Terms of Service

Own Auth Cloud provides an operational dashboard, analytics, advisory security signals, audit-log copies, and optional authentication email and SMS delivery for apps using Own Auth.

Own Auth Cloud does not create login tokens, verify application sessions, or become the source of truth for application users. The Own Auth package handles authentication locally. Cloud stores an operational read replica sent by the package and may send advisory commands that the package decides whether to execute.

You need a dashboard account to create apps, configure allowed URLs, create Cloud API keys, and view delivery logs.

You are responsible for keeping your account access secure and for activity that happens through your account or Cloud API keys.

A Cloud account can manage multiple standalone apps. Each app has isolated data, settings, quotas, Cloud API keys, operational views, and delivery logs.

• Cloud API keys must stay on your backend
• raw Cloud API keys are shown only once
• revoked keys must stop being used by your app
• allowed URLs should only include URLs controlled by your app

Own Auth Cloud delivery is for authentication email and SMS only. Do not use it for marketing campaigns, newsletters, cold outreach, spam, phishing, malware, impersonation, or unrelated messaging.

We may limit, suspend, or block delivery that appears abusive, unsafe, illegal, or likely to harm users, recipients, email infrastructure, or the Own Auth service.

We work to deliver authentication messages reliably, but email or SMS delivery is not guaranteed. Delivery can be affected by recipient rules, providers, rate limits, networks, sender reputation, carrier filtering, or abuse controls.

You are responsible for configuring your app's auth flows so users can safely recover from delayed, failed, or expired email links.

Cloud API keys are secrets. You must not expose them in browser code, mobile apps, public repositories, logs, screenshots, or client-side bundles.

If you believe a Cloud API key was exposed, rotate or revoke it from the dashboard as soon as possible.

We may update these terms as the service changes. Continued use of Own Auth Cloud after the terms change means you accept the updated terms.

Questions about these terms should go through the official Own Auth support channel.