Terms of Service

Last updated: February 15, 2026

These Terms of Service ("Terms") govern your use of the ShorShield platform ("Service") operated by ShorShield ("we", "our", "us"), based in Berlin, Germany. By accessing or using the Service, you agree to be bound by these Terms.

1. Service Description

ShorShield is a quantum-safe enterprise password manager that provides:

• End-to-end encrypted credential storage using post-quantum cryptography
• Passwordless authentication via WebAuthn and cryptographic signatures
• Enterprise administration with user management and audit logging
• Browser extension for credential autofill

2. Zero-Knowledge Architecture

3. Account Registration

• You must provide accurate and complete information during registration
• Enterprise accounts require a valid invitation from an authorized administrator
• You are responsible for all activity under your account
• You must not share your device credentials or authentication factors with others

4. Acceptable Use

You agree not to:

• Use the Service for any unlawful purpose
• Attempt to reverse-engineer, decompile, or circumvent security measures
• Interfere with or disrupt the Service or its infrastructure
• Use automated tools to access the Service beyond the provided API
• Store content that violates applicable laws or third-party rights
• Resell or redistribute access to the Service without authorization

5. Subscription and Payments

• Free tier and paid plans are offered as described on our pricing page
• Paid subscriptions are billed monthly or annually as selected
• Prices are listed in EUR and exclude applicable taxes
• You may cancel at any time; access continues until the end of the current billing period
• Refunds are handled on a case-by-case basis within 30 days of purchase

6. Data Ownership

You retain full ownership of all data you store in ShorShield. We claim no rights to your content. Upon account deletion, we will permanently remove your data from our servers, subject to legal retention obligations.

7. Enterprise Accounts

• Enterprise administrators can invite and revoke users within their organization
• Administrators can share credentials with team members using end-to-end encryption
• User revocation immediately invalidates all active sessions
• Enterprise audit logs are accessible only to authorized administrators

8. Service Availability

We strive for high availability but do not guarantee uninterrupted service. Planned maintenance will be communicated in advance. We are not liable for temporary outages due to circumstances beyond our control.

9. Limitation of Liability

To the maximum extent permitted by law:

• ShorShield is provided "as is" without warranties of any kind
• We are not liable for indirect, incidental, or consequential damages
• Our total liability is limited to the amount paid by you in the 12 months preceding the claim
• We are not responsible for losses resulting from unauthorized access to your device

10. Security Disclosure

If you discover a security vulnerability, please report it responsibly. See our Security Policy for responsible disclosure guidelines.

11. Termination

• You may terminate your account at any time through the dashboard settings
• We may suspend or terminate accounts that violate these Terms
• Upon termination, your encrypted data will be permanently deleted

12. Governing Law

These Terms are governed by the laws of the Federal Republic of Germany. Any disputes shall be subject to the exclusive jurisdiction of the courts in Berlin, Germany.

13. Changes to These Terms

We may update these Terms from time to time. Material changes will be notified via email at least 30 days in advance. Continued use after changes constitutes acceptance of the updated Terms.

14. Contact

For questions about these Terms: shorshield@gmail.com