Terms of use

1. Agreement and authority

These Terms are between BugFall, the operator of Aurykle ("we", "us"), and the organisation and authorised individuals using the service ("you"). By requesting access, creating an account, accepting an invitation, or using Aurykle, you agree to these Terms and the Privacy Policy.

You must be at least 18 and authorised to accept these Terms for the organisation you represent. If you do not have that authority, do not connect an organisation's identity-provider tenant or AWS account.

2. The beta service

Aurykle observes supported Auth0 and Amazon Cognito configuration, creates canonical snapshots, reports field-level changes and findings, and may deliver requested notifications. Current coverage and known exclusions are listed on the Coverage page.

The beta is currently provided without charge and without a service level agreement. We may add, change, suspend, or remove beta functionality and may limit the number of users, tenants, collections, or notifications to protect the service.

3. Accounts and workspace access

• Keep account access secure and use accurate account information.
• Invite only people authorised to access the relevant workspace and tenant evidence.
• Review workspace roles and remove access when it is no longer required.
• Tell us promptly if an account, invitation, or credential may be compromised.

You are responsible for activity performed through accounts and integrations your organisation controls, except to the extent caused by our failure to meet a legal obligation.

4. Authority to connect identity providers

You may connect only an Auth0 tenant or AWS account that you are authorised to observe. For Auth0, use a dedicated machine-to-machine application and grant only the listed read scopes. For Amazon Cognito, use the fixed read-only IAM role, the supplied trusted principal, and a unique external ID. Never grant Aurykle create, update, or delete access. You are responsible for provider licensing, configuration, and approvals required by your organisation.

Aurykle's production collectors are designed without identity-configuration write operations. Disposable demo tooling documented for local development is separate from the production service and must never be pointed at a customer or production tenant.

5. Acceptable use

You must not:

• use Aurykle without permission or to violate law, contract, or another person's rights;
• probe, disrupt, overload, bypass limits, or attempt unauthorised access to the service or another workspace;
• upload malware or submit secrets through support, analytics, or fields not intended for credentials;
• reverse engineer the service except where that restriction is prohibited by law;
• resell or make the beta available to third parties without written permission; or
• use observations as the sole basis for a high-impact automated decision.

6. Customer data and privacy

You retain rights in information and configuration supplied by or collected from your authorised tenant or AWS account. You grant us the limited right to host, process, transmit, and display that information only as needed to provide, secure, support, and improve Aurykle and to comply with law.

You are responsible for providing notices and obtaining permissions required for information you connect to the service. Our handling of personal information is described in the Privacy Policy.

7. Ownership and feedback

Aurykle, its software, documentation, branding, and service design are owned by BugFall or its licensors. These Terms do not transfer that ownership. If you provide feedback, you allow us to use it without restriction or payment, provided we do not publicly identify you without permission.

8. Availability, suspension, and termination

We may suspend access to protect users or the service, investigate suspected misuse, meet legal obligations, or address operational risk. You may stop using Aurykle at any time and may disconnect or permanently delete a tenant through the product where available.

We may end the beta or an organisation's access with reasonable notice where practicable. Immediate action may be necessary for a security incident, unlawful use, material breach, or risk to another customer. Sections that by nature should continue, including ownership, confidentiality, and lawful liability limits, survive termination.

9. Disclaimers and your legal rights

To the extent permitted by law, the beta is provided "as is" and "as available". We do not promise uninterrupted availability, complete provider or resource coverage, detection of every change or vulnerability, or that every result will be accurate or suitable for a particular purpose.

Nothing in these Terms excludes, restricts, or modifies a consumer guarantee, statutory right, or remedy that cannot lawfully be excluded, restricted, or modified, including where the Australian Consumer Law applies.

10. Liability

To the extent permitted by law, neither party is liable for indirect, incidental, special, or consequential loss, loss of profit, loss of opportunity, or loss arising from decisions made without reasonable independent review. This limitation does not apply where liability cannot lawfully be limited or to fraud, wilful misconduct, or a party's breach of confidentiality or intellectual-property rights.

11. Changes and general terms

We may update these Terms as the beta evolves. We will identify the current version by its last-updated date and give reasonable notice of material changes where practicable. Continued use after the stated effective date means you accept the updated Terms.

These Terms are governed by the laws of South Australia, Australia, subject to mandatory laws that apply in another jurisdiction. If one provision is unenforceable, the remaining provisions continue. A delay in enforcing a right is not a waiver.

12. Contact

Questions about these Terms can be sent to jack@bugfall.com. Do not include passwords, client secrets, access tokens, or raw tenant exports.