The terms Valt0 is used under

Some of the clauses below limit what Byte 1620 is responsible for, allow it to end this agreement on its own, and choose the law and the courts that apply. Under Romanian law (Article 1203 of the Civil Code), clauses like these take effect only if you accept them expressly, so they are listed here and marked where they appear.

By accepting this agreement, you confirm that you have read each of the following clauses, that you understand it, and that you accept it expressly:

1. 4What you may not do
2. 7Other companies' products
3. 9No warranty
4. 10Byte 1620's liability
5. 11Claims you cause
6. 12How this ends
7. 14Law and courts

Byte 1620 grants you a worldwide, non-exclusive, non-transferable and non-sublicensable licence to download, install and use Valt0, free of charge, for as long as this agreement lasts.

There is no limit on how many machines you install it on, how many vaults you create, or whether the work you do with it is commercial. If you are an organisation, your employees and contractors may use Valt0 on your behalf under this agreement, and you are responsible for how they use it.

You may also deploy Valt0 internally: install it in a container image, a virtual machine image or on a server, continuous integration runners and cloud infrastructure included, and run it there so that your own applications and services can use it. Deployment is internal when the image or server is operated by you or by a provider acting for you, such as a cloud host, and only you, your employees and your contractors receive the image. A service you run for others, software as a service included, stays internal as long as your customers use the service and never receive an image or copy that contains Valt0.

Anything else is redistribution, and needs Byte 1620's written permission: giving, selling or publishing an image, installer or package that contains Valt0 to anyone outside your organisation, your customers included. A customer who needs Valt0 on infrastructure they control can download it free and accept this agreement themselves, and their contractors may then install it for them.

Nothing in this agreement obliges you to pay for Valt0. If Byte 1620 ever offers a paid version or service, it will come with terms of its own.

Everything this agreement does not expressly allow is withheld. In particular, you may not:

• sell, rent, lease, lend, sublicense, publish or otherwise distribute Valt0, in whole or in part, except as the clause above allows;
• offer Valt0 to others as a hosted or managed secrets service (using it inside a service of your own is allowed, as the clause above says);
• copy, modify, adapt or translate Valt0, or make a work derived from it, beyond the copies you need to install it, run it, back it up and deploy it internally as the clause above allows;
• reverse engineer, decompile or disassemble Valt0, or otherwise try to recover its source, except where the law gives you that right and does not allow an agreement to take it away;
• remove, obscure or alter any copyright, trademark, licence or attribution notice it carries;
• circumvent any limit, check or security measure built into it.

Valt0 is licensed to you, not sold. Byte 1620 and its licensors own it: the code, the name and logo, the documentation, and every copy, update and derivative of them. Nothing in this agreement transfers any of those rights to you, and every right it does not expressly grant is reserved.

As between you and Byte 1620, you keep all the rights you have in your vault files and in the data, keys and secrets you store with Valt0. Nothing in this agreement gives Byte 1620 any ownership of them, or any licence to use them.

The current version of Valt0 has no account and does not transmit vault contents, vault keys or secrets to Byte 1620. If a later version ever changes that, the privacy policy will say so before that version is released.

If you send Byte 1620 an idea, a suggestion or a report about Valt0, by email, in a public issue or in any other way, Byte 1620 may use it for any purpose without owing you anything for it.

Valt0 includes components written by others and published under their own licences, open source components among them. Each such component is governed by its own licence, not by this agreement. This agreement governs only Byte 1620's own material, and nothing in it restricts a right that a component's licence gives you.

Some parts of Valt0 that Byte 1620 publishes itself, such as a client library, may also come with a licence of their own. Where they do, that licence governs that part instead of this agreement.

Valt0 works alongside things Byte 1620 does not make or control: your operating system and your hardware, including the security chip Valt0 needs on a development machine; git hosts, package managers and app stores; container runtimes and cloud providers; and every service whose credentials you keep in a vault. Byte 1620 is not responsible for any of them, for what they do with your data, or for any loss they cause. Their own terms govern your use of them.

If you got Valt0 through an app store or a package manager, that store's terms govern the download. This agreement is between you and Byte 1620 alone, and the store has no responsibility for Valt0 under it.

