Compax — Terms · end-to-end encrypted chat

What you are getting

Compax is an end-to-end encrypted messenger with a wallet in it. The source is public: every screen on the site is in the repository, and so is the server behind it.

The software is provided under the licence in that repository. Those licence terms govern the code; these terms govern your use of the applications we publish and the servers we run.

Nobody here holds your money

The wallet is non-custodial. Your keys are made on your device and stay on it. We cannot move your funds, freeze them, reverse a payment, or recover them for you — not because we will not, but because we do not have what it would take.

Your twenty-four words are the whole of your access. Lose them and the funds are gone; give them to somebody and they have your funds. Nobody from Compax will ever ask you for them, and any message that does is not from us.

Transactions are final

A signed transaction goes to a public blockchain. Once it is broadcast, no one can recall it — not this application, not the network, not us. An address that is wrong but valid keeps what is sent to it.

Network fees are paid to the network, not to us. What a transaction finally costs and whether it is included is decided by the chain, not by this software.

This is not financial advice

Compax does not buy, sell, exchange, lend or hold assets on your behalf, and nothing in the application or on this site is advice about what to do with money. Prices shown are read from public feeds and may be wrong, stale, or missing.

Digital assets can lose their value entirely. Whether holding or moving them is legal where you are is yours to know.

What you are responsible for

Keeping your recovery phrase and your devices. Checking the address and the amount before you sign. Reading what a transaction does before approving it. Deciding whether a bot, a site or a group deserves what it is asking for.

Complying with the law that applies to you, including sanctions and tax. If you cannot lawfully use software like this where you are, do not.

What you may not do with it

Do not use Compax to break the law, to harass or defraud people, or to distribute material that is criminal to distribute. Do not attack the service — no flooding it, no attempts to reach other people’s data, no probing for weaknesses in production without asking first.

We cannot read your messages, so enforcement here is not moderation of content: it is limited to what a server can see and do, which is refusing traffic and removing an account from the servers we run.

Other people’s software

Bots, sites opened in the wallet’s browser, and other providers you federate with are not ours. What they do with what you send them is between you and them, and their terms are theirs.

A bot added to a group reads every message in it from the moment it joins. The application says so when one is added; adding it is your decision.

The servers, and running your own

The servers we run are offered as they are, with no promise of uptime, no support commitment, and no guarantee that a message will be delivered or kept. Log history is bounded and old partitions are dropped.

You do not have to use them. The whole thing is one image and one compose file, and if you run it yourself these terms stop applying to that deployment — you become the operator of it, with whatever that entails where you are.

No warranty, and what we owe you

The software is provided “as is”, without warranty of any kind, to the fullest extent the law where you are allows. That includes fitness for a purpose and freedom from defects.

To the extent the law allows it, nobody behind Compax is liable for lost funds, lost messages, lost profit, or any indirect or consequential loss. Where liability cannot be excluded, it is limited to what you paid us.

Changes, and ending it

These terms may change; the date above says when they last did, and the repository keeps the history of what changed. Continuing to use the applications after a change means accepting it.

You can stop at any time by deleting the application. Your keys and your funds are not ours to keep, so nothing has to be returned to you. We may refuse service on the servers we run to an account that is attacking them.

Law, and getting in touch

The governing law and the venue for disputes are not settled in this document yet, and putting a jurisdiction here that nobody has chosen would be worse than saying so.

Questions about these terms, and anything that looks like a security problem, go to the repository.