These Terms of Service (“Terms”) govern your access to and use of the services provided by Mataki Labs LLC (“Authpipe,” “we,” “us,” or “our”), a Wyoming limited liability company, including the authpipe.dev website, the Authpipe Cloud platform, APIs, SDKs, and related services (collectively, the “Services”).
By accessing or using the Services, you agree to be bound by these Terms. If you do not agree, do not use the Services.
1. Definitions
- “Account” means your registered account on Authpipe Cloud.
- “Workspace” means an isolated environment within your Account that contains providers, connections, and configuration.
- “Provider” means a third-party API service (such as Google, Slack, or GitHub) that you configure Authpipe to connect with.
- “Connection” means a specific OAuth authorization between one of your end users and a Provider, including the associated tokens.
- “Installation” means a deployed instance of the Authpipe token proxy, either cloud-hosted or self-hosted.
- “Token” means an OAuth access token, refresh token, or any other credential obtained through the OAuth flow and stored by Authpipe.
- “Plan” means the subscription tier you have selected (Free, Pro, Scale, or Enterprise).
2. Account Registration
To use certain features of the Services, you must create an Account. You agree to:
- Provide accurate and complete registration information
- Maintain the security of your Account credentials and API keys
- Notify us immediately of any unauthorized use of your Account
- Accept responsibility for all activity that occurs under your Account
You must be at least 16 years old to create an Account. If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization to these Terms.
3. Use of the Services
3.1 License Grant
Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Services in accordance with your Plan.
3.2 Use Restrictions
You agree not to:
- Access, attempt to access, or use Tokens stored by Authpipe for any purpose other than through the documented Authpipe APIs
- Circumvent or disable any security features of the Services, including token encryption, access controls, or rate limiting
- Reverse engineer, decompile, or disassemble any proprietary part of the Services (except as permitted by applicable law or for open-source components licensed under the MIT License)
- Use the Services in violation of any applicable law or regulation
- Resell or redistribute access to the Services without our prior written consent
- Use the Services to store credentials for purposes unrelated to OAuth connection management
- Attempt to extract, decrypt, or exfiltrate Tokens from Authpipe storage outside of the documented API surface
- Use the Services to process or transmit any data that is subject to the International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR) without prior authorization
3.3 API Usage
Your use of the API is subject to the rate limits specified in your Plan. We reserve the right to throttle or suspend API access if usage patterns indicate abuse or threaten service stability. Rate limits are applied per workspace and are documented on our pricing page. We will provide reasonable notice before taking enforcement action, except in cases of imminent harm to service availability.
4. Subscriptions and Billing
4.1 Subscription Plans
The Services are offered under tiered subscription plans as described on our pricing page. Plan features, connected account limits, and pricing are subject to change with 30 days’ prior notice.
4.2 Billing
Paid Plans are billed monthly in advance. All fees are stated in U.S. dollars and are non-refundable except as expressly stated in these Terms or required by applicable law.
4.3 Connected Account Counting
Usage is measured by the number of active connected accounts (unique end-user connections to Providers) within a billing period. A connected account is counted as active if it holds at least one valid or recently-expired Token. Connections that have been disconnected for more than 30 days are not counted.
4.4 Overages
If your usage exceeds the connected account limit included in your Plan, overage charges will apply at the rates specified in your Plan. We will notify you when your usage approaches your Plan limit.
5. Content Ownership
5.1 Your Data
You retain all rights to your data, including Provider configurations, connection metadata, and any content you submit to the Services. We do not claim ownership of any data you submit.
5.2 Token Storage
Authpipe stores OAuth tokens solely for the purpose of providing the Services — specifically, token refresh, connection health monitoring, and token retrieval through the documented API. We do not use stored Tokens to access, read, or process data from Provider APIs on our own behalf.
5.3 License to Authpipe
You grant us a limited license to use, process, and store your data solely as necessary to provide the Services. This includes encrypting and storing Tokens, performing token refresh operations, and conducting connection health checks.
6. Data Processing
6.1 Roles
Authpipe acts as a data processor with respect to end-user OAuth tokens and connection data. You, as the customer, are the data controller and are responsible for ensuring you have a lawful basis to collect and store OAuth credentials for your end users through the Services.
6.2 Data Portability
You may export your connection metadata and configuration at any time through the API. Note that OAuth tokens cannot be exported due to security constraints — tokens are bound to the encryption context of your Authpipe workspace.
6.3 Data Deletion
Upon termination of your Account, we will delete your data, including all stored Tokens, within 30 days, except where retention is required by law or for legitimate business purposes (such as billing records).
7. Open Source Software
7.1 Open Source License
The Authpipe React SDK, backend SDKs (Node.js, Python, Go, Ruby, Elixir, .NET, Rust), and the token proxy are licensed under the MIT License. Your use of these open-source components is governed by that license, not these Terms.
