Terms of Service

Last updated: [DATE] · Version: 1

These Terms of Service ("Terms") govern your use of Daywalker Auth (the "Service"), operated by [COMPANY LEGAL NAME] ("we", "us"). By creating an account, creating an instance, or using the Service's APIs or SDKs, you ("you", the "Customer") agree to these Terms. If you use the Service on behalf of an organization, you confirm you're authorized to bind it, and "you" includes that organization.

1. What the Service is

The Service provides authentication and user management for applications you build: sign-up, sign-in, sessions, verification, account recovery, and related APIs, SDKs and hosted pages. The people who sign in to your applications are your "End Users".

2. Your account

• You must give accurate information and keep it up to date.
• You're responsible for everything done with your account and keys. Keep secret keys and your master encryption key confidential, and tell us promptly at [SECURITY CONTACT] if you suspect they've been compromised.
• You must be at least 18, or the age of majority where you live, to create an account.

3. Your End Users and their data

• You are the controller of your End Users' data; we process it on your behalf to provide the Service. Where data-protection law requires it, our Data Processing Agreement at [DPA LINK] forms part of these Terms.
• You're responsible for having a lawful basis to process your End Users' data, and for giving them any notices your applications need, including your own terms and privacy policy. The Service can require End Users to accept your terms at sign-up; it's your job to set the right terms and keep their version current.
• We use End User data only to provide, secure and maintain the Service, as described in our Privacy Policy at [PRIVACY LINK]. We don't sell it or use it for advertising.

4. Acceptable use

You must not use the Service to:

• break any law, or help anyone else break it;
• send spam, or run phishing or other deceptive sign-in pages;
• attempt to access accounts, instances or data that aren't yours;
• probe, scan or load-test the Service beyond normal use, or try to get around rate limits or security controls, without our written permission;
• store data in the Service that it isn't designed for, such as payment card numbers or government ID numbers, in metadata fields;
• resell or white-label the Service, except as agreed with us in writing.

We may suspend instances or accounts that put the Service, other customers or End Users at risk. Where we reasonably can, we'll tell you first and give you a chance to fix the problem.

5. Security

We protect data with industry-standard measures, described in the security model. You must use the Service securely too: keep your keys secret, run your own servers safely, and check authorization in your own code. No system is perfectly secure. If we become aware of a security incident affecting your data, we'll notify you without undue delay and as required by law.

6. Fees

[If the Service is free: The Service is currently provided free of charge. We'll give you at least 30 days' notice before introducing fees for features you already use.] [If paid: Fees, billing periods and payment terms are set out on our pricing page or in your order form. Fees are non-refundable except where the law or these Terms say otherwise.]

7. Availability and changes

We work to keep the Service available, but we don't promise it will be uninterrupted or error-free unless a separate service-level agreement says so. We may change or improve the Service. If we remove a feature you rely on, or make a breaking API change, we'll give you reasonable notice, normally at least [90] days.

8. Intellectual property

We own the Service, including its software, documentation and branding. You own your applications and your data. You give us permission to host and process your data only as needed to provide the Service. If you send us feedback, we may use it without owing you anything.

9. Ending the agreement

• You may stop using the Service and delete your instances at any time.
• We may end these Terms or suspend the Service for a serious or repeated breach, or if the law requires it.
• After termination, you'll have [30] days to export your data, unless the law prevents it. After that we delete it within a reasonable period, except for anything we're legally required to keep.

10. Warranties and liability

• Disclaimer. Except as expressly stated in these Terms, the Service is provided "as is", and we disclaim all implied warranties to the fullest extent the law allows.
• Limit. Neither party is liable for indirect or consequential losses, such as lost profits or data, except where the law doesn't allow this to be limited. Each party's total liability under these Terms is limited to [the fees you paid in the 12 months before the claim, or USD 100 if the Service was free].
• Exceptions. These limits don't apply to your payment obligations, to your breach of section 4, or to liability that can't be limited by law.

11. Indemnity

You'll defend us against third-party claims arising from your applications, your End User data, or your breach of section 4, and cover the resulting costs.

12. Changes to these Terms

We may update these Terms. For material changes, we'll give you at least [30] days' notice by email or in the dashboard. If you keep using the Service after the changes take effect, you accept them. If you don't agree, you can stop using the Service before then.

13. General

• Governing law. These Terms are governed by the laws of [JURISDICTION], and disputes go to the courts of [VENUE].
• Severability. If any part of these Terms is unenforceable, the rest still applies.
• No waiver. If we don't enforce a right, we haven't waived it.
• Assignment. You may not transfer these Terms without our consent, except as part of a merger or sale of your business.
• Entire agreement. These Terms, together with any order form and the DPA, are the whole agreement between us about the Service.

14. Contact

[COMPANY LEGAL NAME], [ADDRESS], [CONTACT EMAIL]