Terms of Service

Effective Date: March 12, 2026

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer," "you," or "your") and SSOJet ("SSOJet," "we," "us," or "our") governing your access to and use of the SSOJet platform, APIs, documentation, and related services (collectively, the "Services"). By accessing or using the Services, you agree to be bound by these Terms. If you are accepting these Terms on behalf of an organization, you represent that you have the authority to bind that organization.

1. Definitions

• "Platform" means the SSOJet CIAM platform, including SSO, Directory Sync, MFA, Audit Log, User Management, and all related features and APIs.
• "Customer Data" means any data, content, or information submitted to the Platform by or on behalf of the Customer, including end-user authentication data.
• "End User" means any individual who accesses the Customer's application through the Platform's authentication services.
• "Subscription" means the Customer's active plan, as specified during account registration or in an executed Order Form.
• "Documentation" means the technical documentation, API reference, and guides available at docs.ssojet.com.

2. Account Registration and Access

To use the Services, you must create an account and provide accurate, complete information. You are responsible for:

• Maintaining the confidentiality of your account credentials
• All activity that occurs under your account
• Promptly notifying us at security@ssojet.com if you suspect unauthorized access
• Ensuring that your use of the Services complies with all applicable laws and regulations

You must be at least 18 years of age and have the legal authority to enter into these Terms. The Services are designed for business use and are not intended for consumer applications.

3. Services and Scope

SSOJet provides an enterprise CIAM platform that integrates with your existing authentication infrastructure to deliver:

• Single Sign-On (SSO) with support for SAML 2.0, OIDC, and 25+ identity providers
• Directory synchronization via SCIM 2.0 protocol
• Multi-Factor Authentication (MFA) and adaptive security
• Authentication audit logging and compliance reporting
• User and team management capabilities
• API access for programmatic integration

The specific features available to you depend on your Subscription tier. Feature details and plan comparisons are available on our Pricing page.

4. Subscription, Billing, and Payment

4.1 Subscription Plans

Services are offered on a subscription basis. Your plan, pricing, and billing cycle are as specified during registration or in an executed Order Form. All fees are quoted in U.S. dollars unless otherwise stated.

4.2 Payment

• Fees are billed in advance on a monthly or annual basis, depending on your plan
• Payment is due upon invoice. Overdue amounts may accrue interest at 1.5% per month (or the maximum rate permitted by law)
• All fees are non-refundable except as expressly stated in these Terms or required by law

4.3 Plan Changes

You may upgrade your plan at any time. Downgrades take effect at the end of the current billing period. We reserve the right to modify pricing with 30 days' advance notice.

4.4 Free Trial

We may offer a free trial period. At the end of the trial, your account will automatically convert to a paid Subscription unless you cancel before the trial expires. No credit card is required to start a trial unless otherwise indicated.

5. Customer Data and Data Processing

5.1 Ownership

You retain all rights, title, and interest in your Customer Data. SSOJet does not claim ownership of any Customer Data.

5.2 License to Process

You grant SSOJet a limited, non-exclusive license to process Customer Data solely to provide, maintain, and improve the Services as described in these Terms and our Privacy Policy.

5.3 Data Processing Agreement

Where required by applicable data protection laws (e.g., GDPR, CCPA), the processing of personal data is governed by our Data Processing Agreement (DPA), which is incorporated by reference into these Terms. Enterprise customers may request a signed DPA by contacting privacy@ssojet.com.

5.4 Data Security

We implement industry-standard security measures to protect Customer Data, including AES-256 encryption at rest, TLS 1.2+ in transit, SOC 2 Type II audited controls, and private cloud deployment options. See our Information Security Policy for details.

5.5 Data Portability and Deletion

You may export your data at any time through the Platform or API. Upon account termination, we will delete your Customer Data within 30 days, unless retention is required by law or explicitly requested.

6. Acceptable Use

You agree not to use the Services to:

• Violate any applicable law, regulation, or third-party rights
• Transmit malicious code, viruses, or any harmful software
• Attempt to gain unauthorized access to the Platform, other accounts, or related systems
• Reverse engineer, decompile, or disassemble any part of the Platform
• Interfere with or disrupt the integrity or performance of the Services
• Use the Services for any purpose other than its intended business authentication use
• Resell, sublicense, or redistribute the Services without written authorization
• Use automated tools to scrape, crawl, or extract data from the Platform

We reserve the right to suspend or terminate accounts that violate these restrictions, with notice where practicable.

