Terms of Service

The service, and that it is early

ZevAuth is authentication as a service: hosted and embeddable sign-in, sessions, organizations, attack protection and webhooks, reachable as components, a client, or a REST API.

ZevAuth is in active development. Features may change, and while it is free we do not offer a uptime guarantee or a support commitment beyond best effort. We will not remove something you depend on without notice where we can avoid it.

Your account

Keep your account details accurate and your keys secret. You are responsible for activity under your account and keys, so treat a secret key like a password and rotate it if it leaks.

Your responsibilities to your users

For the people who sign in through your app, you are the controller of their data and we are your processor. That means you must have a lawful basis to collect it, publish your own privacy notice to your users, and handle their rights requests. Our processing of that data on your behalf is governed by our Data Processing Addendum, which forms part of these terms.

Acceptable use

You agree not to:

• break the law with it, or use it for content that is illegal where you or your users are.
• attack, overload, or probe the service outside a channel we have invited, or work around rate limits and quotas.
• resell ZevAuth as a competing authentication product.
• use a test environment to run real production traffic in order to avoid limits.
• impersonate ZevAuth or Zevop, or misuse the "Secured by ZevAuth" mark.

Fees

Building, testing and production are free today while we grow, on generous limits. There are no paid plans yet. When we introduce them, we will announce the prices by email before they apply, and a free tier will remain. Billing, when it exists, runs through ZevPay. On the free tier, the "Secured by ZevAuth" mark stays on your sign-in screens.

Who owns what

You own your data, your application, and your users’ data. We own ZevAuth — the software, the console, the API and the brand. You grant us the limited licence needed to process your data in order to provide the service, and nothing more.

Availability and changes

We may add, change, or discontinue features. If a change would break how you use ZevAuth, we will give notice where it is within our control. During the beta especially, treat the service as evolving.

No warranties

ZevAuth is provided “as is” and “as available”, without warranties of any kind, to the extent the law allows. We work hard to keep it secure and running, but we do not promise it will be uninterrupted or error-free.

Limitation of liability

To the extent the law allows, neither party is liable for indirect, incidental, or consequential losses, and our total liability arising from the service is limited to the greater of the amount you paid us in the prior twelve months or a nominal sum. Nothing here limits liability that cannot be limited by law.

Indemnity

You will defend and indemnify us against claims arising from your application, your content, or your handling of your users’ data, to the extent they are not caused by us.

Ending the agreement

You can stop using ZevAuth at any time, and export your users and data through the REST API before you go. We may suspend or end access for a serious or repeated breach of these terms, giving notice where we reasonably can.

Governing law

These terms are governed by the laws of the Federal Republic of Nigeria, where Zevop is established, without regard to its conflict-of-laws rules. The courts there have jurisdiction, unless a mandatory consumer law gives you the right to sue where you live.

Changes to these terms

If we change these terms in a way that matters, we will give notice by email or on the site before the change applies. Continuing to use ZevAuth after that means you accept the new version.

Contact

Questions about these terms: hello@zevauth.com.