--- title: "Terms of service" description: "The terms for using KeepItLocal Redact for the web: accounts, plan limits, acceptable use and liability." canonical: https://keepitlocal.app/terms last-updated: 2026-09-13 --- # Terms of service The terms for using KeepItLocal Redact for the web: accounts, plan limits, acceptable use and liability. Version 0.1 (draft). Last updated 7 September 2026. These terms govern your use of KeepItLocal Redact for the web at keepitlocal.app (the "service"), operated by KeepItLocal, [registered company name and address to be filled in] ("we", "us"). By creating an account or using the service you agree to them. If you are agreeing on behalf of an organisation, you confirm you may bind it, and "you" means that organisation. The desktop application (coming soon) is licensed separately and is not covered here. ## 1. What the service does The service opens a document you choose, finds candidate personal data in it, lets you decide what to black out, and produces a redacted file. All of that happens in your browser. When you export, the service issues a signed certificate recording two checksums and a few counts, so that a recipient can confirm the file they received is the file you produced. ## 2. Local processing is a product characteristic, not a warranty The service is built so that document content stays in your browser. This is a description of how the product works and it is enforced technically, by a content security policy whose `connect-src` directive is `'self'`, so the browser will not let the engine send document content to any origin. You can verify it yourself in your browser's network panel, and we encourage you to. Two things follow, and both matter: - We are describing an architecture, not giving a guarantee against every possible failure. Browsers, extensions installed in your own browser, operating systems and hardware are outside our control, and this section is not a warranty that no software anywhere can ever read what is on your screen. - Because we never receive your documents, we cannot recover one for you, cannot inspect one to support you, and cannot confirm what was in it. Keep your own copies. Section 9 sets out what we do warrant. ## 3. Accounts You need an account to use the service. You must give an accurate email address, keep your credentials to yourself, and tell us promptly at hello@keepitlocal.app if you think an account has been used without your permission. You are responsible for what happens under your account. We recommend enabling two-factor authentication where it is offered. You must be at least 16 and legally able to enter into these terms. ## 4. Workspaces and roles Documents are worked on inside a workspace. A workspace owner can invite people, set their role, remove them, and delete the workspace. If you join a workspace created by your employer or client, that organisation controls it, and it can see the workspace's audit history and remove your access. If you are an owner, you are responsible for who you invite. ## 5. Plans, limits and billing The Free plan is metered: it allows 3 certified exports per calendar month per account. Redaction itself is not metered. Paid plans (Individual and Team) remove that ceiling. Current plans and prices are shown on the site and may change with notice. When paid plans launch, payments will be taken by Paddle, acting as merchant of record and as the seller of record for your purchase. Paddle's own terms apply to the payment itself, tax is handled by Paddle, and we never see your card details. Subscriptions renew automatically until cancelled. Cancelling stops the next renewal and leaves your access in place until the end of the paid period. Statutory withdrawal and refund rights are unaffected by anything in this section. ## 6. Acceptable use You may not: - use the service to break the law, or to redact a document you have no right to hold - upload or process material that you know to be malware - attempt to access another customer's workspace, account or data - probe, scan or load-test the service without our written permission, or work around a rate limit, quota or plan ceiling - resell the service, or run it as a service for others, without a written agreement - forge, alter or misrepresent a certificate, or claim a certificate covers something it does not - scrape the service, or use it to build a competing product We can suspend an account that is doing any of these, and we will tell you why when we do. ## 7. What a certificate means, and what it does not A certificate is a signed statement that a file with checksum A was processed by a stated version of our engine and produced a file with checksum B, with a stated number of redactions across a stated number of pages, at a stated time. That is all it says. It is not a legal opinion, not a certification that a document is safe to disclose, and not a statement that every piece of personal data in the document was found. Deciding what has to be removed from a document is your professional judgement, not ours. The detectors help; they do not decide. ## 8. Your content and our content You keep every right you have in your documents. We claim nothing in them, and since we never receive them, we could not licence, publish or analyse them even if we wanted to. We keep every right in the service, the engine, the site and the brand. These terms grant you a personal, non-exclusive, non-transferable right to use the service while your account is in good standing, and nothing else. Feedback you send us may be used freely, without obligation to you. ## 9. Warranties and disclaimers We will provide the service with reasonable skill and care. Beyond that, and to the extent the law allows, the service is provided as it is, without implied warranties of merchantability, fitness for a particular purpose or non-infringement. We do not warrant that the service will be uninterrupted, that detection will find every piece of personal data in a document, or that any output meets a particular regulatory standard. Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited. Consumer rights that cannot be waived are unaffected. ## 10. Limitation of liability [Template clause. Counsel to set the cap and confirm it against local law.] Neither party is liable for indirect or consequential loss, loss of profit, loss of revenue, loss of goodwill, or loss of or damage to data, however caused. Our total liability arising out of or in connection with these terms, whether in contract, tort (including negligence) or otherwise, is limited in aggregate to the greater of the amounts you paid us in the 12 months before the event giving rise to the claim, and [amount to be set]. ## 11. Suspension and termination You can stop using the service at any time and delete your account from Settings. Deleting an account deletes it, its sessions, its two-factor secret and any workspace only you own; the privacy notice explains the narrow exceptions, chiefly issued certificates. We can suspend or terminate an account for a material breach of these terms, for non-payment after notice, or if required by law. Where it is reasonable to do so, we will warn you first and give you a chance to put it right. If we terminate without cause, we refund the unused part of any prepaid period. ## 12. Availability and changes to the service We may change, add to or withdraw features. Where a change materially reduces what you have paid for, we will give reasonable notice and, if you do not want to continue, refund the unused part of the period. ## 13. Data protection Our handling of personal data is described in the [privacy notice](/privacy). Where we process personal data on your behalf, as a processor, the [data processing agreement](/dpa) applies and is incorporated into these terms. ## 14. Changes to these terms We may update these terms. The version and date at the top identify the text. For material changes we will give reasonable notice in the product or by email before they take effect, and continuing to use the service after that means you accept them. ## 15. General These terms are the whole agreement between us about the service. If a clause is unenforceable, the rest stands. A delay in enforcing a right is not a waiver of it. You may not assign these terms without our consent; we may assign them to a successor to our business. No one other than you and us has any right to enforce them. Governing law: [to be set by counsel]. Courts: [to be set by counsel]. ## 16. Contact hello@keepitlocal.app. ## Open items before publication - The liability cap, the governing law and the forum are placeholders. - The billing section describes Paddle as planned. It becomes operative when paid plans launch. - The company name, registered address and registration number are placeholders.