Website Terms of Use

By accessing or using our website or online resources, you agree to these Terms.

If you access or use the website on behalf of a company, organization, or other legal entity, you represent that you have authority to bind that entity to these Terms. In that case, "you" means both you individually and the entity you represent.

If you do not agree to these Terms, you must not access or use the website.

You may use the website only if you are legally able to enter into a binding agreement.

The website and Flow2FA Services are intended for business use and are not directed to children or minors under 18. You must not use the website or Flow2FA Services if you are under 18.

We may update these Terms from time to time. The "Last Revised" date above shows when these Terms were last updated.

Changes will become effective when posted, unless we state a later effective date. Your continued use of the website after updated Terms are posted means you accept the updated Terms.

If we make material changes, we may provide additional notice where required by law.

Our collection and use of personal data is described in our Privacy Policy.

Our use of cookies, pixels, and similar technologies is described in our Cookie Policy.

By using the website, you acknowledge that Flow2FA may process personal data as described in those policies.

The "Flow2FA Services" means our business-to-business one-time-passcode (OTP) and two-factor authentication delivery platform. The Flow2FA Services accept authentication traffic through SMPP v3.4 and/or the documented REST API (see our API documentation), and deliver OTP and verification messages over WhatsApp, SMS, and email. Customers may use their existing vendors and SMPP binds, Flow2FA-supplied messaging routes, or a combination of both. The Flow2FA Services support routing, fallback, delivery monitoring, verification, and related operational services for authentication use cases. The Flow2FA Services are not a marketing or promotional campaign platform, and Flow2FA does not guarantee delivery of any message.

Subject to these Terms, Flow2FA grants you a limited, revocable, non-exclusive, non-transferable right to access and use the website for lawful business and informational purposes.

You must not use the website in any way that:

• violates any applicable law, regulation, court order, or legal obligation;
• infringes, misappropriates, or violates any intellectual property, privacy, publicity, or other rights;
• interferes with or disrupts the website, servers, networks, systems, or security measures;
• attempts to gain unauthorized access to any account, system, service, data, or network;
• introduces malware, viruses, worms, logic bombs, spyware, or harmful code;
• uses bots, scrapers, crawlers, spiders, or automated tools without our written permission;
• reverse engineers, decompiles, disassembles, or attempts to derive source code from any part of the website or Flow2FA Services;
• probes, scans, or tests the vulnerability of any Flow2FA system without authorization;
• overloads, floods, spams, mail-bombs, or otherwise attacks the website or related infrastructure;
• impersonates any person or entity;
• misrepresents your affiliation with any person or entity;
• uses the website to transmit unlawful, deceptive, abusive, defamatory, obscene, harassing, threatening, or harmful content;
• collects or harvests information about other users without authorization;
• circumvents access controls, usage limits, authentication systems, or security features;
• uses the website to benchmark, copy, or develop a competing service without our written permission; or
• uses the website in a way that could damage Flow2FA, our users, our Customers, our vendors, carriers, telecommunications providers, or the public.

Certain parts of the website or Flow2FA Services may require an account.

You agree to provide accurate, complete, and current information when creating or using an account. You are responsible for maintaining the confidentiality of your login credentials, including any API keys, SMPP bind credentials, and account passwords, and for all activity under your account.

You must promptly notify Flow2FA if you suspect unauthorized access to or use of your account or credentials.

We may suspend or terminate access to any account if we reasonably believe that:

• the account information is inaccurate or incomplete;
• the account or its credentials have been compromised;
• the account is being used unlawfully or abusively;
• the account is being used in violation of these Terms or any applicable agreement; or
• suspension is necessary to protect Flow2FA, Customers, End Users, carriers, networks, or the public.

These Terms govern general website use. They do not, by themselves, grant you a paid subscription or production access to the Flow2FA Services.

Paid access to the Flow2FA Services may require an Order Form, subscription agreement, Customer Terms, Data Processing Agreement, payment terms, or other written agreement.

If you use the Flow2FA Services as a Customer, you are responsible for ensuring that your use complies with all applicable laws, regulations, industry rules, carrier requirements, platform rules, and contractual obligations.

Flow2FA provides tools that Customers use to generate, deliver, and validate one-time passcodes and other authentication messages over WhatsApp, SMS, and email. Customers are solely responsible for the authentication messages they create, configure, trigger, send, or cause to be sent through the Flow2FA Services.

