Key-WardenSign in
Legal

Terms of service

Version 2.1.0 · Last updated 6 October 2026 · Effective 1 October 2026

These terms govern your use of the Key-Warden platform, a product of MYITANDAPPS PTY LTD (ABN 82 659 633 888) of PO Box 7570, Redland Bay QLD 4165, Australia ("Key-Warden", "we", "us"). By creating an account, clicking to accept, or using the service, you ("Vendor", "you") agree to them. If you agree on behalf of a company, you warrant that you are authorised to bind it, and "you" includes that company.

1. Definitions

  • Service: the Key-Warden platform, including the marketplace, checkout and free-claim and trial flows, licensing, signing, activation and verification services, seat and band enforcement, invoicing, release distribution and update feed, email notifications, the customer and vendor portals, APIs, the SDK, the in-browser source-hardening tool, documentation and updates.
  • Marketplace: the pages on key-warden.com where Your Products may be listed for browsing, purchase, free claim or trial.
  • SDK: the libraries, code samples and tools we provide for embedding licence verification and updates in your software.
  • Your Products: the software and services you sell, license or distribute using the Service.
  • Your Customers: the people and organisations who buy, license or use Your Products.
  • Vendor Data: data you or Your Customers provide to the Service, including product, plan, licence, activation, order and customer contact details.
  • Plan: the Key-Warden subscription and any activation packs you buy, with the limits and fees published on the Pricing page or in your order.

2. The service

Key-Warden provides licensing, signing, verification, checkout, invoicing and distribution tooling for software vendors. We may add, change or remove features. Where a change materially reduces the core Service you have paid for, we will give you reasonable notice. We aim for high availability but do not guarantee uninterrupted or error-free service unless a separate signed service level agreement (SLA) is in place.

3. Your account

You are responsible for your account, for everyone who uses it, and for keeping your credentials, API keys, client secrets and any passphrase secure. Sign-in is handled by Microsoft Entra External ID. A passphrase you set for in-browser source hardening is never sent to us and cannot be recovered. You must tell us promptly at welcometo@key-warden.com if you suspect unauthorised access.

4. Your role: seller of record

  1. You are the seller and merchant of record for every sale of Your Products, including sales made through the Key-Warden checkout. Your contract for Your Products is between you and Your Customer. We are not a party to it, and we are not a reseller, agent, distributor or payment intermediary.
  2. Payments from Your Customers go directly into your own Stripe or PayPal account. We never receive or hold those funds. Tax invoices are issued in your name and on your behalf.
  3. You are solely responsible for: - Your Products: their quality, security, legality, support, updates and fitness for purpose; - your own licence agreement or terms with Your Customers, including refund, warranty and liability terms. You must have such terms in place, and they must not conflict with these terms or make any promise on our behalf; - prices, taxes (including GST, VAT and sales tax), tax registrations and the accuracy of the business and tax details printed on your invoices; - refunds, chargebacks, disputes, fraud and payment-provider fees. The Service can revoke, suspend or restore licences automatically in response to those events, but the decision and its consequences are yours; - complying with consumer, privacy, export, sanctions and other laws that apply to your sales and Your Customers.
  4. You warrant that you own or have the right to sell and license Your Products and everything you upload, and that Your Products do not infringe anyone's rights.
  5. Team members. You control who you invite to your vendor account and the roles they hold. You are responsible for everything your team members do in the Service, and for removing access promptly when someone leaves.
  6. Payment connections. You connect your own Stripe or PayPal credentials and configure their webhooks. We store those credentials only in encrypted form, bound to your vendor account, as described in our Privacy Notice. You are responsible for those accounts, credentials and settings, for keeping them valid, and for rotating them if you suspect compromise. We are not liable for missed, duplicated or failed payments, licence events or invoices caused by incorrect credentials, webhook settings or provider changes.
  7. Releases and distribution. You grant us a non-exclusive licence to host, copy, sign, distribute and deliver the releases you upload, solely to provide the Service. You are responsible for every release you publish, including its security, licensing and compliance with any marketplace or repository rules (such as WordPress.org's licensing and listing guidelines). We may scan, withhold or remove a release we reasonably believe is harmful or unlawful.
  8. Marketplace listings. A listing is not an endorsement. We may decline, suspend or remove a listing that breaches these terms or the law. You are responsible for the accuracy of your listings, prices and plan descriptions.
  9. Invoices and exports. Invoices are generated from the business, tax and pricing details you configure. Invoice lists, PDFs and CSV exports are provided for your convenience. You remain responsible for checking them, keeping your own records and meeting your tax obligations. We do not provide tax, accounting or legal advice.
  10. Emails to Your Customers. Licence keys, receipts, renewal reminders, revocation notices and other messages to Your Customers are sent on your behalf and may carry your branding. You are responsible for the content you configure and for any broadcasts you send, including compliance with the Spam Act 2003 (Cth) and similar laws. Opt-outs are always honoured and cannot be overridden.

