Trebia, Taje and Tessin Terms of Service

These Terms of Service (ToS) govern access to and use of the Trebia, Taje and Tessin mobile applications (together, the “Applications”) and of their pages and account areas on the trasimene.com website, published by TRASIMENE SAS (61 rue de Lyon, 75012 Paris). Trebia is a VPN that encrypts your connection and masks your IP address; Taje checks links before you open them and creates QR codes; Tessin is an online vault for your passwords, notes, photos and documents. Each Application bears the mention “Trebia by Trasimène”, “Taje by Trasimène” or “Tessin by Trasimène”: they are published by TRASIMENE SAS, which also publishes the Trasimène app. Each Application has its own accounts and its own subscription.

The provisions common to the three Applications are set out in Articles 01 and 05 to 13; the provisions specific to each one are set out in Articles 02 (Trebia), 03 (Taje) and 04 (Tessin).

Permissions: some functions require access that the phone asks you to authorise (Articles 02 to 04). You remain free to refuse or withdraw it at any time in the phone's settings: the functions that depend on it are then no longer available, with no effect on the others. Details of the access rights and the data processed are set out in the Privacy Policy of each Application.

Trebia is a VPN: it encrypts your device's traffic (WireGuard® protocol) up to the server you choose and masks your IP address, the sites and services you visit seeing the address of that server. Trebia does not block any site and does not filter the sites you visit. It does not analyse the content of sites or apps and does not detect any malware; beyond the VPN server, traffic travels over the Internet as it would without a VPN, and the encryption of the sites themselves (HTTPS) remains necessary.

Traffic outside the tunnel: when the tunnel is down (disconnection, loss of network, reconnection in progress), your traffic travels without a VPN. On Android, the Google Play Store and Google Play services go outside the tunnel, so that Google Play purchases and updates work.

Permissions: on the first connection, the phone asks you to authorise Trebia to set up a VPN connection, without which the tunnel cannot be established; the app also offers, only once, to allow notifications. On Android, a persistent notification indicates the tunnel as long as it is active.

Automatic connection: for subscribers, it is enabled by default and can be turned off at any time in the VPN screen. On Android, the VPN connects when the app is opened; it does not start with the phone. On iPhone, after a first connection, the system re-establishes the tunnel as soon as a network is available, without the app needing to be opened, including after a restart; this reconnection stops if you disconnect yourself in the app or after an update of the app, and resumes at your next connection.

One connection at a time: an account has only one active VPN connection; a new connection ends the previous one.

End of access: at the end of the subscription, when you sign out of the account or when it is deleted, access to the VPN is cut off; on iPhone, the app also removes the VPN configuration from the phone.

Servers: the list of servers offered appears in the app; a server that is temporarily unreachable is removed from it until it comes back. The availability of Trebia depends on the countries and app stores.

Acceptable use specific to Trebia: you remain responsible for the use you make of the connection provided by Trebia, which must not be used for any unlawful activity, in particular to infringe copyright, to send unsolicited bulk messages or to attack computer systems.

Taje checks a link before you open it: you scan a QR code with the camera or type an address, and Taje tells you whether our servers consider it safe or dangerous. Only web links (addresses beginning with http or https, or a domain name on its own, completed with https://) are sent to our servers; the other contents of a QR code (text, Wi-Fi network, contact, phone number, email address) are displayed on your phone without being sent or checked.

Verdict: it is based on the lists of dangerous sites maintained by our servers and on the Google Safe Browsing service, consulted at the time of the check, as well as on the analysis of the address's redirects. It is an indication, not a guarantee: an address deemed safe may turn out to be dangerous, for example a site too recent to be listed yet or one that has become dangerous afterwards; an address deemed dangerous may, more rarely, be legitimate. When an address cannot be checked (time limit exceeded, checking service unavailable, local network address) or its domain name does not exist, Taje says so: an unchecked address is never presented as safe. Taje does not prevent you from opening a link, even one deemed dangerous or unchecked; it does not analyse the content of pages and does not examine your phone.

Free check: before creating an account, you can check a link without an account or subscription. To do this, the app opens guest access specific to Taje, linked to your device; this check is not entered in any history. Further checks require a Taje account and a subscription.

History: for subscribers, Taje keeps the history of their checks (address, verdict, date) for 90 days; you can erase one entry or all of it at any time, in the app or in your Taje account area on trasimene.com.

Generator: Taje creates QR codes on your phone; what you enter in it is not sent anywhere. You remain responsible for their content and their use; they must not be used to deceive people.

Permissions: the scanner uses the camera, which the app asks you to authorise when the scanner opens; without it, you can still type an address. The app also offers, only once, to allow notifications. On iPhone, saving a QR code you created to your photos requires permission to add images to them; on Android, the image is saved in the phone's “Pictures/Taje” folder.

