Terms of Service
Effective 24 October 2026. Version 1.0. The English version is the binding one.
1. Who we are
HushJot is provided by the company named at the end of these terms (“we”, “us”). Contact: support@hushjot.com.
2. What HushJot is
HushJot is a web application for writing plain text and Markdown notes (the “App”) and an optional paid service that synchronises those notes, in encrypted form, between your devices and lets you publish individual notes by link (“Sync”). The App may be used without an account and without payment. These terms apply to both.
3. Accounts
Sync requires an account, identified by an email address and a password. You are responsible for keeping those credentials safe and for what is done with them. You must be at least 16 years old. One account is for one person; it may be used on any number of that person’s devices.
4. Encryption, your passphrase, and what we cannot do
Notes are encrypted on your device with a key derived from a passphrase you choose, before they are sent to us. We never receive your passphrase, your recovery code or the decryption key, and we cannot reset them, recover them or read your notes. If you lose both your passphrase and your recovery code, the notes stored with us cannot be recovered by anyone, and we have no obligation to attempt it. You accept that this is a property of the service you are buying.
The encryption relies on the code delivered to your browser being the code we published. Our security page describes what we do to protect that and where the guarantee stops; it forms part of these terms.
5. Subscriptions and payment
Sync is sold as a subscription, monthly or yearly, at the prices shown on the pricing page at the time of purchase, exclusive of VAT and sales tax, which Paddle adds at checkout according to your country; the total including tax is shown before you pay. Purchases are made through Paddle.com Market Ltd and its affiliates (“Paddle”), which acts as merchant of record: Paddle is the seller of the subscription to you, collects payment, applies and remits taxes, issues invoices, and processes refunds. Paddle’s buyer terms apply to the purchase itself. Subscriptions renew automatically at the end of each period until cancelled. You may cancel at any time from the account page or the Paddle customer portal; cancellation takes effect at the end of the period already paid for, and Sync continues to work until then. Prices may change with at least 30 days’ notice by email; a change never applies to a period already paid for.
Storage. Sync includes 1 GB of synced storage per account, counted as the encrypted size of your notes and folders. You can add storage in units of 10 GB as an add-on to your subscription, at the price shown on the pricing page; it renews and is billed with the subscription, is charged pro rata for the rest of the current period when added, and can be removed at any time, with the unused part credited against the next payment. Each calendar month an account may also upload up to 500 MB of version history and publish up to 100 links. These limits are enforced by the service. When an account is full, nothing already stored is removed and the App keeps working: changes that would need more room stay on your device until room is freed or added. The number of notes and devices is not limited.
6. Refunds
Our refund policy forms part of these terms. In short: a full refund on request within 14 days of any charge.
7. When Sync is not paid for
If a subscription ends or a payment fails, Sync stops and the App signs the account out. So that a late renewal does not interrupt you, Sync continues for a short grace period after the end of a paid period: 3 days on the monthly plan and 14 days on the yearly plan, or 7 and 21 days while a failed payment is being retried. A subscription you cancelled yourself ends on the date you were given, with no grace period. Notes already on your devices remain there and remain editable. Signing in to the account page to subscribe again remains possible at any time.
Notes stored with us remain stored, encrypted, for at least 90 days after Sync stops. At any time after that we may delete the synced copy: notes, folders, versions, your key record and any links you published. Before we do, we email the account address 30 days and again 7 days in advance. Your sign-in account is kept, and nothing on your own devices is touched. Subscribing again before the deletion resumes Sync and uploads what was written in the meantime; subscribing again after it uploads your notes again from a device that still holds them.
8. Acceptable use
You may not use HushJot to store or publish material that is unlawful for you to hold or share, to infringe others’ rights, to distribute malware, to attack or overload the service, or to reverse the encryption of another user’s data. Because we cannot read note content, we act on published links only on a report and only by taking a link down, and on accounts only where the account is used to attack the service. Automated use through the CLI, the MCP server or the API is welcome, within the limits in section 5 and at a pace a person’s own tools would reasonably need; we may contact you, and if necessary slow or suspend Sync for an account, when automated use is far beyond that and degrades the service for others. We may suspend or terminate an account for a breach of this section.
9. Your data, backups and portability
Without Sync, your notes exist only in your browser’s storage on that device. Browsers can delete that storage: when you clear browsing data or site data, use a private window, run low on space, or, in some browsers, do not open HushJot for a number of days. We do not hold a copy and cannot restore it. You are responsible for keeping your own backups. The App’s Export does this at any time. Sync keeps a further copy with us, but is not a substitute for a backup either: synced notes can be lost or damaged through a software defect, an attack, a mistake, or the failure of the infrastructure they are stored on. We keep backups of the service for our own disaster recovery; they are not a service provided to you, they hold only ciphertext that is useless without your passphrase or recovery code, and we have no obligation to restore an individual account’s data from them.
Your notes are yours. The App exports every note as plain Markdown at any time, without an account. Our privacy policy describes what personal data we hold and how to have it deleted.
