// Terms of Service

Effective: March 4, 2026

// Acceptance of Terms

TL;DR:
Use Bindify = agree to these terms. Don't agree? Don't use it.

By accessing or using Bindify ("Service"), operated by Lightsong Software Solutions, LLC ("Company", "we", "us"), you agree to be bound by these Terms. If you do not agree, do not use the Service.

// Service Description

TL;DR:
Bindify is an MCP authentication proxy. We store your encrypted OAuth tokens and proxy requests to upstream services. By default, tokens use zero-knowledge encryption with keys only you hold.

Bindify provides a managed authentication proxy for the Model Context Protocol (MCP). The Service stores encrypted OAuth tokens and proxies authenticated requests to third-party services on your behalf. The Service offers two token storage modes: (a) Client-side Keys (default), where the encryption key exists only in your secret URL and Bindify cannot access your tokens without a live request from you — tokens are refreshed on-demand; and (b) Managed Refresh (advanced opt-in), where Bindify holds a server-derived encryption key and refreshes tokens daily in the background. You select a storage mode when creating each connection.

// Token Storage Modes

TL;DR:
You choose how your tokens are stored: client-side keys (we never hold the key, default) or managed refresh (we refresh daily in the background, advanced). Client-side keys is the default and recommended for most users.

Managed Refresh (advanced opt-in): Bindify stores your OAuth tokens encrypted at rest with AES-256-GCM. Bindify refreshes tokens daily in the background to keep long-idle connections active. This mode requires Bindify to hold a server-side decryption key.

Client-side Keys (default): Your OAuth tokens are encrypted with a key derived from your secret URL. Bindify never stores this key and cannot decrypt your tokens without a live request from you. Tokens are refreshed on-demand when your connection is used. This is the recommended mode for all services.

You may select a different storage mode for each connection at the time of creation. The storage mode cannot be changed after creation; to switch modes, revoke and recreate the connection.

// Accounts & Responsibilities

TL;DR:
One account per person. Keep your secret URLs and API keys safe — they're your credentials.

You must create an account via our authentication provider (Clerk). You are responsible for maintaining the confidentiality of your secret URLs and API keys. You must notify us immediately of any unauthorized use. One account per individual; sharing accounts is prohibited.

// Acceptable Use

TL;DR:
Don't abuse the service, don't scrape, don't resell, don't use it for anything illegal.

You agree not to: (a) use the Service for any unlawful purpose; (b) attempt to gain unauthorized access to any part of the Service; (c) interfere with or disrupt the Service; (d) resell or redistribute access to the Service; (e) use the Service to store or transmit malicious code; (f) attempt to reverse-engineer, enumerate, or brute-force secret URLs or API keys belonging to other users.

// Payment & Billing

TL;DR:
Free trial is 1 day, 2 connections. Paid plans are billed through Stripe.
If payment fails, you get a 3-day grace period before connections are suspended.
Cancel anytime — no refunds for partial periods.

The Service offers a free trial of one (1) day with two (2) connections. Paid subscriptions are billed via Stripe. If a payment fails, you will have a three (3) day grace period before your connections are suspended. Suspended connections are not deleted and will be reactivated upon successful payment. You may cancel your subscription at any time; cancellation takes effect at the end of the current billing period. No refunds are provided for partial billing periods.

// Service Availability

TL;DR:
We try to keep Bindify running 24/7, but we don't guarantee uptime. Maintenance happens.

We strive to maintain high availability but do not guarantee uninterrupted access. The Service is provided on a "best effort" basis. We may perform scheduled or emergency maintenance that temporarily affects availability. We are not liable for any downtime or service interruptions.

// Limitation of Liability

TL;DR:
Bindify is provided "as-is." We're not liable for damages beyond what you've paid us.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU HAVE PAID US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

// Termination

TL;DR:
You can close your account anytime. We can terminate your access if you violate these terms.
When terminated, connections are suspended, then deleted after 30 days.

You may terminate your account at any time by contacting [email protected]. We may terminate or suspend your access immediately, without prior notice, for conduct that we determine violates these Terms or is harmful to other users or the Service. Upon termination, your connections will be suspended immediately. Account data will be deleted thirty (30) days after termination.

// Changes to Terms

TL;DR:
We may update these terms. We'll email you. Keep using the service = you accept the changes.

We reserve the right to modify these Terms at any time. We will notify you of material changes via the email address associated with your account. Your continued use of the Service after such notification constitutes acceptance of the modified Terms.

// Governing Law

TL;DR:
Oregon law applies. Disputes go to Oregon courts.

These Terms shall be governed by and construed in accordance with the laws of the State of Oregon, without regard to its conflict of law provisions. Any disputes arising from these Terms or the Service shall be resolved in the state or federal courts located in Oregon.

// Contact

Questions about these terms? Email [email protected].