Valt0 is a tool, and how it is used is up to you. You are responsible for:

• keeping every vault key, prime key and unlock key file safe, and for choosing who receives one: whoever holds a vault file and its key can read every secret in it;
• keeping backups of every vault file and every key, stored apart from each other, and for checking that you can restore them;
• the commands you run. Some replace or delete data by design, some do it without asking when you tell them to (with --force, for example), and deployment mode deletes the primed vault and the prime key from disk unless you tell it not to, so read the documentation before you run one;
• testing Valt0 in your own setup, a deployment included, before you rely on it for anything that matters;
• the security of the machines, accounts, repositories, images and pipelines where your vaults, keys and secrets are kept, and of anywhere you copy a secret to, the clipboard included;
• keeping Valt0 up to date, since it does not check for updates by itself;
• what you store and why. If a vault holds personal information, you are responsible for it under data protection law; Valt0 does not send it to Byte 1620, and Byte 1620 does not process it for you;
• complying with export control and sanctions laws. Valt0 contains encryption, and you may not export or use it where those laws forbid it. You confirm that they do not forbid Byte 1620 from dealing with you.

If you use Valt0 in the course of a business, you will compensate Byte 1620 for any loss, liability, cost and reasonable legal fee it incurs because of a claim by anyone else, to the extent the claim arises from: your breach of this agreement; your use of Valt0 in breach of the law; the data and secrets you store with Valt0, or your right to store them; or your infringement of anyone else's rights.

This does not cover a claim, or any part of one, that results from a defect in Valt0, or from Byte 1620's own breach of this agreement, negligence, misconduct or infringement of anyone else's rights.

Byte 1620 will tell you promptly about any claim it asks you to cover, and will not settle it in a way that admits fault on your behalf without your agreement.

This agreement lasts until it is ended. It ends automatically, without notice and without any other formality, if you do anything that "What you may not do" forbids, or use Valt0 beyond what "What you may do" allows. You may end it at any time by deleting every copy of Valt0 you hold.

Byte 1620 may end this agreement for everyone, for example if it stops developing Valt0, by publishing a notice on valt0.com at least ninety days before the end takes effect.

Byte 1620 may change Valt0, or stop offering it or any version of it, at any time, without any liability to you. Stopping offering Valt0 does not end your right to use a copy you already have.

When this agreement ends, stop using Valt0 except as the next paragraph allows, and delete it once you no longer need it for that. The clauses that by their nature should outlast this agreement do, including those on ownership, warranty, liability, compensation, law and courts.

However this agreement ends, you keep the right to use any version of Valt0 you already have solely to open, read, export or recover the data in your own vaults. That right outlasts this agreement, and Byte 1620 cannot revoke it.

Byte 1620 may revise this agreement. Each revision is published on this page with a new version number and date, and applies to any version of Valt0 you download, install or update to after it is published. The revision you accepted continues to govern the versions you already have.

This agreement, and any dispute or claim arising from or connected with it or with Valt0, whether contractual or not, is governed by the law of Romania, without regard to its rules on conflict of laws. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

The competent courts of Cluj-Napoca, Romania, have exclusive jurisdiction over any such dispute.

If you are a consumer, this clause does not take away the protection of the mandatory rules of the country you live in, or any right you have to bring a claim in its courts.

This agreement, together with the licences that govern parts of Valt0, is the whole agreement between you and Byte 1620 about Valt0, and replaces anything either of us said or wrote about it before. The privacy policy explains what Byte 1620 knows about you; it is not part of this agreement.

If any part of this agreement is found to be invalid or unenforceable, it is limited only as far as needed to make it enforceable or, where that is not possible, set aside, and the rest of the agreement continues in full.

If Byte 1620 does not enforce a term, or is slow to, it has not given up the right to enforce it later.

You may not transfer this agreement or any right under it. Byte 1620 may transfer it, for example to a company that takes over Valt0.

This agreement is written in English. If it is ever translated, the English version prevails, unless the law requires otherwise.

Byte 1620 may give you notice under this agreement on valt0.com, or at any email address you have used to write to it. You give notice to Byte 1620 at hello@byte1620.com.

Valt0 is made by BYTE 1620 SRL, a company registered in Romania. Questions about this agreement, notices under it, and questions about a use of Valt0 it does not seem to cover go to hello@byte1620.com.