Terms of Service

Last updated: September 2026

The service

Atrium is a set of apps: a password vault, notes, calendar, lists, contacts and budgets that you encrypt on your device, and polls, invitations, registries and forms that people without an account can open. It can restrict when vault items and sealed notes can be opened using schedules you define. Calendar event times, and the content of guest-facing apps described in our privacy policy, are stored readable so the service can work; event titles and details are encrypted. We grant you a non-exclusive, non-transferable right to use the service for your own or your organization's purposes.

Your master password & recovery

Your master password never reaches us, and we cannot reset it. At setup you must save a Recovery Kit; it is the only way to regain access if you forget your master password. If you lose both your master password and your Recovery Kit, your data is permanently unrecoverable — this is a deliberate property of the design, not a support limitation we can override. This applies to every plan, including Business: there is no administrator override and no organization-level recovery of a lost master password, except (a) the release of a removed member's content to the team owner described under Termination, and (b) the recovery of an account for a child by the Family owner who set it up, described in our help centre. You are responsible for safeguarding your master password, Recovery Kit, and any devices you stay signed in on.

Scheduled access

Schedules control when the service will participate in decrypting an item. Opening a scheduled item requires being online during its window, and once content is revealed within a window it can be copied or remembered like any other information. Atrium is not a legal escrow, notarization, or dead-man-switch service, and scheduled access should not be your only control for legally significant material.

Your account

You're responsible for the accuracy of your account information, for the members you invite to your organization, and for the roles you assign them. Break-glass approvals are your organization's policy choices — configure them deliberately.

Acceptable use

• Only store and share content you have the legal right to possess and distribute.
• Don't use Atrium to facilitate unlawful activity, or attempt to access other accounts' data or the platform's internal systems.
• Don't probe, disrupt, or overload the service; report suspected vulnerabilities via the contact form.

Polls, invitations, registries, forms and emails to your guests

When you publish a public page or email people who don't have an account, you are the sender and you are responsible for the content and for having permission to contact them. Atrium transmits these messages on your behalf, adds identification and a working unsubscribe link to every message, and honours every unsubscribe. You must not use these features for:

• purchased, rented, scraped or harvested address lists, or unsolicited commercial email;
• phishing or impersonation, including pretending to be a bank, payment service, government or another company;
• collecting passwords, PINs or payment card numbers through forms;
• harassment, hate, or content that is illegal where you or your recipients are.

We may pause sending, take down a page, or suspend these features on an account (without suspending the rest of the account) when we receive reports, see high bounce or complaint rates, or believe a use breaks these rules. Anyone can report a page or message through the "Report abuse" link on it. Guest payments never go through Atrium.

Billing

Plans are billed yearly in advance. Business is billed at a yearly price that includes ten seats; additional seats are charged as a per-seat add-on at the rate shown on your billing page. Enterprise is offered on custom terms and is not self-serve. New accounts start with a free trial and no payment method; nothing is charged automatically at trial end. A trial that ends without a subscription is locked, and the account and its data are permanently deleted 1 day after the trial ends unless you subscribe within that day.

If a renewal payment cannot be collected, you keep full access for 24 hours to update your payment method. After that, or when a cancelled subscription reaches the end of its paid period, the account is suspended: you may only renew, delete the account, or export your data, at most twice during the suspension. A suspended account, and every member account in its team, is permanently deleted 30 days after suspension unless the subscription is renewed. We email the owner at suspension and 24 hours before deletion, and notify the team's members. You may cancel at any time; service continues to the end of the paid period.

Availability & liability

We operate the platform with commercially reasonable care but provide it "as is" without warranty of uninterrupted availability. Because scheduled unlocks require the service to be reachable during a window, an outage may delay access to a scheduled item until the next window. To the maximum extent permitted by law, our aggregate liability is limited to the fees you paid in the twelve months preceding a claim; we are not liable for loss of data that results from losing your master password and Recovery Kit.

Termination

You may close your account at any time. If your account is a member of a Family, Business or Enterprise team, only the team's owner (or someone they allow) can remove it; ask them. When a member is removed, their account is deleted and what they stored in the team passes to the owner, who holds a sealed copy of each member's key for that purpose. When an owner closes an account that has members, the team closes and every member's account is deleted. We may suspend accounts that violate these terms. On account closure, data is handled per the privacy policy.

Changes

We may update these terms; material changes are announced in advance through the dashboard or by email. Continued use after the effective date constitutes acceptance.

Contact

Questions? Contact us.