5. Acceptable use

You must not, and must not allow anyone to:

  1. use the Service to distribute malware, spyware or code that harms users, or to sell products or content that is unlawful, infringing, deceptive or prohibited by Stripe or PayPal;
  2. probe, scan, test or attack the Service, try to bypass its security or limits, or access other vendors' data;
  3. copy, modify, decompile, reverse engineer or create derivative works of the Service, except the SDK as permitted in clause 6;
  4. resell, sublicense or provide the Service to third parties as a service bureau or white-label platform, unless we agree in writing;
  5. use the Service in a way that exceeds your Plan's limits or degrades it for others.

We may remove content, suspend activity or suspend accounts that we reasonably believe breach this clause.

6. SDK licence

Subject to these terms, we grant you a non-exclusive, non-transferable, revocable licence, for the term of your Plan, to use the SDK and to embed its runtime components (in object or obfuscated form) in Your Products, solely to verify licences and deliver updates through the Service. You must not alter or remove its licence-verification logic or copyright notices, or use it with any other licensing service. Open-source components in the SDK are attributed in the SDK and governed by their own licences; see the Open-source notices.

7. Fees and payment

  1. Fees are as published on the Pricing page or in your order: a monthly or annual platform subscription and any activation packs you buy. We do not charge a commission on your sales.
  2. Prices are in Australian dollars and include GST where it applies. Your tax invoice shows the GST component.
  3. Your Key-Warden fees are paid through Stripe or PayPal under their terms. We do not see or store full card numbers.
  4. We may change fees on at least 30 days' notice. The change applies from your next renewal.
  5. Overdue amounts may lead to suspension under clause 8.

8. Subscriptions, renewal, suspension and cancellation

  1. Subscriptions renew automatically at the end of each billing period until cancelled.
  2. You can cancel at any time through your payment provider or by emailing us. Cancellation takes effect at the end of the period already paid. Until then your access and the licences tied to your subscription remain valid; after that they are deactivated.
  3. If a renewal payment fails, the payment provider retries it. If it cannot be collected, we may suspend your account, your checkout and the licences you issue until payment resumes.
  4. Effect on Your Customers. If your Key-Warden subscription is suspended or ends, licence checks, checkout and updates for Your Products may stop working, and Your Customers' licences may fail verification after any grace period built into the SDK. You are solely responsible to Your Customers for that outcome, and for giving them notice.
  5. Fees already paid for a current period are not refunded, except where the Australian Consumer Law or another law that cannot be excluded requires otherwise.

9. Licence keys, free claims and trials

Licence keys are delivered to the email address (and, where offered, the mobile number) given at checkout or claim, or to the verified account email of a signed-in customer. Free plans can be claimed without a card, and trials end automatically at the end of the period you set unless converted to a paid plan. Activations are counted against keys and your Plan. We are not responsible for keys lost, shared, leaked or misused by you or Your Customers, or for delivery failures caused by incorrect contact details or email or SMS providers.

10. Signing keys and security

Your per-vendor signing keys are generated and held in Microsoft Azure Key Vault and are never released in plaintext; Your Products embed only the public key. We use reasonable technical and organisational measures to protect the Service and Vendor Data. However, no system is completely secure, and the security of Your Products, your build pipeline, your account and the environments Your Customers run them in is your responsibility. Licence enforcement and source-code hardening make unauthorised use harder; they do not guarantee that Your Products cannot be copied, cracked or tampered with.

11. Data and privacy

  1. You own Vendor Data. You grant us a licence to host, process and use it to provide, secure, support and improve the Service, and as required by law.
  2. For personal information about Your Customers, you are the controller and we process it on your behalf, only to provide the Service and on your documented instructions. You are responsible for having a lawful basis, giving any required privacy notices and consents, and handling Your Customers' privacy requests. We will tell you without undue delay if we become aware of an eligible data breach affecting Vendor Data and will help you meet your notification obligations.
  3. We handle your own account information under our Privacy Notice. Vendor Data is stored in Microsoft Azure in Australia; Stripe and PayPal may process payment data overseas under their terms.
  4. We may use aggregated, de-identified data about use of the Service for analytics and improvement.
  5. Retention. Financial records (invoices and subscriptions) are kept for 7 years after the subscription ends, as tax and accounting law requires. Logs and activity records (notification, diagnostic, trial and claim records) are kept for 365 days and then deleted automatically. Opt-out records are kept indefinitely, as hashed tokens, so that an opt-out is always honoured. Each store is listed in our Data Retention & Erasure Register.
  6. Erasure. Where a Customer asks to have their personal information erased, we anonymise it across the Service. Financial records we must keep by law are retained in de-identified form, separated from the person.
  7. Data processing agreement. On request, we will enter into a data processing agreement with you covering our processing of Your Customers' personal information, including our sub-processors (Microsoft, Stripe, PayPal and Twilio). Personal data is hosted in Microsoft Azure (Australia East). Where personal data of individuals in the EEA or UK is processed, international transfers rely on the applicable Standard Contractual Clauses, including those incorporated in our sub-processors' data protection addenda. We enter into Standard Contractual Clauses with vendors and customers where required, as part of the data processing agreement described in this section.

