Terms of Service
Who we are
The cibher.eu website and the CIBHER software are provided by CBPROJEKT sp. z o.o., a limited liability company registered in Poland under KRS number 0001221768, with its registered office at Wschodnia 6/15, 20-015 Lublin, Poland. In these terms we call ourselves “we”, “us” or “CBPROJEKT”, and we call you “you”.
Full registration details are set out in our Legal Notice.
What these terms cover
These Terms of Service govern your use of the cibher.eu website and your purchase of a CIBHER subscription. They work together with three other documents, each of which forms part of our agreement with you:
- the License Agreement, which governs your use of the CIBHER software itself and contains several disclosures you should read before you buy;
- the Refund Policy; and
- the Privacy Policy, which explains what personal data we process.
If these Terms conflict with the License Agreement on a question about the software itself, the License Agreement prevails.
What CIBHER is
CIBHER is a cryptographic engine for macOS and Windows. It encrypts documents locally, verifies that an attachment matches its intended recipient before it is sent, and keeps a local audit log of what it did.
We describe what CIBHER does carefully and we ask you to read those descriptions the same way. CIBHER applies post-quantum algorithms to document and identity encryption. It does not make your whole system, your network, or your email provider quantum-resistant, and transport to your mail server uses conventional TLS. CIBHER is not a data loss prevention product: the recipient-verification gate is designed to prevent accidents, not to stop a determined insider. CIBHER holds no accreditation under Common Criteria, FIPS 140 or any national classification scheme, and nothing on this website should be read as claiming one.
How a purchase works
Subscriptions are sold through Paddle.com Market Ltd, which acts as our merchant of record. This means that when you buy a subscription you enter into the purchase transaction with Paddle, not with us. Paddle collects payment, calculates and remits the applicable taxes, and issues your invoice. Paddle’s own buyer terms apply to that transaction alongside these Terms.
We remain the licensor of the software and the party responsible for delivering and supporting it, and we are the data controller for the personal data described in our Privacy Policy.
Delivery and the activation wait
Please read this before you buy. Licenses are currently issued by hand, so a license does not arrive instantly: issuance follows a review, and we do not put a time bound on it. Until your License Key arrives you cannot use the paid encryption quota you have bought — which is why the refund window runs from issuance or purchase, whichever ends later (see the Refund Policy).
Your license is delivered by email as a License Key — a short code you type into the app. There is no file to download or import. Business days are Monday to Friday, excluding Polish public holidays.
Subscription term, renewal and lapse
Subscriptions are sold on an annual basis. We do not offer a monthly plan.
Your license file carries an expiry date set to the end of your paid period plus a 14-day grace window. While your machine is online, the license refreshes itself silently and the expiry date moves forward; this refresh is never required for the software to keep working within the period you have already paid for.
Cancelling means not renewing. Your license runs to the end of the paid period plus the grace window and then lapses. We do not switch off a license you have paid for before its own expiry date, with the single exception described in the Refund Policy for refunded or charged-back licenses.
When a subscription lapses, the machine returns to the free tier. Sending addresses above the free allowance are disabled, never deleted, and return exactly as you configured them if you renew.
Prices, taxes and invoices
Prices are shown on the shop page in your local currency where Paddle can determine it. Applicable VAT or sales tax is calculated by Paddle at checkout according to your billing location and is shown before you pay. Paddle issues the invoice; requests for invoice corrections, VAT number changes and receipts go to Paddle.
We may change our prices at any time. A price change never affects a period you have already paid for; it takes effect at your next renewal, and you will be told before that renewal happens.
Enterprise, educational and medical tiers
The Enterprise, Educational/administrative and Medical tiers are priced for a specific class of purchaser, and we verify that you belong to that class before we issue the license. We ask for evidence from a source you do not control — a public register entry, or a domain the institution demonstrably controls. A self-declaration is not sufficient.
Because Paddle takes payment before we carry out that review, it is possible to pay for a tier we then decline to issue. If we refuse your eligibility claim, you receive a full refund, whenever that is resolved, and the 14-day limit in the Refund Policy does not apply to that case.
These tiers carry no additional technical capability, certification or assurance level. They are a pricing category, not a security category.
Your right of withdrawal, if you are a consumer
If you buy as a consumer — that is, for purposes outside your trade, business, craft or profession — EU and Polish law gives you the right to withdraw from a distance contract within 14 days without giving a reason.
