Terms of Service

Article 1 — Definitions

In these terms:

• Paramant: the service offered via paramant.app by Mick Beer (trading as Paramant), based in the Netherlands.
• User: any natural or legal person who uses the service, with or without a registered account.
• Account: a registered profile with email address, API key, and TOTP authentication.
• Community tier: the free version of Paramant with the limitations described in Article 3.
• Service: the transport mechanism for encrypted files available via paramant.app, the SDKs, and the CLI.
• SDK: software development kit (paramant-sdk) for Python and JavaScript.

Article 2 — Applicability

1. These terms apply to every use of Paramant, regardless of whether the user has an account.
2. By using Paramant you accept these terms. When registering an account, you explicitly confirm that you have read and accepted these terms, and that you have read the Privacy Statement.
3. Deviations from these terms are valid only if agreed in writing.
4. Any general terms of the user are explicitly rejected, unless agreed otherwise in writing.

Article 3 — The service

1. Paramant provides a transport mechanism for sending encrypted files between sender and recipient. Files are stored RAM-only on Hetzner servers in Nuremberg (Germany) and burn after first download (burn-on-read default).
2. The Community tier is free and includes:
   • Maximum TTL per file: 1 hour (Dev) up to 24 hours (Pro/Anonymous); the Community tier uses the Anonymous TTL of 24 hours
   • Burn-on-read: file is deleted after first download
   • No SLA, no availability guarantee, "best effort" basis
   • Limited audit log retention (in working memory, cleared on container restart)
   • Access to SDK (Python and JavaScript) and API under rate limits
3. Full end-to-end zero-knowledge encryption applies to use via the SDK and CLI. Browser and Outlook extensions use a server-side encryption path where Paramant temporarily handles ciphertext; see Privacy Statement §7 for details.
4. Paramant reserves the right to modify, expand, or limit the service. Material changes will be announced at least 14 days in advance on paramant.app.

Article 4 — Account and registration

1. Some features of Paramant require an account. When registering you provide a valid email address and activate two-factor authentication (TOTP).
2. The user is responsible for keeping login credentials, API keys, and TOTP secrets confidential. If compromise is suspected, the user must immediately revoke the API key via the dashboard or contact privacy@paramant.app.
3. One account per natural or legal person, unless agreed otherwise.
4. Paramant may refuse or terminate an account in case of abuse, breach of these terms, or breach of applicable law.

Article 5 — User responsibilities

1. The user is fully responsible for:
   • The contents of files transmitted via Paramant
   • The lawfulness of processing third-party personal data through the service (the sender is the data controller for their own transmissions)
   • Obtaining consent or another legal basis for sharing personal data with recipients
   • Maintaining their own backups of files; Paramant provides no archival or backup function
   • Properly configuring encryption keys and safeguarding API keys
   • Setting appropriate TTL and max_views per transmission
2. The user arranges their own delivery method. Paramant does not guarantee that recipients will retrieve a file within the TTL.
3. For business use within sectors with additional compliance requirements (healthcare, legal, financial) the user is responsible for complying with those sector-specific requirements (e.g. NEN 7510, ISO 27001, sectoral legislation). Paramant offers no certification and makes no determination of sectoral compliance.

Article 6 — Prohibited use

Using Paramant for the following is prohibited:

• Activities in breach of Dutch or European law
• Sending or distributing child sexual abuse material or material inciting terrorism, violence, or hatred
• Sending malware, viruses, ransomware, or other harmful software
• Attempts at unauthorised access to systems of Paramant or third parties
• Circumventing technical security measures, rate limits, or access controls
• Automated abuse (scraping, denial-of-service, mass spamming)
• Otherwise infringing rights of Paramant or third parties, including intellectual property rights
• Resale or redistribution of the Community tier without express written consent

If a breach is suspected, Paramant may immediately suspend or terminate the account, and Paramant is entitled to provide information to law enforcement authorities where legally required.

Article 7 — Availability and interruption

1. The Community tier is provided on an "as-is" and "best effort" basis. Paramant does not guarantee specific availability, error-free operation, or particular response times.
2. Paramant is entitled to take the service offline, in whole or in part, for maintenance, updates, security updates, or other necessary work, without giving rise to any claim for damages.
3. Paramant may terminate or substantially modify the Community tier with at least 30 days' prior notice.

