AuthRequest Terms and Conditions

1. Introduction

Overview of Service: AuthRequest, accessible through our website at https://authrequest.io, is a service designed to bolster digital trust and security for business email communications. AuthRequest is particularly focused on combating Business Email Compromise (BEC) through innovative features such as biometric verification and a sophisticated email analysis system that detects phishing and fraud. This SaaS platform offers a suite of email security tools, including end-to-end encryption, advanced threat protection, multifactor authentication, email sender and content verification. Administrators invite its network (employees and suppliers and clients) to create a Network of digital trust when sending and receiving emails. The service provides a verifiable log of authentication attempts, both successful and unsuccessful, which can be crucial for compliance and legal defense purposes.

Mobile Application

User-Friendly Interface: The mobile app provides a convenient and accessible way for users to engage with the AuthRequest platform. Utilizing the security of your phone, the app is designed for on-the-go access, allowing users to quickly and efficiently approve or deny their email verification and receive notifications.

Desktop Version

Administration Features: The desktop version of AuthRequest is tailored for comprehensive administrative controls. Providing enhanced functionalities, including detailed analytics, user management, policy settings, and full access to customization options for training programs. Administrators can monitor manage users, invite their corporate network (employees, vendors and clients), and deploy tailored phishing simulations.

Training Modules:

AuthRequest's cyber awareness training includes a series of detailed modules that cover a broad range of topics essential for cybersecurity. These modules are designed to cater to different roles within an organization, ensuring that all employees, from IT staff to end-users, understand the basics of cyber threats and best practices for prevention.

Simulated Phishing Campaigns:

To provide practical experience, AuthRequest includes simulated phishing campaigns as part of its training. These simulations are crafted to mimic real-life phishing attacks, helping employees identify suspicious emails and understand the correct actions to take when faced with potential threats.

Interactive Learning:

The training is interactive, involving both theoretical learning and practical exercises. This approach helps reinforce learning through active participation and engagement, making it more likely for employees to retain important information and apply it in their daily activities.

Continuous Learning and Updates:

Cyber threats are continually evolving, and AuthRequest recognizes the importance of keeping its training up-to-date. The platform regularly updates its training content to reflect the latest threats and security practices, ensuring that organizations are always informed about new risks and how to handle them.

Customization Options:

Understanding that each organization has unique security needs and challenges, AuthRequest offers customization options for its training programs. This allows organizations to focus on specific areas relevant to their operations and threat landscape, providing a more targeted and effective training experience.

Reporting and Analytics:

AuthRequest provides detailed reports and analytics on training progress and success rates. This feature enables organizations to track employee completion rates, assess the effectiveness of the training, and identify areas where additional training may be needed. The service provides a verifiable log of authentication attempts both successful and unsuccessful, which can be crucial for compliance and legal defense purposes.

Support and Resources:

Beyond just training modules and simulations, AuthRequest offers ongoing support and resources to help organizations maintain a high level of cyber readiness. This includes access to up-to-date information on emerging threats and best practices, as well as expert advice from cybersecurity professionals.

Introduction:

These are the Terms and Conditions ("Terms") governing the use of AuthRequest, a service offered at https://authrequest.io . These Terms form a legally binding contract between you (the user) and AuthRequest, the provider of AuthRequest ("we", "us", or "our"). By accessing or using AuthRequest, you agree to be bound by these Terms.

Scope of Service:

AuthRequest provides advanced email security solutions designed to protect organizations against Business Email Compromise (BEC), phishing, and other cyber threats through features such as biometric verification, email encryption, and cyber education (the "Service").

Acceptance of Terms:

By registering for, accessing, or using our Service, you confirm that you have read, understood, and agreed to these Terms. If you are agreeing to these Terms on behalf of an organization or entity, you represent that you have the authority to bind that organization or entity to these Terms.

Modifications to Terms:

We reserve the right to modify these Terms at any time. All changes will be effective immediately upon posting to the Website. Your continued use of the Service after any such changes shall constitute your consent to such changes. We will make reasonable efforts to notify you of any significant changes through the Website or through other means of contact such as email.

Legal Compliance:

You agree to use the Service in compliance with all applicable laws, rules, and regulations, and you will not use the Service for any unlawful or unauthorized purpose.

Duration and Termination:

These Terms will remain in full force and effect while you use the Service. We may suspend or terminate your access to the Service at any time, without notice and for any reason, including for violation of these Terms.

General Rights:

If you are a resident of the European Union, you have certain rights under the General Data Protection Regulation (GDPR). These rights include:

Right to Access:

You have the right to request a copy of the personal data thatAuthRequest holds about you and to check that we are lawfully processing it.

Right to Rectification:

You have the right to request that AuthRequest correct any incomplete or inaccurate information we hold about you.

Right to Erasure:

You have the right to request that AuthRequest delete or remove your personal data when there is no good reason for us continuing to process it. This is also known as the “right to be forgotten”.

Right to Restrict Processing:

You have the right to request that we suspend the processing of your personal data, for example, if you want us to establish its accuracy or the reason for processing it.

