Terms of Service

Authentication is managed through WorkOS AuthKit. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account.

Access tokens are stored locally on your device. You are responsible for the security of any device on which tokens are stored. If you believe a token has been compromised, revoke it immediately through the web application.

Three-tier role-based access control:

• Admin: full access including rollback, permission management, billing, and org settings.
• Team Lead: manage projects and variables, grant/revoke per-variable access.
• Member: read-only projects; requires explicit per-variable permission grants.

Organization Admins are responsible for managing roles and ensuring appropriate access levels.

You retain all rights, title, and interest in your Content. We do not claim ownership of your environment variables, project configurations, or data.

You grant us a limited, non-exclusive, worldwide license to host, store, transmit, encrypt, and display your Content solely to provide the Service. This license terminates when you delete your Content or close your account, subject to backup retention periods.

Environment variable values are encrypted at rest using end-to-end encryption in WorkOS Vault. Each organization's secrets are encrypted with unique cryptographic keys. Our database stores only encrypted vault references, never plaintext values. You acknowledge that no system is completely secure and should maintain your own backups of critical data.

You may export your environment variables at any time through the web application, CLI, or VS Code extension. We support standard .env file format for portability.

The Service offers Free and Pro tiers. Features and limits for each tier are displayed on the Usage & Plan page in your dashboard and may change. We will provide reasonable notice before materially reducing features for paying subscribers.

Pro subscriptions are billed monthly in advance through Polar.sh, our payment processor. By subscribing, you authorize us to charge your payment method at the start of each billing cycle. The first charge occurs immediately upon subscription. Subsequent charges occur on the same calendar date each month. Fees are in U.S. dollars unless otherwise stated.

You may cancel your Pro subscription at any time through Account Settings → Billing in the dashboard. Upon cancellation:

• Your Pro access continues until the end of your current billing period. You have already paid for this period and will retain full access throughout.
• No further charges will be made after cancellation. You will not be billed for the next billing period.
• After your billing period ends, a 7-day grace period begins during which Pro features remain active. This gives you time to export data or resubscribe.
• After the grace period, your account reverts to the Free tier. A 30-day cooldown prevents repeated abuse of grace periods.

We do not provide prorated refunds for the current billing period. When you cancel, you keep Pro access for the remainder of the period you have already paid for — no money is lost. Refunds may be issued where required by applicable consumer protection law (see Section 16).

Your data is never deleted upon downgrade. If your resource usage exceeds Free tier limits, existing resources remain fully accessible but you will not be able to create new ones until you are within limits. For example, if you have 10 projects and the Free limit is 3, all 10 remain accessible but you cannot create an 11th project.

Certain features — including Secret Sharing (secure link generation with email delivery) and Secret Rotation (automated rotation with email alerts) — consume operational resources and are subject to numeric limits based on your plan tier. Current limits are displayed in real time on the Usage & Plan page.

Fees are exclusive of taxes. You are responsible for applicable sales, use, VAT, GST, or similar taxes, except where we are legally required to collect them.

We use commercially reasonable efforts to maintain availability but do not guarantee uninterrupted or error-free operation. The Service may be temporarily unavailable for maintenance, updates, or circumstances beyond our control.

We may modify, suspend, or discontinue any part of the Service at any time. For material changes affecting paying subscribers, we will provide at least 30 days' notice.

These Terms remain in effect while you have an account with the Service.

You may terminate your account at any time. We will delete your personal data within 30 days, subject to retention obligations described in our Privacy Policy.

We may suspend or terminate your access immediately if: (a) you breach these Terms; (b) required by law; (c) your account is inactive for an extended period; or (d) we discontinue the Service. We will make reasonable efforts to provide notice, except where immediate action is required for security or legal reasons.

Upon termination, your right to use the Service ceases immediately. Sections that by nature should survive (including Sections 6.1, 8, 12, 13, 14, 17, and 18) will survive.

If you are a consumer in the EU or UK, nothing in these Terms affects your statutory rights under mandatory consumer protection laws, including the Consumer Rights Act 2015 (UK) and the Consumer Rights Directive (EU). Mandatory provisions prevail over conflicting Terms.

If you are a consumer under the Australian Consumer Law or NZ Consumer Guarantees Act 1993, you have certain non-excludable rights. Nothing in these Terms is intended to exclude, restrict, or modify those rights.

If you are a consumer in Japan, the Consumer Contract Act (Act No. 61 of 2000) applies to the extent that it cannot be excluded by contract.

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law provisions. EU/UK consumers retain the protection of mandatory local law.

Before initiating legal proceedings, you agree to attempt informal resolution by contacting legal@envpilot.dev. If unresolved after 30 days, either party may pursue binding arbitration under the AAA rules, or bring claims in small claims court if eligible.

EU consumers may bring proceedings before local courts and use the European Commission's Online Dispute Resolution platform. UK consumers may bring proceedings in the courts of England and Wales, Scotland, or Northern Ireland.

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Envpilot regarding the Service.

If any provision is held invalid or unenforceable, it will be enforced to the maximum extent permissible, and the remaining provisions remain in full force.

Our failure to enforce any right or provision will not constitute a waiver of that right or provision.

You may not assign these Terms without our written consent. We may assign without restriction.

Neither party is liable for failure or delay due to causes beyond reasonable control, including natural disasters, war, pandemics, governmental actions, power failures, internet failures, or cyberattacks.

We may modify these Terms at any time. We will notify you of material changes at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.