Version: 2.0
Effective date: 14 August 2026
1. Provider details
- Provider: Németh Attila, sole proprietor, trading as Szoft-Tech.hu
- Registered office / postal address: 1075 Budapest, Rumbach Sebestyén utca 6., Hungary
- Registration number: 52972999
- Registering authority: Hungarian National Tax and Customs Administration (Register of Sole Proprietors)
- Tax number: 69293300-1-38
- KSH statistical number: 69293300620923118
- Website: https://szoft-tech.hu
- Service: https://pws.szoft-tech.hu
- Email: info@szoft-tech.hu
- Telephone: +36 20 393 5201
- Bank account: K&H Bank, 10401213-86768657-81821023
1.1. Hosting provider
- Name: Websupport Magyarország Kft.
- Registered office: 1119 Budapest, Fehérvári út 97-99., Hungary (no in-person customer service)
- Company registration number: 01-09-381419
- Tax number: 25138205-2-43
- EU VAT number: HU25138205
- Bank account: OTP Bank, 11742001-29904501-00000000
- SWIFT: OTPV-HU-HB
- IBAN: HU85117420012990450100000000
- Website: https://www.websupport.hu
- Email: support@websupport.hu
2. Scope, definitions and contract
These Terms govern the PWS cloud-based, zero-knowledge password manager and related digital services. “User” means an individual using an account; “Organisation Customer” means an organisation ordering Team or another business service; “Vault” means the client-side encrypted store; and “Client” means the web/PWA, Windows application or browser extension.
The contract also includes an accepted quotation/order or plan description, current pricing, the Privacy Notice and, where organisational processing applies, a data processing agreement. An individually accepted written quotation prevails over these Terms. Nothing limits mandatory statutory rights.
3. Service
Depending on the selected plan and licences, PWS may provide personal, family and organisation vaults; encrypted records, attachments, versions and device synchronisation; PWA, Windows and supported browser clients; MFA, passkeys, recovery codes, device/session controls; role-based shared vaults and client-side key envelopes; expiring and revocable encrypted sharing; client-side CSV/KDBX import/export; password generation, encrypted offline cache and audit features; and separately licensed directory, domain, RADIUS or device-management integrations.
Current features, platforms, system requirements, quotas and compatibility are described on the website, in release notes/help or an individual quotation. Beta or preview functionality may be limited and separately identified.
4. Registration and formation
By submitting registration, the User offers to contract, accepts these Terms and the Privacy Notice, and confirms that the submitted information is accurate and that the User is authorised to use the service. The contract forms when registration is approved or, for a paid service, when the quotation/order is confirmed. Registration may be rejected for objective security, capacity, legal or compliance reasons.
An individual may register independently only if at least 18 and legally competent; otherwise lawful representative involvement is required. A person acting for an organisation must have appropriate authority.
5. Technical requirements
The User provides a suitable device, current supported operating system/browser, internet connection, secure local environment and required updates. An outdated or modified client, blocked JavaScript/WebCrypto, unsupported browser, rooted/jailbroken or malware-infected device may be unsafe or fail.
We provide client and security updates needed to maintain conformity and security. Users must install them within a reasonable time. Subject to mandatory law, we are not responsible for a defect caused exclusively by failure to install a properly notified update.
6. Account and security duties
- Use strong, unique account and vault master passwords and protect MFA.
- Keep recovery keys/codes, DeviceSecrets, sharing keys and device access confidential and separately secured.
- Do not share an individual account with unauthorised persons or bypass licensing, seats, permissions or security limits.
- Promptly report suspicious access or lost devices and perform recommended revocation, password changes or key rotation.
- Organisation administrators may invite/synchronise only persons and data for which they have a lawful basis and authority.
7. Zero knowledge, recovery and data-loss risk
The vault master password and client-side decryption keys are not sent to us. Neither the Provider, hosting provider nor Master Admin can decrypt vault plaintext, reset a master password or recover encrypted data without a recovery key.
The User is responsible for retaining the master password, recovery key and required device keys. Their loss may cause permanent data loss. Account or MFA recovery does not automatically unlock a vault. Shared-vault keys can be redistributed only where another authorised member can do so technically and legally.
Users should maintain a secure export or recovery plan for indispensable data. Plaintext exports are highly sensitive and become the User's responsibility after download.
8. Acceptable use
The service may be used only lawfully. Prohibited conduct includes unlawful/harmful content; unauthorised access, exploitation, denial-of-service, malware or automated abuse; unauthorised use of another account, organisation, device, share or API credential; copying, reverse engineering or resale beyond mandatory interoperability rights; bypassing quotas, rate limits, licensing or security controls; and sharing secrets the User has no right to disclose.
Where there is a serious or immediate risk, we may temporarily restrict access, revoke a device/session or disable a share. Unless doing so would endanger an investigation or security, the User will be informed and may request review.
9. Plans, licences, fees and payment
Current Personal, Family, Team, free, trial or other plans, add-ons, seats, quotas, net/gross fees, VAT and billing cycle are shown on the website or individual quotation. Organisation pricing may include a base fee, active/committed seats and add-on licences. Seat increases may be prorated and decreases may take effect at the next renewal, as stated in the quotation.
