1. Accepting these terms
1.1 You accept these terms when you create a Carcha Seal account, and we record which version you accepted and when. If you also use the SDK without an account, for example to evaluate it, these terms apply to that use too.
1.2 A Carcha Seal account is for a business, not for personal use. The person who creates the account confirms that they may accept these terms for that business.
1.3 If you have a separate written agreement with us, such as a self-hosting agreement, it prevails over these terms where they conflict.
2. Definitions
"Service" means the hosted Carcha Seal license server at seal.carchalabs.com, its console, its APIs and its payment connections.
"SDK" means the Carcha Seal software we make available for apps: the packages published under @carchalabs/seal-*
on npm and CarchaLabs.Seal* on NuGet, the C++ libraries and headers available in the console, their
documentation, and any updates to them.
"Carcha Seal Server" means the Service, or a license server that you or your End Users run under a self-hosting agreement with us.
"Your Application" means software that you develop and make available to End Users, for a fee or free of charge, that uses the SDK to obtain and check licenses from a Carcha Seal Server, and whose main purpose is not licensing, license management, copy protection or software protection.
"End Users" means the people and organizations to whom you make Your Application available, including people within your own organization.
3. Your account
3.1 You keep your account details accurate, and your passwords, two-factor codes and API keys secret. You are responsible for what is done with your account and API keys, and you tell us without delay at [email protected] if you learn of their unauthorized use.
3.2 You do not test the security of the Service against other vendors' accounts or data. Report a vulnerability to [email protected].
4. Trial and plans
4.1 A new account has a free trial of 14 days. When a trial or a paid plan ends, the Service keeps serving the licenses you have already issued (check-ins, deactivations and your console), but issues nothing new (new licenses, activations, products, policies or webhook orders) until you choose a plan.
4.2 The fees and the period of a paid plan are those shown when you choose it.
5. The SDK license
5.1 What you may do. As long as you comply with these terms, we grant you a non-exclusive, worldwide, non-transferable license, which you may not sublicense except as (b) allows, to:
(a) use, copy and modify the SDK to integrate Your Application with a Carcha Seal Server;
(b) distribute the SDK, unmodified or modified under (a), only as part of Your Application and in the form we publish it (object code, or the compiled JavaScript in our npm packages), and let your End Users use it only as part of Your Application; and
(c) keep the license and notice files that come with the SDK with every copy you distribute.
5.2 What you may not do. You may not, and may not allow anyone else to:
(a) sell, license, rent, lend or otherwise distribute the SDK, or any part or modified version of it, on its own or as part of a software development kit, library, framework or other product for developers;
(b) use the SDK, or any part or modified version of it, with a license server other than a Carcha Seal Server, except a test server you run only to test Your Application;
(c) use the SDK, or any part, modified version or translation of it, in a product or service that substitutes for a Carcha Seal Server or the SDK, or that offers others licensing, license management, copy protection or software protection functionality the same as or substantially similar to theirs, whether paid or free;
(d) reverse engineer, decompile or disassemble the SDK, or otherwise try to derive its source code, except to the extent applicable law permits it despite this restriction;
(e) disable, bypass or tamper with the SDK's license checks, signature verification, encryption or device binding, or help anyone else do so, in any application that uses a Carcha Seal Server, except in Your Application while you test it;
(f) remove or change the SDK's license, copyright or other notices; or
(g) use our names, logos or trademarks, including "Carcha Seal" and "Carcha Labs", except to state truthfully that Your Application uses Carcha Seal.
5.3 Third-party components. The SDK contains open-source components from others, listed with their licenses in the notice files that come with the SDK. Each is licensed under its own license, and nothing in these terms limits the rights that license gives you for that component.
5.4 Your End Users. Your terms for Your Application must not give your End Users more rights in the SDK than to use it as part of Your Application. You are responsible for your End Users' use of the SDK.
5.5 Earlier versions. SDK versions published before 7 November 2026 were released under the MIT License, which still applies to those versions.
6. Self-hosted servers
You may run a Carcha Seal server yourself, or let your End Users run one, only under a self-hosting agreement with us. Having the server software does not give the right to run it.
7. What Carcha Seal does, and your part
7.1 Carcha Seal is provided as described in its documentation (https://seal.carchalabs.com/docs/). It makes running Your Application without a license harder; it does not prevent it on a computer the End User controls, and we do not promise that it will.
7.2 You: (a) integrate the SDK as the documentation describes (the public keys built in, secure storage, Electron fuses, the native module shipped); (b) keep the SDK in Your Application within a supported version, and ship security updates to your End Users without undue delay after we publish them; (c) are the manufacturer of Your Application and remain responsible for it, including its compliance with the law that applies to it; and (d) use the Service lawfully, without disrupting or overloading it.
