Terms of Service
Effective 2026-10-27
About these terms
Section titled “About these terms”Zautha is an authentication service operated by an individual based in Türkiye (“Zautha”, “we”, “us”). These terms are the agreement between us and you: the person, or the organization you act for, that creates a Zautha account or uses a workspace. If you accept them for an organization, you confirm that you may bind it.
You accept these terms by continuing when you sign up, sign in or accept an invitation to a workspace. Our Privacy Policy explains how we handle personal data, and our Data Processing Agreement is part of these terms.
You must be old enough to enter into a contract where you live, and at least 18.
The service
Section titled “The service”Zautha lets you add sign-up, sign-in and account management to your applications: hosted sign-in pages, ready-made components, SDKs, the Backend API, webhooks, an OpenID Connect provider and the dashboard where you manage them. The documentation describes what the service does.
We improve and change the service over time. When a change removes something the Pro plan includes, we tell the owners of the workspaces on Pro by email in advance.
Your account and workspace
Section titled “Your account and workspace”- Keep your account’s sign-in details and your secret keys (
sk_…) safe. Anything done with your account, by the members of your workspace or with your workspace’s secret keys is your responsibility. - Give us an email address where we can reach you, and keep it up to date.
- Tell us at support@zautha.com as soon as you suspect that someone else has access to your account or a secret key.
Your applications and your users
Section titled “Your applications and your users”- For your end users’ personal data, you are the controller and we are your processor, as the Data Processing Agreement sets out. You are responsible for having a legal basis for that data, for telling your users how you use it (your own privacy policy), and for answering their requests. Our dashboard and the Backend API let you find, change and delete your users.
- You configure your applications: who may sign up, which sign-in methods they use, which origins are allowed, which webhook endpoints receive events. We follow that configuration as your instructions.
- Development instances are for building and testing. Use a production instance for real users.
- Do not store sensitive data (such as payment card numbers, passwords, government identification numbers or health data) in user, organization or invitation metadata. Metadata is not designed for it.
- Impersonation is for supporting your users. Use it only as your own terms and privacy policy allow.
Acceptable use
Section titled “Acceptable use”You may not use Zautha, or let your applications use it:
- for anything unlawful, or to infringe anyone’s rights;
- for fraud or phishing, to pretend to be someone else, or to collect other people’s sign-in details;
- to send spam or other unwanted messages through the emails the service sends;
- to distribute malware;
- to probe, scan, test or attack the service or another customer’s application, or to disrupt the service, except as our vulnerability disclosure policy permits. Report a security issue to security@zautha.com;
- to get around the service’s limits, its rate limits, its bot check or a plan’s limits, for example by spreading one application over several workspaces;
- to access data of other customers or of applications you were not given access to.
If you break these rules, we may suspend the affected application or workspace (see Suspension and termination).
Plans, prices and usage
Section titled “Plans, prices and usage”- There are two plans, Free and Pro. Their prices and limits are on the Pricing page; how usage is counted is in Usage and billing.
- Usage is measured in monthly retained users (MRU) per application. A plan’s limits never stop your users from signing in. On Free, an application over its MRU limit two months in a row stops the workspace from creating new applications, until a month under the limit or an upgrade to Pro.
- Pro is a monthly or yearly subscription. Each application includes a number of MRU; the MRU above it are billed monthly, after the month, at the price on the Pricing page.
- We may change our prices. We tell the owners of workspaces on Pro by email at least 30 days before; the new price applies from the next billing period after that.
Payment
Section titled “Payment”Pro is sold through Polar Software, Inc. (polar.sh), our merchant of record: Polar is the seller and reseller of record, so you buy the subscription from Polar, which takes the payment, works out and charges any sales tax or VAT, and sends the receipts. Polar’s own terms for buyers apply to the purchase. Card and other payment details go to Polar directly and never reach us.
The subscription renews automatically at the end of each period until it is cancelled. If a payment fails, the workspace stays on Pro for 7 days; if it is still not paid then, the workspace returns to Free.
Cancellation and refunds
Section titled “Cancellation and refunds”You can cancel Pro at any time from the workspace’s Billing page. The cancellation takes effect at the end of the period you paid for; the workspace then returns to Free. Nothing is deleted, except audit log entries and webhook events older than the Free plan keeps.
Refunds: if you ask within 14 days of a subscription’s first payment, we refund that payment in full. Write to support@zautha.com from the workspace’s billing email address. After those 14 days, payments are not refunded, including for the rest of a period after a cancellation and for usage already billed. Deleting a workspace ends its subscription at once; the rest of the paid period is not refunded, except within the 14 days above.
This does not limit Polar’s own right to refund a payment under its terms (within 60 days of the payment), or any right to a refund or to withdraw that the law of your country gives you and that cannot be excluded.
No service level agreement
Section titled “No service level agreement”We work to keep Zautha available and secure (our security measures are in Annex II of the Data Processing Agreement), and we show the service’s status on our status page. But there is no service level agreement on any plan: we do not promise any level of availability or performance, and the service may be interrupted for maintenance or by failures.
Suspension and termination
Section titled “Suspension and termination”- You may stop using Zautha at any time: delete your applications and your workspace in the dashboard.
- We may suspend or close an application, a workspace or an account if you seriously or repeatedly break these terms, if the law requires it, or if its use puts the service, other customers or their users at risk. Where we reasonably can, we tell you first and give you time to fix the problem.
- We may stop offering Zautha altogether. We tell the owners of all workspaces by email at least 30 days before, so they can move their users elsewhere.
Your data
Section titled “Your data”- Your data stays yours. We use it only to provide the service, as the Privacy Policy and the Data Processing Agreement describe.
- You can read your users at any time with the Backend API, for example to move them to another service.
- When you delete an application, its users and their data are deleted within about an hour, and from our backups when those expire after 14 days. Deleting a workspace deletes its members, invitations and audit log.
Intellectual property
Section titled “Intellectual property”The service, the dashboard and the documentation are ours. Our SDKs are published under the MIT license, which lets you use them freely. If you send us feedback or ideas, we may use them without any obligation to you.
Disclaimer
Section titled “Disclaimer”The service is provided “as is” and “as available”. To the extent the law allows, we make no promises about it beyond those in these terms, including that it is fit for a particular purpose or free of errors.
Limitation of liability
Section titled “Limitation of liability”To the extent the law allows:
- we are not liable for indirect or consequential loss, such as lost profits, revenue, business or data;
- our total liability for all claims about the service is limited to the greater of the amounts paid for your workspace’s subscription in the 12 months before the claim and 100 US dollars.
These limits do not apply where the law does not allow them to, for example for harm caused intentionally or by gross negligence.
You are responsible for claims made against us by your users or by others that arise from your applications or from your breaking these terms.
Changes to these terms
Section titled “Changes to these terms”We may update these terms. We publish the new version on this page with its effective date. For a change that significantly affects your rights, we also tell the owners of every workspace by email at least 30 days before it takes effect. If you keep using Zautha after that, the new terms apply; if you do not agree, you may stop using it.
Governing law and courts
Section titled “Governing law and courts”These terms are governed by the law of the Republic of Türkiye. The courts and enforcement offices of Istanbul have jurisdiction over any dispute about them. If you are a consumer in the EU, you keep the protection of the mandatory rules of the country where you live.
Contact
Section titled “Contact”Questions about these terms: support@zautha.com. Questions about personal data: privacy@zautha.com.