Terms of Service

Last updated: February 2026

1. Scope and Provider

These terms govern your use of Lockwave, an SSH key lifecycle management service ("the Service") operated by:

Pixel & Process UG (haftungsbeschränkt)
Marliring 74, 23566 Lübeck, Germany
Email: legal@lockwave.io

By creating an account or using the Service, you agree to these terms. If you do not agree, do not use the Service.

2. Service Description

Lockwave provides centralized SSH public key management and enforcement. The Service consists of:

  • A web-based control plane for managing SSH keys, hosts, assignments, and team access
  • A daemon (lockwaved) that runs on your hosts and enforces the desired SSH key state
  • An API for programmatic access
  • Audit logging and compliance reporting

3. Account Terms

  • You must provide accurate and complete registration information.
  • You are responsible for maintaining the security of your account credentials.
  • You must be at least 18 years old to use the Service.
  • One person or entity may not maintain more than one free account.
  • You are responsible for all activity that occurs under your account.

4. Acceptable Use

You agree not to:

  • Use the Service for any unlawful purpose or to violate any applicable laws
  • Attempt to gain unauthorized access to the Service, other accounts, or connected systems
  • Interfere with or disrupt the Service or its infrastructure
  • Reverse-engineer, decompile, or disassemble any part of the Service
  • Use the Service to store or transmit malicious code
  • Resell or redistribute the Service without written permission

5. Payment and Billing

  • Paid plans are billed in advance on a monthly or annual basis via Stripe.
  • All prices are in EUR and exclude applicable VAT unless stated otherwise.
  • Upgrades take effect immediately with prorated charges. Downgrades take effect at the end of the current billing period.
  • Failed payments may result in suspension of service after a 7-day grace period.
  • We reserve the right to change pricing with 30 days notice. Existing subscriptions are honored until renewal.

6. Data and Privacy

Your use of the Service is also governed by our Privacy Policy.

  • You retain ownership of all data you submit to the Service.
  • We process your data solely to provide and improve the Service.
  • SSH private keys generated by the Service are delivered to you once and not retained by us.
  • You are responsible for the accuracy and legality of data you submit.

7. Availability and Support

  • We aim for 99.9% uptime but do not guarantee uninterrupted service.
  • Scheduled maintenance will be announced at least 24 hours in advance when possible.
  • Support response times depend on your plan tier.
  • Enterprise customers may negotiate a custom SLA.

8. Liability

  • The Service is provided "as is" without warranties of any kind, express or implied.
  • We are not liable for damages arising from the use or inability to use the Service, except in cases of intentional misconduct or gross negligence.
  • Our total liability is limited to the amount you paid for the Service in the 12 months preceding the claim.
  • We are not liable for data loss. You are responsible for maintaining backups of your SSH keys.

9. Termination

  • You may cancel your account at any time from the billing settings.
  • We may suspend or terminate your account for violations of these terms with reasonable notice.
  • Upon termination, your data will be retained for 30 days to allow export, then permanently deleted.
  • Provisions that by their nature should survive termination (liability, dispute resolution) remain in effect.

10. Governing Law and Jurisdiction

These terms are governed by the laws of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods (CISG).

The exclusive place of jurisdiction for all disputes arising from or in connection with these terms is Lübeck, Germany, to the extent permitted by law.

11. Changes

We may modify these terms with 30 days notice. Continued use after the notice period constitutes acceptance. Material changes will be communicated via email to registered users.