The service and its provider
PineKey is provided by Bröderna Saxin AB, operating as PineCore Systems, company no. 559379-4364, registered with Bolagsverket (Swedish Companies Registration Office), with its registered office in Nora municipality, Örebro County, Sweden. Postal address: Lindesby 152, 713 94 Nora, Sweden. VAT: SE559379436401. Contact: [email protected].
These terms cover Free and paid accounts on PineKey Hosted. An organisation representative must have authority to act for that organisation. You must have legal capacity to enter the agreement; a minor needs the permission of their parent or guardian where required.
Free and paid plans
Anyone can create a Free account. Free covers one organisation per owner with up to 3 people, with no charge, no card and no automatic conversion to a paid plan. Pro is a paid plan for an organisation. The price, the number of people included and the price per extra person are shown on the pricing page when you order.
These terms cover PineKey Hosted, the service we operate. Nothing in these terms grants a licence to install or operate PineKey elsewhere.
Purchase terms for Pro
Pro can be bought by private individuals and by businesses and other organisations. Whoever orders for an organisation must have authority to bind it. Where these terms say “consumer”, they mean a private individual buying mainly for purposes outside their business.
| Term | What applies |
|---|---|
| Ordering | The team owner orders Pro on the team’s page under Teams, says whether they buy as a private individual or as a business, and pays on Stripe’s payment page. The agreement is made when we confirm the order by email. The confirmation contains the price, these terms and, for consumers, the withdrawal information below. |
| Price and VAT | Pro costs 14.90 EUR per team and month for up to 10 people. Each additional person costs 1.90 EUR per month, up to 25 people in total. Prices include VAT where it applies. A business in another EU country with a valid VAT number pays the same amount, with reverse charge. |
| Introductory price | A team’s first Pro subscription costs 50% less for the first 3 monthly payments, additional people included. It is given once per team and once per owner email address. From the fourth month the regular price applies. |
| Offer when cancelling | The first time an owner cancels with Cancel Pro on the team’s page, we offer the next monthly payment at 50% off instead. Taking the offer keeps Pro, and the regular price applies again after that month. Declining it cancels as usual. The offer is not made while another discount applies. |
| Billing | Monthly in advance, by card through Stripe. Stripe sends a receipt for each payment. When the owner changes the number of additional people, the difference for the rest of the month is charged or credited on the next payment. |
| Renewal and cancellation | Pro renews each month until it is cancelled. Cancel at any time with Cancel Pro or under Manage billing on the team’s page, or by email; the cancellation takes effect at the end of the paid month. Apart from the consumer right of withdrawal, a month that has started is not refunded. |
| Consumer right of withdrawal | A consumer may withdraw from the agreement within 14 days of our order confirmation, without giving a reason, under the Swedish Distance and Off-Premises Contracts Act (2005:59). Send us a clear statement by email to [email protected], for example with the model withdrawal form below; using the form is not required. We refund what you paid within 14 days of receiving the notice, by the same means you paid. If you asked for Pro to start during the withdrawal period, which you do when you order, you pay for the days you had it. |
| Price changes | We announce a price change by email at least 30 days before it applies. You can cancel before the new price takes effect. |
| Failed payments | If a payment fails, Stripe tries the card again and sends a reminder. If the card still cannot be charged, the paid period ends, and the team then falls under the Free limits as described in the next row. Non-payment never deletes data by itself. |
| Ending Pro | When Pro ends, the Free limits apply again. A team that is then over them is handled as in the next row. Nothing is deleted. You can export the team’s items or delete the team yourself. |
| Over the limits | A team over its plan’s limits, for example a second Free team of the same owner or more people than the plan includes, keeps working as usual for 14 days, and its owners are told by email. After that the team’s shared items are read-only: they can be opened, copied, exported, moved out and deleted, but not added or changed, and no one new can join. Personal vaults are never affected. It ends as soon as the team is within the limits or on Pro. Pro is billed from the day it is ordered, never for time before the order. |
| Complaints | Contact us first. A consumer can also turn to the National Board for Consumer Disputes (ARN), as described under responsibility and complaints below. |
Model withdrawal form
Complete and return this form only if you wish to withdraw from the contract.
