Terms of service

These Terms of Service form an agreement between you and Webpath SRL, TIN 50429590, with its address in Otopeni, Romania. Webpath SRL operates FavLock and is referred to as “FavLock”, “we”, “us”, or “our” in these terms.

These terms apply to the public website, authenticated dashboard, documentation, and related services. Our Privacy Policy explains how we process personal data.

You must be at least 16 years old and legally capable of entering into this agreement. If the law where you live requires you to be older, or requires permission from a parent or guardian, that rule applies. A parent or guardian who permits a minor to use FavLock is responsible for supervising that use.

If you use FavLock for an organisation, you confirm that you have authority to bind that organisation to these terms.

FavLock lets you save, encrypt, sync, search, import, and organise a private library of bookmarks, notes, tasks, and saved articles, together with text highlights captured from web pages. Features include collections, tags, favourites, local search, Trash recovery, encrypted backups, browser bookmark exports, and selected web-search providers. The Chrome extension can create a focused reading view and, when you choose Save, send a cleaned article snapshot to your browser for client-side encryption before cloud storage. The Firefox extension can also create a focused reading view; when you choose Save, it encrypts the article in the extension before upload.

The Chrome and Firefox extensions can also save selected text as a highlight and, when you enable webpage highlight marks and grant the required browser permission, display saved highlights on the corresponding page. Page access, text matching, encryption, and decryption occur in your browser. Browser restrictions, changed page content, unsupported pages, and permission settings may prevent a saved highlight from being displayed in its original position.

Features, compatibility, and limits may change as FavLock develops. We will keep current availability information on the website and in the product documentation.

You need a supported modern browser, JavaScript, browser cryptography support, and an internet connection for cloud sync. Some functions depend on browser storage or third-party services. Current feature instructions and compatibility information are available in our documentation.

• Provide accurate account information and keep it current.
• Keep your password, access to linked Google or Apple sign-in accounts, devices, and sessions secure. Do not share an account with unauthorised users.
• Tell us promptly at [email protected] if you suspect unauthorised access.
• When registering a new account, you must not use a temporary or disposable email address.
• You are responsible for activity performed through your account unless it results from a failure for which we are legally responsible.

We may use automated checks and third-party data sources to identify temporary or disposable email addresses. These sources may change and may occasionally identify an address incorrectly. If this happens, contact [email protected].

You are responsible for keeping access to your passkey or storing the recovery key safely, transferring the recovery key only to devices you trust, and keeping an appropriate backup. Anyone with the recovery key and access to your encrypted data may be able to decrypt it. Do not send your key to support.

If you choose “remember this device”, the key is stored in that browser profile. FavLock’s local privacy controls and your browser settings can remove locally stored data.

You retain ownership of the library data and other material you submit (“Your Content”). You give us a limited, worldwide, non-exclusive licence to host, transmit, cache, back up, and otherwise process Your Content only as needed to operate, secure, and support FavLock and comply with law. This licence ends when Your Content is deleted, subject to reasonable backup cycles and legal retention duties.

You confirm that you have the necessary rights to store and use Your Content and that it does not violate law or another person’s rights. Saving a link does not give you ownership of the linked website or permission to misuse its content.

Reader and saved articles are intended only for your personal, private, non-commercial use. When you choose Save, FavLock stores a cleaned copy of the article body together with its title, source URL, author, and available publication details. You may save only material that you accessed lawfully and that you have the right to copy or store under applicable law, a licence, or the rightsholder’s terms. Describing the feature as “personal use” does not itself create a copyright exception or give you permission from a publisher or rightsholder.

You must not publish, share, sell, sublicense, redistribute, or use saved third-party web content to provide a library or service to anyone else. You must also respect paywalls, authentication requirements, robots or access restrictions, copyright notices, and the terms that apply to the source.

Protected fields, including saved article text, are uploaded as ciphertext and are ordinarily inaccessible to FavLock because we do not receive your plain-text encryption key. We therefore do not review, select, edit, or exercise editorial control over the plain-text material you save. You remain responsible for Your Content and your decision to store it. Encryption does not prevent us from deleting ciphertext, restricting an account, preserving records, or taking other steps when required by law, a valid order, these terms, or a security need.

A rightsholder who believes FavLock is being used to store infringing material may contact [email protected] with enough information to identify the protected work, the complained-of use, and the basis of the claim. Because saved article content is encrypted and private, we may be unable to inspect the alleged material, but we may request information from the account holder or restrict or remove the associated encrypted data where legally required.

