Terms of Service

Last updated: April 1, 2026 · Effective: April 1, 2026

These Terms of Service ("Terms") govern your access to and use of Bastionary software, services, and websites operated by SummitFlux LLC ("SummitFlux," "we," "us," or "our"). By using Bastionary, you agree to these Terms.

1. Services

Bastionary includes: (a) the self-hosted Community Edition software, distributed under source-available terms; (b) the Bastionary Cloud hosted service; and (c) associated developer documentation, SDKs, and APIs.

2. Accounts and Registration

To use Bastionary Cloud, you must create an account. You are responsible for maintaining the security of your account credentials and for all activity under your account. You must provide accurate information and keep it updated.

3. Acceptable Use

You may not use Bastionary to:

• Violate any applicable laws or regulations
• Transmit malware, spam, or unauthorized automated traffic
• Circumvent authentication controls or access systems you are not authorized to use
• Reverse-engineer, decompile, or attempt to extract source code from the Cloud service
• Resell or sublicense Bastionary Cloud access without written permission

4. Self-Hosted Software

The Bastionary Community Edition is licensed under the Elastic License v2 (ELv2). You may use, copy, and modify the software for your own internal purposes. You may not provide the software as a managed service to third parties. The full license terms are available at bastionary.com/license.

5. Cloud Service

Bastionary Cloud is provided on a subscription basis. We will use commercially reasonable efforts to maintain 99.9% uptime (excluding scheduled maintenance). Credits for downtime are available as described in our SLA documentation.

6. Payment and Billing

Cloud subscriptions are billed monthly or annually. Unused time from a billing period is not refunded if you cancel. We reserve the right to suspend your account for non-payment after 14 days' notice.

7. Data and Privacy

Your use of data is governed by our Privacy Policy. For Cloud customers, we act as a data processor for end-user authentication data. You remain the data controller responsible for compliance with applicable data protection laws.

8. Intellectual Property

SummitFlux retains all rights to the Bastionary software, trademarks, and documentation. You retain all rights to your data and content. Use of the Bastionary name, logo, or brand requires prior written consent from SummitFlux.

9. Disclaimer of Warranties

THE SOFTWARE IS PROVIDED "AS IS." TO THE MAXIMUM EXTENT PERMITTED BY LAW, SUMMITFLUX DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

10. Limitation of Liability

SUMMITFLUX'S TOTAL LIABILITY FOR ANY CLAIMS ARISING FROM THESE TERMS SHALL NOT EXCEED THE AMOUNTS YOU PAID IN THE TWELVE MONTHS BEFORE THE CLAIM. IN NO EVENT SHALL SUMMITFLUX BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES.

11. Changes to Terms

We may update these Terms from time to time. We will provide at least 30 days' notice via email for material changes. Continued use after the effective date constitutes acceptance.

12. Contact

Questions about these Terms? Use the contact form on our website. SummitFlux LLC is headquartered in the United States.