Right to Data Portability:

You have the right to request the transfer of your personal data to another party. Therefore, we will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.

Right to Object:

You have the right to object to the processing of your personal data where AuthRequest is relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

Rights Related to Automated Decision-Making and Profiling:

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to Withdraw Consent:

Where we are relying on consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing before the withdrawal.

Right to Lodge a Complaint:

You have the right to lodge a complaint with a supervisory authority about our collection and use of your personal data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Exercising Your Rights:

To exercise any of these rights, please contact us at legal@authrequest.io. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

Response Time:

AuthRequest will respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Governing Law:

These Terms are governed by and construed in accordance with the laws of the jurisdiction in which AuthRequest is incorporated, without giving effect to any principles of conflicts of law.

Agreement to Terms:

By accessing and using the AuthRequest service available via https://authrequest.io, you acknowledge that you have read, understood, and agree to be bound by these Terms and Conditions (the "Terms"). If you do not agree with any part of these Terms, you must not use the Service.

Eligibility:

The Service is intended only for users who are at least 18 years old. Persons under the age of 18 are not permitted to use or register for the Service. By using the Service, you represent and warrant that you are of legal age to form a binding contract with the Company and meet all of the foregoing eligibility requirements.

Registration and Your Account:

To access features of the Service, you are required to register for an account. When you register for an account, you must provide accurate and complete information and keep your account information updated. You are responsible for all activities that occur in connection with your account and you agree to maintain the security of your account username and password.

Modifications to the Service and Prices:

AuthRequest reserves the right at any time to modify or discontinue, temporarily or permanently, the Service (or any part thereof) with or without notice. Prices of all services, including but not limited to subscription plan fees for the Service, are subject to change upon 30 days' notice from us. Such notice may be provided at any time by posting the changes to the Service or via the Service itself.

Termination:

We may terminate or suspend your account and bar access to the Service immediately, without prior notice or liability, under our sole discretion, for any reason whatsoever and without limitation, including but not limited to a breach of the Terms. All provisions of the Terms which by their nature should survive termination shall survive termination, including, without limitation, ownership provisions, warranty disclaimers, indemnity, and limitations of liability.

Governing Law:

These Terms shall be governed and construed in accordance with the laws of Canada without regard to its conflict of law provisions. Our failure to enforce any right or provision of these Terms will not be considered a waiver of those rights.

Consent to Electronic Communications:

By using the Service, you consent to receiving electronic communications from us. These communications may include notices about your account and information concerning or related to the Service. You agree that any notices, agreements, disclosures, or other communications that we send to you electronically will satisfy any legal communication requirements, including that such communications be in writing.

Age Requirement:

You must be at least 18 years old to use the AuthRequest service. By agreeing to these Terms, you represent and warrant that you are at least 18 years old and that you have the legal capacity to enter into a binding contract.

Authority to Agree:

If you are agreeing to these Terms on behalf of a business or an organization, you represent and warrant that you have the authority to bind that business or organization to these Terms and that the business or organization agrees to be bound by these Terms.

Account Registration:

You must register for an account to use certain features of the Service. By registering, you agree to provide accurate, current, and complete account information, and to update this information as it changes to maintain its accuracy. You are responsible for maintaining the confidentiality of your account details and for all activities conducted through your account.

Compliance with Laws:

You are responsible for ensuring that your use of the Service complies with all laws, rules, and regulations applicable to you. It is your responsibility to ensure that you can legally use the Service in your jurisdiction.

Export Control:

You may not use, export, re-export, import, or transfer the Service except as authorized by Canadian law, the laws of the jurisdiction in which you obtained the Service, and any other applicable laws. Specifically, the Service may not be exported or re-exported into any countries that are subject to Canadian export embargoes or to individuals or entities prohibited from participating in Canadian export transactions, as listed by any applicable Canadian regulatory body.

Prohibited Users:

You may not use the Service if you are barred from receiving services under Canadian law or any other applicable jurisdiction. This includes individuals listed on sanctioned lists or who are residents of sanctioned countries as determined by Canada.

Revocation of Eligibility:

We reserve the right to revoke your eligibility to use the Service if it is discovered that the information you provided is inaccurate or incomplete, if you are found to be using the Service for illegal activities, or if your actions are found to be in violation of these Terms.

Key Features of AuthRequest:

Biometric Verification: AuthRequest allows email recipients to request authentication from the sender, ensuring the legitimacy of the communication and significantly enhancing security. Depending on the service a recipient uses, this can be biometric verification.

Operational Model:

Initiate Verification: Users can start the verification process by simply forwarding a suspicious email to AuthRequest's secure processing system.

Real-Time Authentication: The service responds in real time, ensuring rapid verification to maintain the flow of business communications.

End-to-End Encryption and Advanced Threat Protection: All communications through AuthRequest are secured with end-to-end encryption, alongside measures to protect against advanced cyber threats.

