SuperDRM

Terms of Service

Version 2026-09-21 · The agreement between you and SuperFile Inc. [confirm] (“we”, “us”).

Placeholders. Any value below written as [… confirm] is not yet settled. It comes from a deployment setting (LEGAL_ENTITY, LEGAL_ADDRESS, LEGAL_GOVERNING_LAW, LEGAL_CONTACT) and must be filled in before these terms are relied on.

1. Who you are contracting with

SuperDRM is operated by SuperFile Inc. [confirm], [registered address — confirm]. Notices to us go to [email protected] [confirm]. Notices to you go to the email address on your account.

2. What the service is

SuperDRM issues content keys and answers DRM licence requests: Widevine, FairPlay Streaming, PlayReady and Clear Key, behind one API, with a per-request meter. You bring the content, the packager and the player; we protect the keys and decide — under the policy you set — whether a given request gets a licence.

Two honest limits, in force today:

3. Accepting these terms

You accept these terms when you create an account, when you accept an invitation to a workspace, or when you issue an API key — whichever comes first. Each of those paths shows you this document's version and records your acceptance against your account: the version and the moment. The portal tells you when a new version needs accepting, and the API refuses to issue a key until it has been.

4. Who may use it

You must be at least 16 years old and able to enter a binding contract. SuperDRM is a tool for businesses and developers; it is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you are signing up for a company, you confirm you may bind it.

5. Your account

You must be able to enter a contract, and you are responsible for what happens under your account, your API keys and your licence-token secret. Keep them secret; rotate them in the portal if they leak. Tell us at [email protected] if you believe they have.

One person may hold several workspaces. Workspace owners can invite others and set their role; anyone you invite sees that workspace's keys, usage and settings according to that role.

6. Your content, your keys

Your content is yours. We do not acquire rights in it. We hold content keys, sealed under a key-encryption key in a hardware vault, and the metadata needed to meter and serve licences. You may export your account's data at any time from the portal, and you may delete a content key — which overwrites its key material, permanently. Content packaged with a deleted key cannot be played again, by anyone, including you.

7. Acceptable use

The Acceptable Use Policy is part of these terms. In short: no protecting content you have no right to distribute, no using the service to attack anyone, no circumventing the quotas or the test-environment guard.

8. Fees

SuperDRM takes no payment today. There is no card form, no subscription and no billing integration in the service; the plan you choose sets your quotas, not a charge. The service is free while it is in beta, and we will give you at least 30 days' notice by email before any charge is ever made. Nothing renews automatically, because nothing is being paid.

When charging does begin, this section will say: the price and the billing period, that it renews until you cancel, that you can cancel at any time from the portal in no more steps than it took to subscribe, what happens to the remainder of a paid period, the tax treatment, and how to get a receipt. We will not start charging under the present wording.

“$0 per licence” describes the plans as they stand today: we do not meter you per licence issued, because no vendor meters us. It describes how the product works; it is not a promise that plan pricing never changes.

9. Availability and support

We run the service with care, in two zones, and publish what our own probes measured at /status. That page is informational — it is not a service-level agreement, not a warranty and not credit-bearing. If you need a binding service level, it has to be written into a signed agreement with us.

Support is by email to [email protected] [confirm]. We aim to acknowledge within one business day and to work an outage until it is fixed; those are targets we try to meet, not commitments you can sue on. A signed agreement is where response targets become binding.

10. Suspension and termination

You may stop using the service at any time and delete your account in the portal. We may suspend a workspace that breaches the Acceptable Use Policy, exceeds its quota, or puts the platform or another customer at risk — with notice where we reasonably can, and immediately where we cannot. We may terminate an account for a material breach that is not cured within 14 days of our notice, or immediately for unlawful content or an attack on the platform.

Getting your data out. Before you delete your account, and for 30 days after we terminate one (except where the law or an abuse investigation forbids it), you can export everything we hold for you: your account export as JSON, your content-key metadata and your usage, from the portal, and your content keys through the API. After that window we delete as described in the Privacy Policy. Deleting a content key is irreversible by design — export before you delete.

11. Changes to these terms

These terms carry a version, shown above and recorded against your account when you accept it. If we change them materially we will email the address on your account and show a notice in the portal at least 30 days before the new version takes effect; for a change that is not material (a clarification, a typo, a new contact address) we update the version and the date. Continuing to use the service after a new version takes effect is your acceptance of it. You can always decline by closing your account before then, and we will not charge you for a period you did not use.

12. Warranties and liability

The service is provided as it is, and while it is in beta you should expect the rough edges of a beta. To the extent the law allows, we disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement.

Neither of us is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, even if told they were possible. Our aggregate liability arising out of the service is limited to the greater of the fees you paid us in the twelve months before the claim and US$100 — a number that says plainly what “the fees you paid” amounts to while the service is free.

What these limits never cover, because the law does not allow it or because it would not be right: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; either party's breach of the other's intellectual property; your payment obligations; and anything else that cannot lawfully be limited where you live. Some jurisdictions do not allow some of these exclusions, in which case they do not apply to you.

DRM is not a guarantee. It raises the cost of copying; it does not make copying impossible. We do not warrant that content protected through SuperDRM cannot be captured or redistributed.

13. Our intellectual property, and yours

SuperDRM — the software, the API, the documentation, the console, the player component, the name and the marks — is ours and stays ours. These terms give you a limited, non-exclusive, non-transferable right to use the service and our client SDKs to protect and serve your own content, for as long as this agreement lasts. You may not copy, resell, sublicense, reverse-engineer or create derivative works of the service, except where the law gives you that right despite a contract term, and except as an open-source licence in our notices permits for the component it covers.

