Legal
Acceptable use policy
What you may not use NeverWiped for.
Draft for review by a lawyer, not legal advice. Fields marked TODO_LEGAL are not known yet and are filled in before launch.
This English text is a translation of the French version, which is the reference until the lawyer decides otherwise. Version française
2 fields still to complete: DATE_VERSION, EMAIL_CONTACT
Version of TODO_LEGAL(DATE_VERSION), YOOBOOST SAS
This policy is part of the terms of service (https://neverwiped.com/legal/terms). It says what you may not do with NeverWiped. We can’t read your backups, so we don’t monitor their content; this policy applies to what we can see (your account, your use of the platform and the storage) and to what is reported to us.
1. You may back up
Servers you own or are authorised to administer, and data you have the right to keep: your sites, applications, databases, configuration, and your customers’ data when you process it lawfully (see the DPA, https://neverwiped.com/legal/dpa).
2. You may not
- Store content that is unlawful where you or we operate, in particular child sexual abuse material, content inciting terrorism, or content you have no right to hold (for example data obtained by intrusion).
- Back up servers or data you are not authorised to access.
- Use the service to distribute files to third parties: it is a backup service, not a file host or a CDN.
- Try to access another customer’s repository, account or data, or try to break the encryption, the append-only protection or the quotas.
- Attack, overload, scan or test the security of the platform or the storage without our written agreement, outside the vulnerability reporting described on the security page (https://neverwiped.com/security).
- Share an account or an API key with people outside your organisation, or resell the service without our written agreement.
- Abuse the free trial (several trials for the same person) or the referral programme.
- Use automated tools against the API beyond what the agent and the documentation do (rate limits apply).
3. AI agents
You may let an AI agent install and run NeverWiped on your servers. You remain responsible for what it does with your account and credentials, as if you had done it. Don’t give it your recovery key.
4. What we do
If we learn of a breach, we may ask you to stop it, then suspend new backups or the account after a formal notice of eight (8) days left without effect, as set out in the terms (article 10), or immediately in an emergency or when the law requires it. We cooperate with the authorities when the law requires it; given the encryption, we can only hand over encrypted data and the account data we hold.
5. Reporting
To report a breach of this policy: TODO_LEGAL(EMAIL_CONTACT). For a security vulnerability: see https://neverwiped.com/security.