Functionality of AuthRequest Service

AuthRequest offers a robust set of functionalities designed to enhance the security and integrity of business email communications, accessible via https://authrequest.io. Here's an outline of the main functionalities provided by the service:

1. Verification:

2. Collaborative Security:

3. Legal Assurance:

4. Cyber Awareness Training:

5. Email Security Features:

6. Real-Time Authentication and Response:

7. Phishing Detection and Analysis:

Right to Modify the Service:

Flexibility of Changes: AuthRequest reserves the right to modify or discontinue, temporarily or permanently, the service or any part of it without prior notice at any time. This may include adding new functionalities, removing existing features, or updating aspects of the service to enhance performance and user experience.

Notification of Changes: While AuthRequest aims to provide reasonable notice of significant changes to the service, it is under no obligation to do so. Users are encouraged to review the service periodically to stay informed of any updates.

User Responsibilities:

Regular Updates: Users are responsible for keeping themselves informed of any changes to the service. AuthRequest may post updates on the website or notify users through other communication channels such as email.

Adaptation to Changes: Users must comply with any changes made to the service as long as they continue to use it. Failure to comply with any modifications may result in the suspension or termination of access to the service.

Impact of Changes:

Service Functionality: Modifications may affect how current features operate, which may require users to adjust their usage practices or retrain staff.

Data Handling: Changes to the service could alter the way user data is handled. AuthRequest will provide details of any changes to data management procedures as required by law.

Legal and Regulatory Compliance:

Alignment with Laws: Any modifications will be made in compliance with applicable laws and regulations. This includes changes necessary to maintain compliance or respond to legal and regulatory developments.

Disclosure Requirements: AuthRequest will undertake to ensure that all modifications are legally compliant and will disclose changes in the service that may affect compliance requirements for users.

Termination of Service:

Discontinuation: AuthRequest reserves the right to discontinue any part of its services at its sole discretion. Efforts will be made to accommodate users affected by such discontinuations.

Compensation: In cases where discontinuation affects paid services, AuthRequest may provide proportional compensation or alternative solutions to affected users, subject to terms and conditions.

Account Creation:

Requirements for Registration: Users must provide accurate and complete registration information when creating an account. This includes a valid email address and any other information requested in the registration process.

Account Approval: AuthRequest reserves the right to accept or reject account registrations at its discretion. Factors influencing approval may include, but are not limited to, user compliance with these terms.

Account Security:

Confidentiality: Users are responsible for maintaining the confidentiality of their account credentials, including passwords. It is advised that users do not share their account details with others.

Security Breaches: Users must notify AuthRequest immediately of any breach of security or unauthorized use of their account. AuthRequest will not be liable for any loss or damage arising from unauthorized use of a user's account.

Account Responsibilities:

Legal Use: The user agrees to use their account for lawful purposes only and in a manner that complies with all applicable laws and regulations.

User Conduct: Users are responsible for all activities that occur under their account, including the actions of people to whom they have granted access to the account.

Data Handling:

Data Accuracy: Users must ensure that all personal information provided during the registration process and thereafter is accurate, current, and complete. Users agree to update their information as necessary to maintain its accuracy.

Data Privacy: AuthRequest commits to protecting user data in accordance with its privacy policy. Users can expect their personal information to be handled securely and with discretion.

Account Modifications:

Updates to Account Information: Users can update their account information through the user settings page on the AuthRequest platform. It is the responsibility of the user to keep their personal information up to date.

Account Suspension/Deletion: AuthRequest reserves the right to suspend or terminate accounts that are found to be in violation of these terms and conditions. Users may also request to delete their account according to the procedures outlined in the privacy policy.

Limitations and Access:

Service Limitations: AuthRequest reserves the right to impose limitations on account activity, including, but not limited to, transaction volume, number of transactions per day, and account features, based on various criteria.

Access Restriction: AuthRequest may restrict user access to the account temporarily or permanently for reasons including, but not limited to, maintenance, security concerns, or violations of terms.

Termination of Account:

Voluntary Termination: Users may terminate their account at any time through the account settings. Instructions for account termination will be provided on the AuthRequest website.

Effects of Termination: Upon termination, the right to use the account ceases immediately, and the user may no longer have access to any data previously associated with the account. AuthRequest may delete any data associated with the account in accordance with its data retention policy.

Fees and Charges:

Subscription Fees: AuthRequest charges fees for various subscription plans. The details of these subscription fees will be clearly listed on the AuthRequest website and may vary based on the plan chosen by the user.

Additional Charges: Additional fees may apply for extra services not covered by the standard subscription plans, such as advanced security features or additional user licenses. These fees will be communicated to the users before they incur such charges.

Payment Methods:

Accepted Methods: AuthRequest accepts various payment methods. Currently this is limited to credit cards. Other electronic payment methods may be approved by AuthRequest.

Secure Transactions: All payments are processed through secure payment gateways. Users' payment details are encrypted and securely stored to prevent unauthorized access.

