Terms of Service
Plain language where possible. Legal language where required. Read before you register.
Contents
Acceptance of Terms
By creating an account, accessing, or using the Avallis platform ("the Service") operated by Avallis LLC ("we", "us", "our"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.
These Terms constitute a binding legal agreement between you and Avallis LLC. You must be at least 13 years of age to use the Service. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms.
Description of the Service
The Service provides a Personal Data Vault — an encrypted, user-controlled container for your identity and financial data. Core features include AES-256-GCM browser-side encryption, a Golden Record data profile, consent-based data sharing with third parties, and cryptographic integrity anchoring on the Polygon blockchain.
The core Service — your Personal Data Vault, data sharing, Sentinel Intelligence fraud monitoring, and blockchain anchoring — is provided free of charge. Certain verification services (Identity and Contact verification) are offered on a pay-per-use basis with fees disclosed at the point of purchase. Business API access is available under separate plans. Enterprise arrangements are governed by a separate agreement.
Accounts and Registration
Account creation
You may register using an email invite link, or via Google or GitHub OAuth. Each person may maintain one account. Creating multiple accounts to circumvent restrictions is prohibited.
Your encryption key
Upon registration, a 256-bit encryption key is generated in your browser. This key is shown to you once and is never transmitted to or stored by us. You are solely responsible for preserving your key. If you lose it, your encrypted data cannot be recovered by anyone — including us. We offer no key recovery service.
Account security
You are responsible for maintaining the confidentiality of your account credentials, Sovereign Key ID, and encryption key. You agree to notify us immediately at legal@avallis.io if you suspect unauthorized access to your account.
Accurate information
You agree to provide accurate, current, and complete information during registration and to keep your account information updated.
Acceptable Use
You agree to use the Service only for lawful purposes and in accordance with these Terms. You agree not to:
- Use the Service to store, transmit, or share content that is illegal, fraudulent, threatening, abusive, defamatory, obscene, or otherwise objectionable
- Attempt to gain unauthorized access to any portion of the Service, other accounts, or any systems or networks connected to the Service
- Use the Service to impersonate any person or entity or misrepresent your affiliation with any person or entity
- Introduce viruses, malware, or any other malicious code into the Service
- Use automated tools, scripts, or bots to access or interact with the Service without our prior written consent
- Attempt to reverse engineer, decompile, or disassemble any portion of the Service
- Use the Service in any manner that could damage, disable, overburden, or impair it
- Circumvent any access controls, security mechanisms, or usage limits
- Resell, sublicense, or otherwise commercialize access to the Service without a written agreement with us
Your Data and Our Access to It
You own your data. The Service is a vault, not a data business. You grant us only the limited, non-exclusive license necessary to store your encrypted data, process your instructions, and provide the Service to you.
Because of our zero-knowledge architecture, we do not have access to the plaintext contents of your vault. We store encrypted ciphertext. We cannot read, use, sell, or share your vault contents — not as a policy choice but as a technical constraint.
We do not use your data to train AI models. We do not aggregate your data with other users' data to build profiles. We do not sell, rent, or license your personal data to third parties for any commercial purpose.
Data Sharing and Consent
When you use the consent features to share data with a third party (an organization using our Enterprise API), you authorize us to transmit the specific data fields you selected to that organization. Each consent grant specifies: what data categories are included, the duration of the grant, and the receiving party.
You may revoke a consent grant at any time. Revocation prevents future data access by the recipient but does not retroactively delete data already transmitted under the prior consent.
We are not responsible for how receiving organizations use data you voluntarily share with them under a consent grant. Review the privacy practices of any organization before granting them access to your data.
Blockchain Anchoring
When you create or update a vault record, a SHA-256 hash of your encrypted data is written to the Polygon blockchain. This transaction is public, permanent, and irreversible. The hash contains no personally identifiable information.
By using the Service, you acknowledge and accept that blockchain transactions cannot be deleted, modified, or reversed, and that these hashes will persist indefinitely on the public blockchain.
You are responsible for any blockchain transaction fees (gas fees) associated with your vault activity. We cover gas fees under current pricing, but reserve the right to modify this policy with notice.
Pricing and Payment
Free features
Your Personal Data Vault, unlimited data sharing, Sentinel Intelligence monitoring, blockchain anchoring, consent management, and enforcement tools are provided at no charge. There are no subscription fees, no monthly plans, and no storage limits.
Pay-per-verification
Identity and Contact verification services are offered on a pay-per-use basis. Fees are disclosed at the point of purchase before you are charged. Verification fees are non-refundable once the verification process has been initiated, except as required by law.
Business API plans
Business API access is available under separate paid plans. Plan fees, limits, and terms are described at avallis.io/pricing and in the Business Portal. Business plans may be cancelled at any time with effect at the end of the current billing period.
Price changes
We will provide at least 30 days notice before changing verification fees or business plan pricing. Continued use of the Service after a price change constitutes acceptance of the new pricing.
Termination
You may terminate your account at any time through the account settings or by contacting us at legal@avallis.io. Upon termination, your encrypted vault data will be deleted from our active systems within 30 days.
We may suspend or terminate your account immediately, without prior notice, if you materially breach these Terms, engage in fraudulent or illegal activity, or if we are required to do so by law.
Upon termination, your right to use the Service ceases immediately. Sections of these Terms that by their nature should survive termination — including data ownership, limitation of liability, and dispute resolution — will survive.
Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
We do not warrant that the Service will be uninterrupted, error-free, or free of viruses or other harmful components. We do not warrant that defects will be corrected or that the Service will meet your requirements.
You acknowledge that you are solely responsible for preserving your encryption key. Loss of your key results in permanent, irrecoverable loss of access to your vault contents. We have no obligation and no ability to recover lost keys.
Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, AVALLIS LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, GOODWILL, OR OTHER INTANGIBLE LOSSES, ARISING FROM YOUR USE OF OR INABILITY TO USE THE SERVICE.
IN NO EVENT WILL OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THE SERVICE EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS ($100).
SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IN SUCH JURISDICTIONS, OUR LIABILITY WILL BE LIMITED TO THE FULLEST EXTENT PERMITTED BY LAW.
Indemnification
You agree to indemnify, defend, and hold harmless Avallis LLC and its officers, directors, employees, and agents from any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising from your use of the Service, your violation of these Terms, or your violation of any rights of a third party.
Intellectual Property
The Service, including its software, design, text, and graphics, is owned by Avallis LLC and protected by intellectual property laws. You are granted a limited, non-exclusive, non-transferable license to use the Service for its intended purposes.
You retain all intellectual property rights in the data you store in your vault. You grant us no rights in that data beyond what is necessary to provide the Service.
Governing Law and Disputes
These Terms are governed by the laws of the State of Nevada, without regard to its conflict of law provisions. You agree that any dispute arising from these Terms or your use of the Service will be resolved exclusively in the state or federal courts located in Clark County, Nevada.
Before initiating formal proceedings, you agree to contact us at legal@avallis.io to attempt informal resolution. We will make reasonable efforts to resolve disputes informally within 30 days.
Changes to These Terms
We may update these Terms at any time. When we make material changes, we will notify you by email at least 14 days before the changes take effect and display a notice within the Service.
Your continued use of the Service after changes take effect constitutes your acceptance of the revised Terms. If you disagree with the changes, you may terminate your account before they take effect.
Contact
For questions about these Terms, contact us at:
Questions about these Terms?
Contact us before you register — we are happy to clarify.