Terms of Service

Welcome to KeyStackz. These terms keep things fair for you and for us. By creating an account or running keystackz pull, you agree to them.

The service

KeyStackz is an encrypted environment-variable manager: you connect services by pasting keys once, toggle which services each project uses, and pull them into .env.local with one command. We provide the vault and the pipe — the keys themselves belong to you and remain governed by each provider's own terms.

Your responsibilities

• Keep your account credentials and pull tokens safe; a revealed token is shown only once, and anyone holding it can pull your project's secrets.
• Control where your keys go after a pull — once keystackz pull writes them to your .env.local, you're responsible for how they're stored, committed, shared, or pasted (including into terminals, CI logs, or AI tools).
• Only store keys you're authorized to use.
• Don't attempt to breach, overload, or reverse-engineer the service.

Plans & billing

Free is free forever, with up to 3 active services. Pro is $9/month, or $72/year billed annually at a discounted rate, through Stripe — cancellable any time, and you keep Pro until the end of the period you've paid for. Where a Pro plan is offered with a free trial, you won't be charged until the trial ends, after which billing continues automatically unless you cancel before then. Pricing and plans may change at any time. No hidden tiers, no lock-ins.

Our promises & limits

We work hard to keep KeyStackz available and your secrets safe, exactly as described on our Security page, and we hold ourselves to those commitments. Security is a shared responsibility: we protect your keys in storage and in transit; you control your tokens and where your keys go once pulled.

The service is provided "as is" and "as available," without warranties of any kind to the maximum extent permitted by law. To that same extent, KeyStackz is not liable for losses arising from:

• a pull token that was leaked, shared, or mishandled, or keys exposed after they left our vault (for example, committed to a repository, printed in CI logs, or pasted into a terminal or AI tool);
• a breach, outage, or key compromise originating at a connected provider, or on your own device, account, or CI environment;
• data you delete — including a project deleted from the Danger Zone, which permanently and irreversibly removes its token, services, and every encrypted key, with no recovery;
• service interruptions, or any indirect, incidental, or consequential damages.

Nothing here limits liability that the law does not allow us to limit. Where liability cannot be excluded, it is capped at the amount you've paid us in the past 12 months.

Changes & contact

If these terms change materially we'll email you before the change takes effect. Questions: support@keystackz.com.