To Bröderna Saxin AB, Lindesby 152, 713 94 Nora, Sweden, [email protected]:
I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the provision of the following service (*): PineKey Pro for the team [name]
Ordered on (*):
Name of consumer(s):
Address of consumer(s):
Signature of consumer(s) (only if this form is notified on paper):
Date:(*) Delete as appropriate.
Card payments are handled by Stripe, listed among our service providers. Card details go to Stripe directly and never reach PineKey.
Your account and your keys
Use an email address you control, protect your master password and recovery material, and keep your devices secure. You are responsible for choosing who receives shared access. Do not send us secrets in a support message.
The master password is used locally to unlock protected keys. PineKey cannot reset it. A team owner can replace a member’s master password only after that member enrolls in account recovery. Maintain your own encrypted exports and arrange trusted-contact access in advance if you need it. Revoking access cannot recall a password or file someone already copied.
Acceptable use and ownership
You retain your rights to your data. You give us only the permission needed to host, process and transmit it to provide the service. Only store and share information you are authorised to use. Do not distribute stolen credentials, attack other accounts, bypass access controls, send spam or deliberately disrupt the service.
Reasonable testing of your own account is welcome. For security research, follow our reporting guidance. A shared vault owner must manage members and make sure their use is lawful.
Service levels (SLA)
We take reasonable care in operating PineKey. Our availability objective is 99.5% per UTC calendar month. This is a measured service-level objective for Free and Pro alike, not a financially backed uptime guarantee. There are no contractual service credits or guaranteed repair times. The notice and data-exit commitments below apply to Free accounts as well. Mandatory legal remedies remain available.
| Service level | What applies |
|---|---|
| Availability objective | 99.5% per calendar month (UTC), approximately 3 hours 36 minutes of unavailability in a 30-day month. All maintenance, deployments and delivery-provider failures count; none are silently excluded. |
| Measurement | One external check per minute of the public sign-in page and an application script, plus API/database readiness. Both must pass within ten seconds per check. This measures reachability, not the correctness of every authenticated action or email delivery. |
| Reporting | The public status page shows observed availability, measurement coverage, failed and unknown minutes, and monthly reports. Successful minutes divided by recorded minutes gives observed availability; missing checks are unknown, never successful. A partial month or incomplete coverage cannot certify that the monthly target was met. |
| Support | Contact [email protected]. We aim to give an initial substantive response within two business days, Monday–Friday excluding Swedish public holidays. This is a response target, not a resolution deadline or 24/7 staffed support; it is not included in the automated availability metric. |
| Maintenance and incidents | We give at least 48 hours’ notice on the status page of scheduled maintenance expected to interrupt service. Emergency security work may start sooner; we explain it as soon as reasonably possible and provide updates for a material disruption. |
Reports begin when monitoring is commissioned. We do not invent earlier uptime. We operate the monitor ourselves on the same server as the application. If that server or the monitor stops, live reporting stops too; missing minutes remain unknown after recovery. This is not an independent external measurement. Interruptions shorter than the sampling interval can be missed. See the complete measurement method and the current service limitations.
At least three months before permanent closure
If we decide to permanently close PineKey, or withdraw a core vault service so affected customers can no longer access their stored data, we will give those customers at least three calendar months’ advance notice, and never less than 90 days. This commitment also applies to Free accounts. The closure date must satisfy both minimum periods.
We send the notice to the affected account email addresses and organisation administrators, and publish it prominently in the service and on the public status page. The notice states the final service date, export and migration instructions, a support contact, and the data-deletion timetable. The notice period starts when both email notice has been sent and the service notice has been published. Keep your contact email current; we investigate failed deliveries where practicable.
During that notice period we continue operating the affected vault service, subject to the service levels and necessary temporary restrictions described here. Customers keep access to their data and available export tools without an extra exit fee. We will not deliberately delete the affected vault data before the announced closure date unless you request deletion or law requires it.
