Terms of service.

ZStrike provides a managed authorization control plane and decision engines that evaluate Cedar policies. Depending on your plan, a decision engine is hosted by ZStrike or runs in your infrastructure. By creating an account or using the service you accept these terms on behalf of your organization, and you confirm that you have the authority to do so.

The service changes. We may add, change, or remove features and plan limits at any time. When a change breaks existing behavior, we aim to tell account owners by email before it lands.

Keep your credentials and API keys safe. You are responsible for everything done through your account. Use the service lawfully, stay within your plan's limits, and don't probe, overload, or disrupt infrastructure that isn't yours.

Your policies decide who can access your systems — test them. ZStrike enforces what you write; it can't know what you meant. You are responsible for your policies, the data you sync, and the access decisions they produce.

Your policies, schemas, and entity data are yours. You grant us the license needed to host, process, and display them in order to operate, secure, and improve the service. We may use aggregated, de-identified usage data for analytics and to improve the service. We don't train models on your data.

The ZStrike software, brand, and documentation are ours. These terms give you a right to use the service, not ownership of it. Feedback you give us may be used without restriction or obligation.

The service is provided on a best-effort basis with no uptime commitment. Uptime figures on our site are targets. A binding SLA exists only in a signed Enterprise agreement. Decision engines are designed to keep deciding from local state even when the control plane is unreachable.

Support is by email. Response times depend on your plan and are targets, not guarantees.

Paid plans, additional authorization checks, and cloud-hosted engines are billed at the rates on the pricing page. Fees are non-refundable except where the law requires otherwise, and they exclude taxes.

We may change prices or plan limits; we'll email account owners at least 30 days before a change applies to a paid plan. The Free plan is provided at no charge and may be changed or withdrawn at any time. We may suspend an account whose payment is overdue.

The service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that it will be uninterrupted or error-free, or that it will prevent unauthorized access.

To the maximum extent permitted by law, ZStrike is not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data. ZStrike's total liability for all claims is capped at the fees you paid us in the 12 months before the claim — or US$100 if you're on the Free plan.

You will defend and indemnify ZStrike against third-party claims that arise from your policies, your data, or your breach of these terms.

Either side can end this at any time. We may suspend or close an account that breaks these terms, puts the service or other customers at risk, or is overdue on payment — with notice where practical. After an account closes, we delete your data on the schedule in the privacy policy; you have 30 days to export it first, unless we closed the account for a breach. Fees already paid are not refunded.