Terms of Service

1.1 What HeyPass does

Many teams use application accounts their organization controls and is allowed to share. The provider sends a sign-in code or link to a mailbox, and someone has to pass it to the authorized member. HeyPass helps with that handoff.

You set a selective auto-forwarding rule on your organization's mailbox. HeyPass receives the selected messages, checks sender authenticity and the approved login format, and delivers an eligible code or supported sign-in link only for an authorized member's open request. The member does not get access to the mailbox. Unbound browser approvals are not supported.

HeyPass is not a password manager and does not store vendor account passwords. Forwarding setup does not ask for your mailbox password. Existing separately authorized mailbox connections and optional application authenticator keys are described in the Privacy Policy.

1.2 Words we use

"Workspace" is the organization space you create in HeyPass. "Owner" is the person who holds owner rights. "Member" is a person added to the workspace. The owner controls which members may request sign-in access.

"Connected account" is an account with a third-party service that your organization holds and adds to HeyPass. "Verification" means an eligible one-time login code or supported sign-in link. Optional application authenticator codes require separate setup and security checks.

"Request" is a member asking HeyPass for sign-in access to one connected account. "Request record" is metadata about the requester, account, time and recorded outcome. Delivery or acknowledgement does not prove that the member signed in at the provider.

1.3 Who can use HeyPass

You must be at least 18 years old. You must use HeyPass for an organization, team or group that holds the accounts you connect.

If you create a workspace for an organization, you confirm that you have the authority to accept these Terms for it. You also confirm that you control the mailbox you forward from.

One person may hold one HeyPass user account. Do not create extra accounts to get more free workspaces or to get around plan limits.

1.4 Your responsibilities

You decide which accounts you connect and who can request their codes. You must have the right to share access to each account in that way. Some providers do not allow shared logins, or they charge per user. HeyPass does not give you any right to a third-party account, and it does not change the provider's rules. You must follow the agreements you have with those providers.

You must also:

• Keep your HeyPass login details private and turn on the extra sign-in protection we offer.
• Forward only the messages HeyPass needs. We suggest a filter for each service rather than forwarding the whole inbox.
• Add the password-reset exclusions we suggest to your own mail filter. HeyPass also blocks these messages on its side.
• Remove members from HeyPass when they leave, and change passwords or end sessions at the provider when you need to.
• Follow the Acceptable Use Policy part of our Terms of Service.

1.5 How delivery works

HeyPass checks the receiving destination, approved source mailbox, sender authentication, permitted login purpose and format, and the member's permission. A verification is delivered only for an eligible active request made before the email arrived.

One member holds a request for an account at a time. Other members can wait in a queue. A queue notification may require the member to take their turn explicitly.

Email codes are sent to the workspace's configured delivery destination. Supported sign-in links are claimed in the requesting HeyPass browser. In-app link and forwarding-confirmation values expire in memory within five minutes and are cleared on use where applicable. A code already emailed or copied cannot be recalled. The provider controls its own credential and session expiry.

HeyPass does not open the final sign-in page. Where separately enabled, a restricted resolver may inspect an approved tracker redirect without opening the final credential URL. Unknown or unsafe links remain rejected.

Delivery acceptance by an email service is not confirmation of inbox receipt or vendor sign-in. A request completion or user acknowledgement is not independent proof of a successful application sign-in.

1.6 Plans and payment

Existing beta workspaces remain free with fair-use safeguards. Paid plans are offered only when checkout is enabled. The Billing, Cancellation and Refund Policy below describes the current monthly offers. Checkout shows the total and recurring terms before an owner confirms payment. Creating a workspace does not start a trial or subscription. Eligible new customers can choose the seven-day card-backed Small Team trial described in section 3.1.

Dodo Payments is our merchant of record for new purchases. Earlier Creem subscriptions, receipts and financial records remain with Creem. Dodo Payments takes your payment, sends receipts and charges applicable sales tax or VAT. Dodo Payments's own terms also apply to your purchase.

1.7 Our software

We own HeyPass, its software, its design and its brand. We give you a limited right to use HeyPass for your workspace while these Terms apply. You may not copy, resell, rent or reverse engineer HeyPass, or try to get to parts of the system you are not meant to reach.

The data you put into HeyPass stays yours. You give us permission to process it only so we can run HeyPass for you, as the Privacy Notice explains.

1.8 Privacy

Our Privacy Policy explains what data we collect and why. If your organization needs a data processing agreement, the Data Processing Agreement part of our Privacy Policy applies to you.

1.9 Suspension and termination

You can stop using HeyPass at any time. To close a workspace, follow the Data Deletion and Offboarding part of our Security and Data Policy.

