Terms of Service

Effective: the day you create an account.

⚖️ Notice: drafted by the operator as a plain-English statement of terms. Not legal advice. Sections marked (LR) require lawyer review before launch — particularly in regulated jurisdictions or if you intend to operate as a business entity that collects payments at scale.

1. What you are agreeing to

By using OTPBase you agree:

OTPBase is a transient relay. It carries one-time verification codes from sources you control to a viewing surface you control. It is not a custodian, escrow, archive, vault, or system of record.
You will not use OTPBase to bypass the legitimate authentication of an account that is not yours.
The data you put through OTPBase is your data. We do not own it, claim license to it, or use it for any purpose other than delivering the service to you.

2. The service we are obliged to provide

We will:

Keep the service reasonably available (target 99.5% uptime monthly; we do not offer SLA credits).
Encrypt your data at rest and in transit per the Privacy Policy.
Physically delete your codes within the timeframe you have configured (default 1 hour after arrival; minimum 10 minutes; maximum 7 days).

We will not:

Read your codes for any purpose other than presenting them back to you.
Sell, license, or share your data with parties not listed in the Privacy Policy.
Charge you without notice. Plan changes are emailed at least 14 days in advance.

3. What we are not obliged to do (LR)

OTPBase is delivered "as is". We do not warrant that it is fit for any particular purpose, including any high-availability, life-safety, or regulated-industry use case. Do not use OTPBase as the only path between you and a critical account. If our service is unavailable for an hour, your code is gone — keep an alternate channel (e.g. the original inbox, or an authenticator app) for accounts where being locked out for a few hours would be unacceptable.

4. Acceptable use

You will not:

Use OTPBase in connection with accounts you do not own or do not have explicit authorisation to access.
Forward someone else's incoming verification codes through OTPBase.
Stress, fuzz, scrape, or pen-test OTPBase without prior written authorisation. (If you find a bug, email security@otpbase.com — we will not pursue good-faith research.)
Use OTPBase to violate the law of your jurisdiction or ours.

We may suspend an account that we believe is being used in violation of this section, on notice to the account email except where notice would frustrate a legal obligation.

5. Account termination

You can delete your account from /profile at any time. Deletion follows the 30-day schedule in the Privacy Policy. You can export your data via the API before deleting.

We may terminate an account for repeated unpaid invoices, for material violation of § 4, or if continued operation would violate the law. We will give you 14 days' notice except where the violation is ongoing and severe.

6. Pricing & billing

Current published pricing is at https://otpbase.com/#pricing. Prices are in USD. Refunds: we will refund any unused full months on request, no questions asked, within 14 days of the renewal charge.

We use a third-party payment processor (PayPal or Stripe — your choice). They process your card directly; we never see card numbers.

7. Intellectual property

The OTPBase code, brand, and copy are © OTPBase. Your data is yours. Nothing in these Terms transfers ownership of your data to us.

8. Limitation of liability (LR — must be reviewed by counsel for the jurisdictions you operate in)

To the maximum extent permitted by applicable law, OTPBase's total aggregate liability for any claim arising out of these Terms is limited to the amount you paid us for the service in the 12 months preceding the claim, or USD 100, whichever is greater. OTPBase is not liable for indirect, consequential, incidental, or punitive damages, including lost profits, lost data, or business interruption. OTPBase is not liable for damages caused by:

the failure of a third party (your inbox provider, your TLS CA, the underlying internet),
your loss of access credentials,
your decision to use OTPBase in lieu of a more durable mechanism for an account whose loss you would not tolerate.

These limits apply even if a remedy fails of its essential purpose.

Some jurisdictions (notably the EU, UK, and parts of Australia) do not permit some of these limitations. In those jurisdictions our liability is limited to the maximum extent permitted by law and these clauses are read down accordingly. Nothing in these Terms limits liability for fraud, gross negligence, or wilful misconduct.

9. Indemnification (LR)

You agree to indemnify OTPBase against any claim by a third party that arises out of your breach of § 4. We will indemnify you against any claim by a third party that the OTPBase service itself infringes that party's intellectual property rights, provided you tell us promptly and let us defend.

10. Governing law & dispute resolution (LR — JURISDICTION SELECTION IS A LEGAL DECISION)

These Terms are governed by the law of [Operator's home jurisdiction — fill in before launch]. Any dispute arising under these Terms shall be resolved in the courts of that jurisdiction, except that either party may seek injunctive relief in any court of competent jurisdiction.

For users in the EU, nothing in this clause displaces your right to bring proceedings in the courts of the EU member state in which you reside.

11. Changes to these Terms

We will email you at least 14 days before any material change. Continued use after the effective date is acceptance of the new Terms.

12. Operator contact

Support / billing / legal: support@otpbase.com Postal address: [fill in before launch] (LR)

Plain-language summary (not part of the Terms, but a courtesy):

We carry your one-time codes for at most an hour.
We encrypt them while we have them.
We can't read them if you turn on the optional E2EE.
We don't sell your data; we don't run analytics; we don't run ads.
If we screw up, our liability is capped at what you paid us (or $100 if you're on free trial).
Don't use OTPBase as the only safety net for an account you can't afford to lose.
Cancel any time, refund on request.