Terms of service

By creating an account or using Pock (the website at pock.sh and its subdomains, the desktop app, the CLI, and related APIs, together the "Service"), you agree to these Terms of Service and to our Privacy Policy. If you don't agree, don't use the Service. If you're using Pock on behalf of an organization, you're agreeing for that organization and confirming you have authority to do so.

Pock is an end-to-end encrypted secrets manager: a vault for credentials and environment variables, encrypted sharing, team features, and developer tooling. Encryption and decryption happen on your devices; we store and transport ciphertext and the metadata described on the privacy page. How the system works is documented on the security page.

Pock is currently in beta. The Service is provided "as is" and "as available": features may change, break, or be removed; availability isn't guaranteed; and data-affecting bugs, while we work hard to avoid them, are possible. Keep independent copies of anything you cannot afford to lose. Check status for current availability.

You're responsible for your account. That means:

• Accurate sign-up. Provide accurate account information and keep it current. Authentication is handled by our identity provider (Clerk).
• Credential safety. Keep your sign-in credentials, passphrase, and secret key confidential. Activity under your account is your responsibility.
• Age. You must be old enough to consent to these terms in your jurisdiction (at least 13, or 16 where required).
• Compromise. Tell us promptly at hello@pock.sh if you believe your account has been compromised.

Encryption means we can't see what you store. These rules still apply, and we enforce them through the signals we do have (abuse reports, metadata, and traffic patterns). You agree not to:

• Illegal content. Use shares, the vault, or chat to store or distribute content that is illegal, including CSAM, or to facilitate any illegal activity.
• Harm others. Use the Service to distribute malware, phish, harass, or exfiltrate data you have no right to access.
• Abuse the platform. Attempt unauthorized access to other users' data or our infrastructure, circumvent rate limits or share protections, or resell the Service without permission.
• Break the crypto for others. Interfere with the transparency log, key distribution, or other mechanisms other users rely on to verify the Service.

Good-faith security research is welcome; report findings to hello@pock.sh rather than exploiting them.

The plaintext of your secrets, the decryption keys, and even file names never reach us in readable form; we only ever receive an opaque encrypted envelope. We cannot read your secrets, and we cannot recover them if you lose your keys. There is no "forgot my passphrase" reset that restores your data. That's the point, and it means key custody is your responsibility.

You acknowledge that if you lose your passphrase, secret key, or recovery material, your encrypted data is permanently unrecoverable, and that this is a deliberate property of the Service, not a defect.

• Your data. Everything you encrypt and store remains yours. We claim no ownership, and we take only the limited license needed to store and transmit ciphertext on your behalf.
• Our service. The Pock software, site, branding, and documentation are ours or our licensors'. Any Pock code published under an open-source license is governed by that license.
• Feedback. If you send us feedback or suggestions, we may use them without obligation to you.

You can stop using Pock and delete your account at any time. We may suspend or terminate accounts that violate these terms, create legal exposure, or abuse the platform, with notice where practical.

Export is always available. Your data is encrypted with your keys, and you can export it at any time while your account is active. Where a termination is initiated by us and lawful to do so, we'll provide a reasonable window to export before deletion. Retention and deletion mechanics follow the privacy page.

To the maximum extent permitted by law, the Service is provided without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, data, or goodwill, including data that is unrecoverable because keys were lost. Our total aggregate liability for any claim relating to the Service is limited to the greater of the amount you paid us in the twelve months before the claim, or USD $50.

Some jurisdictions don't allow certain exclusions, so parts of this section may not apply to you.

These terms are governed by the laws of England and Wales, without regard to conflict-of-law rules, and disputes will be resolved in the courts of England and Wales, except where mandatory consumer protections in your country of residence apply.

We may update these terms as the Service evolves. For material changes we'll give notice (by email or in-product) at least 14 days before they take effect. Continuing to use the Service after that means you accept the updated terms; if you don't, stop using the Service and export your data.

Questions about these terms: hello@pock.sh. Privacy-specific requests are covered on the privacy page. More about who runs Pock: company.