Customers must:

• have lawful authority to send authentication and verification communications to their end users, and provide any legally required notices;
• maintain the confidentiality and security of their accounts, API keys, and SMPP bind credentials;
• ensure the accuracy of recipient phone numbers, email addresses, and other contact data used for authentication;
• use the Flow2FA Services only for permitted authentication, verification, and transactional purposes, and not for marketing or promotional messaging;
• comply with all applicable telecommunications, privacy, consumer protection, and electronic communications laws;
• comply with applicable carrier, aggregator, registry, and platform requirements, and with WhatsApp Business Platform and Meta policies where WhatsApp is used;
• complete sender ID, template, or message registration where required by a carrier, platform, or regulator; and
• cooperate with Flow2FA in investigating complaints, abuse reports, carrier notices, regulatory inquiries, or suspected violations.

Flow2FA may suspend, throttle, block, filter, reject, disable, or terminate authentication traffic where we reasonably believe it is necessary to comply with law; comply with carrier, aggregator, registry, or platform requirements; prevent fraud, abuse, or unwanted messaging; protect end users; protect Flow2FA systems and reputation; preserve deliverability; respond to complaints or legal requests; or enforce these Terms or any applicable agreement.

Flow2FA does not guarantee message delivery, timing, carrier acceptance, registration approval, throughput, deliverability, or recipient engagement.

You must not use the website or Flow2FA Services to:

• engage in phishing, impersonation, or fraudulent identity verification;
• attempt credential theft or use the Services to facilitate unauthorized account access;
• generate abusive, excessive, or automated OTP traffic, including artificial traffic inflation (AIT) or SMS pumping;
• send unsolicited marketing or promotional content through the Flow2FA Services, which are authentication- and verification-only;
• attempt to bypass routing, rate-limiting, fraud-prevention, or security controls;
• impersonate another person, brand, business, or sender without authorization;
• distribute phishing links, malware, spyware, or harmful code;
• violate consumer protection, privacy, telecommunications, or marketing laws;
• violate carrier, aggregator, registry, WhatsApp Business Platform, Meta, or other platform requirements;
• contain hate speech, harassment, threats, or abusive content;
• exploit or target children or minors unlawfully;
• collect sensitive data without lawful authority and appropriate safeguards; or
• otherwise create legal, operational, reputational, or security risk, or cause harm to recipients, carriers, or providers.

Flow2FA may maintain a separate Acceptable Use Policy with additional prohibited content and conduct rules.

You may provide or upload information, text, data, files, messages, templates, forms, names, phone numbers, contact lists, configuration information, feedback, or other materials through the website or Flow2FA Services ("User Content").

You retain ownership of your User Content, subject to the rights granted to Flow2FA under these Terms and any applicable Customer agreement.

You represent and warrant that:

• you have all rights, consents, permissions, and authorizations necessary to provide the User Content;
• the User Content is accurate, lawful, and not misleading;
• the User Content does not infringe or violate any third-party rights;
• the User Content may lawfully be processed by Flow2FA as contemplated by these Terms and any applicable agreement; and
• your use of the User Content complies with all applicable laws.

You grant Flow2FA a limited, worldwide, non-exclusive, royalty-free licence to host, use, process, transmit, display, copy, modify, and otherwise handle User Content as necessary to provide, secure, maintain, support, and improve the website and Flow2FA Services, comply with law, enforce agreements, and prevent abuse.

Where Flow2FA processes Customer Personal Data on behalf of a Customer, that processing is governed by the applicable Data Processing Agreement.

If you provide suggestions, ideas, improvements, feature requests, comments, or other feedback about Flow2FA, the website, or the Flow2FA Services, you grant Flow2FA a perpetual, irrevocable, worldwide, royalty-free right to use, modify, commercialize, and incorporate that feedback without restriction or compensation to you.

Feedback does not include Customer Confidential Information or personal data processed under a Data Processing Agreement.

The website, Flow2FA Services, software, documentation, design, interfaces, graphics, text, logos, trademarks, service marks, icons, images, videos, workflows, code, and other materials are owned by Flow2FA or its licensors and are protected by intellectual property laws.

Except for the limited right to access and use the website under these Terms, no rights are granted to you.

You must not copy, reproduce, modify, create derivative works from, distribute, sell, lease, sublicense, publicly display, publicly perform, transmit, or otherwise exploit any Flow2FA materials without our prior written permission.

All Flow2FA names, logos, product names, and branding are trademarks or service marks of Flow2FA or its licensors. You must not use them without our prior written permission.

