Start 7-day free trial

Terms of Service

Effective October 7, 2026

These terms govern your use of Squawk Secret, a service provided by Inflight Technology LLC ("we", "us"). By creating an account or using the service, you agree to them. If you use Squawk Secret on behalf of an organization, you agree on its behalf and confirm you have authority to do so.

Eligibility

Squawk Secret is available only to individuals and businesses located in the United States. To create an account you must be at least 18 years old, have a US mailing address and a US mobile number, and be able to form a binding contract. Accounts require a working email address on a domain you or your organization controls, or a regular personal email service; Microsoft 365 default addresses (such as those ending in onmicrosoft.com) and temporary or disposable email services are not accepted. We may decline or close accounts that do not meet these requirements. We make no representation that the service is appropriate or available for use outside the United States.

The service

Squawk Secret lets you send text and files as one-time links that expire and are erased (each one a "squawk"), and collect information from others through request links. People who open your links do not need an account. Depending on your plan, the service also includes features such as secure drop pages, encrypted chats, intake forms, short links and QR codes with click counts, encrypted file storage, a password keeper and its browser extension, add-ins for Microsoft Outlook and Microsoft Teams, and the security and verification features described below. Features vary by plan, as described on our pricing page.

Usage limits

To protect the service and everyone's email delivery, Squawk Secret limits how much it sends on your behalf. Links that Squawk Secret emails for you, whether from the app or the API, are limited to 300 per account in any 24-hour period, counted across everyone on a Family or Business account. We may also pause emailed links temporarily when overall volume is unusually high. Other limits apply to free trials, file sizes, the number of Squawk Drops an account can have and how much each accepts in a submission and in a day, how much each person can keep in Squawk Vault, how many entries and shared folders Squawk Keeper holds, how long squawks and requests last, and how often the service and API can be used; current limits are described on our pricing page. We may change these limits to keep the service reliable and secure. These limits do not restrict how many squawks you create or links you share yourself.

Your account

You are responsible for keeping your password safe and for activity under your account. Business plan administrators are responsible for the users they add and remove. Tell us promptly at support@squawksecret.com if you believe your account has been compromised.

Subscriptions and billing

Paid plans are billed in advance on a recurring basis through our payment processor, Stripe, and renew automatically until canceled. Business plans are billed per seat, and inviting someone to your team, including from a Squawk Drop, uses a seat. Optional add-ons, such as a higher Squawk Drop upload limit, are billed as their own recurring subscription to the same payment method, in addition to your plan, and renew on their own date until removed; removing an add-on takes effect at the end of the period already paid for, and an add-on ends when the plan it belongs to ends. If your plan includes a free trial, you will be charged when the trial ends unless you cancel before then. You can cancel anytime from the billing portal; cancellation takes effect at the end of the current billing period. Payments are non-refundable except where required by law or at our discretion. We may change prices with at least 30 days' notice; changes apply at your next renewal.

Acceptable use

You may not use Squawk Secret to send or collect malware, phishing content, spam, material that infringes others' rights, or anything unlawful, or to harass, defraud, or deceive anyone. You may not attempt to break, overload, or probe the service's security without our written permission. We may destroy links, suspend accounts, or terminate service for violations, and we may do so without notice where needed to protect others.

Your content

You own what you send. You give us only the limited permission needed to store, encrypt, deliver, and erase it as the service is designed to. Squawks are erased when their view limit is reached or they expire, and erased content cannot be recovered by you or by us. Some features are end-to-end encrypted with keys that only you hold, such as a Squawk Drop's key (kept in your team's browsers and in its recovery link), the key for a request your systems create through the API, your Squawk Vault, and your Squawk Keeper, each of which opens only with its own passphrase or recovery key. If your organization turns on an organization recovery key for Squawk Keeper, whoever holds it can open your organization's shared folders, and keeping it safe is your responsibility; it never covers personal entries. Squawk Vault is storage for your convenience, not a backup service: keep your own copies of anything you cannot afford to lose. Vault files are erased when you delete them, 7 days after you leave your organization, and when your account is deleted. You are responsible for keeping those keys and recovery links safe and for deciding who on your team can open each Squawk Drop. We never have those keys, so if every copy is lost, the content they protect cannot be read by anyone, including us.

