Clear, fair terms for developers and teams building with Auth1.
By creating an account, accessing, or using any part of the Auth1 platform ("Service"), you agree to be bound by these Terms of Service ("Terms"). If you are using the Service on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.
If you do not agree with any part of these Terms, you must not use the Service. Your continued use of the Service after any modifications to these Terms constitutes acceptance of those changes.
Auth1 is a multi-tenant authentication platform that provides the following capabilities:
We provide REST APIs, client SDKs (@auth1/js, @auth1/react), and hosted authentication infrastructure. The Service is available as a managed cloud offering and, for Enterprise customers, as a self-hosted deployment.
To use the Service, you must create an account. When registering, you agree to:
You must be at least 18 years of age to create an account. If you are between 13 and 18, you may only use the Service with the consent and supervision of a parent or legal guardian who agrees to be bound by these Terms.
Each individual may maintain one account. Creating multiple accounts to circumvent rate limits, plan restrictions, or enforcement actions is prohibited.
You agree to use the Service responsibly. Specifically, you agree not to:
We reserve the right to investigate potential violations and take appropriate action, including suspension or termination of your account.
Your use of the Auth1 API is subject to the rate limits and usage quotas associated with your plan:
If you exceed your plan's limits, we may temporarily throttle your API requests until the next billing cycle or until you upgrade your plan. We will make reasonable efforts to notify you before throttling takes effect.
Sustained abuse of the Service — including but not limited to automated scraping, brute-force attacks, or intentional overloading — may result in immediate suspension of your account.
Important: This section outlines your obligations under the Telephone Consumer Protection Act (TCPA) and CAN-SPAM Act when using Auth1's messaging features.
By using Auth1's SMS OTP, email verification, or any messaging features, you confirm and agree that:
Auth1 records consent metadata (including timestamp, IP address, and user agent) to assist with compliance. However, the legal obligation to obtain valid consent rests entirely with you as the data controller. Auth1 is not responsible for any fines, penalties, or legal actions arising from your failure to obtain proper consent.
In providing the Service, we process personal data including email addresses, phone numbers, IP addresses, device information, and authentication metadata. Our roles are defined as follows:
We process data only as necessary to deliver the Service and in accordance with our Privacy Policy. Enterprise customers may request a Data Processing Agreement (DPA) by contacting legal@auth1.ai.
Auth1's platform, APIs, SDKs, documentation, branding, and all related intellectual property are owned by Auth1, Inc. and are protected by applicable intellectual property laws. These Terms do not grant you any rights to use our trademarks, logos, or branding without written permission.
The open-source auth-shield library is licensed under the MIT License. Your use of that library is governed by its license terms, not these Terms.
You retain full ownership of your application code, data, and any content you create using the Service. We claim no intellectual property rights over your work.
The Free plan requires no payment and no credit card. For paid plans:
We may change our pricing at any time. We will provide at least 30 days' advance notice of any price increase via email. Price changes will take effect at the start of your next billing cycle after the notice period.
Auth1 offers the following uptime commitments by plan:
"Uptime" is measured as the percentage of time the Auth1 API is available and responsive (HTTP 2xx or 4xx responses within 5 seconds), excluding scheduled maintenance windows communicated at least 48 hours in advance.
SLA credits are applied as account credits toward future billing cycles and are capped at 30% of the affected month's fees. To claim an SLA credit, you must submit a request to support@auth1.ai within 30 days of the incident.
Enterprise customers who elect to self-host the Auth1 platform on their own infrastructure acknowledge and agree that:
We take data security seriously and implement industry-standard measures to protect your data, including:
While we implement rigorous security measures, no system is 100% secure. We cannot guarantee that unauthorized access, data breaches, or security incidents will never occur. In the event of a security incident affecting your data, we will notify you as required by applicable law.
THE SERVICE IS PROVIDED "AS-IS" AND "AS-AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:
These limitations apply regardless of the theory of liability (contract, tort, strict liability, or otherwise) and even if Auth1 has been advised of the possibility of such damages.
You agree to defend, indemnify, and hold harmless Auth1, Inc., its officers, directors, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:
Either party may terminate this agreement at any time:
Upon termination:
Enterprise customers only. This section applies if you process Protected Health Information (PHI) through Auth1.