Billing Cycle:

Regular Billing: Users will be billed in advance on a recurring basis, which typically occurs on the anniversary of the subscription start date. The specific billing cycle (monthly, quarterly, yearly) will depend on the subscription plan selected by the user.

Pro-rated Charges: If any service upgrades occur during a billing cycle, charges will be pro- rated for the remaining period of that cycle.

Renewal and Cancellation:

Automatic Renewal: Unless a user notifies AuthRequest before the end of the applicable subscription period that they want to cancel a subscription, their subscription will automatically renew under the exact same conditions unless stated otherwise.

Cancellation Policy: Users can cancel their subscription at any time. The cancellation will take effect the day after the last day of the current subscription period, and they will not be charged for the next period.

Refunds and Credits:

Refund Policy: AuthRequest may offer refunds under certain conditions, which will be outlined in the refund policy available on the AuthRequest website.

Credits: In cases where service interruptions or failures occur due to system faults attributable to AuthRequest, credits may be issued to affected users, at the discretion of AuthRequest.

Late Payments and Non-payment:

Late Payment: In the event of late payment, users may be charged interest on the overdue amount at the rate of 4% per month or the maximum rate permitted by law, whichever is lower.

Non-payment: Non-payment may result in the suspension or termination of user access to the AuthRequest services. Users will receive notice and an opportunity to rectify the situation before any suspension or termination is enforced.

Dispute Resolution:

Billing Disputes: If users believe that they have been billed in error, they must contact AuthRequest within a specified period from the billing date, typically 30 days, to be eligible for an adjustment or credit.

Resolution Process: AuthRequest is committed to resolving disputes efficiently and will provide a mechanism for addressing billing disputes through its customer service department.

Information We Collect

Personal Information: Includes but is not limited to your name, email address, contact details, and any other information that identifies or can be used to identify you.

Non-Personal Information: We also collect data that does not identify you specifically, including your browser information, information collected through cookies, pixel tags, and other technologies, demographic information, utility of the services and other information provided by you.

To Provide and Manage the Services You Request: This includes, for example, processing your requests, orders, and payments.

To Improve Our Services: We use non-personal information to help us improve the functionality and usability of our Site.

Communicate with You: To inform you about updates to our service, changes to our policies, and other important information.

Disclosure of Your Information We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.

Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

Account Information: You may at any time review or change the information in your account or terminate your account by:

Emails and Communications: If you no longer wish to receive correspondence, emails, or other communications from us, you may opt-out by:

Account Information

Updating Your Information: You can review and change your personal information by logging into your account and navigating to the account settings page. It is important to keep your personal information accurate and up-to-date.

Deleting Your Account: If you wish to delete your account, you can do so through your account settings. Deleting your account will remove your personal information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and comply with legal requirements.

Emails and Communications

Opting Out of Communications: If you no longer wish to receive marketing or promotional communications from us, you have the option to opt out by following the unsubscribe link located at the bottom of those emails. You can also make this request by contacting us directly through the provided contact information.

Notifications: You may also manage your receipt of marketing and non-transactional communications by clicking on the "Preferences" link located in the footer of our emails and updating your preferences.

Cookies and Tracking Technologies

Managing Cookies: Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our services.

Advertising Preferences: Certain third-party advertising networks allow you to opt out of targeted advertising from all their members. This can generally be accomplished through the settings of your device or browser, or by visiting specific opt-out pages like the Network Advertising Initiative opt-out page.

Data Retention

Review and Removal: We retain your personal information for as long as your account is active or as needed to provide you services. If you wish to request that we no longer use your information to provide you services, contact us at the email address provided. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Contact Us If you have questions or comments about this Privacy Policy, please contact us at:

Service Ownership: All rights, title, and interest in and to the AuthRequest service, including existing and new software, technologies, processes, and any other intellectual property, are and will remain the exclusive property of AuthRequest and its licensors.

Content Rights: The visual interfaces, graphics, design, compilation, information, data, computer code (including source code or object code), products, software, services, and all other elements of the AuthRequest service provided by AuthRequest ("Materials") are protected by intellectual property and other laws. All Materials included in the service are the property of AuthRequest or its third-party licensors.

License to Use the Service

Grant of License: AuthRequest grants you a non-exclusive, non-transferable, revocable license to access and use the service strictly in accordance with these Terms.

License Restrictions: The license granted to you for the service is limited to a personal, non- commercial use license and does not include any rights to sell, copy, distribute, transmit, or otherwise exploit the service or any portion of it.

User Contributions

Ownership of User Contributions: Users may be able to submit content, such as comments, posts, or other materials, to the service. Users retain all copyrights and other intellectual property rights in and to their contributions. By submitting contributions, users grant AuthRequest a perpetual, irrevocable, non-exclusive, royalty-free, worldwide license to use, reproduce, modify, publish, translate, create derivative works from, distribute, perform, and display such content.

Responsibility for Contributions: Users are solely responsible for their contributions, including the legality, reliability, and appropriateness of the content.

