Draft, pending legal review

This page describes how the product actually works and is written by the people who built it. It has not been reviewed by a lawyer and is not yet a binding agreement.

Terms

These describe what the service does, what it costs, and what happens when something goes wrong. We have tried to state the limits as plainly as the promises.

The service

saved.sh stores backups you send it, on the schedule you set, under the retention policy you choose. You keep ownership of your data. We claim no licence over it beyond storing, transmitting and deleting it as you instruct.

Your account

  • A workspace is the unit of tenancy. Members you invite act with the permissions you grant them, and their actions are yours.
  • You are responsible for keeping credentials safe: API keys, worker credentials and, above all, your encryption keys.
  • You must have the right to back up whatever you point us at.

Encryption keys

If you lose your private key, your backups are permanently unreadable, by you and by us. This is the direct consequence of encrypting on your machine with a key we never receive. There is no recovery path, no override and no support escalation that changes it. Keep the key somewhere you will still have it after the incident that makes you need it.

What you pay

  • Usage is metered on four things: computation, storage, archive and transit. It is invoiced monthly, in arrears.
  • New workspaces receive a one-time credit and need no card. When it runs out, you add one.
  • Getting your data out is metered like any other transfer. It is never blocked.
  • We may change prices with notice. We will not change them retroactively for usage already incurred.

If a payment fails

Nothing is deleted quickly, because the moment you most need a backup is often the moment your billing broke. A failed payment moves the workspace along a ladder, and paying the invoice reverses it from any stage:

  1. Warned. Notice only. Nothing is enforced.
  2. Stopped, after 7 days. No new runs. Existing artifacts untouched, downloads normal.
  3. Blocked, after 30 days. Read-only. Downloads still work.
  4. Deletion, after a year. Only then.

There are no late fees, penalties, interest or reactivation charges.

Closing your account

You may close a workspace at any time. Download what you want first; artifacts under an active protection lock cannot be deleted before it expires, by you or by us, which is the point of the lock.

Acceptable use

You may not use the service to:

  • Store material you have no right to hold.
  • Attack, overload or probe our infrastructure, or anyone else’s through it. The web and script source types are capable of this and are your responsibility.
  • Resell the service as your own without an agreement with us.

What we do not promise

We would rather be explicit than quietly silent about these:

  • No uptime SLA today. We aim for high availability and do not currently offer a contractual guarantee. If we ever do, it will be a written commitment with remedies, not a number on a marketing page.
  • No compliance certifications today. We hold no SOC 2 or equivalent audit. We will say so when that changes, and not before.
  • We cannot recover your data if you lose your key, or restore it into your systems for you. Restores run on your machines.
  • A backup is not a guarantee that a restore will work. Only rehearsing one gives you that. We publish the procedure and recommend you run it.

Liability

The service is provided as-is. To the extent the law allows, our liability is limited to what you paid us in the twelve months before the claim. Nothing here limits liability that cannot lawfully be limited.

Changes

We may update these terms. Material changes will be announced before they take effect, and continuing to use the service after that is acceptance.