Our Refund Policy offers you a full refund, without cause, within 14 days of the day your license is issued or 14 days of purchase — whichever ends later. We offer that window to every purchaser, consumer or not, and we do not ask you to waive anything to get it. Nothing in these Terms removes a statutory right you have as a consumer.
Acceptable use of this website
You may read this website, and contact us through it, for any lawful purpose. You may not:
- attempt to gain unauthorised access to any part of the site or any connected system;
- use the contact form to send unsolicited commercial messages;
- interfere with the site’s operation or place an unreasonable load on it; or
- copy substantial parts of the site’s content for republication without our permission.
We welcome automated access by search engines and by AI agents acting on behalf of a user; see robots.txt and llms.txt.
Reporting a security problem
If you believe you have found a security vulnerability in CIBHER or in this website, please write to security@cibher.eu. We will not pursue anyone who reports a genuine issue to us in good faith and gives us a reasonable opportunity to fix it before disclosing it.
Intellectual property
CIBHER, the CIBHER name and logo, this website and its content are owned by CBPROJEKT sp. z o.o. or used under licence. Buying a subscription gives you the licence described in the License Agreement and no other rights.
Third-party components distributed with CIBHER or with this website remain subject to their own licences.
Warranties and what we cannot do
We provide the website and the software with reasonable skill and care, and we will supply software that materially matches the description we publish. Beyond that, and to the extent the law allows, we give no other warranty, express or implied.
There is one limitation you must understand before you rely on CIBHER. We hold no copy of your master password, no copy of your keys, and no recovery secret of any kind. If you lose your master password, your data is permanently unreadable — by anyone, including us. We cannot recover it, reset it, or work around it, and no support request can change that. This is a deliberate design property, not a gap in our service.
Nothing here limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else that cannot lawfully be limited. If you are a consumer, your statutory rights in respect of goods and digital content are unaffected.
Limitation of liability
Subject to the paragraph above, and to the extent permitted by law:
- we are not liable for loss of profit, loss of business, loss of goodwill, or for any indirect or consequential loss;
- we are not liable for loss of, or inability to read, data resulting from a lost master password, a lost or destroyed device, or a lost deactivation code;
- our total liability arising out of or in connection with our agreement with you, in any twelve-month period, is limited to the fees you paid us for the subscription in that period.
If you are a consumer, this clause applies only so far as Polish and EU consumer law allows, and your mandatory statutory remedies are not affected.
Changes to these terms
We may change these Terms. If we do, we will publish the new version here with a new date and version number. For a change that materially affects a subscription you already hold, we will tell you by email before it takes effect, and the change will apply to you from your next renewal rather than immediately. If you do not accept it, you may decline to renew.
Governing law and where disputes are heard
These Terms are governed by Polish law. The courts of Lublin, Poland have jurisdiction over any dispute arising out of them.
If you are a consumer, that does not take anything away from you. You keep the protection of the mandatory rules of law of the country where you habitually reside, and you may bring proceedings in the courts of that country. We may bring proceedings against a consumer only in the courts of the country where the consumer resides.
Complaints and dispute resolution
Please write to support@cibher.eu first — most problems are quicker to solve that way. We aim to respond to any complaint within five business days.
The European Commission’s online dispute resolution platform ceased operating on 20 July 2025, and Regulation (EU) 524/2013 was repealed by Regulation (EU) 2024/3228. There is no platform to link to.
We do not participate in proceedings before a consumer dispute resolution body, and we are not obliged to.
A consumer may still use the out-of-court routes available under Polish law. The Trade Inspection (Inspekcja Handlowa) operates mediation and a consumer arbitration court; the authorised entities are listed by UOKiK at polubowne.uokik.gov.pl; and the district or municipal consumer ombudsman (rzecznik konsumentów) advises consumers free of charge. A consumer resident in another EU state may ask the European Consumer Centres Network at eccnet.eu for assistance — the ECC advises and assists, it does not decide disputes.
Because Paddle is the merchant of record, complaints purely about payment, invoicing or tax are usually best addressed to Paddle in the first instance.
Contact
- Support and general enquiries
- support@cibher.eu
- Privacy and data protection
- privacy@cibher.eu
- Security reports
- security@cibher.eu
- Sales and volume licensing
- sales@cibher.eu
- Postal address
- CBPROJEKT sp. z o.o., Wschodnia 6/15, 20-015 Lublin, Poland