We may suspend or close a workspace if you break these Terms or the Acceptable Use Policy part of our Terms of Service, if you do not pay, or if we must do so by law. If the problem can be fixed, we will tell you first and give you time to fix it. We can act at once when there is a security risk, fraud, or harm to other people.

When a workspace is closed, members can no longer request codes. We delete your data as the Data Deletion and Offboarding part of our Security and Data Policy describes.

1.10 Service availability

We work to keep HeyPass running at all times, but we do not promise that it will never stop. Your mail provider, the forwarding rule or the third-party service can also delay or block a message.

Always keep a second way to sign in to your important accounts. Do not make HeyPass the only way to get into an account you depend on.

1.11 Warranties

We provide HeyPass "as is" and "as available". To the extent the law allows, we do not give any warranty that HeyPass will meet every need, work with every service, or be free of errors.

1.12 Limits on our liability

To the extent the law allows, we are not liable for indirect or consequential loss. This includes lost profit, lost data, or lost access to a third-party account.

Our total liability for all claims about HeyPass is limited to the amount you paid us in the 12 months before the claim. If you use the free plan, our total liability is limited to US$100.

These limits do not apply to loss caused by our fraud, our gross negligence or our willful misconduct, or to any liability the law does not let us limit.

1.13 Indemnity

If someone makes a claim against us because you broke these Terms, broke a provider's agreement, or used HeyPass in a way that is not allowed, you agree to cover our reasonable costs from that claim.

1.14 Changes to these Terms

We may update these Terms. For a material change, we will email the workspace owner at least 30 days before the change takes effect. If you continue to use HeyPass after that date, the new Terms apply. If you do not agree, you can cancel before the change takes effect.

1.15 Governing law and disputes

The laws of the State of Wyoming, USA govern these Terms. If you have a complaint, please write to hello@heypass.io first. We will try to settle it with you within 30 days.

If we cannot settle it, the state and federal courts located in Wyoming have jurisdiction. If you are a consumer, nothing in this section removes the rights the law of your country gives you.

1.16 Other terms

If a court finds that part of these Terms is not valid, the rest still applies. If we do not enforce a term at once, we can still enforce it later. You may not transfer these Terms to someone else without our written consent. We may transfer them if HeyPass is sold or merged, and we will tell you if that happens.

2.1 Use only accounts you hold

Connect only accounts that your organization or group holds and controls, with the permission of the provider. Knowing a password does not mean you have the right to share an account.

2.2 Accounts you must never connect

• Bank, card, payment, loan, insurance, investment or cryptocurrency accounts. HeyPass blocks known financial senders, and this block cannot be turned off.
• Health, patient or medical insurance portals.
• Government, tax, immigration or identity systems.
• Accounts that hold payment card data.
• Accounts that belong to anyone under 18.
• Accounts that belong to another person or organization who has not given you permission.

2.3 Things you must never do

• Resell, rent or broker access to any account, or run group-buy schemes.
• Use HeyPass to get around a provider's user limits, seat rules or terms.
• Forward password-reset or account-recovery emails, or try to get them past our filters.
• Use HeyPass for phishing, spam, fraud, harassment or watching other people.
• Try to defeat the security of an account you do not own.
• Create more than one HeyPass user account for yourself, or create many free workspaces to avoid paying.
• Test, probe or attack HeyPass, or try to reach another workspace's data.

2.4 What happens if you break these rules

We may stop a connected account, suspend a member, or close the workspace. If the problem is serious, or if the law requires it, we may act without warning. We may report illegal activity to the authorities.

2.5 Reporting misuse

If you think someone is misusing HeyPass, email hello@heypass.io with the subject "Misuse report".

3.1 Plans

Free includes one non-archived app account and three people, with no card required and no trial deadline. Small Team: $20 USD per workspace per month, including 10 app accounts and 15 people. Medium Team: $50 USD per workspace per month, including 20 app accounts and 40 people. Prices exclude applicable tax.

Non-archived app accounts count toward the app allowance, including paused accounts. Members, the owner and unexpired pending invitations count toward people. Reaching a limit blocks additions without deleting existing data.

Free includes one non-archived app account and three people, including the owner and unexpired pending invitations. Existing beta workspaces keep their existing access with fair-use safeguards. Free is available to new workspaces; beta access is retained only for existing beta workspaces. Existing workspaces are not automatically converted or charged, and previously agreed trial and renewal terms remain unchanged. Each paid workspace has its own subscription, started only by the owner's explicit checkout confirmation.

Monthly add-ons are $4 USD per extra login and $6 USD per pack of five extra people, before tax. Dodo Payments bills the base plan and selected add-ons as one monthly subscription with the same renewal date. Free workspaces can purchase extras without a paid base plan: only the selected extras are charged, while the included one app account and three people remain free. Add-ons can be selected at initial checkout or adjusted after the subscription is active. They are unavailable during the Small Team free trial. Annual billing and regional-currency plans are not currently offered. Checkout availability and the exact total are shown before payment.