Prohibited Activities

Intellectual Property Rights Violations: You may not use, copy, adapt, modify, prepare derivative works based upon, distribute, license, sell, transfer, publicly display, publicly perform, transmit, stream, broadcast or otherwise exploit the AuthRequest service or content, except as expressly permitted in these Terms.

No Reverse Engineering: You may not reverse engineer, decompile, disassemble, or attempt to derive the source code of the software included in the AuthRequest service.

Submission of Ideas:

Ownership Transfer: When you submit ideas, suggestions, documents, or proposals ("Contributions") to AuthRequest through our feedback or suggestion channels, you acknowledge and agree that:

Use of Contributions:

Discretion of Use: AuthRequest shall have the exclusive right to own, use, modify, license, sell, distribute, and exploit the Contributions in any manner it sees fit, commercially or otherwise, without restriction.

No Obligation: AuthRequest is under no obligation to use, return, review, or respond to any Contributions. AuthRequest may use the Contributions for any purposes whatsoever, including but not limited to, developing, manufacturing, and marketing products or services incorporating such Contributions.

Content Standards:

Users may submit content such as feedback, comments, messages, and other materials ("User Content") through various functionalities of AuthRequest. Users must ensure that all User Content complies with the following standards:

Prohibited Content:

AuthRequest prohibits the submission of User Content that:

AuthRequest reserves the right to review any User Content and to remove any content that, in our sole discretion, violates these guidelines or any applicable law, or could harm the reputation of the service.

Users may be held liable for any illegal or prohibited User Content they provide, including among other things, infringing on the intellectual or proprietary rights of others, engaging in fraudulent, defamatory, or deceptive practices.

Reporting Infringements:

If you believe that any content violates your copyright, other intellectual property rights, or these content standards, please contact us directly to report the issue. We will investigate the situations reported and take appropriate action as needed to address the situation.

Representation and Warranties:

Authority and Ownership: You represent and warrant that you have the lawful right to submit the Contributions and that the Contributions do not infringe any proprietary or intellectual property rights of any third party.

Indemnification:

Harmless Holding: You agree to hold harmless, indemnify, and defend AuthRequest and its affiliates, officers, agents, employees, or partners from and against any claims, liabilities, damages, losses, and expenses, including without limitation reasonable attorney fees and costs, arising out of or in any way connected with your Contributions.

Unlawful Use:

Illegal Activities: You may not use the AuthRequest service for any unlawful purposes or in furtherance of illegal activities. International users agree to comply with all local laws regarding online conduct and acceptable content.

Misuse of Services:

Service Interference: You may not interfere with or disrupt the AuthRequest services or servers connected to the service, or disobey any requirements, procedures, policies, or regulations of networks connected to the service.

Unauthorized Access: Attempting to access, search, or attempt to access or search the services by any means (automated or otherwise) other than through our currently available, published interfaces that are provided by AuthRequest (unless specifically allowed via a separate agreement) is prohibited.

Infringement of Intellectual Property:

Copyright Violations: Copying, distributing, or disclosing any part of the service in any medium, including without limitation by any automated or non-automated "scraping" is prohibited.

Trademark Misuse: Using the name, logo, or trademarks of AuthRequest without prior written consent is not allowed.

Harmful Conduct:

Threats and Harassment: Engaging in any activity that threatens, harasses, or bullies any other person is strictly forbidden.

Spreading Malware: Distributing viruses or any other technologies that may harm AuthRequest, or the interests or property of AuthRequest users is prohibited.

Obscene Material: You may not post or transmit through the service any material that is defamatory, obscene, pornographic, abusive, or otherwise objectionable.

False Information: Spreading misinformation, creating fake profiles, or otherwise lying about your affiliation with a person or entity is not allowed.

Commercial Use:

Unauthorized Commercial Activities: Engaging in unauthorized commercial activities and/or sales on the service such as contests, sweepstakes, barter, advertising, and pyramid schemes without our prior consent is prohibited.

Data Mining and Scraping:

Scraping Services: You may not use any automated system, including without limitation "robots," "spiders," or "offline readers," to access the service in a manner that sends more request messages to the AuthRequest servers than a human can reasonably produce in the same period by using a conventional web browser.

Reverse Engineering:

Software Manipulation: Attempting to decipher, decompile, disassemble, or reverse engineer any of the software comprising or in any way making up a part of the service is prohibited. This section establishes boundaries to safeguard the operational integrity of AuthRequest and its users, protecting the service from abuse and unauthorized activities. Each prohibition is intended to ensure that the service is used ethically and legally. For actual enforcement and specific legal implications, consultation with legal experts is advisable to ensure compliance with applicable laws and regulations.

Right to Terminate or Suspend:

Service Discretion: AuthRequest reserves the right to terminate or suspend your account and access to the services at any time, without notice, for any reason, including but not limited to breach of these Terms and Conditions, upon the discretion of AuthRequest management.

Immediate Effect: Termination or suspension may be enacted immediately, at AuthRequest's sole discretion, and without liability to AuthRequest.

