Proton vs 1Password
Side-by-side comparison of the Terms of Service and Privacy Policy of Proton and 1Password.
Strong privacy protections and user controls are offset by several standard but significant contract restrictions, including arbitration, auto-renewal, limitation of liability, and account/data deletion rules.
Proton presents a privacy-forward legal posture: it says it collects minimal data, cannot access encrypted content, offers in-account export/delete controls, and limits disclosure to lawful Swiss requests. However, the terms also include automatic renewal, broad liability limits, binding arbitration with a class waiver, unilateral policy changes, and inactivity-based deletion for free accounts.
Points of interest
-
negative ●●●●● termsMandatory arbitration
The terms require individual binding arbitration for most disputes and waive class actions, which limits the ability to sue in court or band together with other users. There is an opt-out window, but only if you act within 30 days.
-
positive ●●●●● privacyMinimal data collection
Proton says it collects as little personal data as possible and does not have the technical means to access encrypted emails, files, calendar events, passwords, or notes. That is a strong privacy benefit for users handling sensitive information.
-
negative ●●●●○ termsAutomatic renewal and upfront cancellation
Subscriptions renew automatically unless you cancel before the renewal date. If you miss the deadline, you can be charged for another term even if you no longer want the service.
-
negative ●●●●○ termsFree inactivity deletion
Free accounts inactive for 12 months can lose emails, files, calendar entries, and passwords, with deletion notices sent in advance. That is a meaningful risk for anyone using the free tier as long-term storage.
-
negative ●●●●○ termsBroad liability waiver
Proton disclaims most warranties, including reliability and data security guarantees, and caps liability at $100 or what you paid, whichever is greater. This makes recovery for service problems or data loss much harder.
-
positive ●●●●○ privacyNo full card storage
Proton says it does not retain full credit card details and keeps only your name and the last four digits of the card number. This reduces the amount of payment data it stores if you pay by card.
-
positive ●●●●○ privacyExport and delete available
You can access, edit, delete, or export personal data through your account interface. That gives users a direct path to data portability and account cleanup without needing to rely only on support.
-
negative ●●●○○ termsTerms can change unilaterally
The company reserves the right to review and change the Terms at any time, and continued use counts as consent. Users need to keep checking for updates to avoid being bound by changes they may not notice.
-
negative ●●●○○ privacyTemporary IP retention for abuse
While Proton does not keep permanent IP logs by default, it may retain IP addresses permanently for serious Terms violations. That means some abuse-related activity can leave lasting account records.
-
positive ●●●○○ privacyNo permanent IP logs by default
Proton says it does not keep permanent IP logs by default, though it may retain them temporarily for abuse prevention. Users concerned about logging get a relatively privacy-friendly default setting.
Documents
The documents contain several user-friendly privacy commitments, especially around encrypted vault data, ownership, export, deletion, and transparency. However, the terms still include mandatory arbitration, liability caps, auto-renewal, nonrefundability, and unilateral changes, which reduce user leverage.
1Password’s legal terms are relatively privacy-forward for a security service: it says vault contents remain yours and are encrypted so the company cannot read them unencrypted, and it offers export, deletion, and user-rights mechanisms. Still, it uses automatic renewal, broad warranty/liability disclaimers, mandatory arbitration for individual users, and allows policy/terms changes, while also sharing some personal data with affiliates, service providers, and marketing partners.
Points of interest
-
negative ●●●●● termsMandatory binding arbitration
Individual users must resolve disputes through binding arbitration in Toronto under Ontario law, and the decision is final. This limits your ability to sue in court or pursue appeals.
-
positive ●●●●● privacyEncrypted vaults unreadable
1Password states your secure vault data is encrypted with keys only users or admins control, and that it cannot access readable vault contents. For a password manager, this is a major privacy and security benefit.
-
negative ●●●●○ termsLiability tightly capped
1Password broadly disclaims warranties and limits most monetary liability to the fees you paid in the prior six months. If something goes badly wrong, available compensation may be quite limited.
-
positive ●●●●○ termsYou keep data ownership
The terms and privacy policy both say your stored data remains your property. The service license is limited to what is needed to operate the service, rather than a broad commercial content license.
-
positive ●●●●○ privacyExport and deletion rights
Users can export their data and request permanent deletion, with an authenticated deletion flow described in the privacy policy. This reduces lock-in and gives users meaningful control over their information.
-
negative ●●●○○ termsAuto-renewal and trial conversion
Subscriptions renew automatically unless canceled, and free trials can turn into paid plans if you entered billing information and do not cancel in time. Users need to actively manage cancellation.
-
negative ●●●○○ termsNonrefundable by default
The terms say amounts paid are generally nonrefundable, with refunds only considered case by case. That makes mistaken renewals or unused service harder to recover financially.
-
negative ●●●○○ termsTerms can change
1Password reserves the right to modify or discontinue services and to change the terms, with continued use counting as acceptance. Although it says it will try to give notice for material changes, the discretion remains largely theirs.
-
negative ●●●○○ privacyMarketing data sharing
The privacy policy allows sharing personal information with marketing partners for advertising, and says this may be considered a sale or sharing under some privacy laws. Privacy-conscious users may want to opt out where available.
-
neutral ●●●○○ privacyBusiness admins control accounts
For employer-managed accounts, administrators may access account-related data, recover vaults, and delete or restrict access. This is expected for enterprise products, but employees should understand their organization may control the account.
-
positive ●●●○○ termsNotice before termination
If 1Password plans to terminate an account for breach or harmful use, it usually says it will give notice and a chance to fix the issue. It also says it will work to let users keep copies of their data where possible.
-
negative ●●○○○ privacyRetention not time-limited
The privacy policy keeps personal information as long as needed for stated purposes or legal requirements, and deleted information may persist in systems for some time. That is common, but it is not a tight or specific retention limit.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.