TERMS OF SERVICE
These terms apply to the fa.to Android app, website and optional managed storage subscriptions.
Effective 1 September 2026
fa.to provides client-side encrypted file-management software. You may connect your own compatible SFTP storage without a fa.to account, or purchase a managed storage subscription. The current features, compatibility, plan allowance, price, billing interval and available location are shown before purchase.
You must provide accurate account information, protect your sign-in details, and promptly report suspected unauthorised access. You are responsible for securely keeping your vault passphrase and recovery file. fa.to cannot decrypt a vault or reset its encryption key for you.
New managed storage subscriptions include the three-day trial shown at checkout. Unless you cancel before the trial ends, the selected plan is then billed in advance on a recurring monthly basis through Stripe. The checkout page shows the price and any applicable taxes before you confirm. By ordering, you authorise recurring charges until cancellation. You can manage or cancel billing from your dashboard. The effective cancellation date and any amount due are shown in the Stripe billing portal. Statutory cancellation and refund rights are not limited by these terms; contact hello@fa.to if you believe a refund is due.
You may upgrade to an available larger plan. We do not currently offer downgrades. Storage is subject to the allowance shown for your plan and to reasonable technical limits needed to protect reliability. We may stop new orders in a location before physical capacity is exhausted.
When a managed subscription ends or remains unpaid, access may be suspended. The dashboard will show the planned deletion state where available. Unless we tell you otherwise, encrypted vault data may be permanently deleted 30 days after cancellation. Export anything you need before that deadline. An administrator may delete a test, fraudulent, abusive or voluntarily surrendered vault sooner where appropriate and lawful.
You must not use fa.to to break the law, infringe another person's rights, distribute malware, attack or probe systems without permission, evade storage limits, interfere with other customers, or store content you are not legally entitled to possess. Encryption does not remove your responsibility to comply with applicable law. We may suspend or terminate service where reasonably necessary to prevent harm, respond to valid legal requirements, or enforce these terms.
When you connect your own server, you are responsible for that server, its availability, backups, credentials, host-key verification, provider terms, charges and capacity. fa.to is not responsible for loss or interruption caused by your chosen provider or server configuration.
We aim to keep the service reliable but do not promise uninterrupted or error-free operation. Maintenance, network failures, third-party outages and security incidents may affect availability. We may change or discontinue features, but will give reasonable notice where a change materially affects a paid service.
Client-side encryption protects confidentiality but does not replace a backup. Keep another copy of important files and your recovery material. Nothing in these terms excludes liability that cannot legally be excluded. Otherwise, to the extent permitted by law, fa.to is not liable for indirect or unforeseeable loss, lost profits, or loss caused by credentials, keys, devices or third-party storage outside our control.
Our Privacy Notice explains how account and service data is handled. Your mandatory consumer rights remain unaffected. If a term is found unenforceable, the remaining terms continue to apply.
Please email hello@fa.to first so we can try to resolve a concern. The laws and courts that apply depend on your location and any mandatory consumer protections available there.