User Violations:

Breach of Terms: Users found in violation of any terms within this agreement, including but not limited to prohibited activities, misuse of the service, or infringement of intellectual property, may face immediate suspension or termination of their account.

Illegal Activities: Accounts conducting illegal activities will be terminated, and the pertinent information may be reported to law enforcement authorities.

Consequences of Termination:

Access Revocation: Upon termination, all rights granted to you under these Terms will immediately cease, including access to any data, files, or content that was part of your account.

Data Retention: AuthRequest may retain certain information as required by law or for legitimate business purposes. Users can request information about retained data by contacting AuthRequest post-termination.

User Initiated Termination:

Account Cancellation: Users may terminate their account at any time through the account management page on the AuthRequest website. Instructions for terminating the account will be provided on the website.

Effects on Data: Users should be aware that terminating their account may result in the destruction of all information associated with their account which is not retained by AuthRequest for record-keeping purposes or ongoing obligations.

Suspension for Investigation:

Temporary Suspensions: AuthRequest may temporarily suspend a user's account if there is a suspicion of unauthorized or unusual activity until an investigation can be completed. Users will be notified of such suspensions and the reasons for them, unless notifying the user would impede the investigation or cause further issues.

Restoration of Access: Access will be restored if the investigation determines that the suspension was unwarranted.

Appeal Process:

Right to Appeal: Users have the right to appeal a suspension or termination decision. Details on how to appeal, including contact information and any required forms, will be provided at the time of suspension or termination.

Review Process: AuthRequest will review all appeals in a timely manner and communicate the decision back to the user. The decision of AuthRequest is final.

Grounds for Appeal:

Eligibility for Appeal: Users have the right to appeal decisions related to the suspension or termination of their accounts. Appeals must be based on claims such as incorrect application of AuthRequest's terms and conditions, mistaken identity, or mitigating circumstances that AuthRequest should consider.

Initiation of Appeal:

Submission Requirements: To initiate an appeal, users must submit a written request to AuthRequest's designated appeal department via the official email or contact form provided on the AuthRequest website. The appeal must be filed within 30 days from the date of the account suspension or termination notice.

Information to Include: The appeal should clearly state the reasons for contesting the suspension or termination, including any supporting evidence or documents that the user believes should be considered.

Processing of Appeals:

Acknowledgment of Receipt: Upon receiving an appeal, AuthRequest will acknowledge receipt within 7 business days and provide an estimated timeline for the review process.

Review Process: The appeal will be reviewed by an independent panel or a senior member of the AuthRequest team not involved in the original decision. This review will consider the submitted documents, the user's account history, and any relevant correspondence.

Outcome of Appeal:

Final Decision: After reviewing the appeal, AuthRequest will communicate the final decision to the user via email. This decision is final and binding. The possible outcomes of an appeal may include reinstatement of the account, modification of the suspension duration, or confirmation of the original decision.

Communication: All decisions will be communicated to the appellant in writing, detailing the reasons behind the decision and, if applicable, any conditions attached to the reinstatement of the account.

Further Actions Post-Appeal:

Reinstatement: If the appeal is successful and the account is reinstated, any specific conditions or modifications to the account status will be clearly communicated to the user.

Continued Suspension or Termination: If the appeal upholds the original decision, the user will be informed of the reasons and any further steps they may take if they have additional information that could impact the decision.

Record of Appeals:

Documentation: AuthRequest will keep a record of all appeals and their outcomes for legal and compliance purposes.

Confidentiality: All appeal proceedings will be handled confidentially, respecting the privacy of the involved parties.

Disclaimer of Warranties:

"As Is" and "As Available": The AuthRequest services are provided "as is" and "as available" without any warranties of any kind, either express or implied, including but not limited to, implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

No Guarantees: AuthRequest does not guarantee that the service will function without interruption or errors. The operation of the service may be affected by numerous factors beyond our control.

Limitation of Liability:

General Limitation: To the fullest extent permitted by applicable law, AuthRequest, its affiliates, officers, directors, employees, agents, suppliers, or licensors will not be liable for (a) any indirect, incidental, special, consequential, or punitive damages, including without limitation, loss of profits, data, use, goodwill, or other intangible losses, resulting from your access to or use of or inability to access or use the service; (b) any conduct or content of any third party on the service; (c) any content obtained from the service; and (d) unauthorized access, use, or alteration of your transmissions or content, whether based on warranty, contract, tort (including negligence), or any other legal theory, even if AuthRequest has been informed of the possibility of such damage, and even if a remedy set forth herein is found to have failed of its essential purpose.

Cap on Liability: AuthRequest's total liability to you from all causes of action and under all theories of liability will be limited to the amount you paid for the AuthRequest service or, if you have not had any payment obligations to AuthRequest, $100.00.

Exclusions:

Applicable Law Exclusions: Some jurisdictions do not allow the exclusion of certain warranties or the exclusion or limitation of liability for consequential or incidental damages, so the limitations above may not apply to you.

User Responsibilities:

Risk Acknowledgment: By using AuthRequest, you acknowledge and agree that the inherent risks of electronic communication can lead to delays, failures, and inaccuracies in the data provided. You agree to assume full responsibility for these risks.