7.2 Cloud Features
Certain features — including the managed token proxy, dashboard, provider catalog, connection analytics, and team management — are available exclusively through Authpipe Cloud and are governed by these Terms.
8. Third-Party Providers
8.1 Provider Responsibility
Authpipe facilitates OAuth connections to third-party Provider APIs. We are not responsible for changes to Provider APIs, including deprecations, breaking changes, scope modifications, or outages. We will make reasonable efforts to update our Provider integrations in response to known changes, but we do not guarantee compatibility with all Provider API versions at all times.
8.2 Provider Terms
Your use of each Provider is governed by that Provider’s own terms of service and privacy policy. You are responsible for complying with all applicable Provider terms when using connections established through Authpipe.
9. Service Availability
9.1 Uptime
We target 99.9% uptime for Authpipe Cloud on the Enterprise plan. Planned maintenance windows will be announced at least 48 hours in advance.
9.2 Service Level Agreement
Enterprise Plan customers may negotiate a separate Service Level Agreement (SLA) with specific uptime commitments, response times, and remedies.
9.3 Modifications
We reserve the right to modify, suspend, or discontinue any part of the Services at any time. For material changes, we will provide at least 30 days’ notice. We will not be liable to you for any modification, suspension, or discontinuation of the Services.
10. Intellectual Property
10.1 Authpipe IP
The Services (excluding open-source components), including the Authpipe Cloud platform, dashboard, provider catalog, documentation, trademarks, and proprietary technology, are owned by Mataki Labs LLC and protected by intellectual property laws. Nothing in these Terms grants you rights to our trademarks or branding.
10.2 Feedback
If you provide feedback, suggestions, or ideas about the Services, you grant us an unrestricted, irrevocable, perpetual license to use that feedback for any purpose without obligation to you.
11. Disclaimers
THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY.
WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, THAT TOKEN REFRESH WILL ALWAYS SUCCEED, OR THAT ANY DEFECTS WILL BE CORRECTED. WE DO NOT WARRANT THE AVAILABILITY, PERFORMANCE, OR COMPATIBILITY OF ANY THIRD-PARTY PROVIDER API.
12. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL AUTHPIPE, ITS DIRECTORS, OFFICERS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICES.
OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE LESSER OF (A) THE AMOUNTS YOU PAID TO US IN THE TWELVE MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100).
13. Indemnification
You agree to indemnify, defend, and hold harmless Authpipe and its officers, directors, employees, and agents from any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to:
- Your use of the Services
- Your violation of these Terms
- Your violation of any applicable law or regulation
- Your use of Tokens obtained through the Services, including any claim that your use of a Provider API violates that Provider’s terms of service
- Any claim by your end users related to the storage or handling of their OAuth credentials
14. Termination
14.1 By You
You may terminate your Account at any time by contacting us or using the account settings. Termination takes effect at the end of your current billing period.
14.2 By Authpipe
We may suspend or terminate your Account if:
- You violate these Terms
- Your Account is used for illegal activity
- You fail to pay fees when due after 15 days’ written notice
- We are required to do so by law
We will provide reasonable notice before termination except in cases of egregious violation or legal requirement.
14.3 Effect of Termination
Upon termination, your right to use the Services ceases immediately. We will make your data available for export for 30 days following termination, after which all data including stored Tokens will be permanently deleted. Sections 5.1, 10, 11, 12, 13, 15, and 16 survive termination.
15. Governing Law and Dispute Resolution
15.1 Governing Law
These Terms are governed by the laws of the State of Wyoming, United States, without regard to its conflict of law provisions.
15.2 Dispute Resolution
Any dispute arising out of or relating to these Terms shall first be attempted to be resolved through good-faith negotiation between the parties. If the dispute cannot be resolved within 30 days, either party may initiate binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules. The arbitration shall take place in the State of Wyoming. The arbitrator’s decision shall be final and binding.
15.3 Class Action Waiver
You agree to resolve disputes with us on an individual basis. You waive any right to participate in a class action, class arbitration, or representative proceeding.
15.4 Small Claims Exception
Either party may bring a claim in small claims court in the State of Wyoming if the claim qualifies.
16. General Provisions
16.1 Entire Agreement
These Terms, together with the Privacy Policy, constitute the entire agreement between you and Authpipe regarding the Services and supersede all prior agreements.
16.2 Severability
If any provision of these Terms is held to be unenforceable, the remaining provisions shall remain in full force and effect.
16.3 Waiver
Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.
16.4 Assignment
You may not assign or transfer these Terms without our prior written consent. We may assign these Terms without restriction.
16.5 Notices
We may provide notices to you via email to the address associated with your Account or by posting on the Services. Notices to Authpipe should be sent to legal@authpipe.dev.
Contact Us
If you have questions about these Terms, contact us at:
Mataki Labs LLC State of Wyoming Email: legal@authpipe.dev