Terms of Service

These terms describe the proposed agreement between the operator of Harbor Cloud (Harbor Cloud, we, us) and the person or organization using its websites, hosted sign-in service, customer portal, and APIs (the service). The operator’s legal identity and address will be added before these terms take effect.

If you create or manage an account for an organization, you confirm that you are authorized to accept these terms for it. A separate agreement signed with us controls where it conflicts with these terms. The Privacy Policy explains our handling of personal information; accepting these terms does not provide blanket consent to unrelated data processing.

You must be at least 18 and legally able to enter this agreement to open a direct Harbor Cloud account. Business customers are responsible for any additional requirements that apply to the people using their own applications.

Harbor provides passkey sign-in and lets you approve connections to other sites. Harbor Cloud provides hosted identity integrations and tools for business customers, including supported OIDC and SAML connections. Available features and limits depend on your plan and configuration.

Each connected site receives its own account identifier. This reduces matching through identifiers alone; it does not prevent a site from recognizing you through information you share, such as an email address. Connected sites operate independently and have their own terms and privacy practices.

We may maintain, update, or replace features. We will give reasonable advance notice of changes that materially reduce a paid service, unless urgent security, legal, or operational needs prevent it. Experimental or preview features may change or end and should not be used where their failure could cause serious harm.

Provide accurate account and billing details, keep your contact email current, and protect your passkeys, devices, API keys, and administrator access. Use individual administrator accounts where available and remove access when it is no longer needed. Tell us promptly at [email protected] if you suspect unauthorized access.

Harbor receives your passkey’s public key, not its private key. If you lose every registered passkey and have no supported recovery method, we may be unable to restore access. Keep another supported way to sign in where available. Do not rely on a recovery feature that is described as planned.

You are responsible for activity you authorize through your account and for reasonable precautions against misuse. You are not responsible under this clause for activity caused by our failure to meet our own obligations.

Business customers control their applications, redirect URLs, requested identity attributes, administrator permissions, and use of information received from Harbor. Configure integrations securely, request only information you need, and provide your users with appropriate notices and choices.

You retain ownership of the information and configuration you provide. You authorize us to process it only as needed to provide, secure, support, and administer the service, comply with law, and follow your lawful instructions. This permission does not transfer ownership of your data to us.

You must have the rights and legal basis needed to provide personal information and instruct us to process it. Where a data processing agreement or transfer arrangement is required, arrange it with us before sending that data. These terms alone are not a data processing agreement and do not establish an international transfer mechanism.

Do not use the service for fraud, phishing, impersonation, unlawful surveillance, distributing malware, or violating another person’s rights. Do not access accounts or data without permission, bypass access controls or plan limits, interfere with service availability, or test systems you do not have permission to test.

Do not sell access to another person’s identity or use the service to collect sensitive information unrelated to authentication. Report suspected vulnerabilities to [email protected] and avoid accessing other people’s information while investigating them.

We may apply reasonable rate limits and safeguards to protect users and infrastructure. We may restrict activity that creates a credible security, legal, or availability risk, and will explain the restriction when doing so is lawful and safe.

The published pricing page and any order you accept describe your plan’s allowance, price, billing period, and applicable usage charges. The current public offering includes a free allowance for the first one million monthly active users, paid plans starting at $99 per month, and separately quoted Enterprise arrangements. Your accepted order controls the charges for your account.

Opening a free account does not by itself authorize a paid subscription. We will disclose paid charges and obtain your authorization before enrolling you in a paid plan. If usage exceeds a free allowance without a paid agreement, we may limit service after notice rather than charge you without authorization.

For recurring paid plans, you authorize the disclosed recurring charges until cancellation takes effect. You are responsible for applicable taxes other than taxes on our income. You may cancel through available account controls or by contacting support. Unless your order or applicable law says otherwise, cancellation stops the next renewal and you retain paid access through the current billing period.

Fees for an elapsed or current billing period are generally nonrefundable except where law, your order, or a service commitment requires a refund. Contact support about incorrect charges. We will give at least 30 days’ notice of a recurring price increase, which will apply no earlier than the next renewal after that notice; you may cancel before it takes effect.

We and our licensors retain rights in the service, documentation, and branding. During your permitted use, you may access the service and use its documentation to operate your integrations. You may not imply our endorsement or copy proprietary parts of the service except as permitted by law or a separate license.

Components released under an open-source license remain governed by that license. If you voluntarily provide feedback, you allow us to use it to improve the service without payment or an obligation to credit you. Do not include confidential information in feedback unless we have agreed to protect it.

You may stop using the service and request account closure at any time. Stopping use alone does not cancel a paid subscription; submit a cancellation request as described above. Export or request a copy of information you need before closing the account. Self-service export is not currently available.

We may suspend or terminate access for a material breach, unpaid authorized fees, a legal requirement, or a credible security risk. Where practical, we will give notice and a reasonable chance to fix the problem before terminating access. We may act immediately where delay would create harm or violate law.

Cancellation and erasure are separate requests. When you request deletion, we remove or make covered data inaccessible subject to the retention limits in the Privacy Policy. Financial records, limited security records, and proof of erasure may need to remain. Obligations that by their nature continue, including payment of accrued charges and the limits below, survive closure.

We will provide the service with reasonable care and skill. Unless we agree to a separate service-level commitment, we do not promise uninterrupted availability, a particular uptime percentage, or that every error will be corrected. Network providers, connected sites, devices, and other services can affect access.

To the extent permitted by law, the service is otherwise provided as available, without additional implied warranties of merchantability, fitness for a particular purpose, or noninfringement. Nothing here excludes a warranty or consumer right that cannot lawfully be excluded. Do not use the service as the sole safeguard for a system where an authentication failure could cause death or serious physical injury.

To the extent permitted by law, neither party is liable to the other for indirect or consequential loss, lost profits, lost business opportunities, or loss of goodwill arising from the service. Each party’s total liability under these terms is limited to the greater of $100 or the fees you paid or owed us for the service in the 12 months before the event giving rise to the claim.

These exclusions and limits do not apply to fraud, willful misconduct, gross negligence, death or personal injury caused by negligence, your obligation to pay authorized fees, or any liability that applicable law does not allow us to limit. Mandatory consumer protections remain in force.

Contact [email protected] first so we can try to resolve a concern. We will work with you in good faith. This does not prevent either party from seeking urgent relief or exercising rights within an applicable legal deadline.

These draft terms do not select a governing law, exclusive court, arbitration process, or class-action waiver. The operator’s jurisdiction and any proposed dispute provisions will be stated before the terms take effect. Your mandatory rights under applicable law are preserved.

We will post an updated version and effective date when these terms change. For a material change, we will give reasonable advance notice by email or through the service and request renewed acceptance where required. Changes do not apply retroactively to an existing dispute. If you disagree, you may stop using the service and cancel before the change takes effect.

A failure to enforce a provision immediately does not waive it. If a provision cannot be enforced, the remaining terms continue to the extent permitted by law. Contact [email protected] for account, billing, or legal questions; the operator’s postal contact will be added before publication.