General:

Initial Dispute Resolution: AuthRequest is committed to resolving disputes amicably and efficiently. If you have any concerns or disputes arising from your use of AuthRequest, you are encouraged to contact our customer support directly to seek a resolution.

Notification:

Requirement to Notify: Before initiating any formal dispute resolution proceedings, you must first notify us in writing of your dispute and allow us an opportunity to resolve it informally. You must contact us at the address or email provided in our contact details with a detailed description of the dispute and any proposed resolution.

Mediation:

Voluntary Mediation: If the dispute cannot be resolved through direct discussions, the parties may agree to first attempt to resolve the dispute through mediated negotiations before resorting to arbitration. Mediation is a voluntary process where an impartial mediator facilitates negotiations between the parties, helping them reach a mutually acceptable settlement.

Binding Arbitration:

Agreement to Arbitrate: If the dispute cannot be resolved through mediation, it shall be resolved by binding arbitration administered by a neutral, independent arbitrator.

Procedure: The arbitration will be conducted in the jurisdiction where AuthRequest is headquartered, unless you and AuthRequest agree otherwise. The rules of the arbitration will be established by the arbitration body selected, which typically will be a recognized provider of dispute resolution services.

Costs: The costs of the arbitration, including administrative fees, professional fees, and arbitrator fees, will be shared equally by the parties unless the arbitrator decides otherwise. Each party is responsible for its own attorney fees and additional costs.

Frivolous Claims: In cases where the arbitration is deemed frivolous or without merit by the arbitrator, the party initiating the arbitration will be responsible for all arbitration costs.

Limitation on Liability:

Maximum Liability: Except as expressly provided in this Agreement, the maximum liability of either party to the other under any and all circumstances for any claim related to this Agreement, whether for breach of contract, warranty, negligence, strict liability in tort, or otherwise, shall be limited to the lesser of $500 CAD or the amount paid by the customer for the purchase of products or services under this agreement over the last 12 months.

Exclusions from Limitations:

Excluded Damages: In no event shall either party be liable to the other for any indirect, special, incidental, punitive, or consequential damages, including but not limited to, loss of profits, data, revenue, business opportunities, or business advantages, even if the possibility of such damages was known or should have been known.

Exceptions to Cap:

Non-Capable Liabilities: The limitations set forth in this clause shall not apply to liabilities arising from gross negligence, willful misconduct, or death or bodily injury caused directly by the negligent acts or omissions of the parties.

Acknowledgment:

Fair and Reasonable: The parties acknowledge that the limitations and exclusions contained in this clause and in this Agreement are agreed upon by both parties and are fair and reasonable in light of the circumstances surrounding the agreement, including the context in which the transactions take place and the pricing and allocation of risk.

Definition of Frivolous Claim:

A frivolous claim is defined as any claim brought by a party that lacks a reasonable basis in law or fact, fails to state a claim upon which relief can be granted, or is not supported by any credible evidence at the time of filing.

Consequences:

Immediate Review and Dismissal: Upon filing, all claims will be subject to an initial review by a designated legal officer or an agreed third-party arbitrator to assess their validity. Claims determined to be frivolous will be subject to immediate dismissal.

Liability for Costs: Any party that files a frivolous claim shall be liable for all costs incurred by the other party in defending against such claim, including reasonable attorneys' fees.

Additional Sanctions: The party filing a frivolous claim may also be subject to additional sanctions, including but not limited to fines, restrictions on future filings, and other penalties as deemed appropriate by the arbitrator or court.

Procedure for Handling Claims of Frivolous Nature:

Filing a Motion: The accused party may file a motion for the claim to be declared frivolous.

Burden of Proof: The burden of demonstrating that a claim is not frivolous rests with the claimant.

Determination and Enforcement: A determination that a claim is frivolous will be made by the arbitrator or judge overseeing the dispute, and any sanctions or costs will be enforced according to the legal standards of the jurisdiction in which the arbitration or litigation is taking place.

Modification and Waiver:

No Waiver: The failure to enforce this clause at any time or in any instance shall not be construed as a waiver of this clause or any part thereof.

Modification: Any modification to this clause must be made in writing and signed by both parties, agreeing to the modification.

Binding Decision:

Finality of Award: The decision of the arbitrator shall be final and binding, and no party shall have the right to litigate that decision in court or have a jury trial on that decision.

Class Action Waiver:

Waiver of Class Proceedings: You agree to resolve any disputes with AuthRequest on an individual basis, and you waive any right to participate in class actions, collective actions, private attorney general actions, or other representative proceedings of any kind.

Arbitration Requirement: Notwithstanding any other provision in this agreement, any dispute, claim, or controversy arising out of or relating to this agreement or the breach, termination, enforcement, interpretation, or validity thereof, including the determination of the scope or applicability of this agreement to arbitrate, shall be determined by arbitration. This excludes any option of litigation in small claims court, regardless of the nature or amount of the claim.

