Terms of Service

These Terms of Service ("Terms") govern your access to and use of Enclave Auth, operated by Enclave Technologies Inc. ("Enclave," "we," "us," or "our") at auth.enclave.talk and through our web application, developer console, SDK, API, and related services (collectively, the "Service").

By creating an account, signing in, configuring an application, integrating our SDK or API, or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.

If you use the Service on behalf of a company or other entity, you represent that you have authority to bind that entity to these Terms.

Enclave Auth provides drop-in post-quantum authentication. End users register, unlock accounts, and sign challenges on their devices. Integrating applications receive verified sessions or OIDC tokens according to configured scopes. The Service includes our website, web application, developer console, SDK, documentation, billing tools, and related infrastructure.

Features may change over time. We may add, modify, or discontinue features with reasonable notice where practicable.

You are responsible for maintaining the confidentiality of your password, recovery material, optional PIN, and any locally cached unlock data. You are responsible for all activity under your account.

You agree to provide accurate information during registration and to keep that information current. You must promptly notify us of any unauthorized use of your account.

We may suspend or terminate accounts that violate these Terms, pose a security risk, or are used for fraudulent or unlawful activity.

If you configure applications, organizations, or billing in the Enclave Auth developer console, you are a developer customer. You are responsible for your applications, redirect URIs, branding, scopes, and the relationship with your end users.

You must configure only authorized redirect URIs, protect API and OIDC client credentials, and use production keys only in intended environments. Misconfigured clients that expose tokens or redirect users to untrusted origins are your responsibility.

Registration may require email verification, password setup, recovery key confirmation, and optional PIN enrollment according to the flow presented in the application. Login uses challenge-response verification rather than transmission of long-term secrets to our servers.

Integrating applications must not misrepresent Enclave Auth as the operator of their product or collect credentials outside approved SDK and OIDC flows.

If you integrate Enclave Auth as a developer customer, you are responsible for:

• Ensuring you have a lawful basis to authenticate and process end-user information
• Providing your own privacy notice and terms where required
• Configuring scopes and claims to collect only what your product needs
• Securing your application, redirect URIs, and stored session artifacts
• Complying with industry-specific or regional requirements applicable to your users
• Not attempting to extract AMK, identity seeds, or recovery material from the SDK beyond documented APIs

You acknowledge that Enclave acts as a service provider facilitating authentication. You remain responsible for your relationship with your end users.

Paid plans and usage-based charges are billed through Stripe according to pricing published on our website or in an order form. Prices may change with notice.

You authorize us and Stripe to charge your payment method for subscription fees, usage fees, and applicable taxes. Failure to pay may result in suspension of Service access. All fees are non-refundable except where required by law or explicitly stated otherwise.

You may not use the Service to:

• Violate any applicable law or regulation
• Impersonate another person or misrepresent authorization to access an account
• Circumvent security, rate limits, or cryptographic verification
• Reverse engineer, scrape, or overload the Service except as permitted by law
• Harass, defraud, or unlawfully surveil users
• Resell or sublicense the Service without our written consent
• Use the Service to operate phishing or credential-harvesting experiences

We may investigate violations and cooperate with law enforcement where appropriate.

SDK and API access may require valid credentials. You must keep keys confidential and rotate them if compromised. You are responsible for all activity under your credentials.

Use of @enclave-technologies/auth-sdk and @enclave-technologies/auth-react under paid plans is also governed by our Supplemental License Terms where applicable.

Paid-plan SDK license terms: https://auth.enclave.talk/legal/supplemental-license-terms

We may impose rate limits, monitor usage for abuse, and modify SDK or API behavior with documentation updates. Integrations must preserve the Service's zero-knowledge authentication model.

The Service, including software, documentation, branding, and content we provide, is owned by Enclave or its licensors and protected by intellectual property laws. These Terms do not grant you any rights to our trademarks or brand assets except as needed to describe your use of the Service or as permitted in your developer configuration.

You retain ownership of your application and content. You grant us a limited license to host, process, and transmit authentication metadata and encrypted wraps as necessary to operate the Service.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

We do not warrant that the Service will be uninterrupted, error-free, or satisfy every legal, regulatory, or certification requirement for your specific application or jurisdiction. You are responsible for determining whether Enclave Auth is appropriate for your compliance and business needs.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ENCLAVE AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, OR GOODWILL, ARISING FROM YOUR USE OF THE SERVICE.

OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO ENCLAVE FOR THE SERVICE IN THE TWELVE MONTHS BEFORE THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS ($100).

Some jurisdictions do not allow certain limitations, so some of the above may not apply to you.

You agree to indemnify and hold harmless Enclave from claims, damages, losses, and expenses (including reasonable attorneys' fees) arising from your use of the Service, your violation of these Terms, your application or integrations, or your violation of any law or third-party rights.

You may stop using the Service at any time. You may request account deletion through available account settings or by contacting support.

We may suspend or terminate your access immediately if you breach these Terms, fail to pay fees, or if continued access would create legal or security risk. Upon termination, your right to use the Service ends, but sections that by their nature should survive will remain in effect.

We may update these Terms from time to time. We will post the revised Terms on this page with an updated effective date and provide additional notice for material changes where required.

Your continued use of the Service after changes become effective constitutes acceptance of the revised Terms.

These Terms are governed by the laws of the State of Mississippi, United States, without regard to conflict of law principles. You agree to the exclusive jurisdiction of state and federal courts located in Mississippi for disputes arising from these Terms or the Service, except where prohibited by applicable law.

Questions about these Terms should be directed to:

• Enclave Technologies Inc.
• Hattiesburg, MS 39401
• Legal: legal@enclave.talk
• Support: support@enclave.talk
• Website: https://auth.enclave.talk