Terms of Service

These Terms of Service ("Terms") govern your use of Prelay Cloud ("the Service") and the Prelay open-source software ("the Software"). By creating an account, accessing the Service, or downloading and using the Software, you agree to these Terms. If you are using the Service on behalf of a company or other organization, you represent that you have authority to bind it.

These Terms, together with our Privacy Policy, form the entire agreement between you and Prelay regarding the Service.

Prelay is a notification relay. It delivers encrypted push notifications to Android devices over a simple HTTP API. It is offered in two forms:

• Self-hosted software. The server, CLI, and Android app are free and open source. You operate them on infrastructure you control, and we do not have access to that deployment or its data.
• Prelay Cloud. A hosted, multi-tenant version of the same software, billed by subscription. Prelay Cloud accepts only zero-knowledge (sender-encrypted) notifications, so the service cannot read the contents of your notifications.

The Service is offered on a best-effort basis. During early access it may be modified, limited, or temporarily unavailable without notice, and some features may change or be removed.

You must be at least 18 years old, or the age of majority in your jurisdiction, to use the Service. You are responsible for safeguarding your account credentials, session tokens, and API tokens, and for all activity that occurs under your account.

API tokens are shown in full only once at creation and are stored as hashes; we cannot recover or reset a lost token for you.

New accounts receive a limited trial of the Service. After the trial ends, continued use requires a paid subscription. There is no free tier of Prelay Cloud.

Subscriptions renew automatically at the end of each billing period (monthly or annual, as you selected) until you cancel. You can cancel or change plans from the billing portal; changes take effect at the end of the current billing period.

All plans include end-to-end encryption. Security is never a paid add-on.

Fees are shown in the currency displayed at checkout and are exclusive of any taxes you may owe. Applicable taxes (such as VAT or sales tax) will be added at checkout where required, or are your responsibility where not collected by us.

Payment is processed by our payment provider. If a charge fails, we will retry it as permitted by law and your payment provider; after a grace period of failed attempts, access to the Service may be restricted until payment is settled.

We generally do not issue refunds for partial billing periods. Except where required by law, fees are non-refundable once the period has started.

Each plan includes limits on devices, notification volume, and dashboard seats. Limits reset monthly. If you exceed a limit, the Service may block further notifications or device registrations until you upgrade or the period resets. Limits are designed to prevent abuse, not to replace reasonable use.

You agree not to use the Service to:

• send unsolicited or abusive notifications (spam);
• transmit content that is unlawful, harmful, or that you do not have the right to transmit;
• violate any applicable law, or the rights of others, including privacy and data-protection rights;
• interfere with, or attempt to gain unauthorized access to, the Service, other accounts, or the underlying infrastructure;
• circumvent quotas, rate limits, or other protective measures.

Because the Service is zero-knowledge, it cannot review the contents of notifications. You are therefore responsible for ensuring that what you send is lawful and that you have the rights to send it.

Prelay Cloud is designed so that the service cannot decrypt your notifications. Notification contents are encrypted on your device or by your tooling before they reach the service, and the Android app decrypts them locally.

The service stores only the minimum necessary to operate: device public keys, routing metadata, and usage counts. Notification contents are never persisted, no message history is kept, and delivery records expire automatically. The service does not read, store, or profile notification contents, and it does not run behavioral analytics.

Because we cannot read notification contents, we also cannot retrieve, recover, or audit them on your behalf. Please do not rely on the Service as a record of your notifications.

How we handle your personal data is described in our Privacy Policy.

For the self-hosted software, data handling is under your control; see the project documentation for details of its data-minimization behavior.

You retain all rights to the data you send and store through the Service. Prelay claims no ownership of your notifications, devices, or other account data.

You are responsible for your data and for having the right to send it. Where you manage devices or tokens on behalf of others, you are responsible for their authorization.

When you delete data or cancel your account, we delete or anonymize the associated device records, tokens, and metadata, subject to any retention required by law (for example, invoice records for tax purposes).

The Software is open source and may be used, modified, and distributed under the terms of its applicable license.

The Service, its branding, and Prelay Cloud itself are provided to you under these Terms; except for the rights granted here, you obtain no ownership or license to Prelay's trademarks, design, or the non-open-source portions of the service.

The Service relies on third-party providers for payment processing and push delivery, including Stripe and Google's Firebase Cloud Messaging. Push providers receive only encrypted notification payloads and never plaintext contents. Your use of these providers is subject to their own terms.

If you install the Android app from an app store (such as Google Play), the terms and policies of that store also apply to your use of the app.

The Service is provided "as is" and "as available", without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or that notifications will always be delivered.

Delivery depends on third-party push infrastructure over which we have no control. The Service does not guarantee a service-level agreement, message delivery rates, or backups of your account data.

To the maximum extent permitted by law, Prelay shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, data, or goodwill, arising out of or related to your use of the Service. In no event will our total liability exceed the amounts you paid to us in the twelve (12) months preceding the claim.

You may stop using the Service and cancel your subscription at any time. We may suspend or terminate your account if you violate these Terms, if your payment fails, or if required by law. Upon termination you lose access to your account; your devices and tokens will cease to receive notifications. Where we terminate for reasons other than your breach, we will refund any prepaid but unused subscription fees.

We take reasonable technical and organizational measures to protect the Service, including end-to-end encryption, hashing of credentials, and data minimization.

If you discover a security vulnerability in the Software or the Service, please report it responsibly to [email protected] rather than disclosing it publicly. Do not test vulnerabilities against live production infrastructure without prior authorization.

We may update these Terms from time to time. When we make material changes, we will update the "Last updated" date above and, where practicable, notify you through the Service. Continued use of the Service after changes take effect constitutes acceptance.

These Terms are governed by the laws of the jurisdiction in which the operator of the Service is established, without regard to its conflict-of-law provisions. Any disputes will be resolved in the competent courts of that jurisdiction.

Severability. If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions continue in full force and effect.

No waiver. Our failure to enforce any provision is not a waiver of our right to enforce it later.

Assignment. We may assign or transfer these Terms, in whole or in part, in connection with a merger, acquisition, or reorganization of the Service. You may not assign these Terms without our consent.

Force majeure. We are not liable for any delay or failure to perform resulting from events beyond our reasonable control, including outages of third-party infrastructure.

Questions about these Terms can be sent to [email protected]. Privacy questions are handled separately — see the Privacy Policy.