You must not use FavLock to:

• break the law or infringe another person’s rights;
• store, distribute, or facilitate malware, phishing, fraud, abuse, harassment, or other harmful activity;
• perform or attempt any penetration test, vulnerability scan, security research, exploitation, or other security testing of FavLock systems without our prior written authorisation;
• probe, scan, disrupt, overload, attack, or bypass security, rate limits, resource limits, authentication, or access controls;
• use Reader to evade a paywall, subscription requirement, authentication control, metering limit, or other restriction, or on content you are not lawfully entitled to access;
• share, publish, redistribute, sell, or commercially exploit third-party web content saved through Reader or Reading;
• gain or attempt to gain unauthorised access to another user’s account or data, or to any FavLock system, network, API, credentials, encryption keys, data, or non-public area;
• use automated means that place an unreasonable load on the service, or resell access without our written permission; or
• copy, reverse engineer, or circumvent protected parts of the service except to the extent applicable law expressly permits.

Security testing is permitted only when we have given prior written authorisation that defines its scope. Good intentions, a plan to report findings afterwards, or the absence of visible damage do not constitute permission. If you accidentally discover a possible vulnerability, stop testing and report it to [email protected].

FavLock offers Free and Pro plans subject to the features and resource limits shown on our website and in the dashboard. The price, currency, billing interval, taxes, and total for Pro are shown at checkout before you pay.

Creem acts as merchant of record for Pro purchases. Creem is the seller for the payment transaction and handles checkout, payment processing, applicable tax collection, invoices and receipts, subscription billing, cancellations, and refunds. Its checkout and customer terms also apply to those transactions. You can manage a Creem subscription from the billing portal in FavLock Settings.

A cancellation scheduled for the end of a paid period leaves Pro available until that period ends.

If your account moves to Free and your stored items exceed the 1,000-bookmark allowance, you have 30 days to use and edit the library, export it, and delete bookmarks, but you cannot create, import, or restore bookmarks. After 30 days, normal library use is paused; export, bookmark deletion, billing, upgrade, account settings, and support remain available. Returning to 1,000 bookmarks or fewer, or restoring Pro, immediately restores normal access.

If the account remains Free and above 1,000 bookmarks for 180 days after Pro access ends, FavLock permanently removes only the excess bookmarks and preserves the oldest 1,000, ordered by creation time and then identifier. We will show the applicable deadlines in the dashboard. Export before the cleanup date if you want to keep a separate copy of every item.

Highlights and annotations

Free includes up to 100 highlights across the entire account. This is an account-wide allowance, not a limit per webpage. Pro does not impose a numeric highlight-count limit and also lets you add and edit encrypted annotations. On Free, existing annotations remain readable and exportable, but you cannot add or edit them.

Manually deleting a highlight moves its encrypted record to Trash for the recovery period included with the plan: 7 days on Free and 30 days on Pro. Moving a bookmark to Trash preserves its attached highlights in the same encrypted recovery item; restoring the bookmark restores those highlights together. Restoring a highlight or a bookmark with highlights is subject to the highlight allowance on the account's current plan. A bookmark restore is atomic: if all attached highlights cannot be restored within that allowance, neither the bookmark nor its highlights are restored and the recovery item remains in Trash.

Delete forever, Empty Trash, Trash expiry, account deletion, and automated plan-overage cleanup permanently remove the affected encrypted highlight data and cannot be undone. A bookmark removed automatically under the 180-day bookmark overage process is not moved to Trash, so its attached highlights are also permanently removed. Export anything you want to retain before an applicable permanent-deletion date or action.

If Pro access ends while the account contains more than 100 highlights, a separate 180-day highlight-retention period starts when Pro access ends. During this period, existing highlights remain readable, exportable, recolourable, and deletable, subject to any separate account recovery restriction. You cannot create additional highlights while the account remains above the Free allowance. The dashboard shows the number of excess highlights and the scheduled cleanup date.

Returning to 100 highlights or fewer, or restoring Pro before the deadline, cancels the scheduled highlight cleanup. If the account remains Free and above the allowance at the deadline, FavLock permanently deletes only the newer excess and preserves the oldest 100, ordered by creation time and then identifier. This cleanup cannot be undone and the removed highlights do not enter Trash. Export before the cleanup date if you want to keep a separate copy of every highlight.

If a Free account is already above the highlight allowance when this policy is first activated, its 180-day retention period starts when enforcement is activated. FavLock can count records, enforce plan limits, and delete encrypted highlight ciphertext without decrypting the selected quote, matching anchors, or annotation.

Every successful FavLock Pro payment is covered by our 14-calendar-day, no-questions-asked money-back guarantee. Email [email protected] within 14 calendar days of the charge. You do not need to give a reason; we may ask only for the account, receipt, or order details needed to locate and verify the payment. See our Refund Policy for the complete process.

