Terms of Service

The zero-knowledge contract

You encrypt backup data on your machine before upload and you control the private recovery key. HermesBackup does not receive plaintext backup data and cannot decrypt stored ciphertext. You are responsible for saving the recovery key off-machine. If you lose every copy, your backups are permanently inaccessible and support cannot recover them.

Accounts and devices

You are responsible for account credentials and paired-device tokens. A valid device token can initiate, list, download, or delete backups on the associated account. You can revoke device tokens from the dashboard at any time. Pairing codes expire in 10 minutes.

Quotas and fair use

The Free plan includes 2 GB of storage, 60 objects, and 4 uploads per day. The Pro plan includes 10 GB, 500 objects, and 24 uploads per day. Uploads that would exceed quota return HTTP 507. The server never silently deletes user data. We reserve the right to suspend accounts that materially abuse the service beyond fair use.

Billing

Pro is billed annually at $10 USD. Payment processing is handled by Stripe. You can cancel anytime from the dashboard; cancellation takes effect at the end of the current billing period. Refunds are available within 14 days of the most recent charge if no backups were downloaded during that period.

Service availability

We aim for 99.9% API uptime. The service depends on Cloudflare Workers, D1, R2, and KV — planned maintenance is announced on the status page. We are not liable for data loss resulting from your failure to save the recovery key or from events outside our reasonable control.

Acceptable use

You may not use HermesBackup to store content that violates applicable law, infringes intellectual property rights, or constitutes malware, phishing material, or CSAM. Because backups are encrypted before upload, we rely on metadata caps and abuse reports for enforcement.

Termination

You may delete your account at any time from the dashboard. We may terminate accounts for violation of these terms with 30 days' notice where practicable. On termination, backups are purged and device tokens are revoked.

Contact

Email [email protected] for legal inquiries.