12. Confidentiality

Each party must keep the other's non-public information confidential, use it only for the purposes of these terms, and protect it with at least reasonable care. This does not apply to information that is public through no fault of the receiving party, or that must be disclosed by law (after notice, where lawful).

13. Intellectual property

You keep all rights in Your Products and Vendor Data. We and our licensors keep all rights, title and interest, including all intellectual property, in the Service, the SDK, our documentation and anything derived from them. The Service is © 2021–2026 MYITANDAPPS PTY LTD. All rights reserved. "Key-Warden" and its logo are our trade marks. You may describe Your Products as licensed through Key-Warden. Any other use of our marks needs our written consent. Feedback you give us may be used without obligation to you.

14. Third-party services

The Service relies on third parties including Microsoft (Azure, Entra ID), Stripe and PayPal. Your use of Stripe and PayPal is governed by your own agreements with them. We are not responsible for their acts, omissions, outages, fees, account holds or changes.

15. Disclaimer and Australian Consumer Law

To the maximum extent permitted by law, the Service is provided "as is" and "as available", and we exclude all warranties, conditions and guarantees not expressly stated, including fitness for purpose, merchantability, accuracy and non-infringement. Trials, demos and the in-browser tools are provided as is without any warranty.

Nothing in these terms excludes, restricts or modifies any consumer guarantee, right or remedy under the Australian Consumer Law that cannot lawfully be excluded. Where we are permitted to limit our liability for breach of such a guarantee, our liability is limited, at our option, to supplying the services again or paying the cost of having them supplied again.

16. Limitation of liability

To the maximum extent permitted by law:

  1. Excluded loss. We are not liable for any loss of profit, revenue, sales, business, goodwill, customers or anticipated savings; loss or corruption of data; business interruption; or indirect, incidental, special, consequential or punitive loss, however caused (including negligence).
  2. Specific exclusions. We are not liable for loss arising from: outages, delays or failures of licence checks, checkout, invoicing or the update feed; Your Customers being unable to activate or use Your Products; licences revoked, suspended or restored under the rules you configure or because of payment-provider events; unauthorised copying or cracking of Your Products; acts or omissions of Stripe, PayPal, Microsoft or other third parties; or your failure to keep your credentials secure.
  3. Cap. Our total aggregate liability arising out of or in connection with the Service and these terms, whether in contract, tort (including negligence), statute or otherwise, is limited to the Key-Warden fees you paid us in the 12 months before the event giving rise to the claim, or AUD 100 if you have paid nothing.
  4. Contribution. Our liability is reduced to the extent you, Your Customers or third parties caused or contributed to the loss.

These limits do not apply to liability that cannot be limited by law. Our liability is also limited by a scheme approved under Professional Standards Legislation.

17. Indemnity

You indemnify us, our officers, employees and contractors against all claims, losses, damages, fines, costs (including reasonable legal costs) and liabilities arising from or connected with: Your Products; your sales, prices, taxes, invoices, refunds and chargebacks; any claim by Your Customers; Vendor Data; your breach of these terms or the law; or any claim that Your Products or Vendor Data infringe anyone's rights or breach privacy law.

18. Termination

  1. You can stop using the Service at any time.
  2. We may suspend or end your access immediately by notice if you breach clause 5, 6 or 13, fail to pay, become insolvent, or if required by law or by Stripe, PayPal or Microsoft. We may end these terms for any other material breach that you do not fix within 14 days of notice, or for convenience on 90 days' notice.
  3. On termination we will make your Vendor Data available for export for 30 days, after which we may delete it, except where we must keep records by law.
  4. Clauses 4, 8.4, 10 to 13 and 15 to 21 survive termination, together with any other clause that by its nature is intended to continue.

19. Changes to these terms

We may update these terms by publishing a new version and, for material changes, giving you at least 30 days' notice by email or in the portal. Continued use after the effective date means you accept the updated terms. If you do not agree, you may cancel before the change takes effect.

20. General

These terms, with your order, any signed SLA and our Privacy Notice, are the whole agreement on their subject. You may not assign or transfer them without our written consent; we may assign them to a successor of our business. If a provision is unenforceable, it is read down or severed and the rest continues. A failure to enforce a right is not a waiver. Neither party is liable for delay caused by events beyond its reasonable control. You must comply with export control and sanctions laws that apply to you. We may seek injunctive relief for any breach of clauses 5, 6, 12 or 13.

21. Governing law

These terms are governed by the laws of Queensland, Australia, regardless of where you are located or where the Service is used. Each party submits to the exclusive jurisdiction of the courts of Queensland, the federal courts of Australia sitting in Queensland, and the courts that can hear appeals from them. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

22. Contact

MYITANDAPPS PTY LTD · ABN 82 659 633 888 · PO Box 7570, Redland Bay QLD 4165, Australia Email: welcometo@key-warden.com