Terms of Use

Revision of August 27, 2026.

1. Definitions

The Service (env-master) — the software system available at https://env.aistastudio.ru, including the web interface, the cabinet, the API, the SDK, the CLI and the mobile client. The Service stores secrets and environment variables and provides access to them for people and programs.

The Operator — Общество с ограниченной ответственностью «СТУДИЯ АИСТА», OGRN 1267800056260, INN 7814865711, registered office: 197706, г. Санкт-Петербург, вн.тер.г. город Сестрорецк, ул. Всеволода Боброва, д. 30, литера А, помещ. 1-Н, офис 13.

The User — a person who has registered an account in the Service, or accepted an invitation to an organization.

Account — a user record created with an email address.

Organization — a space within the Service where projects, environments and secrets are created, and which holds its members and machine identities.

Secret (environment variable) — a record stored by the User in the Service: a key name and a value.

Machine identity — a programmatic identity issued by the User to a service or build system for automatic secret retrieval without human involvement.

Plan — the set of Service limits and features described at https://env.aistastudio.ru/en/pricing.

2. Status of these terms

2.1. These terms form a contract of adhesion (Article 428 of the Russian Civil Code). The text is published at https://env.aistastudio.ru/en/legal/terms and applies in the revision stated in the heading.

2.2. Acceptance is by conduct: completing registration, signing in, or otherwise using the Service (Article 438 of the Russian Civil Code). A paper signature is not required.

2.3. Paid capabilities of the Service are provided in the manner set out in section 8.

2.4. The law of the Russian Federation applies to the parties' relationship.

3. Subject of the terms

3.1. The Operator grants the User the right to use the Service to store secrets and environment variables and to provide access to them — to the User and to machine identities configured by the User — within the limits of the chosen plan.

3.2. Secret values are stored encrypted. The design of the encryption, its guarantees and their limits are described in the Service documentation ("Security", https://env.aistastudio.ru/en/docs/security), which forms part of these terms as far as it describes how the Service works.

3.3. The Service is not a zero-knowledge system. During certain operations — for example, when a secret value is revealed to a person in the interface — the value is processed on the Operator's server side. The machine path (via the SDK and a machine identity) works differently: the User's service receives ciphertext and decrypts it locally. By accepting these terms the User accepts this model as described in the documentation.

3.4. The Service keeps an access and change log: who read or changed which secret, when, from which address and with which client type. Secret values are never written to the log — only key names and an impersonal value fingerprint (HMAC).

4. Account and registration

4.1. Registration is open: an account is created with an email address, a password and a display name. The email address is confirmed by following a link that is valid for 24 hours.

4.2. The User must provide a working email address and keep access to it: registration confirmation, organization invitations and Operator communication all arrive at that address.

4.3. The User is responsible for the safety of the password and the machine identities they issued, and for all actions performed under the account.

4.4. The Service has no automatic password recovery. Questions of regaining access to an account are resolved by contacting support at env-master@aistastudio.ru.

4.5. The Operator may block an account upon a breach of these terms or when required by law. The fact and the reason of a block are recorded.

5. Rules of use

5.1. When using the Service, the User must not:

• violate the law of the Russian Federation or the rights of third parties;
• attempt unauthorized access to the Service, to other organizations and their data, or circumvent plan limits and protection mechanisms;
• generate load exceeding ordinary use, including unjustified automation;
• store or transmit through the Service values whose use would be unlawful, or malicious content;
• store personal data of third parties without a lawful basis for processing it;
• impersonate another person or organization, or give access to the account to a person not entitled to it.

5.2. The User decides what values to store in the Service and is responsible for being entitled to dispose of them. The Operator does not review or moderate secret values.

6. Secrets and access to them

6.1. Secret values are content provided by the User; all rights to that content belong to the User.

6.2. The Operator does not view secret values at will. Technical access to values is possible and is used only to operate the Service: handling a User's support request, maintaining security, and complying with the law. Every read or write of a secret — by a person or a program — is recorded in the organization's audit log with the actor, time, address and client type.