If you are a Covered Entity or Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) and intend to use Auth1 to authenticate users who access systems containing Protected Health Information (PHI):
We may update these Terms from time to time to reflect changes in our Service, legal requirements, or business practices. When we make material changes:
Your continued use of the Service after the updated Terms take effect constitutes your acceptance of the changes. If you do not agree with the updated Terms, you must stop using the Service and terminate your account.
These Terms are governed by and construed in accordance with the laws of the State of Florida, United States, without regard to its conflict-of-law principles.
MANDATORY BINDING ARBITRATION & CLASS ACTION WAIVER. Please read this section carefully. It affects your legal rights.
Any dispute, claim, or controversy arising out of or relating to these Terms, the Service, your use of the Service, or any related matter (collectively, "Disputes") shall be resolved exclusively through final and binding individual arbitration, rather than in court, except as set forth below. This includes claims that arose before these Terms became effective.
Arbitration shall be administered by the American Arbitration Association ("AAA") under its Commercial Arbitration Rules and the Supplementary Procedures for Consumer-Related Disputes (if applicable). The arbitration shall take place in Miami-Dade County, Florida, or at the election of the claimant, via telephone, video conference, or based on written submissions.
The arbitrator shall have exclusive authority to resolve any Dispute, including any claim that all or part of this arbitration provision is void or voidable. The arbitrator's decision shall be final and binding, and judgment on the award may be entered in any court of competent jurisdiction in the State of Florida.
YOU AND AUTH1 AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING. The arbitrator may not consolidate more than one person's claims and may not preside over any form of class, consolidated, or representative proceeding. If this specific provision is found to be unenforceable, then the entirety of this arbitration section shall be null and void (but the remaining Terms shall continue in effect).
YOU AND AUTH1 HEREBY WAIVE ANY CONSTITUTIONAL AND STATUTORY RIGHTS TO SUE IN COURT AND HAVE A TRIAL IN FRONT OF A JUDGE OR A JURY. You and Auth1 are instead electing to have claims and disputes resolved by arbitration. There is no judge or jury in arbitration, and court review of an arbitration award is limited.
ALL CLAIMS AND DISPUTES WITHIN THE SCOPE OF THIS ARBITRATION AGREEMENT MUST BE ARBITRATED ON AN INDIVIDUAL BASIS AND NOT ON A CLASS OR COLLECTIVE BASIS. ONLY INDIVIDUAL RELIEF IS AVAILABLE, AND CLAIMS OF MORE THAN ONE USER CANNOT BE ARBITRATED OR CONSOLIDATED WITH THOSE OF ANY OTHER USER.
Notwithstanding the foregoing, the following shall not be subject to the arbitration requirement:
To the extent that litigation is permitted under these Terms (including the exceptions above), you and Auth1 agree that any judicial proceedings shall be brought exclusively in the state or federal courts located in Miami-Dade County, Florida. Both parties consent to the personal jurisdiction and venue of such courts and waive any objection based on inconvenient forum.
You have the right to opt out of the arbitration and class action waiver provisions by sending written notice of your decision to opt out to legal@auth1.ai within 30 days of first accepting these Terms. Your notice must include your name, email address, and a clear statement that you wish to opt out of arbitration. If you opt out, you and Auth1 may litigate Disputes exclusively in the state or federal courts located in Miami-Dade County, Florida.
ANY CAUSE OF ACTION OR CLAIM YOU MAY HAVE ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE MUST BE COMMENCED WITHIN ONE (1) YEAR AFTER THE CAUSE OF ACTION ACCRUES. OTHERWISE, SUCH CAUSE OF ACTION OR CLAIM IS PERMANENTLY BARRED. This limitation applies regardless of whether the claim sounds in contract, tort, strict liability, or otherwise.
If any provision of these Terms is found to be unenforceable by a court or arbitrator, the remaining provisions will continue in full force and effect. If the class action waiver (Section 18.2) is found to be unenforceable as to a particular claim or request for relief, then the entire arbitration section shall be deemed void as to that claim only.
If you have questions about these Terms, please contact us:
Auth1, Inc.
Email: legal@auth1.ai
General inquiries: support@auth1.ai