HEYPASS · 2026-09-14.1

Service terms

Your responsibilities when using HeyPass to manage application access.

On this page

Purpose and authority

HeyPass helps authorised members of an organisation obtain reviewed login verification messages for application accounts the organisation controls. You must be at least 18 and authorised to act for that organisation. A mailbox verification code proves access to an address; it does not establish legal ownership or permission to share a third-party account.

Your responsibilities

Follow the Acceptable Use policy and each vendor's own terms. Keep your HeyPass identity and security factors private. Grant only necessary access, maintain selective forwarding rules and remove members promptly. You remain responsible for licences, seat limits and vendor account/session administration.

How access ends

A request authorises one eligible login delivery during a bounded period. Revocation stops future access that has not already been dispatched. It cannot retract an emailed code or sign a person out of an application. On offboarding, also review the vendor's sessions, devices, password and sharing controls.

Availability and supported features

Applications can use an operator-reviewed integration or an owner-configured login-code or direct sign-in-link format that passes automatic validation and a signed connection check. The owner must enable access separately. A saved format is not vendor certification or proof that every future email will match. The directory is not a guarantee of integration support. Delivery acceptance by an email service is not confirmation of inbox receipt or vendor sign-in. Unknown formats, recovery mail, unsafe links and unbound browser approvals are rejected. Service interruption may require a fresh request.

Billing

Where subscription checkout is available, the workspace owner reviews the price and renewal terms before confirming payment. Stripe handles payment details, invoices and subscription cancellation; HeyPass stores customer/subscription references and status, not card details. Billing is unavailable until configured, and test mode cannot collect real payments.

Suspension and deletion

Misuse may lead to paused access and investigation. Keep a vendor-admin recovery path outside HeyPass. Workspace owners can schedule organisation deletion in Settings, with a seven-day undo window. See Privacy & data handling for the scope of deletion, retained records and copies held by email providers.

Product names belong to their owners. HeyPass is not affiliated with those providers.