Terms of Service

Obsidian Heron, 30 N Gould St Ste R, Sheridan, WY 82801 (“we”), provides the service. “You” means the organization that holds the account and each person who uses it for that organization. “Service” means the application, the API, the CLI and the documentation that we operate at ohapi.dev. “Customer content” means the data that you put into the service: secret values, their keys, their history and their settings.

These terms do not apply to a copy of ohapi that you host yourself. If you self-host, you operate that copy and you are responsible for it.

ohapi stores secrets encrypted and loads them into applications, CI jobs and other services. The documentation describes the current features. We can improve, change or remove features. We will give at least 30 days of notice before we remove a feature that you use.

• Any verified Google account can create an account. You must give accurate account information.
• Keep your sign-in method and your API keys secret. You are responsible for all actions done with your keys until you revoke them.
• Each organization has admins, members and viewers. Admins are responsible for the people that they invite and for the roles that they give.
• You must be at least 18 and able to make a contract for the organization.

You agree that you will not:

• store or share credentials that you are not authorized to hold;
• use the service to get access to a system that you are not authorized to use;
• use share links to send malware, phishing or unlawful content;
• try to breach, probe or overload the service, or try to get access to the data of another organization;
• break a law that applies to you or to the data that you store.

To report a vulnerability, follow the security page. We can suspend or terminate an account without notice for a serious or repeated violation of this section.

The service has no fees today. If we add fees, we will give at least 30 days of notice before they apply. You can stop using the service before that date.

• You own your customer content. You give us the license that we need to store, process and send it to provide the service.
• We process customer content as your processor. Our Privacy Policy tells you how we handle account data.
• You can export secret values with the CLI and the audit log as a CSV file at any time. You can delete secrets, environments and projects in the application. To delete an account or an organization, write to hello@ohapi.dev.
• Keep a way to replace each credential that you store. If you lose access to the service, rotate the credential at its source.
• You state that you have every permission and legal basis that you need for the customer content that you give us.

We own the service, its software, its documentation and its trademarks. You must not copy, change, resell or reverse-engineer it, except as the law allows. The ohapi CLI has its own open-source license (MIT). We can use your feedback with no obligation to you.

We work to keep the service available at all times. We do not give service-level credits. Support is by email at hello@ohapi.dev.

We warrant that we will provide the service with reasonable skill and care. In all other respects, we provide the service “as is”. To the full extent that the law allows, we disclaim all other warranties, express or implied, including merchantability and fitness for a particular purpose.

To the full extent that the law allows, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data. Our total liability for all claims about the service in any twelve-month period is limited to the fees that you paid us in that period. These limits do not apply to a breach of confidentiality, to indemnity obligations, or to liability that the law does not let a party limit.

You will defend and indemnify us against claims that come from your customer content or from your breach of section 4.

• These terms apply from the time that you create an account until we delete it.
• You can stop using the service at any time and ask us to delete your account.
• We can suspend the service for a violation of section 4. We can terminate it for any reason with 30 days of notice. After termination, we delete your data as the Privacy Policy describes.
• Sections 6, 7, 9, 10, 11 and 13 continue after termination.

• These terms and the Privacy Policy are the full agreement between us about the service. They replace any earlier agreement.
• The laws of Wyoming, United States govern these terms, without regard to conflict-of-law rules. Its courts have exclusive jurisdiction.
• If a court finds that a provision is unenforceable, the other provisions stay in effect.
• You must not assign these terms without our consent. We can assign them to a successor of the business.
• We send notices to the email addresses of the admins of your organization. Send notices to us at hello@ohapi.dev.
• We can change these terms. We will post the new version on this page. For a material change, we will post it at least 14 days before it takes effect. If you continue to use the service after that date, you accept the new terms.