Last updated: 6 May 2026

This English translation is provided for convenience. The French version prevails in case of discrepancy.

1. Definitions

"FerrVault": the encrypted secrets management service edited by Bryan Ferrando, Entrepreneur individuel (FerrLabs), SIREN 104 243 951, accessible at ferrvault.com.
"Customer": any natural person of legal age or legal entity having subscribed to a FerrVault Subscription.
"Vault": a logical container holding a set of Secrets, shared between authorized members of the Customer.
"Secret": any sensitive piece of data (API key, credential, token, certificate, application password) stored in a Vault, encrypted client-side before transmission.
"Master password": the secret known only to the Customer, from which the data encryption key (DEK) is derived. FerrLabs holds no copy of it.
"Subscription": the pricing plan (Free, Pro, Team or Enterprise) subscribed to by the Customer.

2. Acceptance

Use of the Service implies unreserved acceptance of these terms. The Customer acknowledges having read and accepted them prior to any subscription.

3. Service description

FerrVault provides:

End-to-end encrypted Secrets storage
Granular sharing of Secrets between organization members
An append-only audit log recording Secret accesses (who, when, from where)
Kubernetes integration through the FerrVault operator, syncing Secrets into native Kubernetes Secret resources
A REST API and CLI to automate rotations and access

4. Pricing and subscription

Current pricing is published at ferrvault.com/pricing. The Service is offered in four tiers:

Free: 5 users, 3 vaults, 100 secrets
Pro / Team / Enterprise: increasing volumes of users, vaults, secrets, and advanced features (SSO, scheduled rotation, fine-grained access controls)

5. Payment

Payments are made through Stripe Inc. (United States, Data Privacy Framework certified), by credit card or SEPA direct debit. The Customer expressly authorizes monthly automatic debit. Each invoice is issued on the subscription anniversary date.

6. Term, renewal and termination

The Subscription is concluded without commitment, and is tacitly renewed each month on the anniversary date. The Customer can terminate at any time from their account area (termination takes effect at the end of the current billing period). No pro-rata refund.

In accordance with the French law of 16 August 2022, termination is accessible by means at least as simple as subscription.

7. Right of withdrawal (consumers only)

In accordance with article L.221-18 of the French Consumer Code, a Customer who is a consumer has a 14-day period to exercise their right of withdrawal. The Customer expressly waives this right by requesting immediate execution of the Service upon subscription. This waiver is materialized by the checkbox at payment time.

8. Customer obligations

The Customer warrants that the Secrets stored:

Belong to them or that they hold a legitimate right to possess them
Do not contain third-party personal data without an appropriate legal basis under the GDPR
Are not used for illegal purposes under French law
Do not include cryptographic material subject to export restrictions for which the Customer lacks the required authorizations

The Customer is solely responsible for the choice, quality and rotation of their Secrets, the proper management of access permissions within their organization, and the secure custody of their Master password.

9. Backup and unrecoverability

The Customer understands and accepts that:

Secrets stored in FerrVault are encrypted client-side with a key derived from the Customer's master password. FerrLabs holds no copy of this password and cannot technically decrypt the secrets.
In case of loss of the master password, secrets are permanently unrecoverable. The Customer is solely responsible for the safekeeping of their password and recovery codes.
FerrLabs recommends that the Customer periodically export their secrets (decrypted client-side) for independent backup purposes.
In case of secret deletion, encrypted backups are purged within 30 days. Beyond that, the data is unrecoverable.
Security probes (audit log) trace metadata accesses to secrets (who, when, from where), not their content, which remains unreadable server-side.

10. Anti-abuse policy

FerrVault is designed for the storage of professional secrets (API keys, credentials, tokens, certificates). The Customer undertakes not to use it to store third-party personal data without a legal basis, illegal content, or to circumvent legal restrictions (arms export, international sanctions, etc.).

11. Suspension and termination for cause

FerrLabs may suspend or terminate the Subscription, without notice or refund, in case of:

Use manifestly contrary to the Anti-abuse policy
Payment default of more than 15 days
Serious breach of these terms
Attempted attack on the infrastructure (abuse, brute-force, fraud)

12. Personal data

The Customer's data is processed in accordance with the privacy policy published at ferrvault.com/privacy. FerrLabs is the data controller for the Customer account data and Vault metadata. Since Secret content is encrypted client-side, FerrLabs has no technical capacity to process it in clear text.

When the Customer stores personal data subject to the GDPR within their Vaults, the Customer is the data controller and FerrLabs is the processor within the meaning of GDPR art. 28; a Data Processing Addendum (DPA) is available on request.

13. Intellectual property

The FerrVault source code, the "FerrLabs" and "FerrVault" trademarks, the Kubernetes operator and all associated graphical elements remain the exclusive property of Bryan Ferrando, Entrepreneur individuel.
Stored Secrets remain the exclusive property of the Customer. The Customer grants FerrLabs a strictly technical, non-exclusive, worldwide, royalty-free license, limited to the storage, encrypted replication and delivery of the encrypted content for the purposes of the Service. FerrLabs has no usage right over the plaintext content, which it cannot technically obtain.

14. Limitation of liability

FerrLabs is bound by an obligation of means. FerrLabs's liability is limited to direct foreseeable damages and shall not exceed, in any event, the amounts paid by the Customer over the past 12 months. FerrLabs is not liable for indirect damages (loss of revenue, loss of Secrets resulting from the Customer's loss of their Master password, reputational harm).

FerrLabs is not liable in case of force majeure (infrastructure subcontractor outage, DDoS attack, network unavailability).

15. Modification of terms

FerrLabs reserves the right to modify these terms. Any modification is notified to the Customer by email at least 30 days before its entry into force. Failing express opposition by termination within this period, the new terms are deemed accepted.

16. Applicable law and jurisdiction

These terms are governed by French law. For any dispute with a professional Customer, exclusive jurisdiction of the courts of Lille.

For any dispute with a consumer Customer, in accordance with article L.612-1 of the French Consumer Code, the Customer may have free recourse to a consumer mediator. Designated mediator: [À COMPLÉTER].

17. Final provisions

The possible nullity of a stipulation does not entail the nullity of the whole. FerrLabs's failure to exercise a right cannot be interpreted as a waiver.