Terms of Service

1. Service overview

MachineID.io provides an API to issue organization keys ("org keys"), register devices, and enforce device-based limits tied to subscription plans. You integrate the API into your own systems and decide how your software responds to the API’s responses.

2. Accounts, org keys & security

MachineID.io is built around organization API keys ("org keys"). We do not issue separate end-user logins. Your org key is the primary credential that identifies your account in the API and is treated as your "account identity" for technical purposes.

You are responsible for keeping your org keys secure and for all activity that occurs using them. Treat org keys like passwords or access tokens:

• Store them in secure server-side configuration or secrets management, not in public code.
• Avoid embedding org keys directly in client-side apps, mobile binaries, or public repos.
• Do not post org keys in forums, screenshots, or other public places.
• Rotate or regenerate keys if you believe they may have been exposed.

MachineID.io may provide features to rotate or replace org keys (for example, from the dashboard). When you rotate a key, the previous key may stop working immediately. You are responsible for updating your agents, services, and infrastructure to use the new key and for any impact caused by delayed updates or misconfiguration on your side.

You are also responsible for ensuring contact details you provide (such as email) are accurate and kept up to date, so we can reach you about billing or important service changes.

3. Plans, billing, Stripe & secure links

MachineID.io offers a free tier and paid plans with higher device limits. Plan billing is handled by Stripe. We do not store your full card number or full payment details; we may store Stripe customer IDs and subscription IDs to understand your plan and enforce limits.

When you subscribe, upgrade, or downgrade, your billing relationship is between you and Stripe, subject to Stripe’s own terms. Changes to your plan may take effect immediately or at the end of a billing period, depending on how the Stripe subscription is configured.

MachineID.io may send you transactional emails related to billing, plan changes, or account status. These emails may include secure, time-limited links that take you to Stripe’s billing portal or a page where you can view or manage your subscription based on your customer record. Do not forward or share those links with anyone you do not want to have access to your billing settings.

It is your responsibility to:

• Review and confirm plan changes or cancellations in Stripe’s billing portal.
• Secure access to your email account, org keys, and any devices or tools that can access billing links.
• Monitor invoices and subscription status for accuracy.

4. Device limits & enforcement

Each plan has a device cap (for example 3 / 25 / 250 / 1000). The API enforces these limits server-side based on your current subscription and plan tier.

If you reach your device cap, new registration attempts may be blocked or marked as over limit (for example returning a limit_reached status). For downgrades or plan changes, we may prevent new device registrations under the lower cap and may mark some devices as revoked according to the service’s current logic and documentation.

MachineID.io does not automatically change how your own software behaves when a device is revoked or over the limit. You remain responsible for interpreting API responses and enforcing access control or business rules inside your product, including how your agents behave if a device is revoked or rejected.

5. Acceptable use

You agree not to use MachineID.io to break the law, harm others, attack infrastructure, or interfere with the security or stability of the service. We may suspend or restrict access if we believe your usage is abusive, illegal, or damaging to the platform or others.

6. Availability & changes

We aim for high uptime, but the service may be unavailable from time to time for maintenance, changes, or issues outside our control. We may modify or discontinue parts of the service, features, or plans from time to time.

If we make material changes to these terms, we will update the "Last updated" date above. In some cases we may also notify you by email or through the dashboard, where appropriate.

7. Disclaimers & limitation of liability

MachineID.io is provided "as-is" without warranties of any kind. You are responsible for evaluating whether the service is appropriate for your use case, including any high-risk or safety-critical environments.

To the fullest extent permitted by law, MachineID.io will not be liable for indirect, incidental, special, or consequential damages, or for any loss of revenue, profits, or data arising from your use of the service.

To the extent any liability cannot be excluded, our total aggregate liability for all claims arising out of or relating to the service will be limited to the greater of (a) the amount you paid for the service in the three (3) months before the event giving rise to the claim, or (b) one hundred US dollars (USD $100).

8. Governing law & disputes

These terms are governed by the laws of the United States and, to the extent not preempted, the laws of the State of California, without regard to conflict-of-law principles.

Any dispute arising out of or relating to these terms or the service will be brought in the state or federal courts located in California, and you consent to the personal jurisdiction of those courts, except where applicable law provides you with a different right.

9. Contact

If you have questions about these terms or how MachineID.io works, you can reach us at support@machineid.io.