Terms of Service

Effective 2026-09-26

These Terms of Service ("Terms") govern your use of the apiaryID platform ("Service") operated by apiaryID LLC ("apiaryID", "we", "us"). By creating an account, signing in to an app connected to apiaryID, or otherwise using the Service, you agree to these Terms. If you don't agree, don't use the Service.

Some sections apply only to workspace customers (people and organizations who create a workspace to connect their own applications) and say so. Everyone else is an end user: someone who signs in to an app that a workspace customer has connected.

1. The Service

apiaryID is an identity and access management platform. It lets workspace customers connect their applications, manage members and roles, and offer subscription plans to their users. It lets end users sign in to those applications with a single account, manage their sign-in methods, and review their subscriptions.

The apps you sign in to are operated by the workspace customers who connected them, not by us. Their content, features, pricing and conduct are their responsibility, under their own terms.

2. Your account

• You must be at least 13 years old to create an account, and old enough to enter a binding contract in your jurisdiction. If you use the Service on behalf of an organization, you confirm you have authority to bind it, and "you" includes that organization.
• You are responsible for keeping your credentials confidential and for activity under your account. Notify us promptly if you suspect unauthorized access.
• Information you provide must be accurate and kept up to date.

3. Acceptable use

When you use the Service you agree not to:

• Violate any law or the rights of others.
• Use the Service to attack, probe, or disrupt the authentication infrastructure or any other user's data, including credential-stuffing, brute-force, or denial-of-service attempts.
• Reverse engineer, decompile, or otherwise attempt to extract source code from the Service except as permitted by applicable law. Good-faith security research disclosed responsibly is welcome. Please contact us first.
• Interfere with or circumvent rate limits, audit logging, or security features.
• Use the Service for phishing, to impersonate another person or organization, or to collect credentials under false pretenses.
• Resell, sublicense, or use the Service to provide a substantially similar service to third parties without our written permission.

4. Payments and billing

Paying us. Workspace customers may buy a paid platform plan.

• Prices, billing intervals and plan limits are shown at the time of purchase. Fees are exclusive of taxes, which you are responsible for except taxes on our income.
• Paid plans renew automatically until cancelled. Cancellation takes effect at the end of the current billing period. Switching between plans may be prorated as shown when you switch.
• If a payment fails we may retry it, and after a reasonable period we may move the workspace to the free plan or suspend paid features until the balance is paid.
• We may change prices for future billing periods with at least 30 days' notice. The change applies from your next renewal after the notice period; you may cancel before then.
• Fees are non-refundable except where required by law or expressly stated in the Service.

Paying a workspace customer. When you subscribe to a plan inside an app, you are buying from the workspace customer that operates it, not from us.

• The workspace customer is the seller and merchant of record. It sets the price, decides what the plan includes, and is responsible for delivering it, for refunds, for cancellations beyond what the Service offers, for disputes and chargebacks, and for the taxes on its sales.
• We provide the software that connects the purchase to your access, and we collect a platform fee from the workspace customer. We are not a party to the sale and are not responsible for the goods or services it covers.
• Questions about a charge, a refund, or what a plan includes go to the workspace customer. We can help you find out who that is.

Payment processing. Payments are processed by Stripe, Inc. and its affiliates ("Stripe"), not by us.

• We never receive or store full card numbers or bank-account details. Your payment details are subject to Stripe's own terms and privacy policy.
• Workspace customers who accept payments do so through a Stripe connected account and agree to the Stripe Connected Account Agreement, which includes the Stripe Services Agreement. Stripe, not us, decides whether to accept, hold, or pay out funds, and when.
• We are not responsible for Stripe's availability, for a payment Stripe declines, delays, reverses or holds, or for fees Stripe charges.

5. Availability

We work to keep the Service available and fast, but we do not promise any particular level of uptime unless we have agreed to one with you in a separate written service-level agreement. Without one:

• The Service may be unavailable for scheduled maintenance, emergency changes, or reasons outside our reasonable control, including failures of the hosting, network, email, SMS and payment providers it relies on.
• Because apps connected to the Service rely on it to sign users in, an outage may prevent sign-in to those apps. Workspace customers are responsible for deciding how their own applications behave when the Service is unreachable.
• We may add, change, or remove features. We will give reasonable notice before removing a feature that paid workspace customers materially rely on.
• Features labeled preview, beta or similar are provided for evaluation, may change or be withdrawn at any time, and are excluded from any service-level commitment.

6. Security

Security is shared. We protect the platform; workspace customers protect how they use it; end users protect their own credentials. We are responsible for the part we control and not for the parts we don't.

What we do. We use administrative, technical and physical safeguards appropriate to an identity service (encryption in transit and at rest, hashed passwords, multi-factor authentication, rate limiting, and audit logging), and we maintain them as threats change. The Privacy Policy describes them in more detail. If we become aware of unauthorized access to personal information we hold, we will notify affected workspace customers and users without undue delay and as required by law.