7. Intellectual Property

7.1 SSOJet IP

The Platform, Documentation, APIs, trademarks, and all related intellectual property are owned by SSOJet and protected by applicable intellectual property laws. These Terms do not grant you any rights to SSOJet's intellectual property except the limited license to use the Services during your Subscription.

7.2 Feedback

If you provide suggestions, enhancement requests, or other feedback about the Services, we may use such feedback without restriction or obligation to you.

8. Service Level and Support

8.1 Availability

SSOJet targets 99.99% uptime for production authentication services. Current system status is available at status.ssojet.com. Scheduled maintenance windows will be communicated at least 48 hours in advance.

8.2 Support

Support is included with all paid plans. Response times, escalation procedures, and support channels vary by plan tier. Enterprise customers may negotiate custom SLAs under a separate agreement.

9. Confidentiality

Each party agrees to protect the other party's Confidential Information with the same degree of care it uses to protect its own confidential information (but no less than reasonable care). Confidential Information includes, but is not limited to, business plans, customer lists, technical data, pricing, and security configurations. This obligation does not apply to information that is publicly available, independently developed, or rightfully received from a third party.

10. Warranties and Disclaimers

10.1 SSOJet Warranties

SSOJet warrants that:

• The Services will perform materially in accordance with the Documentation
• We will implement commercially reasonable security measures to protect Customer Data
• We will comply with all applicable laws in providing the Services

10.2 Disclaimer

EXCEPT AS EXPRESSLY SET FORTH ABOVE, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE." SSOJET DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. SSOJET DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SSOJET'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS SHALL NOT EXCEED THE AMOUNTS PAID BY YOU TO SSOJET DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM. IN NO EVENT SHALL SSOJET BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITIES, REGARDLESS OF THE THEORY OF LIABILITY.

These limitations apply even if SSOJet has been advised of the possibility of such damages and regardless of whether a remedy fails of its essential purpose.

12. Indemnification

12.1 By SSOJet

SSOJet will defend, indemnify, and hold you harmless against any third-party claim that the Services infringe a valid intellectual property right, provided you give us prompt notice and reasonable cooperation.

12.2 By Customer

You will defend, indemnify, and hold SSOJet harmless against any third-party claim arising from (a) your use of the Services in violation of these Terms, (b) your Customer Data, or (c) your violation of applicable law.

13. Term and Termination

13.1 Term

These Terms are effective from the date you first access the Services and continue until terminated.

13.2 Termination for Convenience

Either party may terminate these Terms by providing 30 days' written notice. You may cancel your Subscription at any time through your account settings or by contacting support@ssojet.com.

13.3 Termination for Cause

Either party may terminate immediately if the other party materially breaches these Terms and fails to cure the breach within 30 days of written notice.

13.4 Effect of Termination

Upon termination: (a) your access to the Services will cease, (b) you will pay any outstanding fees, and (c) SSOJet will delete your Customer Data within 30 days unless you request an export or retention is required by law. Sections 5.1, 7, 9, 10.2, 11, 12, and 15 survive termination.

14. Modifications to Terms

We may update these Terms periodically. Material changes will be communicated at least 30 days before they take effect via email to the account owner and a notice on this page. Continued use of the Services after the effective date constitutes acceptance. If you disagree with the changes, you may terminate your Subscription before the effective date.

15. General Provisions

• Governing Law: These Terms are governed by the laws of the State of California, without regard to conflict of laws principles. Any disputes will be resolved in the state or federal courts located in San Francisco County, California.
• Severability: If any provision is held unenforceable, the remaining provisions remain in full force and effect.
• Entire Agreement: These Terms, together with the Privacy Policy, DPA, and any executed Order Form, constitute the entire agreement between the parties.
• Assignment: You may not assign these Terms without our prior written consent. SSOJet may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.
• Force Majeure: Neither party is liable for delays or failures caused by events beyond reasonable control, including natural disasters, acts of government, or internet disruptions.
• No Waiver: Failure to enforce any provision does not constitute a waiver of that provision or any other provision.

16. Contact

For questions about these Terms:

• Email: legal@ssojet.com
• General support: support@ssojet.com