Your content, your keys and your data stay yours. You grant us only the licence we need to run the service for you: to store, process, transmit and back up what you put into it, and to show it back to you and the people you authorise. We take no other licence — not to train anything, not to analyse your content, not to show it to anyone else. We do not receive your media at all: SuperDRM holds keys, never frames.

14. Feedback

If you send us an idea, a bug report or a suggestion, we may use it without owing you anything and without an obligation of confidence. You keep every right you had in it; you are simply not charging us for the suggestion. Do not send us anything confidential, or anyone else's trade secret, in a feedback message.

15. Indemnity

You will defend and indemnify us against third-party claims, and the damages and reasonable legal costs finally awarded, arising from: content you protected or distributed through the service that you had no right to distribute; your breach of the Acceptable Use Policy or of the law; your infringement of someone's intellectual property; or your failure to give your own viewers the notice and the lawful basis that the Data Processing Addendum requires of you. We will tell you promptly about the claim, let you control the defence of it (as long as any settlement releases us fully and admits nothing on our behalf), and help you at your expense.

We will defend you on the same terms against a claim that the service itself, used as we tell you to use it, infringes a third party's intellectual property in the United States — except where the claim arises from your content, your own partner credentials, a modification you made, or use combined with something we did not supply. [COUNSEL: confirm the scope of and any cap on this mutual IP indemnity before it is offered to an enterprise customer; the negotiable form is in the enterprise MSA.]

16. Governing law and venue

[governing law and venue — confirm]. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

17. If we disagree

Talk to us first. Before either of us starts anything formal, send a written notice describing the problem and what you want — to [email protected] [confirm] for us, to the address on your account for you. Give it 30 days. Most things end here.

Then arbitration. If it is not resolved, the dispute is settled by binding individual arbitration administered by [ARBITRATION_PROVIDER — confirm] under its commercial rules, before one arbitrator, seated in [seat — confirm, with [governing law and venue — confirm]], in English. Judgment on the award may be entered in any court with jurisdiction.

Small claims stay in court. Either of us may instead bring an individual claim in a small-claims court, if it qualifies there.

Individually, not as a class. Claims are brought individually. Neither of us may bring a class, collective or representative action, or act as a private attorney general, in arbitration. If this paragraph is held unenforceable for a particular claim, that claim — and only that claim — goes to court.

You can opt out of arbitration. Email [email protected] [confirm] with the words “arbitration opt-out”, your account email and the date, within 30 days of first accepting these terms. It costs you nothing and changes nothing else; disputes then go to the courts named above. We will confirm it and record it against your account.

Injunctions. Either of us may ask a court for an injunction to protect intellectual property or to stop an attack on the service, without waiting for arbitration.

[COUNSEL: the arbitration provider, the seat, who bears the fees, and whether an arbitration clause is appropriate at all for a business-to-business service in our target markets. Parts of this section are unenforceable against consumers in some jurisdictions; we do not knowingly serve consumers.]

18. Export control and sanctions

SuperDRM is software with cryptography in it, and it is subject to export-control law. You may not use it, or let anyone use it through you, in breach of United States export or sanctions law or the equivalent law where you are: not if you are on a restricted-party list, not from a comprehensively sanctioned territory, and not for a prohibited end use. You confirm none of those apply to you and will tell us at once if that changes. We may suspend an account to comply with a sanctions obligation, and we will say so where we are allowed to.

19. Beta

Parts of the service are labelled beta, preview or planned. Those parts may change, break or be withdrawn, and they carry no commitment. Where the roadmap or the landing page describes something as planned, it is a plan and not a promise.

20. Customers in regulated industries

There are things we will not accept, and saying so now is fairer than a disclaimer afterwards. Do not put protected health information into SuperDRM: we are not a HIPAA business associate and will not sign a BAA. Do not put payment-card data into it. We make no claim of FedRAMP, CJIS, StateRAMP, PCI DSS or any certification, and you may not represent to your own regulator that we hold one.

21. The rest

Entire agreement. These terms, the Acceptable Use Policy, the Privacy Policy and the Data Processing Addendum — plus any signed order form or agreement between us, which wins where it conflicts — are the whole agreement about the service, and replace anything said before.

Severability. If a court finds one part unenforceable, the rest stays in force and that part is narrowed to what is enforceable.

No waiver. Not enforcing something once does not give it up.

Assignment. You may not assign this agreement without our written consent, except to a successor of your whole business. We may assign it to a successor of ours, on notice to you.

No third-party rights. Nobody outside this agreement gets rights under it.

Force majeure. Neither of us is liable for a failure caused by something genuinely outside our control, as long as we say so and work to fix it.

Independent parties. No partnership, employment or agency is created.

Notices. To us: [email protected] [confirm], and SuperFile Inc. [confirm], [registered address — confirm]. To you: the email address on your account. A notice is effective when sent, if no delivery failure comes back.

API and developer use. If you use the API, the API keys or the client SDKs, the API Terms apply as well. If you run SuperDRM on your own infrastructure, the on-premises agreement in the software's LICENSE file governs that installation.

22. Trademarks

Widevine is a trademark of Google LLC. FairPlay is a trademark of Apple Inc. PlayReady is a trademark of Microsoft Corporation. Naming them describes the technologies SuperDRM integrates with; it implies no endorsement by, or affiliation with, their owners.