What workspace customers do. You are responsible for:

• The configuration of your workspace and apps, including redirect URIs, client secrets, allowed origins, scopes, roles, permissions, and sign-in policies such as whether a second factor is required.
• Keeping client secrets and API credentials confidential and rotating them if they may be exposed.
• Your applications, including validating the tokens they receive and making authorization decisions based on them.
• Who you invite to administer your workspace, and what they do there.

What end users do. You are responsible for your password, your devices, your email account, and your second factors, and for turning on protections the Service offers.

No system is perfectly secure, and we do not warrant that the Service is free of vulnerabilities or that unauthorized access will never occur. We are not responsible for unauthorized access that results from a workspace customer's configuration or applications, from compromised credentials, devices or email accounts outside our control, or from failures of third-party services.

7. Workspace customer responsibilities

If you administer a workspace, you control the data inside it and we process it on your behalf. You're responsible for the applications you connect, the roles you grant, the plans you publish, and your own compliance with privacy, consumer-protection and tax law toward your users. You agree to maintain your own terms and privacy notice with your users where required, and to obtain any consent the law requires for the data you have us process.

You are responsible for how your users and your workspace's administrators use your apps, and for handling their requests, complaints and disputes about your apps and your plans. We have no obligation to resolve disputes between you and your users.

8. Third-party services

The Service works with services we don't operate, such as sign-in with Google and Stripe payments. Your use of them is governed by their terms, and we are not responsible for their availability, conduct, or changes they make.

9. Intellectual property

The Service, including its software, design, and documentation, is owned by apiaryID and protected by intellectual property law. We grant you a limited, non-exclusive, non-transferable license to use the Service in accordance with these Terms. You retain all rights to the data you provide; we use it only as described in the Privacy Policy. If you send us feedback, we may use it without obligation to you.

10. Suspension and termination

You can close your account at any time from the account-management page. We may suspend or terminate access if you breach these Terms, if your use creates a security or legal risk for us or other users, or if fees are unpaid. Where practical we will give notice first; we may act without notice when the risk is immediate. Fees for a paid plan continue to accrue during a suspension caused by your breach or non-payment.

When a workspace is deleted, its data is deleted with it, except records we keep as described in the Privacy Policy and as required by law. Deletion cannot be undone, so workspace customers are responsible for keeping their own copy of anything they need.

11. Disclaimers

The Service is provided "as is" and "as available." To the maximum extent permitted by law, apiaryID disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, title, and non-infringement. We do not warrant that the Service will be uninterrupted, timely, secure, or error-free, that it will meet your requirements, or that any particular feature will remain available.

12. Indemnification

If you are a workspace customer, you agree to defend and indemnify apiaryID against third-party claims, damages, and expenses arising from your applications, the data you have us process, your sales to your own users, or your breach of these Terms or of the law.

13. Events outside our control

We are not liable for any delay or failure to perform caused by events beyond our reasonable control, including natural disasters, war, terrorism, civil unrest, labor actions, government action, pandemics, internet or utility failures, attacks on our infrastructure, and failures of third-party hosting, network or payment providers.

14. Limitation of liability

To the maximum extent permitted by law, apiaryID will not be liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, goodwill, or data, or for business interruption (including any arising from a payment, an outage, or a security incident), even if we were advised they were possible.

To the maximum extent permitted by law, our total liability for all claims arising out of or related to the Service or these Terms is limited to the greater of (a) the fees you paid us for the Service in the twelve months before the event giving rise to the claim, or (b) one hundred US dollars. Amounts you pay to a workspace customer are not fees paid to us.

These limits apply to every theory of liability, including contract, tort (including negligence), and statute, and they reflect the allocation of risk in the fees we charge.

15. Rights the law does not let us limit

Nothing in these Terms limits liability that cannot be limited under applicable law, such as liability for fraud, for gross negligence or willful misconduct, or for death or personal injury caused by negligence. If you are a consumer, you may have statutory rights in your country that these Terms cannot override, and nothing here affects them.

16. Governing law

These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws rules. Disputes will be brought in the state or federal courts located in Delaware, and the parties consent to the personal jurisdiction of those courts. If you are a consumer living in a country whose law gives you the right to bring claims in your local courts, you keep that right.

To the extent permitted by law, any claim arising out of or related to the Service must be brought within one year after it arises.

17. Changes to these Terms

We may update these Terms from time to time. Material changes will be announced via the Service or by email at least 14 days before taking effect, except changes required by law or made for security reasons, which may take effect sooner. Continuing to use the Service after a change becomes effective means you accept the updated Terms.

18. General

• These Terms, together with the Privacy Policy and any order or agreement you sign with us, are the entire agreement between you and us about the Service.
• If any provision is found unenforceable, the rest remains in effect and that provision is enforced to the extent permitted.
• Our not enforcing a provision is not a waiver of it.
• You may not assign these Terms without our consent. We may assign them in connection with a merger, acquisition, or sale of assets.
• Sections that by their nature should survive termination (including payment obligations, disclaimers, indemnification, and limitation of liability) survive it.

19. Contact

For questions about these Terms, contact legal@apiaryid.com.