Terms of Service

1. Who these terms apply to

These Terms of Service ("Terms") are an agreement between you, personally or on behalf of the organization you represent, and Triton Agency, LLC, a South Carolina limited liability company doing business as TeamsMFA ("TeamsMFA," "we," "us," "our"). They cover the website at teamsmfa.com, the TeamsMFA application, and dedicated tenants at <name>.teamsmfa.com (together, the "Service").

By using the Service, you accept these Terms. If you don't agree to them, don't use the Service. You must be at least 18, and if you use the Service for an organization, you must have the authority to accept these Terms on its behalf.

We may update these Terms as the Service or the law changes. When we do, we'll change the "Last updated" date at the top. If you keep using the Service after an update, you accept the new version.

2. Your account

You sign in with a one-time link sent to your email address, and optionally with a passkey. You're responsible for keeping your email account and passkey devices secure, because anyone who controls them can sign in as you. You're also responsible for everything done under your account. If you suspect unauthorized access, tell us right away at security@teamsmfa.com.

The person who creates a team is its first owner. Owners decide who joins the team, what role each person has, and which codes the team holds. They're responsible for removing people who should no longer have access. We may suspend an account that gave us false information or that's being used to break these Terms.

3. Plans and payment

The Free plan costs nothing and has the limits shown on our pricing section, currently up to 2 teams you create and up to 10 people per team. We may change those limits going forward. If a change affects you, we'll give you reasonable notice before it does.

Dedicated tenants are set up and billed under a separate order or agreement with us. If that agreement conflicts with these Terms, the agreement wins for that tenant.

If we introduce other paid plans, we'll publish their prices before charging anyone, and you'll have to choose a paid plan before you're billed.

4. MFA codes you add

TeamsMFA stores the secret keys behind your team's authenticator codes and shows the codes to your team. Because those codes protect other accounts, you agree to the following:

• Only add codes you're authorized to share. Before adding a code, make sure that you, or your organization, controls the account it protects, and that sharing its second factor with your team is allowed by your organization's policies and by that account provider's terms.
• Keep recovery options outside TeamsMFA. Store backup codes and other recovery methods somewhere separate. If you lose access to TeamsMFA, delete a code by mistake, or can't reach the Service during an outage, you'll need them to get back into the protected account. We can't recover a code that has been deleted.
• Review who has access. Anyone on a team can see that team's codes. Remove people promptly when they leave, and check the audit log.

We aren't responsible for lockouts, lost access, or unauthorized access to the accounts these codes protect, except where it's caused by our own breach of these Terms.

5. Your content

You own what you put into the Service: team names, code labels, secret keys and everything else ("Your Content"). We don't claim ownership of it. To run the Service, we need to store, encrypt, process and transmit Your Content, and you give us a license to do that. The license ends when you delete the content or your account, except for backups that age out on their own schedule and anything the law requires us to keep.

Feedback and suggestions you send us about the product are ours to use without any obligation to you. This doesn't apply to Your Content, which stays yours.

6. Acceptable use

Don't use the Service to:

• access accounts, systems or codes you aren't authorized to access;
• probe or bypass its security, access controls or rate limits, except through good-faith research that follows our vulnerability disclosure policy;
• scrape it, overload it, or interfere with other customers' use of it;
• impersonate someone, or use another person's account without their permission;
• send spam or malware, including through team invitations; or
• break the law, or build a competing product by copying the Service.

We may suspend access immediately, without notice, when someone's conduct puts the Service, other customers or us at risk.

7. Our intellectual property

The Service, including its code, design, documentation, and the TeamsMFA name and logo, belongs to us or our licensors and is protected by copyright and trademark law. We give you a limited, non-exclusive, non-transferable right to use the Service for your own or your organization's use, subject to these Terms. That doesn't let you copy our software, resell access to the Service, or use our branding.

8. Privacy

Our Privacy Policy explains what we collect and why, and it is part of these Terms. The Security & Trust page describes how we protect your data.

9. Suspension and termination

We may suspend or close an account that breaks these Terms or puts the Service or other customers at risk. We'll normally give notice first, but we may act immediately when the risk warrants it. You can stop using the Service at any time, and you can ask us to delete your account at privacy@teamsmfa.com. Before you leave, move your codes back into an authenticator you control, because deleted secrets can't be recovered.

Sections that by their nature should continue after an account closes, such as ownership, liability limits and dispute resolution, still apply afterward.

10. Changes and availability

We're actively developing the Service, so its features and limits will change over time. We aim to keep it reliably available, but we can't promise it will never be down. Maintenance, outages at our providers and bugs happen. Unless a separate agreement for a dedicated tenant says otherwise, we don't offer an uptime commitment. That's another reason to keep your recovery codes elsewhere.

11. Disclaimer of warranties

We provide the Service "as is" and "as available." To the extent the law allows, we disclaim implied warranties of merchantability, fitness for a particular purpose and non-infringement, and we don't promise the Service will be error-free or uninterrupted. Some places don't allow these disclaimers, in which case they apply only as far as the law allows.

12. Limits on our liability

To the extent the law allows, neither we nor our owners, employees or contractors are liable for indirect, incidental, special, consequential or punitive damages, including lost profits, lost data, or losses from being locked out of or from unauthorized access to accounts protected by codes in the Service, even if we were told those losses were possible. Where liability can't be excluded, our total liability to you for claims related to the Service in any six-month period is capped at the amount you paid us in that period. If your jurisdiction doesn't allow limits like these, they apply as far as that jurisdiction permits.

13. Indemnity

If a third party brings a claim against us arising from Your Content, your breach of these Terms, or your use of the Service to access accounts you weren't authorized to access, you agree to cover our reasonable costs of defending it, including attorneys' fees, and to cooperate with our defense. We'll tell you promptly if a claim like that comes in.

14. Governing law and disputes

South Carolina law governs these Terms. If a dispute comes up, please email legal@teamsmfa.com first. Most problems are easier to fix directly.

Agreement to arbitrate. If we can't resolve a dispute directly, you and TeamsMFA agree to settle it through binding, individual arbitration instead of in court, except as described below. That means both of us give up the right to sue in court, to have a jury decide, and to take part in a class, consolidated or representative action. The American Arbitration Association administers the arbitration under its Commercial Arbitration Rules, or its Consumer Arbitration Rules if you use the Service in a personal capacity. It takes place in South Carolina unless we agree otherwise, and it can be held by document submission, phone or video. Each side pays its own attorneys' fees unless the arbitrator or the law says otherwise.

No class actions. Arbitration is individual only. An arbitrator can't combine more than one person's claims or preside over any form of class proceeding. If this restriction is ever held unenforceable for a particular claim, that claim goes to court instead, and the rest of this section still applies.

What stays out of arbitration. Either of us may bring a qualifying individual claim in small-claims court. Claims about intellectual property, and requests for an injunction to stop ongoing or imminent harm, may be brought directly in court.

Court venue. For anything that isn't arbitrated, the state and federal courts in York County, South Carolina have exclusive jurisdiction, and both of us consent to that venue.

15. General terms

These Terms, together with our Privacy Policy and any order or agreement for a dedicated tenant, are the entire agreement between us about the Service. If part of these Terms is unenforceable, the rest still applies. If we don't enforce a provision once, we can still enforce it later. We may assign these Terms as part of a merger, acquisition or sale of the business. You can't assign them without our consent. Nothing here creates a partnership, joint venture or employment relationship. Accepting these Terms electronically, and receiving notices about them electronically, is valid and binding.

16. Contact us