Terms

Terms of Use

Effective: October 27, 2026 · Wundervault

By creating an account or using Wundervault, you agree to these Terms of Use. If you do not agree, do not use the service.

1. The Service

Wundervault is a zero-knowledge secret management service. Your secrets are encrypted client-side before reaching our servers — we cannot read them by design. We reserve the right to modify, suspend, or discontinue the service with reasonable notice.

2. What We Store

Your email address — for your account and communication
Your encrypted vault data — encrypted on your device, which we cannot read
The names of your secrets and agents
An activity log — which agent used which secret, when, the outcome and the IP address — for security and abuse prevention
For "ask me first" secrets, the requests you are asked to approve and your decisions
Passkey (WebAuthn) metadata and the public keys of brokers you pair (neither contains secret data)

The Privacy Policy lists everything we hold and how long we keep it.

3. What We Never See

Your secrets — they never leave your device unencrypted
Your passphrase — never transmitted to our servers
Your encryption keys — made on your device. We store your vault key only locked by your passphrase and Account Key, which never reach us

This is by design. We built Wundervault so we literally cannot access your data even if compelled to. Your secrets are encrypted before they leave your device, and only you hold the keys.

4. Your Account

You are responsible for maintaining the security of your passphrase and credentials. We cannot recover your passphrase for you. Your recovery codes are your way back in if you lose it; without a way back in, your vault contents are unrecoverable by design. Store your passphrase and recovery codes somewhere safe.

You must be at least 13 years old to use Wundervault. You are responsible for all activity that occurs under your account.

Every account must belong to a person who is responsible for it, including for what their agents do. Agents may work in your account for you; they may not open an account for themselves or run one with no responsible person behind it. We may suspend or close an account that an agent opened or runs on its own.

Keep your passkeys and recovery codes on devices you control and away from your agents. Whoever holds a passkey approves your "ask me first" requests, and whoever holds your recovery codes can take over your account.

5. Acceptable Use

You agree not to use Wundervault to:

Store or transmit content that is illegal under applicable law
Attempt to gain unauthorized access to the service or other users' accounts
Reverse-engineer, decompile, or extract the source code of the service
Use the service to facilitate automated abuse of third-party systems at scale
Resell or sublicense access to the service without written permission
Bypass encryption mechanisms or attempt to access other users' vault data

We reserve the right to suspend or terminate accounts that violate these terms.

6. Agent Access

Wundervault lets AI agents use secrets from your vault through a broker that runs on your own computer; agents do not receive the secret values. Agents authenticate with credentials you create and control. You are solely responsible for the agents you authorize, the credentials you issue, and the secrets you allow them to use, including secrets set to run without asking. We are not responsible for actions taken by agents acting under credentials you have provided.

7. Newsletter

If you subscribe to the Wundervault newsletter — either during registration or via the newsletter signup page — your email address is kept in our own newsletter system for the purpose of sending you the newsletter. You can unsubscribe at any time using the link in any newsletter email. See our Privacy Policy for details.

8. Service Availability

We do not offer a service-level agreement. Features may change or be discontinued. We recommend keeping offline copies of any critical secrets.

9. Disclaimer of Warranties

Wundervault is provided AS-IS and AS-AVAILABLE without warranty of any kind, express or implied. We do not warrant that the service will be uninterrupted, error-free, or completely secure. While we apply strong encryption and take security seriously, no system is perfectly secure. We make no guarantee that your data will never be lost or compromised. Use of the service is at your own risk.

10. Limitation of Liability

To the maximum extent permitted by law, Wundervault and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the service — including but not limited to loss of data, loss of profits, or unauthorized access to your account.

Our total liability to you for any claims arising from these Terms or your use of the service shall not exceed the amount you have paid us in the twelve months preceding the claim, or $10 USD, whichever is greater.

We are not liable for data loss, including lost passphrases or recovery codes. You are responsible for safeguarding your credentials.

11. Indemnification

You agree to indemnify and hold harmless Wundervault and its operators from any claims, damages, or expenses (including reasonable legal fees) arising from your violation of these Terms or your use of the service.

12. Account Deletion

You may delete your account at any time from the dashboard. Upon deletion, your account data will be permanently removed, subject to backup retention periods described in the Privacy Policy.

13. Changes to These Terms

We may update these Terms from time to time. Material changes will be posted with a new effective date and, where appropriate, communicated by email. Continued use of the service after changes take effect constitutes acceptance.

14. Governing Law

These Terms are governed by the laws of California, USA, without regard to conflict of law principles.

15. Contact

Questions about these Terms? Send us a message.