Official Agreement

Terms of Service

Effective Date: October 18, 2026 • Version: 2.4.0 (Enterprise Vault) • Applies to: Botbari Secure Vault & EduBari Systems

    Summary: Botbari Secure Vault provides enterprise zero-trust cryptographic credential management. By accessing or using the Vault, you agree to these Terms. All stored infrastructure secrets are protected using AES-256-GCM encryption, and master credentials must be securely held by authorized administrators.

1. Acceptance of Terms

By logging into, accessing, or utilizing the Botbari Secure Vault application (the "Service", "Vault", or "Platform"), you ("User", "Administrator", or "Authorized Personnel") agree to be legally bound by these Terms of Service ("Terms"). If you do not agree with any part of these Terms, you must immediately terminate use of the Service.

2. Service Description & Zero-Trust Architecture

Botbari Secure Vault is a zero-trust multi-tenant credential vault engineered to securely store, organize, rotate, and manage infrastructure assets, including:

Hostinger VPS and cloud server root credentials and SSH keys.
Production database connection strings and passwords (MySQL, PostgreSQL, SQLite).
Titan Mail and corporate email configuration and recovery codes.
Third-party API credentials, webhook tokens, and environment profiles (.env).
EduBari educational institutional user directory accounts and administrative portal access.

3. User Account Security & Authentication Obligations

Access to the Vault is strictly controlled via a proprietary five-step zero-trust verification pipeline:

Domain & Organization Verification: Verification against authorized institutional domain registry.
Security Identification: Cryptographic verification code and identity challenge.
Secret Passphrase: Secondary verification via pre-shared secret phrase.
One-Time Passcode (OTP): Time-limited email authorization passcode.
Vault Master Key: High-entropy cryptographic master password.

You are solely responsible for maintaining the confidentiality of your credentials, secret phrases, and master passwords. Any action conducted under your authenticated session will be deemed your authorized action and is recorded in the immutable Security Audit Log.

4. Master Encryption Key & Zero-Knowledge Architecture

All sensitive credentials stored within the database are encrypted using authenticated AES-256-GCM. Decryption keys are decoupled from database backups and database dumps.

You acknowledge that Botbari operates on a zero-knowledge architecture principle regarding raw credentials. If you lose your separate environment master encryption key (VAULT_ENCRYPTION_KEY), encrypted secrets cannot be decrypted by any party, including Botbari engineering personnel.

5. Google Drive Disaster Recovery & Cloud Backups

The Vault provides an optional automated Disaster Recovery feature that allows administrators to connect a Google Drive account to receive periodic automated backups.

On-the-Fly Client Encryption: Before any database backup file leaves your local server disk, it is compiled and encrypted locally using AES-256-GCM with authenticated headers (BVENC).
Zero Plaintext Transmission: No unencrypted database dumps, passwords, or raw secrets are ever transmitted to Google Drive.
Minimal Scope: The Service only requests access to files created by the Vault application (drive.file scope) and will never inspect, read, or modify other personal files on your Google Drive.
Disconnection: You may disconnect Google Drive integration at any time from the Vault dashboard, immediately revoking automated synchronization.

6. Prohibited Uses

You agree not to:

Attempt to bypass, disable, or tamper with the 5-step authentication pipeline or rate-limiting firewalls.
Use automated scrapers, crawlers, or extraction scripts against vault endpoints without authorization.
Store malicious executables, exploits, or unlawful materials within vault secure document vaults.
Share authenticated administrative sessions or reverse-engineer vault cryptographic routines.

7. Audit Logging & IP Monitoring

For critical infrastructure defense, all authentication events, credential reveals, backup downloads, and configuration adjustments are captured with timestamp, IP address, user agent, and severity rating. Suspicious anomalous patterns will result in immediate automated IP blocking.

8. Limitation of Liability

To the maximum extent permitted by applicable law, Botbari Secure Vault is provided on an "AS IS" and "AS AVAILABLE" basis. Botbari and its contributors shall not be liable for any direct, indirect, incidental, consequential, or punitive damages resulting from unauthorized access, infrastructure server outages, lost encryption keys, or data corruption.

9. Modifications to Terms

We reserve the right to revise these Terms at any time to reflect software updates, cryptographic standard upgrades, or statutory requirements. Continued use of the Vault following notification of amendments constitutes acceptance of the revised Terms.

10. Contact Information

For legal inquiries, security disclosures, or compliance documentation, please contact the Botbari Security Operations Team at:

security@botbari.com • support@botbari.com