Skip to content
Sign up freeSign in

Legal review required

This document is a draft and has not been reviewed by legal counsel. Do not treat it as final legal language.

Effective date: 2026-02-16

Last updated: 2026-02-16

Terms of Service

Plain English Summary

These terms explain how to use SingleSign, what's allowed and not allowed, and how we handle availability, changes, and account termination.

1. Definitions

The following definitions apply throughout these Terms of Service:

  • "SingleSign" refers to the SingleSign identity platform, its website, APIs, and all associated services operated by SingleSign.
  • "Service" means the authentication, authorization, and identity management functionality provided by SingleSign, including OAuth 2.0 and OpenID Connect flows.
  • "User" means any individual who creates an account on SingleSign or uses the Service to sign in to third-party applications.
  • "Developer" means any individual or entity that integrates SingleSign into their application or service using the SingleSign Developer APIs.
  • "App" (or "Application") means any software application, website, or service registered by a Developer to use SingleSign for authentication or authorization.
  • "Account" means a User's registered identity on SingleSign, including their profile information, credentials, and consent preferences.
  • "Content" means any data, information, text, or materials that a User provides to or through the Service.

2. Eligibility

To use SingleSign, you must meet the following requirements:

  • Age requirement: You must be at least 13 years of age. If you are under 18, you must have the consent of a parent or legal guardian.
  • Accurate information: You must provide accurate, current, and complete information when creating your Account and keep it up to date.
  • Legal capacity: You must have the legal capacity to enter into a binding agreement in your jurisdiction.
  • Compliance: You must comply with all applicable local, state, national, and international laws and regulations when using the Service.

If we discover or reasonably believe that any information you provided is inaccurate, incomplete, or fraudulent, we may suspend or terminate your Account without notice.

3. Your Account

You are responsible for maintaining the security and confidentiality of your Account:

  • Credentials: You are solely responsible for safeguarding your password and any other credentials associated with your Account. We strongly recommend enabling multi-factor authentication (MFA).
  • Unauthorized access: You must notify SingleSign immediately at security@singlesign.com if you become aware of any unauthorized access to or use of your Account.
  • Account activity: You are responsible for all activity that occurs under your Account, whether or not authorized by you, until you report unauthorized access.
  • Unique accounts: Each User may maintain only one Account. Creating multiple accounts to circumvent restrictions or for deceptive purposes is prohibited.
  • Account sharing: You may not share your Account credentials with others or allow others to access your Account.

4. Acceptable Use

When using SingleSign, you agree not to:

  • Commit fraud: Use the Service for any fraudulent, deceptive, or misleading purpose.
  • Abuse the Service: Interfere with, disrupt, or place an unreasonable burden on the Service or its infrastructure.
  • Reverse engineer: Decompile, disassemble, reverse engineer, or otherwise attempt to derive the source code of the Service.
  • Scrape or harvest data: Use automated means (bots, scrapers, crawlers) to access, collect, or extract data from the Service without prior written permission.
  • Impersonate: Impersonate any person or entity, or falsely claim an affiliation with any person or entity.
  • Distribute malware: Upload, transmit, or distribute any viruses, worms, Trojan horses, or other malicious code through the Service.
  • Circumvent security: Attempt to bypass, disable, or circumvent any security features, rate limits, or access controls of the Service.
  • Engage in illegal activity: Use the Service for any purpose that is unlawful, harmful, or prohibited by these Terms.
  • Credential stuffing: Use the Service to test stolen credentials or engage in brute-force attacks against accounts.

Violations of this section may result in immediate suspension or termination of your Account. See our Acceptable Use Policy for additional details.

5. Developer Responsibilities

If you are a Developer integrating SingleSign into your application, you agree to the following:

  • Follow OAuth specifications: Your integration must comply with the OAuth 2.0 (RFC 6749) and OpenID Connect specifications. You must use PKCE for public clients.
  • Accurate branding: Your application must accurately represent its identity and purpose to Users. You may not misrepresent your affiliation with SingleSign or other parties.
  • Honor user consent: You must only request the scopes your application genuinely needs. You must respect Users' decisions to grant or deny consent, and you must not attempt to circumvent the consent process.
  • Client secret confidentiality: You must keep your client secrets confidential. Client secrets must never be embedded in client-side code, mobile applications, or any publicly accessible location.
  • Redirect URI validation: You must register valid redirect URIs and must not use open redirectors or wildcard URIs.
  • Data handling: You must handle any User data received through SingleSign in accordance with your published privacy policy, applicable laws, and the scopes approved by the User.
  • Security: You must use HTTPS for all communications with the SingleSign APIs. You must implement appropriate security measures to protect User data.

SingleSign reserves the right to revoke API access for any Developer who violates these responsibilities.

