Terms of Service

These terms govern your use of Firedrill (the "Service"), operated by Firedrill Software ("we", "us"). By creating an account or using the Service you agree to these terms. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization.

Firedrill takes scheduled logical backups of PostgreSQL databases you connect, encrypts and stores them off-site, restore-tests ("drills") them on ephemeral infrastructure per your plan, and reports the results. The Service requires only read-only database access and will refuse credentials that can write.

You agree to:

• only connect databases you own or are authorized to back up;
• provide a read-only role as instructed and keep its credential current;
• keep your account credentials and API keys confidential;
• not use the Service to store or process data unlawfully;
• not attempt to disrupt the Service, probe other customers' data, or circumvent plan limits.

A passed drill means the specific backup restored on our test infrastructure and passed the recorded checks at that time. It is strong evidence — it is not an unconditional guarantee of recoverability in every environment. You remain responsible for your overall disaster-recovery posture, including maintaining any additional backup copies your risk profile requires.

Backups are retained per your plan's retention policy and pruned automatically. Audit records of backups and drills are retained after pruning. If you cancel, backup objects are deleted 30 days after subscription end; audit records may be retained longer.

Paid plans bill monthly through Stripe. Plan limits (projects, schedule frequency, retention, drill policy) are enforced automatically; downgrades pause projects that exceed the new plan's limits. You can cancel any time via the billing portal — service continues to the end of the paid period. Fees are non-refundable except where required by law.

Your database contents belong to you. We access them only to provide the Service: taking backups, running drills, and producing reports. Backups are encrypted before storage with per-project keys. Restored drill copies are destroyed after each drill. See the Privacy Policy for the full picture, including subprocessors.

We aim for high availability but the Service is provided "as is" without warranty of uninterrupted operation. We monitor our own pipeline with independent dead-man switches and alert on silent failure. We may modify features with reasonable notice for material changes; we will not materially reduce what your paid plan includes mid-billing-period.

To the maximum extent permitted by law: our total liability for any claims arising from the Service is limited to the amounts you paid us in the twelve months before the claim; we are not liable for indirect, incidental, or consequential damages, including data loss where the Service performed as described (e.g., a failure correctly reported by a failed drill). Nothing in these terms limits liability that cannot be limited by law.

You may stop using the Service at any time. We may suspend or terminate accounts that violate these terms, with notice where practicable. On termination we delete backup objects on the schedule in section 4.

We may update these terms; material changes will be announced by email to account holders with at least 14 days' notice. Questions: info@runfiredrill.com.