Terms of Service

Last updated: September 9, 2026

1. Who we are

SignetKeys is a service operated by PersonixHealth, Inc., a Delaware corporation ("we", "us"). Questions about these terms: support@signetkeys.com.

2. The service

SignetKeys is a subscription service that holds your Apple code-signing identity inside dedicated hardware we operate, signs and notarizes the software artifacts your CI submits under a policy you control, and records a verifiable log of everything signed. Plan features and limits are listed at signetkeys.com/pricing and described further in our Subscription & Billing policy.

3. Payments and merchant of record

Purchases are processed by Paddle, our merchant of record. Paddle is the seller of record for your subscription: it handles payment, applicable tax or VAT, invoices, and refund processing, and your purchase is also subject to Paddle's buyer terms presented at checkout. We never receive or store your payment card details.

4. Your Apple Developer relationship stays yours

Your Developer ID certificates are issued by Apple to your Apple Developer Program account. You keep that relationship — including the ability to revoke your certificates — at all times. We never ask for or hold your Apple account credentials, and nothing in this service can hold your signing identity hostage.

5. Acceptable use

• You may only submit software that you own or have the right to sign and distribute.
• You may not use the service to sign malware, spyware, or software designed to deceive or harm end users, or to violate any law.
• Signing requests are enforced against your configured policy (repository, ref, workflow) and your plan's volume limits.
• We may suspend signing for suspected abuse, security incidents, or where the law requires; we will tell you why unless legally prevented.

6. Key custody

Your private signing key is generated inside a dedicated hardware token allocated to your account, is not exportable, and never exists as a file. When your subscription ends, the token holding your key material is retired and its key material destroyed. Because your certificates are issued by Apple to your account, you can create a replacement signing setup with any provider at any time — there is no lock-in beyond the hardware itself.

7. Service levels and Apple's services

We target signing within two hours of submission; jobs queue rather than fail during interruptions. Apple's notarization service is operated by Apple, and its timelines (notably the longer first-time review Apple applies to new accounts) are outside our control. We pass through Apple's results honestly and do not warrant Apple's services.

8. Your data

How we handle your data is described in our Privacy Policy.

9. Disclaimers and limitation of liability

The service is provided "as is" without warranties of any kind, express or implied. To the maximum extent permitted by law, our total aggregate liability arising out of or relating to the service is limited to the subscription fees you paid in the twelve months before the event giving rise to the claim, and neither party is liable for indirect, incidental, special, or consequential damages. Nothing in these terms limits liability that cannot be limited by law.

10. Suspension and termination

You may cancel at any time as described in Subscription & Billing. If your subscription lapses, signing stops (fail-closed) while your signing history and evidence log remain readable to you. We may terminate for material breach of these terms with notice.

11. Changes

We may update these terms; material changes will be announced to the email on your account before they take effect. Continued use after the effective date is acceptance.

12. Governing law

These terms are governed by the laws of the State of Delaware, USA, excluding its conflict-of-law rules, and disputes belong to the state or federal courts located in Delaware.