Integrations

Business accounts can connect Squawk Secret to other systems with API keys, webhooks (including Microsoft Teams channels), a security event feed, the Outlook add-in, and the Microsoft Teams app. You choose where that information goes, and you are responsible for those destinations: keeping API keys and collector tokens secure (an API key acts for your whole organization, including every Squawk Drop), keeping secure any decryption keys or recovery links you place on your own systems, having the right to send the information there (including any notice or consent your policies or the law require for the people whose activity is recorded), and how those services store and use it. We send to the addresses you provide and retry deliveries that fail, but we can't guarantee delivery to systems we don't operate; the events API keeps security events for the period stated in our Privacy Policy, so you can fill any gap. Services you connect are governed by their own terms, and we are not responsible for them.

If your organization adds our Microsoft Teams app to channels or chats with Squawk Guard, Microsoft Teams sends the messages in those channels and chats to us to be checked, as described in our Privacy Policy. You confirm that your organization has the authority to allow this for those channels and chats, and that it will tell its people as its policies or the law require.

Custom domains

Business accounts can serve the pages their clients see on a domain they control. You must own or control that domain and keep its DNS records in place; if they change, new links go back to our address. We obtain HTTPS certificates for your domain automatically from a public certificate authority (Let's Encrypt), which records the domain name in public certificate logs. You are responsible for your domain and its registration, and we may stop serving a domain that is used for abuse or no longer points to us.

Security and verification features

These features help reduce risk. They are aids to your own judgment and processes, not guarantees:

  • Squawk Guard looks for common kinds of sensitive information, such as passwords, card numbers, and Social Security numbers, in email you send from Outlook and in Microsoft Teams messages. It can miss information and can flag things that aren't sensitive. You remain responsible for what you send.
  • Squawk Back sends a one-time code, and in some cases a message naming your organization, to an email address or mobile number you provide. Use contact information from your own records, not information given by the person you're checking. You confirm that you have the right to contact that person at that address or number for this purpose. A successful check shows that someone could read the code sent there; it is not proof of anyone's identity.
  • Two-person protection requires a teammate's approval, or two people, before a squawk can be opened. You are responsible for choosing the right approvers and people, and for their decisions.
  • Certificates of Delivery state the facts recorded in our systems at the time they are issued, and are signed so that changes can be detected. Confirmation of an email address with a one-time code shows that someone had access to that email account; it does not establish their identity. Anyone you give a certificate's ID to can view the facts it certifies. Whether a certificate is sufficient for any legal or other purpose is for you and your advisers to decide.
  • Compliance evidence packs describe how Squawk Secret supports certain legal and industry requirements and summarize your account's activity. They are not legal advice and do not mean that you comply with any law or standard, which depends on your entire program.

AI assistant

Where it's available and turned on, Squawk Secret's AI assistant answers questions about using the service and looks up activity in your own account. Its answers are generated by AI and can be incomplete or wrong, so check anything important, and don't rely on it for legal, financial, or compliance advice. Don't share passwords or other secrets with it. Account owners can turn it off for their account.

Health information (HIPAA)

Squawk Secret is not offered for protected health information, and we do not sign Business Associate Agreements. You agree not to send, request, or store protected health information through the service.

Squawk Links

Squawk Links lets a Business account make short links and QR codes that send people to a web address you choose, and shows you how often each was used. You are responsible for where your links go. Do not use them to disguise where a link leads, to send people to anything deceptive, harmful, or unlawful, or to collect sign-in details. If the people who follow your links are owed a notice about this kind of counting under your policies or the law, giving it is your responsibility; our Privacy Policy describes what is recorded. We may turn off a link, or Squawk Links for your whole organization, without notice, if we believe links are being misused; we will show you the reason. A logo or other picture you add to a QR code must be one you have the right to use. Links stop working when they are paused or deleted, and when a subscription ends, so do not print a code you are not prepared to keep active.

Squawk Keeper

Squawk Keeper is a password keeper for Business accounts. Each person's keeper opens only with their own keeper passphrase or recovery key, which we never have. If both are lost, that person's personal entries cannot be read by anyone, including us.

