Terms of Use

1. These terms

These terms apply when you use the Keywicket website and service, operated by Keywicket Operator [placeholder entity name] (ABN to be confirmed) ("we", "us"). By signing in or connecting a tenant you agree to them on behalf of yourself and the organisation you represent.

2. The service and its preview status

Keywicket reads directory settings and metadata from Microsoft 365 / Entra ID and Google Workspace through read-only access, checks them against its published rules, and shows findings, scores and suggested fixes. It never changes anything in your tenant.

Keywicket is a self-service preview. It's provided free of charge, features may change or be withdrawn, there is no guaranteed availability or response time, and there's no live support team. We'll give you at least 30 days' notice by email before the preview ends or any paid plan applies to you.

3. Your authority to connect a tenant

You promise that, whenever you connect a tenant or invite others to your workspace:

• you're authorised by the organisation that owns the tenant to connect it and to let Keywicket read its directory data;
• the administrator who grants consent is authorised to do so; and
• connecting it is consistent with the organisation's obligations to its people, including any privacy notices.

4. Acceptable use

You must not:

• connect or scan a tenant you're not authorised to;
• try to break, overload, probe or bypass Keywicket's security, except through responsible disclosure as described in our security.txt;
• use Keywicket or its findings to attack, harass or harm anyone, or for anything unlawful; or
• resell or provide Keywicket to others, except as a managed service provider for organisations that have authorised you.

5. Your data

Your organisation keeps ownership of its data. You let us collect, store and process it only to provide Keywicket to you, as described in our Privacy Policy and security and data handling page.

6. Findings, scores and indicative mappings

Findings and suggested fixes are information to help you make decisions; they aren't professional advice. References to the Essential Eight, ISO/IEC 27001, SOC 2 or other frameworks are indicative only. They are not an audit or a compliance attestation. You decide which changes to make in your tenant and are responsible for making them.

7. Fees

Keywicket is free during the preview. Billing is set up in test mode only, and no payment will be taken. If paid plans start, prices and terms will be shown before you choose a plan.

8. Intellectual property

We own Keywicket's software, rules, content and brand. If you send feedback, you let us use it to improve Keywicket without obligation to you.

9. Your consumer guarantees

Nothing in these terms excludes, restricts or modifies any guarantee, right or remedy you have under the Australian Consumer Law or the New Zealand Consumer Guarantees Act 1993 that can't lawfully be excluded. Where the law allows us to limit our liability for failing to meet such a guarantee, our liability is limited to supplying the services again or paying the cost of having them supplied again.

10. Limits on liability

Subject to section 9, and only to the extent the law permits: Keywicket is provided "as is" during the preview; we aren't liable for indirect or consequential loss, or for loss of data, profits or revenue; and our total liability to you is limited to the greater of the fees you paid us in the 12 months before the claim and A$100.

11. Suspension and ending

You can stop using Keywicket at any time by disconnecting your tenants and asking us to delete your account. We may suspend or end your access if you breach these terms, if there's a security risk, or if we end the preview, giving notice where practicable.

12. Your data when you leave

When you disconnect a tenant, scanning stops and raw directory data and any stored token are deleted immediately. Findings, comments and reports are deleted after 30 days, or immediately if you choose "Delete all data now". If we end your access, we'll delete your data on the same basis, giving you the chance to print reports first where practicable.

13. Changes to these terms

We may update these terms. We'll publish the new version here and email workspace owners about significant changes at least 14 days before they apply. If you keep using Keywicket after that, the new terms apply.

14. Governing law

These terms are governed by the laws of Queensland, Australia. You and we submit to the non-exclusive jurisdiction of the courts of Queensland. This doesn't take away any right you have to bring a claim in your own country under consumer protection laws that apply to you.

15. Contact

Keywicket Operator [placeholder entity name] (ABN to be confirmed), Brisbane, Queensland, Australia. Email keywicket@vdbs.net.