Mandatory Arbitration: All disputes between the parties, regardless of their nature or the amount in controversy, shall be resolved solely by binding arbitration, and not in any state, federal, or local court or agency.

Governing Law:

Applicable Law: The dispute resolution process will be governed by the laws of the jurisdiction where AuthRequest is incorporated, without regard to its conflict of law principles.

International Compliance and Multi-Jurisdictional Use Compliance with Local Laws:

AuthRequest is based in Canada, and while it operates globally, users are responsible for ensuring that their use of AuthRequest complies with all local, state, national, and international laws applicable to them. This includes but is not limited to laws relating to privacy, data protection, and electronic communications. Users should only engage with the service if such engagement is permitted under the laws of their jurisdiction.

Due to the global nature of our operations and the services provided by AuthRequest, personal information collected may be stored and processed in any country where we maintain facilities or engage service providers. Given the international scope of our services, cross-border data transfers are essential and unavoidable. By usingAuthRequest, you acknowledge and consent to the transfer of your information outside your country of residence, to jurisdictions which may have different data protection standards than those in your country.

AuthRequest commits to uphold the highest corporate standards reasonably achievable in protecting your data. This includes taking all necessary measures to ensure that the data transferred is adequately protected in compliance with applicable data protection laws. Such measures may include entering into appropriate data transfer agreements, implementing standard contractual clauses as approved by regulatory bodies, and adopting other means to provide an adequate level of data protection as required by relevant laws.

Export Control:

The service may be subject to international export control laws and regulations, which restrict exports and re-exports to certain countries. Each user is responsible for complying with these laws and regulations and will not, directly or indirectly, export, re-export, or transfer the AuthRequest services to prohibited countries or individuals or permit use of the AuthRequest services by prohibited countries or individuals.

Modifications in Response to Legal Requirements:

AuthRequest reserves the right to modify the service or terms of use to comply with applicable local laws. In such cases, the modifications will be made known to the users through updates to the terms on theAuthRequest website or through other appropriate communication channels.

Cooperation with Authorities:

AuthRequest may be required to respond to requests from court orders, legal process, or governmental regulations, affecting users from specific jurisdictions. You acknowledge and agree that we may disclose information to authorities if required by law, without providing notice to you.

6. Responsibility for Compliance:

This International Compliance and Multi-Jurisdictional Use clause is designed to clarify the responsibilities of both AuthRequest and its users when accessing the service from various international locations. It is the user's responsibility to ensure that they remain compliant with all local laws and regulations, particularly concerning data privacy and communications.

Severability:

Validity of Provisions: If any provision of these Terms is found by a court of competent jurisdiction to be invalid, the parties nevertheless agree that the court should endeavor to give effect to the parties' intentions as reflected in the provision, and the other provisions of the Terms remain in full force and effect.

Amendments:

Modification of Terms: AuthRequest reserves the right to amend these Terms at any time and will update these Terms in the event of any such amendments. It is your responsibility to check AuthRequest periodically for changes. Your continued use of the service after the posting of any amended Terms constitutes your agreement to be bound by the amended terms.

Assignment:

Restriction on Transfer: You may not assign or transfer these Terms, by operation of law or otherwise, without AuthRequest's prior written consent. Any attempt by you to assign or transfer these Terms, without such consent, will be null and void.

Assignment by AuthRequest: AuthRequest may assign or transfer these Terms, at its sole discretion, without restriction. Subject to the foregoing, these Terms will bind and inure to the benefit of the parties, their successors, and permitted assigns.

Force Majeure:

Exemption for Force Majeure: Neither party shall be liable for any failure to perform its obligations hereunder where such failure results from any cause beyond such party's reasonable control, including, but not limited to, mechanical, electronic, or communications failure or degradation.

Survival:

Continued Effect: The obligations and liabilities of the parties incurred prior to the termination date shall survive the termination of this agreement for all purposes. These Terms are effective unless and until terminated by either you or AuthRequest.

Governing Law:

Jurisdiction: These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which AuthRequest is incorporated, without regard to conflict of law principles.

Contact Information:

Customer Support: For any queries or assistance regarding our services, you can reach our Customer Support team at:

Email: support@authrequest.io

Corporate Contact:

Business Inquiries: For business-related inquiries, partnerships, or other professional communications, please contact:

Email: business@authrequest.io

Technical Support:

Technical Issues: If you encounter technical issues with our service, please contact our Technical Support team:

Mailing Address:

Corporate Office: For mail correspondence, please use the following address:

AuthRequest

010-438 11 Ave SE,

Calgary, AB,

T2G 0Y4, Canada

Media Inquiries:

Press Contact: For press and media-related inquiries, please reach out to:

Feedback and Suggestions:

Submit Feedback: We value your feedback and suggestions which help us improve our services. Please send your feedback to:

Email: support@authrequest.io

Legal Department:

Legal Queries: For legal inquiries or issues concerning terms of service, privacy policy, or compliance, please contact our Legal Department at:

Email: legal@authrequest.io