Terms of Service
These terms are an agreement between you and Brikbox Pty Ltd (“Brikbox”, “we”, “us”), which provides EverTLS at evertls.com and app.evertls.com (the “Service”). If you use the Service for an organisation, you accept these terms for it and confirm you’re authorised to do so. If you don’t agree, don’t use the Service.
1. The Service
EverTLS requests TLS certificates for your domains from certificate authorities (CAs) such as Let’s Encrypt, renews them, delivers them to you or installs them through the EverTLS agent, checks that they are served, and alerts you. Features may change as the product develops; we’ll tell you in advance about changes that materially reduce what you rely on.
2. Your account
- Give accurate information, keep your password and two-factor device safe, and tell us at privacy@evertls.com if you suspect someone else has access.
- You’re responsible for what happens under your account, your API tokens and your agents.
- Organisation owners and admins control who has access to their organisation.
3. Certificates and your domains
- Only request certificates for domains you control or are authorised to manage. CAs verify control; requesting certificates for others’ domains is prohibited.
- Certificates are issued by the CA, not by Brikbox. By requesting a certificate from Let’s Encrypt you also accept the Let’s Encrypt Subscriber Agreement; other CAs have their own terms. EverTLS’s ACME account for your organisation accepts these on your behalf when you request a certificate.
- Publicly trusted certificates are recorded in public Certificate Transparency logs, which include the domain names on them.
- CAs set rate limits and may refuse or revoke certificates. We can’t guarantee issuance or renewal by a CA.
4. Keys, credentials and the agent
- Private keys that EverTLS generates, DNS provider credentials and alert settings are encrypted at rest. Keys generated by the agent, CSR-based certificates and DNS keys kept on the agent never reach EverTLS.
- The agent runs on your servers with the permissions you give it, and changes certificate files and web server bindings there. You’re responsible for your servers, for backups of them, and for testing in your environment. The agent only carries out the specific tasks described in our documentation; it never runs commands sent by EverTLS.
- Use the narrowest DNS provider permissions that work; our setup guides show how.
5. Acceptable use
Don’t: misuse the Service to obtain certificates fraudulently or for phishing or impersonation; probe, attack or overload the Service or other systems through it; try to access other organisations’ data; get around limits (including by creating many accounts or organisations); resell the Service without our agreement; or use it unlawfully. We may suspend access that puts the Service, other customers or the CAs at risk, and will tell you why where we reasonably can.
6. Fees
EverTLS Cloud is currently free to use within the limits shown in the product. If we introduce paid plans, we’ll give at least 30 days’ notice before any charge applies to you, and you can stop using the Service before then.
7. Availability and support
We work to keep the Service available and renewals running well ahead of expiry, but we don’t promise uninterrupted service. Certificates already issued and installed keep working whether or not EverTLS is reachable. Support is by email at hello@evertls.com.
8. Your data
You own the data you put into EverTLS. We use it only to provide and improve the Service, as described in our Privacy Policy. You can delete certificates, agents and credentials at any time, and ask us to delete your account and organisation.
9. Liability
Nothing in these terms excludes rights you have under the Australian Consumer Law or other laws that can’t be excluded. Subject to that: the Service is provided “as is”; we aren’t liable for indirect or consequential loss, or for loss caused by CAs, DNS providers, your systems or your configuration; and our total liability for any claim is limited to the greater of the fees you paid us in the 12 months before the claim and AUD 100. Where the Australian Consumer Law allows, our liability for failing to meet a consumer guarantee is limited to supplying the services again or paying for them to be supplied again.
10. Ending the agreement
You can stop using EverTLS and delete your account at any time. We may end or suspend your access for serious or repeated breaches of these terms, or with 30 days’ notice for any other reason. Certificates that have already been issued stay valid until they expire.
11. Changes to these terms
We may update these terms. We’ll post the new version here with a new effective date and, for material changes, notify account owners by email at least 14 days in advance. Continuing to use the Service after that means you accept the update.
12. Governing law
These terms are governed by the laws of New South Wales, Australia, and the courts of New South Wales have non-exclusive jurisdiction.
Contact
Brikbox Pty Ltd · privacy@evertls.com