Terms of Service

1. Acceptance of Terms

By creating an account, registering an application, or utilizing the NoctisID authentication broker ("Service"), you agree to be bound by these Terms of Service. If you are registering on behalf of an organization or tenant, you represent that you have the authority to bind that entity.

2. Acceptable Use & API Credentials

Tenants are granted API keys (client_id and client_secret) to integrate downstream websites. You are strictly responsible for:

• Keeping all client_secret values confidential and never exposing them in public repositories or browser-side code.
• Accurately maintaining the authorized redirect URIs and CORS origin whitelists for each registered domain.
• Refraining from any attempt to bypass rate limits, replay single-use tickets, or forge HMAC signatures.

3. Service Availability & SLA

NoctisID operates across high-availability distributed infrastructure with automated failover and threat mitigation. While we target 99.99% service availability, we do not warrant that social identity providers (Google, Apple, Meta, X) will experience uninterrupted service.

4. Termination & Deactivation

We reserve the right to suspend or terminate any tenant or client site found engaging in credential stuffing, phishing, spam distribution, or violations of third-party social provider terms.