Eligible new customers may start one seven-day Small Team free trial per owner. A card is required, with no subscription charge today. Before trial access begins, the owner must explicitly agree to recurring billing and complete card verification in Dodo Payments checkout. Dodo Payments stores the payment details; HeyPass does not. When the seven-day trial ends, Dodo Payments automatically charges $20 USD per workspace per month, plus applicable tax, until cancelled. The exact trial end is shown in Plan and billing. We send a trial-start email and a reminder two days before renewal. Cancel through Plan and billing → Manage subscription and invoices before the trial ends to avoid the subscription charge. Cancelled trials keep access through the original trial end and cannot be restarted. If the first charge fails, trial capacity ends at the original trial end. When trial capacity ends without payment, Free remains available within one app account and three people. Requests pause if usage exceeds that allowance; saved configuration is kept. Medium Team has no free trial. A minimal owner and trial record is retained to enforce eligibility even if the workspace is deleted.

The owner reviews and confirms each add-on change in HeyPass. Increases are charged to the saved payment method for the actual time remaining in the billing period, plus applicable tax. The review shows a prorated estimate; the payment provider determines the final amount and provides the receipt. HeyPass will request a new confirmation if the amount exceeds the total you approved. Added capacity becomes available only after confirmed payment. A failed or unconfirmed charge does not add capacity, and an unresolved change must be reviewed before another purchase.

Plan downgrades and capacity reductions take effect at the end of the current paid period, at the next renewal. Current paid capacity remains available until the end of the paid period, with no automatic partial-period refund for a reduction. The owner may cancel a scheduled reduction before the renewal cut-off shown in the app. If use exceeds the new allowance, existing people and logins are retained, but additions are blocked until use is reduced or more capacity is purchased. New sign-in requests also pause while usage exceeds the confirmed allowance. Cancellation of the subscription also stops renewal of its add-ons. Removing all extras from a Free subscription schedules cancellation at the end of the paid period; no zero-price subscription is created. Free access continues when current usage fits its allowance. Switching to Free schedules the end of the paid subscription and all its extras at the end of the paid period. Saved configuration is not deleted.

3.2 Payment

Dodo Payments is our merchant of record for new purchases. Earlier Creem subscriptions, receipts and financial records remain with Creem. Dodo Payments takes your payment, sends your receipt and adds sales tax or VAT where the law requires it. Do not send card details to us by email.

3.3 Renewal

Subscriptions renew monthly until cancelled. The recurring amount and billing period are shown at checkout and in your billing settings.

3.4 Upgrades and downgrades

Manage your plan and capacity in Plan and billing. Available changes and any charges must be shown and confirmed through the billing flow. Do not create a second subscription to change an existing plan. Contact hello@heypass.io if the required change is unavailable. See section 3.1 for paid-capacity changes and scheduled reductions.

3.5 How to cancel

The workspace owner can cancel future renewal through Plan and billing → Manage subscription and invoices. For a free trial, cancel before its end to avoid the subscription charge; trial access continues through the original trial end. For a paid subscription, access continues through the confirmed paid period. After the trial or paid period ends without confirmed renewal, new sign-in requests pause until paid access is restored. Free remains available within one app account and three people. Your configuration and access records remain available to the owner. Payment disputes or refunds may require a billing review.

Cancelling does not delete your workspace. To delete it, see the Data Deletion and Offboarding part of our Security and Data Policy.

3.6 Refunds

We do not give partial refunds for unused time when you cancel or downgrade.

We will refund you in full if you were charged twice, charged the wrong amount, or charged after you cancelled. We will also look at a refund if HeyPass did not work for you because of a fault on our side.

To ask for a refund, email hello@heypass.io with your workspace name, the email you paid with, and your receipt number. We reply within 5 business days. Dodo Payments sends approved refunds to your original payment method.

3.7 Your legal rights

If you are a consumer in the EU or UK, you may have the right to cancel within 14 days of your first purchase. If you ask us to start the service during those 14 days, we may keep a fair amount for the days you used. Nothing in this policy removes rights the law gives you.

3.8 Failed payments

If a payment fails, review the payment status in Billing and update the payment method through Dodo Payments. Paid capacity depends on a confirmed paid period. A past-due status does not extend that period, and no 14-day grace period is promised. When paid capacity ends, new sign-in requests pause until paid access is restored. Free remains available within one app account and three people. Payment disputes or refunds may require a billing review. Contact hello@heypass.io if the payment status looks incorrect.

3.9 Price changes

If we change the price of your plan, we will email you at least 30 days before your next renewal. The new price applies from that renewal. You can cancel before then.