# Terms of service

> The terms for buying and using dotsafe: your license, refunds, updates, and what we're responsible for.

Last updated: November 5, 2026

These terms cover the dotsafe app, the `dotsafe` CLI, the license you buy, and this website. By buying a license or using dotsafe, you agree to them. If you don't, please don't use dotsafe.

## Your license

- A license costs a one-time payment. There's no subscription.
- It's for one person, on up to 2 Macs at a time. Deactivate it on one Mac to move it to another.
- It includes every update we release, with no renewal fee.
- Don't share, resell or publish your license key. A key that's shared or abused can be revoked.

## Payment

Payments are handled by [Dodo Payments](https://dodopayments.com), the merchant of record, who also issue your invoice. Their [buyer terms](https://dodopayments.com/buyer-terms) apply to the payment, and the charge shows on your statement starting with `DODOPAY`. Prices are in US dollars, and taxes are added where they apply. Your license key is emailed to you once the payment goes through.

## Refunds

If dotsafe isn't right for you, email [hi@dotsafe.dev](mailto:hi@dotsafe.dev) within 14 days of buying and we'll refund you in full, no questions asked. A refunded license stops working. This doesn't affect any rights you have under consumer law.

## Open source

dotsafe's source code is published under the [MIT license](https://github.com/starc007/dotsafe/blob/main/LICENSE), and you can build it yourself under those terms. A license is what lets you use the official app and CLI we distribute. The name "dotsafe" and its logo aren't covered by the MIT license: if you publish your own build, give it another name and logo.

## Your secrets and your vault

- Your vault is encrypted on your Mac with your master password. We can't see it, recover it, or reset your password. Keep your recovery key somewhere safe; it's the only way back in if you forget the password.
- You choose where your vault is stored, and that storage provider's terms apply to it. Keep backups (`dotsafe backup` makes encrypted ones).
- When you connect a service such as OpenAI, Cloudflare, AWS or Vercel, dotsafe uses your own tokens on your behalf, and that service's terms apply.
- AI agents run commands only after you approve them. A command you approve can use the secrets you give it, so read what you approve.

A license problem never locks you out of your secrets: if the license can't be checked, or is revoked, the app shows a notice and your vault stays open to you.

## Acceptable use

Don't use dotsafe to break the law, or attempt to break, overload or get around the license system or the services it relies on.

## No warranty

dotsafe is provided "as is", without warranties of any kind, to the extent the law allows. We work hard to keep it secure and reliable, but we can't promise it will be free of bugs or interruptions, or suit every purpose.

## Limitation of liability

To the extent the law allows, we aren't liable for indirect or consequential losses, such as lost data, profits or business, and our total liability for any claim is limited to the amount you paid for your license.

## Ending these terms

You can stop using dotsafe at any time. We may revoke a license that's refunded, charged back, shared or used to abuse the service. Your vault and its data stay yours either way.

## Changes

We may update these terms. We'll change the date at the top, and for significant changes we'll say so in the [changelog](/changelog). The terms in place when you bought your license apply to that purchase.

## Contact

Questions about these terms: [hi@dotsafe.dev](mailto:hi@dotsafe.dev).

See also our [privacy policy](/privacy).