10. Changes to the service
We may change or add features. We will not remove the ability to export your notes. If we discontinue Sync, we will give at least 30 days’ notice by email and refund the unused part of the current paid period.
11. Availability and support
We aim for Sync to be available continuously but do not guarantee it. The App keeps a copy of your notes on each device, so a device does not depend on Sync being reachable; that copy is subject to the browser’s storage, as section 9 describes. Support is by email at the address above, in English, on a reasonable-efforts basis.
To the extent permitted by law, the App and Sync are provided “as is” and “as available”, without warranties of any kind, including that they will be uninterrupted or error-free or that data stored with them will be preserved. This does not affect the legal guarantees consumers have in Portugal and the European Union.
12. Liability
To the extent permitted by law, we are not liable for loss of data that results from a lost passphrase or recovery code, from a device or browser deleting its local storage, from not keeping a backup, from a software defect, from an attack on the service by a third party, from the failure of a provider we rely on, or from your use of a modified or third-party client; nor for indirect or consequential loss, including loss of profits, revenue, business, contracts, goodwill or anticipated savings, business interruption, or the cost of substitute services. Our total liability to you in connection with HushJot is limited to the greater of the amount you paid for Sync in the 12 months before the claim and €50. Nothing in these terms limits liability that cannot be limited by law, including liability for death or personal injury caused by our negligence, for fraud, for wilful misconduct or gross negligence, and consumers’ statutory rights in Portugal and the European Union.
13. Termination
You may stop using HushJot at any time and may ask us to delete your account as described on the support page. We may terminate an account for breach of section 8, with notice where practicable.
14. Governing law
These terms are governed by the law of Portugal. If you are a consumer in the European Union, you also have the protection of the mandatory rules of the country you live in, and you may bring a claim there.
15. Changes to these terms
We may update these terms. Material changes will be announced by email to account holders at least 30 days before they take effect. Continued use of Sync after that date is acceptance. The date and version at the top of this page identify the current terms.
16. Not for critical use
HushJot is a notepad. It is not designed, tested or certified for information whose loss, corruption, unavailability or disclosure could lead to death, personal injury, damage to health or property, or significant financial or legal loss, such as medical, emergency, safety or legally required records. Do not use it as the only place you keep such information. To the extent permitted by law, we are not liable for the consequences of relying on HushJot in that way.
17. Security
We protect the service with the measures described on the security page, but no system connected to the internet can be made perfectly secure. To the extent permitted by law, we are not liable for unauthorised access to, or loss of, your data caused by a third party, by malware or a compromise of your devices, browser or email account, or by a weak, reused or disclosed passphrase, password or recovery code, unless it results from our failure to apply those measures. Because notes are encrypted on your device, a breach of our servers exposes ciphertext and the data listed on the security page as readable, not the text of your notes.
18. Events beyond our control
We are not responsible for a failure or delay caused by events beyond our reasonable control, including natural disasters, fire, flood, the loss of a data centre, power or internet failures, cyberattacks, the failure of a provider we rely on (including Google, Paddle, Fly.io, Cloudflare and Postmark), strikes, war, and acts of government.
19. Business users
If you use HushJot for the purposes of a trade, business or profession, the consumer protections referred to in these terms do not apply to you, and to the extent permitted by law: we are not liable to you for any loss of data, or for any indirect, consequential or business loss; our total liability to you is limited to the amount you paid for Sync in the 12 months before the claim; the courts of Lisbon, Portugal, have exclusive jurisdiction; and you will indemnify us against claims by third parties arising from your content or your use of HushJot.
20. Local laws, encryption and sanctions
HushJot encrypts your notes with strong encryption. Some countries restrict, or require a licence for, the import, use or distribution of encryption software, and some allow authorities to require you to disclose a passphrase or decryption key. You are responsible for knowing and following the laws that apply where you live and wherever you use HushJot. If it is not lawful for you to access, download or use HushJot, or encryption software of this kind, do not use it. We make no representation that HushJot is lawful or appropriate in every country. To the extent permitted by law, we are not liable for the consequences of your using HushJot where it is not lawful to do so. We never hold your passphrase or recovery code, so we cannot disclose them to anyone.
You may not use HushJot if you are located in, or ordinarily resident in, a country or territory subject to comprehensive EU, UN, UK or US sanctions, or if you are named on a sanctions list. You may not export, re-export or provide HushJot to anyone in breach of applicable export-control or sanctions laws. We may suspend or terminate an account where we have reason to believe this section is being breached.
21. General
You are responsible for the content you store and publish, and you will compensate us for losses we suffer from claims by others that arise from your breach of section 8. If a court finds part of these terms invalid or unenforceable, that part is to be applied to the greatest extent the law allows and the rest remains in force. Not enforcing a right is not a waiver of it. These terms, with the pages they incorporate, are the whole agreement between us about HushJot. You may not transfer your rights under them; we may transfer ours to a successor to the service, without reducing your protections. Sections 4, 9, 11, 12 and 16 to 21 survive the end of your use of HushJot.
NEBULOSA D’IDEIAS UNIPESSOAL LDA
Registered in Portugal.