Article 8 — Liability

1. Paramant Community is provided free of charge. To the fullest extent permitted by law, Paramant is not liable for any damage arising from or in connection with use of the Community tier.
2. Paramant's liability, regardless of legal basis, is limited in all cases to a maximum of five hundred euros (€500) per event or series of related events, and to a maximum of one thousand euros (€1,000) per calendar year.
3. Paramant is in no event liable for:
   • Indirect damage, consequential damage, lost profits, missed savings, missed business, reputational damage, or non-material damage
   • Loss of files due to TTL expiry, burn-on-read, or container restart (the user is responsible for backups)
   • Unlawful access to files due to loss or compromise of API keys or TOTP secrets on the user's side
   • Service interruption or delay
   • Damage caused by third parties, including sub-processors, acting outside Paramant's reasonable supervision
   • Damage caused by the contents of files transmitted by users via the service
   • Damage resulting from the user's failure to comply with these terms
4. The limitations in this article do not apply in case of intent or gross negligence by Paramant.
5. Any claim for damages lapses if not submitted to Paramant in writing within one (1) year of the damage arising.
6. The statutory rights of consumers under Books 6 and 7 of the Dutch Civil Code are not limited by this article to the extent that mandatory law prohibits such limitation.

Article 9 — Indemnification

The user indemnifies Paramant against all third-party claims — including supervisory authority fines, damage claims, court costs, and reasonable legal fees — arising from:

• The user's use of Paramant in breach of these terms or applicable law
• The contents of files transmitted by the user via Paramant
• The user's infringement of third-party rights, including privacy rights and intellectual property rights
• The user's transmission of third-party personal data without a valid legal basis under the GDPR

Article 10 — Intellectual property

1. Paramant and all associated software, source code, documentation, designs, trade marks, and logos are the property of Mick Beer or its licensors.
2. The Paramant source code is available under the Business Source License 1.1 (BUSL-1.1) via github.com/Apolloccrypt/paramant-relay. Read the license for the exact terms of use.
3. The SDKs paramant-sdk (Python and JavaScript) are available via PyPI and npm under the license stated in the respective repositories.
4. By using Paramant the user obtains a non-exclusive, non-transferable, revocable right of use for the duration of use and within the bounds of these terms.
5. Nothing in these terms transfers intellectual property rights to the user.

Article 11 — Privacy and data protection

1. Paramant's processing of personal data is described in the Privacy Statement. By using Paramant, the user acknowledges having read it.
2. Regarding the contents of files transmitted via Paramant: Paramant is not a processor within the meaning of GDPR Art. 28. The sender determines content and recipient; Paramant only provides the transport mechanism.
3. If a user transmits personal data of third parties via Paramant, that user is the data controller under the GDPR. The user is responsible for the legal basis, information obligations, and security of that processing.
4. Business customers requiring a Data Processing Agreement (DPA) for their own use of Paramant in a specific setting may contact privacy@paramant.app.

Article 12 — Termination

1. The user may terminate the account at any time via the dashboard or by sending a deletion request to privacy@paramant.app.
2. Paramant may suspend or terminate an account with immediate effect in case of:
   • Breach of these terms, in particular Article 6
   • Suspected fraud, abuse, or unlawful use
   • Legally required intervention
   • Termination of the Community tier as referred to in Article 7(3)
3. Upon termination, the right of use lapses. The retention periods for personal data described in the Privacy Statement remain applicable.
4. Obligations that by their nature are intended to survive termination (such as liability, indemnification, intellectual property, governing law) remain in force after termination.

Article 13 — Changes to these terms

1. Paramant may amend these terms. Material changes will be announced at least 14 days in advance on paramant.app and, for registered users, by email.
2. If you do not agree with the amended terms, you may terminate your account before the effective date. Continued use after the effective date is deemed acceptance of the amended terms.
3. The current version and publication date appear at the top of this page. Earlier versions are available on request.

Article 14 — Governing law and jurisdiction

1. These terms and any use of Paramant are governed exclusively by the laws of the Netherlands. The applicability of the United Nations Convention on Contracts for the International Sale of Goods (CISG) is excluded.
2. Disputes arising from or related to these terms or the use of Paramant shall be submitted exclusively to the competent court in The Hague (Rechtbank Den Haag), unless mandatory law designates another court.
3. Before submitting a dispute to court, the parties shall in good faith attempt to reach an amicable resolution.
4. For complaints about the processing of personal data, the user may also turn to the Dutch Data Protection Authority (see Privacy Statement §11).

Article 15 — Final provisions

1. If any provision of these terms is found to be void or voidable, the remaining provisions remain in full force. The parties shall replace the void or voided provision with a valid provision that approximates the original as closely as possible in scope and purpose.
2. Failure or delay by Paramant to enforce any provision of these terms does not constitute a waiver of rights.
3. The user may not transfer rights or obligations under these terms to a third party without prior written consent of Paramant.
4. Communications from Paramant to the user occur via paramant.app or via the email address known to Paramant. Communications from the user to Paramant occur via privacy@paramant.app.

Version history
Version 1.0 — 27 April 2026 — initial publication of Community terms.