Creem processes eligible refunds to the original payment method. A full refund may end Pro access for the refunded period and return the account to Free limits. The over-limit process above starts when Pro access ends if that plan change leaves your account above the Free limit. A partial refund that leaves Pro active does not start this process. This guarantee is in addition to any mandatory rights available under applicable law.

We may adjust limits to protect service performance or change plan features. If a change materially reduces an active paid service, we will provide reasonable advance notice where practicable and any remedies required by law.

FavLock works with third parties such as Supabase for backend services, Creem as merchant of record for Pro purchases, Google and Apple for optional sign-in, and DuckDuckGo for favicons. If you choose a third-party sign-in provider, use a web-search shortcut, display a favicon, or open a saved external link, your browser communicates with the relevant third party. Their terms and privacy practices apply to their services.

We do not control external websites and are not responsible for their content, availability, or security. Review a destination before opening it. A favicon is informational and is not an endorsement or safety assessment.

FavLock, its software, visual design, documentation, trademarks, and other service materials belong to Webpath SRL or its licensors. Subject to these terms, we give you a limited, personal, non-exclusive, non-transferable, revocable right to use the service for its intended purpose.

If you send feedback, you allow us to use it without restriction or payment, but you are not required to disclose confidential information or assign ownership of unrelated materials.

We aim to keep FavLock available and secure, but temporary interruptions may occur because of maintenance, updates, incidents, internet conditions, or dependencies outside our control. We do not promise uninterrupted or error-free operation.

We may update the service to improve security, compatibility, or features. We will give reasonable notice of material changes that negatively affect continued use when required by law. Keep your browser updated so security and compatibility fixes can take effect.

You may stop using FavLock at any time and ask us to close your account by contacting support. Before closing an account, export or otherwise preserve any data and encryption key you want to keep. Closing the account may make stored data unavailable.

We may restrict, suspend, or disable an account at any time when we reasonably believe this is necessary to investigate suspected misuse, address a security risk, prevent harm, protect FavLock or its users, comply with law, or respond to a breach of these terms. This includes suspected unauthorised penetration testing, hacking, exploitation, or attempts to gain unauthorised access. Where there is a serious or urgent concern, we may act immediately and without prior notice while we investigate.

Where reasonable and appropriate, we will provide notice and an opportunity to correct the issue. We may terminate an account for a serious breach, an uncured material breach, repeated violations, or when legally required. If you believe your account was restricted, suspended, disabled, or terminated by mistake, email [email protected] from your account email and include the information needed for us to review the decision. A review request does not guarantee that access will be restored.

Provisions that by their nature should survive termination—such as ownership, accrued rights, lawful retention, dispute terms, and liability rules—will continue to apply.

Our Privacy Policy describes what personal data we process, the encryption boundary, retention, international transfers, and your data-protection rights. The Privacy Policy is informational and does not reduce rights granted by data-protection law.

We will provide FavLock with reasonable care and skill and in accordance with any mandatory requirements that apply to digital services. If you are a consumer, you may have statutory rights when a digital service is defective, does not match its description, or is not supplied as required. Those rights are not limited by these terms.

To the extent permitted by law, we do not make additional promises about uninterrupted availability, suitability for a particular professional purpose, or the accuracy and safety of third-party websites and content. FavLock is a bookmark tool, not an archival, cybersecurity, legal, or professional-advice service.

Nothing in these terms excludes or limits liability that cannot lawfully be excluded, including liability for fraud, wilful misconduct, gross negligence, death or personal injury caused by negligence, or breach of mandatory consumer or data-protection rights.

To the maximum extent permitted by applicable law, FavLock’s total aggregate liability arising out of or relating to the service, including loss of or damage to stored content, for the same event or series of related events will not exceed the greater of EUR 50 and the amount you paid for the FavLock subscription period in which the event giving rise to the claim occurred.

To the extent permitted by law, neither party is responsible for losses that were not reasonably foreseeable when this agreement was formed. We are not responsible for loss caused solely by your failure to safeguard or retain your encryption key, unauthorised changes to the software, unsupported environments, or a third party outside our control, except where we had a legal duty to prevent or mitigate that loss.

If you use FavLock for business purposes, we are not liable for indirect loss, loss of profit, revenue, goodwill, business opportunity, or anticipated savings to the extent permitted by law. Consumer rights are unaffected.

Please contact us first so we can try to resolve a concern. You may also use any competent consumer-protection authority or alternative dispute-resolution body available under applicable law. If no mandatory rule provides otherwise, disputes are subject to the competent courts of Romania.

We may update these terms to reflect legal, security, or service changes. We will post the revised terms here and update the date above. For a material change, we will provide reasonable advance notice and request acceptance where required by law. Changes do not apply retroactively unless the law permits and the terms clearly say so.