  • Shared folders. Everyone added to a shared folder can read what is in it, and members and managers can change it. You are responsible for who you add and the role you give them. Removing someone stops them opening the folder from then on, but it does not change passwords they have already seen; change those yourself. When someone leaves your organization, the folders they managed are handed to another member.
  • Organization recovery key. An account owner may turn on a recovery key for shared folders. Whoever holds it can restore access to any shared folder in your organization, so keeping it safe, and deciding who holds it, is your responsibility. It never covers personal entries. If it is off or lost and nobody who could open a folder remains, that folder cannot be recovered.
  • Browser extension. The extension fills sign-in forms on sites whose address matches an entry you saved, offers to save logins you type, and fills a payment card into a page when you tell it to. A card is not tied to a site, so it goes to whatever page you have open, including a payment form the page has placed there from another company. It is an aid: check that you are on the site you meant to be on before you sign in. We are not responsible for the websites you sign in to, or for how they handle what is filled in. Lock the extension, and your computer, when you step away.
  • Authenticator codes. Keeping an authenticator key beside its password is convenient, and means one place holds both. Whether that is right for an account is your decision. Keep the backup codes a site gives you somewhere else.
  • Importing. You confirm that you have the right to bring in what you import. An export file from another password manager is not encrypted; delete it once the import is done.
  • Not a backup. Squawk Keeper is not a backup service. Keep your own record of anything you cannot afford to lose, such as the recovery details for your most important accounts.

Beta features

We may offer features before general release and label them "beta". Squawk Keeper and its browser extension are beta features today. A beta feature is turned on by us for the organizations or people who ask for it, and we may limit who can use it. It may change, have faults, be interrupted, or be withdrawn, and it may later be offered on different plans or at a different price. If we withdraw a beta feature that holds your content, we will tell account owners at least 30 days beforehand and keep it available during that time so you can copy your content out. Beta features are not covered by any uptime or support commitment, and the disclaimers and limits of liability in these terms apply to them in full. Your content in a beta feature is protected and handled as our Privacy Policy describes; being in beta does not change that. Feedback you give us about a beta feature may be used to improve the service without obligation to you.

Availability and security

We work to keep Squawk Secret secure and available, as described on our Security page, but no service is perfectly secure or uninterrupted. You are responsible for choosing appropriate expiration settings, passphrases, and recipients for your content.

Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT, TO THE FULLEST EXTENT PERMITTED BY LAW.

Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, Inflight Technology LLC WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, DATA, OR GOODWILL. OUR TOTAL LIABILITY FOR ANY CLAIM RELATING TO THE SERVICE IS LIMITED TO THE AMOUNT YOU PAID US IN THE 12 MONTHS BEFORE THE CLAIM.

Indemnity

You agree to defend and indemnify Inflight Technology LLC against claims arising from your content or your violation of these terms.

Termination

You may stop using the service and cancel at any time. We may suspend or end your access for violation of these terms or non-payment. Links you already sent may continue to work until they expire.

Governing law

These terms are governed by the laws of the State of New Jersey, without regard to conflict-of-law rules. Disputes will be resolved in the state or federal courts located in Hunterdon County, New Jersey.

Changes

We may update these terms. If a change is material, we will notify account owners by email or in the app before it takes effect. Continued use after the effective date means you accept the updated terms.

Trademarks

Squawk Secret™, the Squawk Secret logo, and related names and logos are trademarks of Inflight Technology LLC. These terms do not give you any right to use them, except to refer to the service accurately.

General

These terms, together with any order form are the entire agreement between you and us about the service, and replace any earlier agreements about it. If any part of these terms is found unenforceable, the rest remains in effect. Our not enforcing a provision is not a waiver of it. You may not assign these terms without our written consent; we may assign them in connection with a merger, acquisition, or sale of assets. Neither party is responsible for delays or failures caused by events beyond its reasonable control. We may send notices to the email address on your account; you may send notices to us at the address below. Nothing in these terms creates a partnership, employment, or agency relationship.

Contact

Inflight Technology LLC, 14 Commerce Street, Suite 106, Flemington, NJ 08822. Email: support@squawksecret.com