Terms of Service

• Malicious Software: Encrypting, signing, obfuscating, or distributing ransomware, trojans, rootkits, or keyloggers.

• Unauthorized PKI: Generating fraudulent SSL/TLS certificates or impersonating domains, organizations, or individuals.

• System Abuse: Conducting denial-of-service (DoS/DDoS) attacks, automated brute-force probing, or exploiting API race conditions.

• Circumvention: Bypassing spending limits, plan entitlements or rate limits, accessing another Organization's data, or probing the Services for vulnerabilities outside our vulnerability disclosure process.

• Crypto-Mining: Using FHE or ZK proof engines for cryptocurrency mining or resale of compute.

• Unlawful Use: Any use that violates applicable law, including export control and sanctions law (Section 12).

5.1 Complete Customer Ownership: You retain exclusive ownership of all right, title, and interest (including all patent, copyright, and trade secret rights) in and to your customer data, private cryptographic keys, encrypted payloads, CSR inputs, and software applications. AMARACUS acquires no ownership rights in your cryptographic assets or source code.

5.3 AMARACUS Intellectual Property: All software, user interfaces, trademarks, documentation, and designs comprising the AMARACUS platform are the intellectual property of AMARACUS and its licensors. The SDKs and CLI are licensed separately under the Apache License 2.0, as stated in their packages; that licence governs your use of their source code.

5.4 License to Operate the Services: You grant AMARACUS a limited licence to host, process and transmit Customer Data only as needed to provide the Services to you, to secure them, and to comply with law. This licence ends when the data is deleted.

5.5 Feedback: If you send us suggestions or feedback about the Services, we may use them without restriction or obligation to you. Feedback does not include Customer Data.

5.6 Infringement Notices: If you believe content made available through the Services (for example a hackathon submission or uploaded file) infringes your copyright or other rights, write to [email protected] with: the work you claim is infringed; where the content is; your contact details; a statement that you believe in good faith the use is not authorized; and a statement, under penalty of perjury where applicable, that your notice is accurate and that you are the owner or authorized to act for the owner. We will review the notice and may remove or disable the content and notify the person who provided it, who may respond with a counter-notice.

No Free Plan: AMARACUS has no free plan or free tier. Creating an account costs nothing, but the API, managed keys and API keys are available only while your organization has an active paid plan from the table above. Without one, your account, keys and data are kept, and API requests are refused (HTTP 402, Payment Required) until you buy a plan.

6.1 Plan Changes Only With Your Action: Your plan changes only when you buy a plan through checkout or cancel it. AMARACUS never moves you to a higher-priced plan or charges you for one without your action.

6.2 When Included Operations Run Out: On the Starter, Pro and Business plans, operations stop when the month's included operations are used up, unless an administrator has authorized overage and set an overage spending limit in the Billing Console. With authorized overage, operations continue at the over-limit rate above until that limit is reached, and then stop.

6.3 Pay-As-You-Go Spending Limit: Pay-As-You-Go usage is metered continuously and capped by your spending limit (default $250.00 per month, adjustable in the Billing Console). When metered charges reach the limit, metered operations stop until the next period or until you raise it.

6.4 Taxes & Merchant of Record: The fees in the table above are in United States Dollars (USD).

(a) Purchases through Polar.sh: USD fees exclude local indirect taxes. Polar.sh serves as our Merchant of Record and calculates, itemizes, and collects applicable indirect taxes (such as Value Added Tax [VAT] in the European Union, Goods and Services Tax [GST] in India, and State/Local Sales Taxes in the United States) at checkout based on your billing address and tax jurisdiction. Eligible business entities may supply valid VAT/GST identification numbers during checkout to apply reverse-charge treatment where applicable law allows.

(b) Purchases through Razorpay (INR): Razorpay processes the payment but is not a Merchant of Record; AMARACUS is the seller. The INR amount shown on the Billing Console before you pay is the full amount charged each month, and nothing is added to it at checkout. Reverse-charge treatment is not offered on this route.

6.5 Zero Payment Surcharges: AMARACUS does not assess mandatory administrative fees, checkout handling fees, or credit card surcharges on customer invoices. All merchant payment-processing fees are 100% absorbed by AMARACUS.

