Terms of Service

These Terms of Service (the "Terms") are a legal agreement between you (or the organization you represent) and Zynth Media Technology for use of Zynth Auth (the "Service"). By creating an account, installing a self-hosted release, or otherwise using the Service, you agree to these Terms.

Zynth Auth is a multi-tenant identity and access management platform, available as a managed cloud offering we operate and as a licensed self-hosted offering you run on your own infrastructure. Both are built from one codebase; your tier is a configuration and entitlement, not a different product.

• You must provide accurate account information and keep your credentials secure.
• You are responsible for all activity under your account and for the configuration of your tenant.
• You must have the authority to bind the organization you represent, and use the Service only for lawful business purposes.

You agree not to misuse the Service. In particular you will not:

• Attempt to breach or circumvent authentication, authorization, or tenant-isolation controls.
• Probe, scan, or load-test the managed offering without our prior written consent.
• Use the Service to store or transmit unlawful content, or to infringe others' rights.
• Resell or provide the managed offering to third parties except as expressly permitted.

Paid plans are billed through our payment processor. Fees are stated on the pricing page and are non-refundable except where required by law. Plan usage caps are commercial guardrails: exceeding one prompts a conversation about the right plan — it never disables authentication or locks your users out.

For the self-hosted offering, we grant you a non-exclusive, non-transferable licence to run the Service on your own infrastructure for the licensed term and scope. You may not remove licensing or attribution, redistribute the software, or exceed the licensed entitlements. A licence includes supported versions and security backports for its term.

Zynth Auth is operated with substantial automation, including AI-assisted analysis and autonomous agent identities that act within the platform. You should assume that access, authentication and security events in your tenant are evaluated automatically and continuously.

• Automated protective action, without prior notice. On detection of a threat or abuse, the Service may contain an agent identity, revoke sessions or tokens, and rate-limit or throttle requests — including yours — without prior notice. Where an agent identity is contained we notify an administrator in your tenant; releasing it again is deliberately restricted to a human holding the necessary permission.
• Automated response is off by default, and its most damaging measures are not automatic. Autonomous execution ships disabled: with it disabled the engine records only what it would have done, taking no action and making no proposal. Its levers are ranked by how much harm they can do, and the most damaging rank is capped at recommending to a person rather than acting.
• Human approval. Whether an agent action is held for a person depends on the oversight mode set for that agent, a per-permission risk ceiling, and per-tool approval flags. Where the approvals control is not enabled for a deployment, an action that would require human approval is refused outright rather than executed.
• No warranty of detection. Automated detection is a best-effort security control. We do not warrant that it identifies every threat, that it never acts on benign activity, or that it prevents any particular compromise.
• Your agents are your responsibility. You are responsible for the agents you register, the delegations and scopes you grant them, the credentials you issue, and everything done under them — exactly as you are for your human users.
• Every action is recorded. Automated and agent actions are written to a tamper-evident, hash-chained audit log, so what was done, when, and on what trigger can be reconstructed and independently verified.

You are responsible for maintaining your own backups and exports of your data and configuration. The Service provides export tools; using them is your obligation, not ours. During any beta, evaluation or pre-general-availability period we give no commitment as to the retention, availability or recoverability of your data, and you should not rely on the Service as your only copy. This obligation is independent of any other remedy in these Terms, and our liability for data you did not export is limited accordingly.

As between the parties, you own your data and your end-users' data. Our processing of personal data on your behalf is governed by our Data Processing Addendum. You are responsible for configuring the Service appropriately, for your users' access, and — for self-hosted deployments — for operating and securing your own infrastructure. We apply the security measures described in our Privacy Policy and DPA.

The Service, including its software, documentation, and trademarks, is owned by Zynth Media Technology and its licensors. These Terms grant you a limited right to use the Service and no other rights. Feedback you provide may be used without restriction.

The Service is provided on an “as is” and “as available” basis. To the maximum extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. During any pre-general-availability, beta, or evaluation period, the Service may change and is provided without service-level commitments.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or data. Our aggregate liability arising out of or related to the Service will not exceed the amounts you paid us in the twelve months before the event giving rise to the claim.

These Terms apply while you use the Service. Either party may terminate for material breach not cured within a reasonable period. On termination, your right to use the managed offering ends and we will make your data available for export for a limited period before deletion, subject to legal retention requirements.

These Terms are governed by the laws of Singapore, without regard to conflict-of-laws rules. We may update these Terms; material changes will be posted here with a new effective date and with advance notice, and continued use constitutes acceptance. Legal notices under these Terms — including notice of breach or termination — must be sent to legal@zynthmedia.com, and we will send ours to the account owner’s registered address.