6.3. The Service makes encrypted backups; secret values remain encrypted in them.

6.4. The User may at any time export their environments with the CLI and stop using the Service, and the Operator acquires no rights to the secret values by these terms.

7. Machine identities

7.1. The User creates machine identities and defines their scope: a project, an environment and, optionally, a key list.

7.2. Machine credentials are short-lived: the identity secret can be revoked, the access token lives for minutes, the enrollment token for minutes and exactly one use.

7.3. The User is responsible for keeping the machine identity secrets they issue and for revoking them.

8. Plans and paid services

8.1. The Service is provided on the free plan with the limits stated at https://env.aistastudio.ru/en/pricing. Free plan limits are applied automatically.

8.2. Paid plans are connected by individual agreement: the price, the scope of services and the settlement procedure are agreed separately upon the User's request. Any price stated in an invoice or contract is interpreted subject to the following clause: НДС не облагается в связи с применением упрощённой системы налогообложения (п. 2 ст. 346.11 НК РФ).

8.3. The Operator may change plans and plan features. Changes do not apply retroactively to paid periods and individually agreed terms.

8.4. The free plan carries no availability commitment (SLA) and no support response-time guarantee. Support terms on paid plans are agreed individually.

9. Availability

9.1. The Service is provided "as is". The Operator takes reasonable measures to keep it available, including daily encrypted backups, but does not guarantee uninterrupted operation, except where availability commitments are agreed individually.

9.2. The Operator may carry out scheduled maintenance. Information about maintenance affecting availability is published on the Service pages or sent to Users.

9.3. The Operator may change the Service's functionality without degrading individually agreed terms and without taking away the User's ability to export data.

10. Ending use

10.1. The User may stop using the Service at any time.

10.2. Account deletion and deletion of related personal data is performed on request to privacy@aistastudio.ru sent from the account's email address, within no more than 30 calendar days; the procedure is set out in the Privacy Policy (https://env.aistastudio.ru/en/legal/privacy). Before deletion the User is advised to export their environments.

10.3. Upon a breach of these terms the Operator may restrict access until the breach is cured or terminate it. If the Service use ends, the User retains the right to receive their data.

11. Liability

11.1. The Service is provided "as is". The Operator does not warrant that the Service fits any particular purpose of the User and is not liable for lost profit, downtime of the User's services or other indirect losses, except where such exclusions are not permitted by law.

11.2. Nothing in these terms limits the Operator's liability where it cannot be limited by law, including liability towards individual consumers within the limits established by the legislation of the Russian Federation.

11.3. The Operator is not liable for the content of values stored by the User or for the User's decisions about who and which programs receive access to secrets.

12. Personal data

12.1. Personal data of Users is processed as set out in the Privacy Policy (https://env.aistastudio.ru/en/legal/privacy).

12.2. By registering, the User gives the consent to personal data processing published at https://env.aistastudio.ru/en/legal/consent.

13. Changes to these terms

13.1. The Operator may change these terms. A new revision is published at https://env.aistastudio.ru/en/legal/terms with the revision date in the heading.

13.2. Continued use of the Service after publication means acceptance of the new revision. If the User disagrees, they should stop using the Service and request deletion of their data.

14. Dispute resolution

14.1. Before going to court, a party sends a claim to the other party's email address — the one stated in section 15 (for the Operator) or the account's address (for the User). A claim is answered within 30 calendar days of receipt.

14.2. Disputes are considered by the court at the Operator's location unless the law provides otherwise. For disputes involving consumers this rule applies only so far as it does not override their right to choose the court.

15. Operator details

Общество с ограниченной ответственностью «СТУДИЯ АИСТА» OGRN 1267800056260 INN 7814865711 Registered office: 197706, г. Санкт-Петербург, вн.тер.г. город Сестрорецк, ул. Всеволода Боброва, д. 30, литера А, помещ. 1-Н, офис 13 Email for legally significant correspondence: env-master@aistastudio.ru