Terms of Service
Effective date: 2026-06-02
These Terms of Service (“Terms”) are a binding agreement between you and your organisation (“you”, “Customer”) and PK Digital (“Firepipe”, “we”, “us”) governing your access to and use of the Firepipe SFTP gateway, dashboard, websites, and related services (collectively, the “Service”). By creating an account or using the Service, you agree to these Terms. If you are agreeing on behalf of an organisation, you represent that you have authority to bind it.
1. The Service
Firepipe provides a managed SFTP gateway in front of cloud object storage that you own and control (Amazon S3, Azure Blob, Google Cloud Storage, or an S3-compatible store such as Cloudflare R2). The Service authenticates connections, enforces per-user path access, and can serve directory listings from a synced metadata index. Firepipe is a bring-your-own-bucket service: your files reside in your own storage bucket, not on our infrastructure.
2. Accounts & eligibility
- You must provide accurate account information and keep it current.
- You are responsible for safeguarding your credentials and for all activity under your account, including the SFTP users and credentials you create.
- You must be at least 16 years old and capable of forming a binding contract.
3. Your responsibilities & your storage
- You are responsible for your cloud storage account, the bucket you connect, the access you grant us, and any charges your cloud provider bills you (including storage and data transfer).
- You are responsible for the content of the files transferred through the Service and for ensuring you have the rights and lawful basis to transfer and store them.
- You are responsible for managing your SFTP users and their access, and for promptly revoking credentials you no longer need.
Sensitive data. The Service is a general-purpose file-transfer gateway and is not designed or certified for special categories of data. You must not transfer through the Service any special category personal data (as defined in UK GDPR Article 9), health or medical records, or payment-card data, and you acknowledge that the Service is not HIPAA or PCI DSS compliant. You are solely responsible for any such data you choose to transfer in breach of this section.
4. Acceptable use
You agree not to use the Service to:
- violate any law or third-party rights, or transfer unlawful, infringing, or malicious content;
- attempt to gain unauthorised access to the Service, other customers' data, or any system, or to probe, scan, or test the vulnerability of the Service without our written consent;
- disrupt or impose an unreasonable load on the Service, or circumvent usage limits or security controls;
- resell or provide the Service to third parties except as expressly permitted.
We may suspend access to address material breaches, security risks, abuse, or non-payment. We will have no liability to you for any suspension or restriction of access, or removal of content, made under this section.
5. Fees & billing
Paid plans are billed as described at sign-up or in an order. Usage (such as egress) is metered and billed in arrears. Fees are exclusive of taxes, which you are responsible for. Except where required by law, fees are non-refundable. We may change pricing on prospective notice.
6. Third-party services
The Service interoperates with third-party services you choose (your cloud storage provider, and, if you use it, Google Sign-In). Your use of those services is governed by their terms, and we are not responsible for them. Your use of Google Sign-In is also subject to our Privacy Policy.
7. Intellectual property
We and our licensors own all rights in the Service, including the software, the Firepipe name, and logos. We grant you a limited, non-exclusive, non-transferable right to use the Service during your subscription. You retain all rights in your files and data; you grant us only the limited rights needed to operate the Service for you (for example, to access the bucket you configure and to index file metadata).
8. Confidentiality, security & data protection
Each party will protect the other's confidential information. We maintain reasonable technical and organisational security measures, described in our Privacy Policy. You must promptly notify us of any suspected compromise of your account. To the extent we Process personal data on your behalf in providing the Service, we do so as your processor under our Data Processing Agreement, which is incorporated into these Terms.
9. Disclaimers
The Service is provided “as is” and “as available”. To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted or error-free, that it will review your data for accuracy, or that it will preserve your data without loss. Your files remain in your own bucket under your control, are streamed rather than stored by us, and you are responsible for maintaining your own backups. Transferring data over the internet necessarily involves networks and third-party services we do not own or control, and we are not responsible for data lost, altered, intercepted, or delayed across them; and while we maintain reasonable security measures, no security measures are guaranteed against every threat. We are not liable for any Sensitive Data you transfer in breach of section 3.
10. Indemnification
You will defend, indemnify, and hold harmless Firepipe, its affiliates, and its personnel from and against any third-party claim, and any resulting liabilities, damages, losses, and reasonable costs (including legal fees), arising out of or relating to: (a) the content of the files you transfer or store through the Service; (b) your use of the Service in breach of these Terms, including the Acceptable Use section; (c) your violation of any law or any third-party right, including intellectual-property and data-protection rights; or (d) the configuration of, the access you grant to, and the charges incurred on your own cloud storage and other third-party accounts. We will notify you of the claim, give you control of its defence and settlement (provided no settlement imposes any obligation or admission on us without our prior written consent), and cooperate with you at your reasonable expense.
11. Limitation of liability
To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, data, or goodwill (including any such loss arising from a failure of security measures), even if advised of the possibility. Our aggregate liability arising out of or relating to the Service will not exceed the amounts you paid us for the Service in the twelve (12) months before the event giving rise to the claim; and for any no-charge or free-tier use of the Service, our aggregate liability will not exceed £100. These exclusions and caps do not apply to your obligation to pay fees due, to your indemnification obligations, or to your breach of the Acceptable Use section or the usage restrictions in these Terms. They apply regardless of the form of action, whether in contract, tort (including negligence), strict liability, or otherwise, and survive and apply even if a limited remedy in these Terms is found to have failed of its essential purpose. Nothing in these Terms limits or excludes liability that cannot lawfully be limited or excluded, including liability for death or personal injury caused by negligence, or for fraud or fraudulent misrepresentation.
12. Term & termination
These Terms apply while you use the Service. You may stop using and close your account at any time. We may suspend or terminate the Service for material breach, security or legal reasons, or non-payment. On termination, your right to use the Service ends; you may export your configuration beforehand, and your files remain in your own bucket. Provisions that by their nature should survive (e.g. fees due, IP, disclaimers, indemnities, liability limits) will survive.
13. Changes to the Service or Terms
We may modify the Service and these Terms. For material changes to the Terms we will provide reasonable notice through the Service or by email. Your continued use after changes take effect constitutes acceptance.
14. Governing law
These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction, without prejudice to any mandatory consumer-protection rights you may have where you reside.
15. Contact
PK Digital
[email protected]