6.6 Pre-Purchase Disclosures & Automatic Renewal: Before you complete a purchase, the checkout shows the base charge, billing interval, included operations, and applicable taxes. Paid plans renew automatically each monthly billing period unless cancelled before renewal in the Billing Console or, for Polar.sh purchases, the Polar.sh Customer Portal. Razorpay subscriptions renew through the UPI Autopay or card mandate you approve at checkout and are cancelled in the Billing Console.

7.1 Self-Service Cancellation (Click-to-Cancel): You may cancel your subscription at any time directly through the Billing Console in your dashboard or via the integrated Polar.sh Customer Portal (Razorpay subscriptions are cancelled in the Billing Console only). A cancellation takes effect at the end of the active billing cycle, so you keep full access to what you have paid for until that date. After it, your organization has no active plan: its account, keys and data are kept, but API requests are refused until you buy a plan again. A Polar.sh subscription can be resumed before that date; Razorpay does not allow a cancelled subscription to restart, so to continue on Razorpay you subscribe again. Cancelling your subscription never deletes your organization, cryptographic keys, or project assets.

7.2 Consumed Server Compute Policy: Because cryptographic operations (such as ML-KEM encapsulation, SEAL BFV polynomial multiplication, and key wrapping) consume irreversible cloud compute and dedicated hardware cycles, fees paid for elapsed subscription periods and utilized cryptographic operations are generally non-refundable.

9.1 Limited Technical Warranty: AMARACUS warrants that its cryptographic algorithms conform to published NIST and industry specifications under ordinary operating parameters. Except as expressly stated, the Services are provided “AS IS” and “AS AVAILABLE”.

9.2 Exclusion of Consequential Damages: To the maximum extent permitted by applicable law, neither AMARACUS nor its directors, employees, or sub-processors shall be liable for indirect, incidental, special, punitive, or consequential damages, including lost profits, loss of data, loss of goodwill, or business interruption.

9.3 Total Liability Cap: The aggregate liability of AMARACUS arising out of or related to these Terms shall not exceed the total fees paid by you to AMARACUS in the twelve (12) months preceding the event giving rise to liability, or one hundred US dollars ($100.00 USD), whichever is greater.

9.4 Preview Features: Preview Features are provided for evaluation only, without any warranty or availability commitment, may change or be withdrawn without notice, and must not be used to protect production data.

9.5 Indemnification: To the extent permitted by law, you will defend and indemnify AMARACUS against third-party claims, and resulting losses, fines and reasonable legal costs, arising from (a) Customer Data you submit, (b) your breach of Section 4, the Acceptable Use Policy or Section 12, or (c) your violation of law. AMARACUS will tell you promptly about the claim, let you control its defence, and give reasonable help at your expense. This Section does not apply to consumers where local law does not allow it.

9.6 Security Incidents: No system connected to the internet can be made completely secure, and AMARACUS does not promise that the Services will be free of vulnerabilities, attacks or unauthorized access. AMARACUS keeps reasonable security safeguards suited to the Services, as described in the Privacy Policy, and will notify you and the competent authorities of a personal data breach as the law and the Privacy Policy require. To the maximum extent permitted by applicable law, AMARACUS is not liable for loss or damage caused by a cyberattack, intrusion, malware or other unauthorized access by a third party that occurs despite those safeguards, and any liability AMARACUS does have for a security incident is subject to Sections 9.2 and 9.3. AMARACUS is not responsible for incidents caused by the compromise of your credentials, API keys, devices, systems or BYOK vaults, or by your failure to meet your responsibilities under Section 3. Nothing in this Section limits liability that applicable law does not allow to be limited.

10.1 Governing Law: These Terms and any dispute arising out of or related to them are governed by the laws of the Republic of India, without regard to conflict of law principles.

10.2 Informal Resolution: Before starting arbitration, the parties will try in good faith to resolve any dispute through written negotiation for at least thirty (30) days from written notice sent to [email protected] (or, for notices to you, to your account email).

10.3 Arbitration: A dispute not resolved under 10.2 will be finally resolved by arbitration under the Arbitration and Conciliation Act, 1996, by a sole arbitrator appointed by agreement of the parties (or otherwise under that Act). The seat and venue of arbitration is Bengaluru, Karnataka, India, and the language is English.

10.4 Courts: Subject to 10.3, the courts at Bengaluru, Karnataka have exclusive jurisdiction, including for interim relief. Either party may seek urgent injunctive relief to protect its intellectual property or confidential information in any competent court.