Tessin is an online vault: you store passwords, notes, photos and documents in it, which you can access in the app, on the device signed in to your account, and in your Tessin account area on trasimene.com.

Encryption: passwords, the content of notes and files are encrypted on our servers (AES-256-GCM) with a key unique to your account, held in Google Cloud Secret Manager. This key is held by TRASIMENE SAS: our servers decrypt these items to display them to you, for autofill, for the breach check, to serve your share links and for the export of your vault. Labels, usernames, site addresses, note titles and file names are stored without this additional encryption. In return, a forgotten and reset account password does not cause the content of the vault to be lost.

Access to your vault: anyone signed in to your Tessin account, in the app or on trasimene.com, has access to your vault. Choose a strong account password and keep it secret. In the app, the vault opens with biometrics (fingerprint, face) or the device passcode and locks after 5 minutes of inactivity or 5 minutes in the background. On an Android phone with neither a screen lock nor biometrics, the app asks for the password of your Tessin account, verified by our servers; for an account created with Google or Apple, which has no password, a screen lock on the phone is then required. On iPhone, the Safari extension asks for Face ID, Touch ID or the iPhone passcode before showing or saving a password; the autofill extension asks for Face ID or Touch ID and, failing that, the password of your Tessin account.

Limits: each file can be up to 30 MB (10 MB for a photo added from the iPhone), within a limit of 5 GB per account; a vault contains at most 10,000 passwords and 10,000 notes.

Autofill: once you have turned it on in the phone's settings (and, on iPhone, in Safari for the Tessin extension), Tessin suggests your credentials in other apps and on websites. A credential saved for an app is offered only to that app; a credential saved for a site is offered only on that site and its subdomains. Tessin can also save the credentials you enter, after your confirmation. Autofill is reserved for signed-in subscribers; during the 30 days following the end of a subscription, it still fills in but no longer saves.

Sharing by link: a subscriber can create a link to an item in their vault. Anyone who has this link can open the item, without an account and with no time limit, until you revoke the link. When a link reaches 25 openings, you are informed of it in the app and, if you have allowed notifications, by a notification. You alone are responsible for the items you share and for the people to whom you send a link.

Export: from your Tessin account area on trasimene.com, you can export your entire vault (passwords and notes in a CSV or JSON file, photos and documents), after confirming your identity, including during the 30 days following the end of a subscription. The exported file is not encrypted: you are responsible for keeping it safe.

Breach alert: Tessin checks every week, and each time a password is saved, whether your passwords appear in known data breaches, within the limit of the 200 most recently modified passwords. If a password is found, you are notified by email and, if you have allowed notifications on your phone, by a notification. The absence of an alert does not guarantee that a password has not been leaked.

Generator: the passwords suggested by the generator are created on your phone. A generated password that you copy is erased from the clipboard after one minute.

Permissions: notifications (offered once), autofill service (Android) or autofill extension and Safari extension (iPhone), biometrics or device passcode, the system's photo and document picker to add files and, on iPhone, adding to your photos when you export an image from your vault.

Age: access to the service is restricted to persons aged 18 or over. Minors may use the service only with the express consent and under the responsibility of their legal guardian.

Account: one account per app. Your account in an Application is specific to it: the same email address can be used to create an account in each of the apps of TRASIMENE SAS, and these accounts remain separate. Each one has its own password, subscription and data; the deletion or suspension of an account concerns only the app in which it was created. The account is created with an email address and a password, or with a Google or Apple account where the app offers this; a confirmed email address is required to subscribe. By creating your account, you accept these ToS and the Privacy Policy of the Application; in the app, a sentence with links to these two texts appears below the sign-up buttons, as well as below the Google and Apple buttons of the sign-in screen, which create an account if one does not exist yet.

Subscription: using each Application requires a paid subscription specific to it, the terms of which are set out in the General Terms of Sale. Without an active subscription, the Application displays only the subscription screen, except for the free check of Taje (Article 03) and for viewing the Tessin vault during the 30 days following the end of a subscription (General Terms of Sale, Article 05).

One device at a time: an account remains signed in to the Application on only one device; signing in on another device signs out the previous one. Your account area on trasimene.com is not affected.

Accuracy: users undertake to provide accurate information upon registration and to keep it up to date.

The following uses of the Applications are strictly prohibited:

• attempting to circumvent or neutralise the security mechanisms of the Applications, outside the responsible disclosure framework described below;
• reselling, sublicensing or transferring access to a third party;
• using an Application for unlawful, fraudulent or public-order-violating purposes;
• performing abusive automated operations (mass scraping, fuzzing, automated checking of addresses in large numbers) against the API or servers of TRASIMENE SAS, outside the responsible disclosure framework;
• sharing login credentials with other individuals.