Current self-service encrypted exports cover personal items and folders; team items, trash and attachment files are not included. Before a closure notice period begins, we will provide an authorised route for organisation owners to retrieve shared content and for users to retrieve attachments, together with clear instructions. Content must be decrypted on an authorised user’s device: we cannot recover a forgotten master password or provide decrypted content ourselves. Export during the notice period; do not rely on being able to log in after closure.
Active service copies will be deleted within 30 days after the announced closure date, except limited records that law requires us to retain. Historical encrypted backups remain restricted and expire under the published backup rotation; that period can extend to 12 months. The closure notice explains the applicable timetable. A confirmed organisation DPA and mandatory law continue to govern return and deletion.
A binding legal prohibition can require earlier restriction or closure. An urgent security incident may require an immediate, proportionate temporary suspension while we work to restore safe access. Neither routine maintenance nor a business decision waives the minimum notice period for planned permanent closure. If a legal prohibition prevents the promised period, we explain the reason and provide the longest lawful data-exit opportunity. We cannot promise uninterrupted access during a disaster, but we must not use an incident as a substitute for the planned-closure procedure.
Changes and individual account restrictions
We may change the service for security, legal compliance, compatibility, performance or to improve its functionality. We give at least 30 days’ advance email notice of a material change to these terms or a change materially reducing existing functionality, describing what changes, when, and your right to stop using the service. Required consumer information is supplied in a form you can retain. Where law gives a right to terminate or another remedy, that right is preserved. A change cannot silently create a paid subscription or shorten the closure notice already promised to existing accounts.
Urgent security or legally required changes may take effect sooner to the extent necessary; we explain them promptly. We may restrict an individual account for unlawful use, a serious breach of these terms or a concrete security threat. Restrictions must be proportionate, and we explain the reason and how to contact us unless law or a specific security risk prevents it. An account-specific restriction is separate from permanent withdrawal of the service for ordinary customers.
Leaving and deletion
You can stop using PineKey at any time. Export the data you want to keep first. Under Settings, Delete account removes your account and your personal vault after you confirm with your master password. If you are the only owner of an organisation, delete that organisation under Teams, or make another member owner, before you delete your account. Deleting an organisation removes its collections and shared items for every member. You can also ask [email protected] to close the account.
Active account data is removed when you delete it, or following a verified closure request, subject to a legal need to retain limited records. Historical encrypted backups follow the retention described in the privacy notice. Remove offline copies and exports from your own devices separately. Deleting an organisation does not cancel a Pro order by itself; tell us, and the cancellation follows the purchase terms above.
Privacy and organisations
The privacy notice explains processing of personal data. Organisations processing personal data in PineKey should arrange the DPA before using it for that purpose. The DPA has no plan-based surcharge.
Limitation of liability for organisations
This section applies when PineKey is used by a business or other organisation, or by someone acting for one. It does not apply to consumers, who keep the protection consumer law gives them.
Neither we nor the organisation is liable to the other for indirect or consequential loss, such as lost profit, lost revenue, lost business or lost goodwill. Our total liability under these terms is limited to the greater of 100 EUR and the amount the organisation paid us for PineKey in the 12 months before the event that gave rise to the claim. The same limits apply to claims between the organisation and us under the data processing agreement.
The limits do not apply to loss caused intentionally or by gross negligence, or where the law does not allow liability to be limited. They do not limit the right of a person whose data is processed to compensation under the GDPR.
Responsibility, complaints and applicable law
Nothing in these terms removes mandatory consumer or data-protection rights, or excludes liability that cannot lawfully be excluded.
Contact us first if something is wrong so we can investigate and address it. Swedish law applies, without depriving consumers of mandatory protections in their country of residence. Consumers may refer an eligible dispute to Allmänna reklamationsnämnden (ARN); courts remain available under applicable jurisdiction rules.
The published version and date identify these terms. You can print or save a copy using the control above. The changes procedure and the minimum closure notice cannot be replaced by an unannounced edit to this page.