6. Service Availability

SingleSign strives to provide a reliable and available service, but we cannot guarantee uninterrupted access:

  • Best-effort availability: We use commercially reasonable efforts to maintain the availability of the Service, but do not guarantee 100% uptime.
  • Scheduled maintenance: We may perform scheduled maintenance from time to time. When possible, we will provide advance notice of planned maintenance windows.
  • No guaranteed SLA for free tier: The free tier of SingleSign is provided without a Service Level Agreement (SLA). Paid tiers may include specific SLA commitments as outlined in their respective agreements.
  • Service modifications: We reserve the right to modify, update, or discontinue any aspect of the Service at any time. Material changes will be communicated with reasonable advance notice.
  • Force majeure: SingleSign is not responsible for unavailability caused by circumstances beyond our reasonable control, including natural disasters, acts of war, government actions, or third-party service outages.

7. Privacy

Your privacy is important to us:

  • Privacy Policy: Your use of the Service is also governed by our Privacy Policy, which describes how we collect, use, and protect your personal information.
  • Data handling: All data collection, storage, and processing are governed by the Privacy Policy. By using the Service, you acknowledge and agree to the data practices described therein.
  • Cookies: Our use of cookies and similar technologies is described in our Cookie Policy.

8. Intellectual Property

  • SingleSign IP: SingleSign and its licensors retain all right, title, and interest in and to the Service, including all software, designs, trademarks, service marks, logos, and other intellectual property. Nothing in these Terms grants you any right to use the SingleSign name, logo, or trademarks without prior written consent.
  • Your data: You retain all rights to the data and content you provide to SingleSign. By using the Service, you grant SingleSign a limited, non-exclusive license to use your data solely for the purpose of operating and improving the Service.
  • Feedback: If you provide suggestions, ideas, or feedback about the Service, you grant SingleSign a perpetual, irrevocable, worldwide, royalty-free license to use and incorporate such feedback without obligation to you.

9. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED.

To the fullest extent permitted by applicable law:

  • SingleSign disclaims all warranties, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
  • SingleSign does not warrant that the Service will be uninterrupted, error-free, secure, or free of viruses or other harmful components.
  • SingleSign does not warrant the accuracy, completeness, or reliability of any content or information provided through the Service.
  • Any reliance on the Service is at your sole risk.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

  • Cap on damages: SingleSign's total aggregate liability to you for any and all claims arising out of or relating to these Terms or the Service shall not exceed the greater of (a) the amounts you paid to SingleSign in the twelve (12) months preceding the claim, or (b) one hundred US dollars ($100).
  • Exclusion of consequential damages: In no event shall SingleSign be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill, regardless of the cause of action or the theory of liability, even if SingleSign has been advised of the possibility of such damages.
  • Exceptions: Some jurisdictions do not allow the exclusion or limitation of certain damages. In such jurisdictions, SingleSign's liability shall be limited to the greatest extent permitted by law.

11. Indemnification

You agree to indemnify, defend, and hold harmless SingleSign, its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:

  • Your use of the Service in violation of these Terms.
  • Your violation of any applicable law or regulation.
  • Your violation of any third-party rights, including intellectual property or privacy rights.
  • Any content or data you provide through the Service.
  • Any application you develop using the SingleSign APIs that causes harm to Users or third parties.

This indemnification obligation survives the termination of your Account and these Terms.

12. Termination

Either party may terminate this agreement:

  • By you: You may terminate your Account at any time by using the account deletion feature in your settings or by contacting support@singlesign.com.
  • By SingleSign: We may suspend or terminate your Account at any time for any reason, including but not limited to:
    • Violation of these Terms or any applicable policy.
    • Fraudulent, abusive, or illegal activity.
    • Extended inactivity (accounts inactive for more than 24 months).
    • A request by law enforcement or a government agency.
  • Immediate termination: SingleSign reserves the right to immediately terminate or suspend your Account without prior notice if we reasonably believe your actions pose a security risk, may cause liability, or are in violation of these Terms.
  • Effect of termination: Upon termination, your right to use the Service ceases immediately. We may retain certain data as required by law or for legitimate business purposes, as described in our Privacy Policy.

13. Governing Law

  • Applicable law: These Terms shall be governed by and construed in accordance with the laws of the United States and the State of Delaware, without regard to conflict of law principles.
  • Dispute resolution: Any dispute arising out of or relating to these Terms or the Service shall first be resolved through good-faith negotiation. If negotiation fails, the dispute shall be resolved through binding arbitration in accordance with the rules of the American Arbitration Association, conducted in English.
  • Class action waiver: You agree that any dispute resolution proceedings will be conducted on an individual basis and not as part of a class, consolidated, or representative action.
  • Jurisdiction: For any matters not subject to arbitration, you consent to the exclusive jurisdiction of the state and federal courts located in Delaware.

14. Contact

If you have questions about these Terms of Service, please contact us:

We will make every effort to respond to inquiries within five (5) business days.