10.5 Consumers: If you use the Services as a consumer, nothing in this Section removes protections you have under the mandatory law of the country where you live, including the right to bring proceedings before the courts or consumer commissions there (for example under the Indian Consumer Protection Act, 2019, or, for consumers in the European Union, the courts of your Member State) or to use an applicable online dispute resolution scheme.

11.1 Voluntary Account Erasure: Customers may terminate their account at any time using the self-service permanent erasure tool in the Account Settings console (/dashboard/settings), which irreversibly purges account records and destroys tenant cryptographic keys.

11.2 Acceptance Records: As evidence of electronic acceptance (including under the Indian Information Technology Act, 2000 and the US E-SIGN Act), AMARACUS records each acceptance of these Terms in its audit log with:

11.3 Modifications to Terms: AMARACUS may modify these Terms to reflect changes in law, security standards, or product capabilities. In the event of material amendments, we will provide at least thirty (30) days advance notice via email or an in-console notification banner. The version and effective date at the top of this page identify the current Terms. If you do not agree to a change, you may cancel before it takes effect; continuing to use the Services after that date means you accept it.

11.4 Suspension and Termination by AMARACUS: We may suspend or terminate access (a) immediately for a breach of Section 4, the Acceptable Use Policy or Section 12, or to protect the Services or other customers from harm; (b) for unpaid amounts after notice and at least seven (7) days to pay; (c) where required by law or a competent authority; or (d) for any other material breach not cured within fourteen (14) days of notice. Where we end the Services for reasons other than your breach, we will give at least thirty (30) days' notice so you can export your data and decrypt anything you need.

11.5 Effect of Termination: When your account ends, your right to use the Services ends and API keys stop working. Before deleting your account, export your data from Account Settings: after erasure, data and Key Material cannot be restored (see 3.1). Fees already due remain payable.

11.6 Survival: Sections 3.1, 5, 7, 9, 10, 12 and 13, and any other terms that by their nature should continue, survive the end of these Terms.

12.1 Encryption Is Export-Controlled: The Services, SDKs and CLI provide encryption and may be subject to export control laws, including India's Foreign Trade (Development and Regulation) Act, 1992 and SCOMET list, the U.S. Export Administration Regulations, and the laws of other countries where you use them.

12.2 Your Commitments: You will comply with those laws. You represent that you are not located in, or ordinarily resident in, a country or region subject to comprehensive sanctions, and are not named on, or owned or controlled by anyone named on, a sanctions or restricted-party list maintained by India, the United Nations, the United States, the European Union or the United Kingdom. You will not use the Services for weapons of mass destruction, military end uses where prohibited, or to provide the Services to such persons or places.

12.3 Our Rights: We may block access from sanctioned locations and suspend accounts where we reasonably believe this Section has been breached.

13.1 Entire Agreement: These Terms, together with the policies they incorporate and any order form or written agreement signed by both parties, are the entire agreement between you and AMARACUS about the Services. A signed written agreement prevails over these Terms where they conflict.

13.2 Severability: If a court or arbitrator holds a provision unenforceable, it will be changed and interpreted to achieve its purpose as far as the law allows, and the rest of these Terms continues in effect.

13.3 Waiver: Not enforcing a right or provision is not a waiver of it. A waiver is effective only in writing.

13.4 Assignment: You may not assign these Terms without our written consent. We may assign them to an affiliate or to a successor in a merger, acquisition or sale of assets, with notice to you.

13.6 Third-Party Services and Links: The Services link to or work with third-party services (for example Polar.sh or Razorpay checkout, your own Azure vault, or integrations you connect). Those services are governed by their own terms; AMARACUS is not responsible for their content or practices.

13.7 Notices: We send notices to your account email or show them in the console. You send legal notices to [email protected]. Email notices are effective when sent, unless the sender learns they were not delivered.

13.8 Relationship and Third Parties: The parties are independent contractors. These Terms create no rights for anyone other than you and AMARACUS.

13.9 Language: These Terms are written in English. If they are translated, the English version prevails in case of conflict, except where mandatory law requires otherwise.

13.10 Matters Not Covered: Any matter, circumstance, situation, dispute, or eventuality not expressly addressed or covered under these Terms, the Privacy Policy, or any other applicable policy shall be subject to AMARACUS's determination and interpretation, exercised at its sole discretion, to the extent permitted by applicable law. AMARACUS reserves the right to establish additional rules, procedures, restrictions, and conditions to address such matters. Such determinations shall be binding on users, subject to applicable law.