Terms of Service

1. Acceptance of Terms

By accessing or using Zero-Secret you agree to these Terms of Service (“Terms”). If you do not agree, do not use the service. These Terms form a legally binding agreement between you (“Customer”) and LinuxGuard Ltd (“we”, “us”, “our”).

2. Company Information

Zero-Secret is a service provided by:

For legal enquiries, contact us at legal@zero-secret.com.

3. Description of Service

Zero-Secret is a managed SPIFFE/SPIRE workload identity platform. Customers register workloads, enroll agents, and receive cryptographic SPIFFE Verifiable Identity Documents (SVIDs) without deploying or operating SPIRE themselves. The service is provided as software-as-a-service over the internet at https://zero-secret.com.

4. Account Registration and Security

You must provide accurate and complete information when registering for an account. You are responsible for maintaining the security of your account credentials, including passwords, API keys, and join tokens.

• You must notify us immediately at security@zero-secret.com of any unauthorized access to your account.
• You may not share account credentials or allow multiple individuals to access a single account.
• You are responsible for all activity that occurs under your account.

5. Acceptable Use

You may use Zero-Secret only for lawful purposes and in accordance with these Terms. Prohibited uses include:

• Attempting to reverse-engineer or extract proprietary algorithms from the platform
• Using the service to issue SVIDs for workloads you do not own or control
• Circumventing rate limits or access controls
• Using the service in a manner that could damage, disable, overburden, or impair it
• Any use that violates applicable law or regulation
• Providing false or misleading information during account registration or workload enrollment

6. Service Availability and SLA

We target 99.9% uptime for the API and SPIRE proxy services on paid plans. Planned maintenance will be announced with at least 24 hours' notice via our status page.

We are not liable for outages caused by third-party infrastructure (including Amazon Web Services), force majeure, or events outside our reasonable control. No uptime guarantee is made for beta or preview features.

7. Data and Security

We process personal data in accordance with our Privacy Policy. Tenant workload data (SPIFFE IDs, selectors, SVIDs) is encrypted at rest using AWS KMS with tenant-specific keys.

We implement security controls appropriate for a security infrastructure product. You are responsible for the security of your own workloads and for not registering malicious workloads on the platform.

8. Intellectual Property

The Zero-Secret platform, including its software, documentation, trademarks, and trade dress, is owned by LinuxGuard Ltd and protected by copyright and other intellectual property laws of England and Wales. Your use of the service does not transfer any intellectual property rights to you.

You retain ownership of any data you submit to the service, including workload definitions, SPIFFE IDs, and configuration.

9. Payment and Billing

Paid plans are billed in advance on a monthly or annual basis. All fees are quoted and charged in GBP unless otherwise stated, and are exclusive of VAT.

• Failure to pay may result in suspension or termination of your account.
• We reserve the right to change pricing with 30 days' notice.
• Refunds are at our discretion and will not be provided for partial months already consumed.

10. Termination

Either party may terminate the agreement at any time by providing written notice. Upon termination:

• Your access to the service will be revoked.
• Your data will be deleted within 30 days unless retention is required by law or our data retention policy.

We may suspend or terminate your account immediately for material breach of these Terms, including misuse, non-payment, or illegal activity. We will provide notice of termination where reasonably practicable.

11. Limitation of Liability

To the maximum extent permitted by applicable law, LinuxGuard Ltd's total liability to you for any claim arising under or in connection with these Terms shall not exceed the fees paid by you in the 12 months preceding the claim.

We are not liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, loss of data, or business interruption.

Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited under English law.

12. Governing Law and Jurisdiction

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising from or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

If you are a consumer resident in another EU/EEA member state, you may also have rights under the mandatory laws of your country of residence, which these Terms do not affect.