Terms of service

By creating a PQC Shield workspace you agree to these terms and to the privacy notice. If you don’t agree, don’t use the service.

PQC Shield provides hybrid post-quantum digital sealing (the “Seal” product), recipient-bound encryption (the “Vault” product), tenant-shared encrypted storage (the “My Vault” product), and multi-party signature workflows (the “Sign” product) for PDF documents. The public verifier endpoint is free and available without an account.

Plans, monthly quotas, and prices are described at /pricing. Quota exhaustion returns HTTP 402 until you upgrade or the next billing period starts. Payments are processed by a PCI-compliant payment processor under tokenisation; we never see card numbers. Chargebacks and refunds follow the payment processor’s terms in addition to the cancellation rules in this agreement.

You agree not to:

• Use PQC Shield to seal or vault content that is illegal under your jurisdiction.
• Bypass quota limits via account-splitting or bot-driven sign-ups.
• Probe, scan, or attack our infrastructure outside our security disclosure policy.
• Reverse-engineer the platform to extract recipient secret keys (technical controls already prevent this; this clause exists for legal clarity).

We guarantee that every Seal carries an ECDSA P-256 + ML-DSA-65 hybrid signature with a verifiable RFC 3161 timestamp; that every Vault envelope is encrypted with a hybrid X25519 + ML-KEM-768 KEM and AES-256-GCM AEAD; that recipient secret keys are envelope-encrypted at rest behind a tenant-scoped hardware-backed key alias; and that we do not retain plaintext PDFs. We do not guarantee that any specific cryptographic primitive will remain unbroken — see our threat model and mitigations, available on request.

To the maximum extent permitted by law: PQC Shield is provided as-is. Our total aggregate liability is capped at the fees you paid us in the prior 12 months. We are not liable for indirect damages, lost revenue, or consequential harm. For Enterprise contracts these limits are negotiable.

You may cancel at any time from the customer portal. Cancellation takes effect at the end of the current billing period. After cancellation we retain your audit metadata for 1 year and then permanently delete it. Encrypted Vault blobs are deleted at their lifecycle expiration regardless of subscription status.

These terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws principles. Disputes are resolved by binding arbitration in that jurisdiction; class actions waived where law permits.

We’ll email workspace owners 30 days before any material change. Continued use after the effective date constitutes acceptance.