Responsible disclosure: vulnerability research conducted in good faith, without degrading the service or accessing other people's data, is permitted. Report any findings to contact@trasimene.com (see trasimene.com/.well-known/security.txt); TRASIMENE SAS undertakes not to take legal action against researchers acting in good faith within this framework. The rights recognised by Article L122-6-1 of the French Intellectual Property Code (in particular for interoperability purposes) remain reserved.

TRASIMENE SAS endeavours to keep the service available 24/7. Occasional interruptions may occur for maintenance, updates or events beyond its control (force majeure). No contractual SLA applies to consumer subscriptions. TRASIMENE SAS will notify users of planned maintenance with reasonable notice. For security reasons, a minimum version of each Application may be required: the app then asks you to install the update from the app store before continuing.

Best-efforts obligation: TRASIMENE SAS undertakes to implement all reasonable means to provide the service of each Application as described in Articles 02 to 04. No 100% security is technically possible.

Limits: TRASIMENE SAS is not liable for damage resulting from use of the Applications contrary to these ToS, from a fault of the user (for example disclosing their password to a third party), from a case of force majeure or from the act of a third party (sites visited, app stores, communication networks). These limits do not apply to damage caused by a fault of TRASIMENE SAS, or to cases where the law prohibits limiting its liability.

Backup: we advise you to keep a copy of the files and information that matter to you; Tessin lets you export your entire vault from your Tessin account area on trasimene.com (Article 04).

Third parties: TRASIMENE SAS is not responsible for the content, products or services of third-party websites accessible via links in the Applications, visited through Trebia or checked with Taje, nor for the use made of QR codes created with Taje or of items shared with Tessin.

By the user: the subscription can be cancelled at any time where it was taken out: in the settings of the App Store or Google Play or, for a subscription taken out on trasimene.com, in your account area for the Application, “Settings” section, “Manage my subscription” button, which takes you to the payment portal where cancellation is carried out. Cancellation takes effect at the next billing date; access is maintained until that date. The cases of withdrawal and refund, as well as the consequences of the end of the subscription specific to each Application, are set out in the General Terms of Sale.

Account deletion: you can delete your account at any time, in the app (profile, or subscription screen) or on trasimene.com (the Application's account area, “Settings”, “Delete my account”); the steps to follow are set out on the page https://trasimene.com/apps/trebia/delete-account, /apps/taje/delete-account or /apps/tessin/delete-account. As soon as you confirm, you are signed out on all your devices and your access is cut off, including the Trebia VPN and Tessin share links; your data is then erased no later than 30 days after the request, and an email confirms the deletion and the erasure date. Deletion is irreversible; it concerns only the account of the Application concerned, not an account you may have in another app of TRASIMENE SAS.

Subscription in progress at the time of deletion: deleting the account does not stop a subscription taken out on the App Store or on trasimene.com; cancel it before deleting your account, in your Apple account settings or in your account area for the Application on trasimene.com. For a subscription taken out on Google Play, TRASIMENE SAS requests its cancellation at the time of deletion: it no longer renews and ends at the end of the period already paid for, without refund; check afterwards that the cancellation appears in Google Play.

By TRASIMENE SAS: TRASIMENE SAS may suspend or close an account in the event of a breach of these ToS. Except in cases of serious abuse, fraud or risk to the security of the service or of other users, it informs the user by email, before the suspension or when it takes effect. A suspension applies only to the app in which it is imposed.

All intellectual property rights relating to the Applications (source code, design, names, logos, algorithms, knowledge base) are the exclusive property of TRASIMENE SAS. A subscription grants the user a personal, non-exclusive, non-transferable right of use. Any other use requires prior written authorisation. The content you store in Tessin and the QR codes you create with Taje remain yours. “WireGuard” is a registered trademark of Jason A. Donenfeld.

TRASIMENE SAS may amend these ToS at any time. Users will be informed of material changes by email or in-app notification at least 15 days before they take effect. Continued use of the service after this period constitutes acceptance of the updated ToS.

These ToS are governed by French law. In the event of a dispute, the parties undertake to seek an amicable solution. Failing agreement, any dispute shall be submitted to the courts within the purview of the Paris Court of Appeal, subject to the protective provisions applicable to consumers, who may bring proceedings before the courts of their place of residence.

For any questions regarding these ToS: contact@trasimene.com. Support: in the app, “My Account” tab, then “Contact support”; on trasimene.com, once signed in to the account of the Application, “Support” section; or by email to contact@trasimene.com, stating the name of the app and the email address of your account. Answers to frequently asked questions are available in the app, “My Account” tab, and on the page https://trasimene.com/apps/trebia/support, /apps/taje/support or /apps/tessin/support.