Last updated 8 September 2026. Plain English, and short on purpose. The privacy policy and the refund policy are part of these terms.
A draft, not settled legal text. This page was written by the people who build DuoDesk so that there is something honest and specific for a lawyer to correct, rather than a blank page or somebody else's boilerplate. It has not been reviewed by one. Read it as a description of how we intend to behave; the reviewed version will replace it before it is relied on.
DuoDesk is software you install on your own computers, and a service that introduces two of them to each other so they can talk directly. We run the introduction — a machine registers a sixteen-digit ID and a public key, we pass along the messages that set a connection up — the two machines' addresses and, when a password is used, the one-time proof of it — and we forward the session's encrypted packets when two machines cannot reach each other any other way. We are not a party to what you do in a session, and we cannot see it: it is encrypted between the two machines and our servers never hold the key.
The app works without an account. An account is an email address, a nickname and a password, and it exists so that a paid plan follows you onto every computer you sign into. We send a six-digit code to that address when you make the account and when you sign in, so the address has to be one you can actually read. You are responsible for keeping that mailbox, that password, your unattended password and your recovery codes to yourself, and for who you let into a machine of yours: pressing Accept, or telling somebody your unattended password, is you letting them in.
Do not use DuoDesk to reach a computer you are not entitled to reach. Do not use it to defraud anybody — remote-access tools are the standard instrument of the "your computer has a virus" scam, and an account used that way is closed without notice and without a refund. Do not attempt to break, overload or reverse the service itself, and do not resell access to it as your own product without asking us first.
We may suspend an ID or an account that is doing one of those things, or that is the subject of repeated abuse reports from the machines it dials. Where it is not obviously fraud, we will say why.
A paid plan is a subscription, billed monthly or yearly in advance through Stripe, and it renews by itself until it is cancelled. The price you agreed to is the price you keep for as long as that subscription runs: if we change what a plan costs, the change reaches you at a renewal and never inside a period you have already paid for. Prices are shown inclusive or exclusive of tax as the checkout page states, and any tax is added there.
Cancel at any time, in the app or through Stripe's billing portal. The plan then runs to the end of the period you have paid for and stops; a cancellation does not pro-rate a part-used period, because you keep the plan for the rest of it. Deleting your account is different: it ends the plan there and then and refunds the unused part of the period to your card, worked out to the day — see the delete-account page. Refunds are covered by the refund policy.
For the first fourteen days after your first payment there is a Withdraw from contract button on the Billing page — in the DuoDesk app, on your phone, and at your billing page in a browser. It cancels the subscription at once and refunds the whole first payment, with no reason asked for, and emails you an acknowledgement. It is the withdrawal function EU Directive 2023/2673 (art. 11a of the Consumer Rights Directive) requires, and it is at least as easy to use as buying was. The refund policy says the rest.
If a renewal fails — an expired card, usually — we do not switch anything off that day: Stripe retries for about a fortnight, and you keep what you paid for until the period you paid for ends.
A plan that lapses puts the app back on Free. It does not lock your machines, take your data or stop you connecting; the features listed as paid stop being available.
There is no uptime guarantee. This is a small product run by a small company, and the honest statement is that we try hard and will tell you when something is broken. DuoDesk is provided as it is, without a warranty that it fits any particular purpose. Nothing here excludes liability for death, personal injury, fraud, or anything else that cannot lawfully be excluded.
Where liability can be limited, it is limited to what you have paid us in the twelve months before whatever went wrong — and to nothing, if you have paid us nothing. We are not liable for what somebody does inside a session, including a session you authorised.
You may stop using DuoDesk whenever you like: uninstall it, and the keypair goes with it. To take the rest of what we hold, delete your account — it is self-service, immediate and irreversible, from the app, your phone, or the browser; the delete-account page says what goes, what stays and why, and the privacy policy the same. We may end the agreement if you break these terms, and will refund an unused period unless the reason was fraud or abuse.
We may change these terms. A change that matters to you — price, what a plan includes, how we handle your data — is announced in the app before it takes effect, and continuing to use DuoDesk after that is accepting it. This page always says when it was last updated.
DuoDesk is made by Torcip SRL, registered in Romania. These terms are governed by Romanian law and the courts of Romania, which does not take away any right you have as a consumer in the country you live in — including, in the EU, the right to bring a claim where you live.
Questions about these terms, or about a payment: billing@duodesk.io.