Terms of Service

These terms are between you and [Company legal name], [registered address] (“we”, “us”). By creating an account or connecting an agent you accept them. If you are agreeing on behalf of an organisation, you confirm you are authorised to bind it.

Phirepass lets you reach a machine you control from your browser — SSH, SFTP, RDP and local HTTP services — through an agent that dials out to us, and lets you run uptime checks against services from our servers or from that agent. We may change, add or withdraw features; if we withdraw something you materially rely on, we will give you reasonable notice.

You sign in through GitHub and are responsible for the security of that account. Personal access tokens, node identities and session cookies issued to you are yours to protect: anything done through them is treated as done by you. Tell us promptly at [security contact email] if you believe a token or an account has been compromised, and revoke the affected node or token from the dashboard.

Phirepass exists to give you access to your own infrastructure. You must not use it to:

• install an agent on, or obtain access to, any machine you do not own or are not authorised in writing to administer;
• bypass or defeat a network control — a firewall, an egress policy, a segmentation boundary — that you are not entitled to bypass, including on a network belonging to an employer, client or third party;
• monitor, probe or send traffic to systems that are not yours and that you do not have permission to test;
• conceal an intrusion, exfiltrate data, or maintain access someone else has revoked;
• break the law, infringe others’ rights, or distribute malware through the service;
• attack the service itself, or place load on it deliberately beyond ordinary use.

An outbound-only agent is not a licence to bypass a control someone else put there on purpose. Getting that authorisation is your responsibility, and we may ask you to demonstrate it.

You remain responsible for the machines you connect and the services you expose through them, including keeping them patched, deciding who in your organisation may reach them, and complying with any law or contract that governs the data on them. We give you the tunnel; what travels through it is yours.

We aim to keep the service running but do not promise it will be uninterrupted or error-free, and it is provided “as is” without warranties of any kind to the fullest extent the law allows. Uptime monitoring is a best-effort signal about your services, not a guarantee that you will be told about every outage. Do not rely on it as the only alarm for something whose failure you cannot afford to miss.

To the extent permitted by law, we are not liable for indirect or consequential loss, lost profits, lost data, or business interruption. Our total liability arising out of or relating to the service is limited to [liability cap — e.g. the fees you paid in the previous 12 months]. Nothing here excludes liability that cannot lawfully be excluded.

You may stop using the service and delete your account at any time. We may suspend or terminate access if you breach these terms, if your use puts the service or other users at risk, or if we are legally required to. Where circumstances allow, we will tell you first.

Our handling of personal data is described in the Privacy Policy, which forms part of these terms.

We may update these terms; the date at the top of this page shows when. For material changes we will give notice in the dashboard or by email before they take effect, and continuing to use the service afterwards means you accept them.

These terms are governed by the laws of [jurisdiction], and the courts of [venue] have exclusive jurisdiction over any dispute, without prejudice to mandatory consumer protections in your country of residence.

Questions about these terms: [legal contact email].