Payment is due by the method and deadline on the quotation/invoice, including bank transfer where offered. On late payment, we may send reminders, apply lawful consequences and, following appropriate notice, restrict paid features or suspend the subscription. Disputing an invoice does not suspend payment of an undisputed amount.
Future pricing may change. For ongoing subscriptions, materially adverse changes are notified before taking effect with an opportunity to terminate. A period already paid for will not be repriced retroactively.
10. Duration, renewal, cancellation and closure
The contract runs for the fixed or indefinite term stated in the quotation. Renewal, notice and settlement rules for monthly/annual subscriptions are set out in the order. Unless automatic renewal was expressly agreed, access may expire at the end of the paid period.
Cancellation or account closure may be requested at info@szoft-tech.hu. Before closure, the customer must export required data client-side and settle organisation ownership/keys. After expiry/termination, access may be restricted and data deleted under the Privacy Notice, mandatory retention and backup cycle. We cannot provide plaintext on termination without the client-side key.
11. Consumer withdrawal
A consumer contracting at a distance normally has a statutory 14-day withdrawal/termination right. An unequivocal notice may be sent to info@szoft-tech.hu or the postal address, stating the consumer's name, account email, order/contract and decision.
If a consumer expressly requests performance before the 14-day period expires and later terminates, a proportionate amount for service supplied may be payable where the law provides. Rights concerning digital content or fully performed services are lost only where all statutory express-consent and acknowledgement requirements are met. Mandatory consumer rights remain unaffected.
Model withdrawal notice
To: Németh Attila, sole proprietor, 1075 Budapest, Rumbach Sebestyén utca 6., Hungary; info@szoft-tech.hu. I hereby give notice that I withdraw from/terminate my contract for PWS services. Name: [...]. Account email: [...]. Order/contract ID: [...]. Contract date: [...]. Date: [...].
12. Availability, maintenance and changes
We aim for continuous secure operation but, without a separate SLA, do not guarantee uninterrupted or error-free availability. Maintenance, updates, provider/network faults, attacks, force majeure or emergency security action may interrupt service. We seek to give advance notice of significant planned maintenance.
We may modify the service for security, compliance, compatibility or development. Changes to consumer digital services are made only under applicable law, including mandatory information and termination rights for materially adverse changes.
13. Intellectual property and client licence
Rights in PWS software, branding, documentation, website and service elements belong to the Provider or licensors. During active entitlement, the User receives a limited, non-exclusive, non-transferable right to use supported clients as intended. Users retain rights in their submitted/encrypted content and permit only technical operations necessary to provide the service.
Third-party open-source components remain under their own licences. External integrations may require a separate account and agreement with that provider.
14. Conformity, warranty and liability
The service is provided under applicable law, including mandatory consumer rules for conformity of digital services. Defects may be reported to info@szoft-tech.hu with description, time, client version and correlation ID, but without secrets.
We are not responsible for loss demonstrably caused by the User's lost key/password, unauthorised sharing, unsupported/compromised device, failure to install a required update, third-party service or unlawful use. The disclosed recovery limitation inherent in zero knowledge is not a defect where the service operates according to that model.
For business customers only, except for intentional harm, harm to life, body or health, and liability that cannot lawfully be excluded, aggregate liability is limited to the net fees actually paid for the affected service during the 12 months preceding the event. Lost profit and indirect loss are excluded to the extent permitted by law. Mandatory consumer rights are unaffected.
15. Confidentiality and data protection
Each party uses confidential/business information learned during performance only for the contract. Personal data are governed by the Privacy Notice and any data processing agreement. The Organisation Customer is responsible for the lawful handling of members, external recipients and content uploaded to vaults.
16. Complaints and dispute resolution
Contact: info@szoft-tech.hu, +36 20 393 5201, or 1075 Budapest, Rumbach Sebestyén utca 6., Hungary. Written consumer complaints are normally answered in a verifiable written form within 30 days. Rejections are reasoned and identify available redress.
A Hungarian consumer may contact the conciliation body competent for their residence or the Budapest Conciliation Board: 1016 Budapest, Krisztina körút 99.; email: bekelteto.testulet@bkik.hu; website: https://bekeltet.bkik.hu. We cooperate in conciliation proceedings. Consumers may also contact the competent consumer-protection authority or courts.
17. Suspension and immediate termination
For material breach, unlawful use, security danger, payment default or binding authority order, we may suspend or terminate access, normally after notice and a reasonable cure period where circumstances allow. Immediate action is permitted where delay would endanger users, systems or legal compliance. Termination does not affect accrued fees, confidentiality, intellectual property, liability or enforcement provisions.
18. Amendments, notices and final provisions
These Terms may change for legal, security, technical or business reasons. A materially adverse change to an ongoing contract is notified via a durable medium or account with reasonable notice; where required by law, the User may terminate without charge before it takes effect.
Hungarian law governs. Consumers retain mandatory protection under the law of their residence. The parties first seek amicable settlement; otherwise courts with jurisdiction under generally applicable rules may hear the dispute. If the Hungarian and English texts differ, the Hungarian text prevails, without prejudice to mandatory consumer protection.