8. Data
8.1 You own the data you put into the Service. Our privacy notice (https://seal.carchalabs.com/privacy/) describes the personal data we process for our own purposes.
8.2 Where we process personal data on your behalf (your End Users' license and device records), we do so only on your instructions and to provide the Service to you, under the standard contractual clauses the European Commission adopted for this, which form part of these terms: if you are established in the European Economic Area, Module Two of the clauses in Commission Implementing Decision (EU) 2021/914; otherwise the clauses in Commission Implementing Decision (EU) 2021/915. Their annexes (the parties, the description of the processing, our technical and organisational measures, our sub-processors) and the options chosen in them are at https://seal.carchalabs.com/dpa/. Where these terms and those clauses conflict, the clauses prevail.
9. Ownership and feedback
9.1 We own the Service and the SDK, and all rights in them not expressly granted in these terms. You own Your Application.
9.2 If you send us changes, ideas or suggestions for Carcha Seal, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use, modify, distribute and sublicense them, under any terms, for any purpose, and confirm that you may grant it.
10. Confidentiality
Each of us keeps confidential what the other discloses under these terms that is marked confidential or is clearly confidential, uses it only for these terms, and may disclose it where the law requires. This does not cover what is public or what the receiving party already lawfully had.
11. Suspension and ending
11.1 You may close your account at any time under Settings in the console; it is then deleted as the privacy notice describes.
11.2 We may suspend or end your account, with notice where reasonable, if you breach these terms and do not remedy the breach within 30 days after our notice (at once if it cannot be remedied or puts the Service or others at risk), or if the law requires it.
11.3 When your account ends, your SDK license ends: you stop distributing the SDK. Your End Users may keep using copies of Your Application they received before then, but they cannot activate or check in against the Service. Sections 5.2, 5.4, 9, 10, 12 to 15, 17 and 18 continue to apply.
12. No warranty
To the extent the law allows, the Service and the SDK are provided "as is", without warranty of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose and non-infringement.
13. Limitation of liability
Except as set out in 13.3:
13.1 Neither of us is liable to the other for indirect or consequential loss, or for loss of profit, revenue or business, including revenue lost because Your Application was used without a license.
13.2 Each party's total liability to the other under or in connection with these terms in any 12 months is limited to the fees you paid us in the 12 months before the event that caused it, or 100 euros if that is more.
13.3 Nothing in these terms limits or excludes liability: (a) for death or personal injury caused by negligence; (b) for intent or gross negligence; (c) towards an injured person under product liability law; or (d) that cannot be limited or excluded under the governing law.
14. Waiver of recourse for product liability
We are a microenterprise or small enterprise within the meaning of Article 12(2)(a) of Directive (EU) 2024/2853. You waive any right of recourse against us under Article 12(2)(b) of that Directive, and under the national law implementing it, for damage for which you compensate an injured person and which was caused by a defect in Carcha Seal. This does not limit anyone's liability towards the injured person. Where this waiver is not effective under the law that applies, any recourse is subject to section 13.
15. Indemnities
15.1 We will defend you against a third party's claim that the Service or the SDK, as we supply them, infringes that party's intellectual property rights, and pay what a court finally awards or we agree to pay, provided you tell us promptly and let us control the defence. This does not cover claims arising from Your Application, your content, or the SDK changed or combined by you.
15.2 You will defend us against a third party's claim arising from Your Application, your content, or your use of Carcha Seal in breach of these terms, on the same conditions.
15.3 Both indemnities are subject to section 13.
16. Changes to these terms
We may publish new versions of these terms. We tell you of a change that affects you at least 30 days before it takes effect, by email to your account's address. If you do not accept it, you may close your account before then; otherwise the new version applies from that date.
17. Governing law and courts
These terms are governed by the laws of the Republic of Turkey, without regard to its conflict-of-laws rules; the United Nations Convention on Contracts for the International Sale of Goods does not apply. The courts and enforcement offices of Istanbul (Çağlayan) have exclusive jurisdiction over disputes arising from them. We may also bring proceedings where you have your seat, or where a breach of section 5 takes place. The standard contractual clauses in section 8.2 are governed by the law, and subject to the courts, that they specify.
18. General
18.1 We may transfer these terms, with our rights and obligations under them, to a successor of our business, such as a company we form; we tell you when we do. You may transfer them only together with Your Application's business, and with notice to us.
18.2 You comply with the export control and sanctions laws that apply to your use and distribution of the SDK.
18.3 If a court finds part of these terms invalid or unenforceable, that part applies to the extent it can, and the rest stays in effect. Not enforcing a term is not a waiver of it.
18.4 We send notices to your account's email address; you send them to [email protected]. The English text of these terms is the binding one.