-24",children:e.jsx("div",{className:"max-w-section mx-auto px-5 md:px-[60px]",children:e.jsx("div",{className:"max-w-[720px] space-y-12",children:a})})}),o=({heading:t,children:a})=>e.jsxs("div",{children:[e.jsx("h2",{className:"text-xl sm:text-2xl font-display font-normal text-foreground mb-4 break-words",children:t}),e.jsx("div",{className:"text-base text-muted-foreground space-y-4 break-words",children:a})]}),S=({heading:t,body:a})=>e.jsx(o,{heading:t,children:e.jsx("p",{children:a})}),x=({heading:t,body:a})=>e.jsx(o,{heading:t,children:e.jsxs("p",{children:[a," ",e.jsx("a",{href:`mailto:${r}`,className:"text-primary-text hover:underline",children:r}),"."]})}),n=({items:t})=>e.jsx("ul",{className:"list-disc pl-5 sm:pl-6 space-y-2 break-words",children:t.map(a=>e.jsx("li",{children:a},a))}),T=()=>e.jsxs(o,{heading:"Data Collection & Usage",children:["We collect the following data when you authenticate:",e.jsx(n,{items:d}),e.jsx("p",{children:"Your data is used to:"}),e.jsx(n,{items:l}),u.map(t=>e.jsx(s.Fragment,{children:t},t))]});

1export{w as L,f as P,p as T,S as a,T as b,v as c,x as d,b as e,g as f};