The website or Flow2FA Services may include links, integrations, APIs, plugins, payment processors, carriers, telecommunications providers, WhatsApp/Meta infrastructure, analytics tools, or other third-party services.

Third-party services are not controlled by Flow2FA. We are not responsible for third-party websites, services, content, policies, performance, security, availability, or practices.

Your use of third-party services may be subject to separate terms, privacy policies, fees, and legal obligations.

Any documentation, blog posts, guides, templates, FAQs, compliance notes, sample language, help content, or other informational materials provided by Flow2FA are for general informational purposes only.

They are not legal, regulatory, financial, tax, or professional advice. You are responsible for obtaining advice from qualified professionals before relying on any information for compliance or legal purposes.

Flow2FA does not guarantee that any template, workflow, disclosure, consent language, integration setup, or compliance-related material will satisfy legal, carrier, platform, or regulatory requirements for your specific use case.

Flow2FA may make beta, preview, trial, experimental, or pre-release features available from time to time.

Beta features are provided for evaluation only and may be changed, suspended, discontinued, limited, or removed at any time. Beta features may be incomplete, contain errors, operate differently than expected, or be subject to additional terms.

Flow2FA provides beta features "as is" and does not guarantee availability, reliability, performance, compatibility, or support for beta features.

We may modify, suspend, discontinue, restrict, or remove all or part of the website or Flow2FA Services at any time.

We do not guarantee that the website will be uninterrupted, secure, error-free, available in all locations, compatible with all devices, or free from harmful components.

We may perform maintenance, updates, security changes, or operational changes without prior notice.

You must use reasonable security practices when accessing the website or Flow2FA Services.

You must not attempt to bypass, disable, or interfere with security features. You must not test, scan, probe, or attack Flow2FA systems without our prior written authorization.

If you discover a security vulnerability, you must promptly report it to legal@flowstates.net.

You must not publicly disclose any vulnerability until Flow2FA has had a reasonable opportunity to investigate and remediate it.

By using the website or Flow2FA Services, you agree that Flow2FA may communicate with you electronically, including by email, website notices, account notices, dashboard messages, or other electronic means.

Electronic communications may include service notices, legal notices, security notices, billing notices, privacy notices, and updates to these Terms.

You agree that electronic notices satisfy any legal requirement that communications be in writing, to the extent permitted by law.

You may receive non-public information from Flow2FA, including technical, business, security, pricing, product, roadmap, or service information.

You must not disclose Flow2FA Confidential Information to any third party or use it for any purpose other than your authorized relationship with Flow2FA.

Confidential Information does not include information that:

• is publicly available without breach of these Terms;
• was lawfully known to you before receiving it from Flow2FA;
• is lawfully received from a third party without confidentiality obligations; or
• is independently developed without use of Flow2FA Confidential Information.

If you believe content on our website infringes your copyright, please contact us at legal@flowstates.net or by mail at Flowstates Inc, 330 Madison Avenue, 27th Floor, New York, NY 10017, United States.

Your notice should include:

• your name and contact details;
• identification of the copyrighted work;
• identification of the allegedly infringing material;
• a statement that you have a good-faith belief the use is not authorized;
• a statement that the information in your notice is accurate;
• your physical or electronic signature; and
• any other information required by applicable law.

Our website may offer an AI-powered assistant to help visitors learn about Flow2FA, navigate our documentation, and answer general questions.

Use of the AI assistant is subject to the general website-use rules in Section 05 and the prohibited-conduct rules in Section 09.

We may suspend or terminate your access to the website or Flow2FA Services at any time if we reasonably believe that:

• you violated these Terms;
• you violated another agreement with Flow2FA;
• your use creates legal, regulatory, security, operational, carrier, deliverability, or reputational risk;
• your account has been compromised;
• your use may harm Flow2FA, Customers, End Users, carriers, vendors, or the public;
• suspension is required by law, regulator, court order, carrier, aggregator, platform, or service provider; or
• continued access would expose Flow2FA to liability or risk.

Upon termination, the rights granted to you under these Terms will end immediately.

Sections intended to survive termination will continue to apply, including sections relating to intellectual property, confidentiality, feedback, disclaimers, limitations of liability, indemnity, dispute resolution, and governing law.

To the maximum extent permitted by law, the website, Flow2FA Services, documentation, materials, content, templates, and beta features are provided on an "as is" and "as available" basis.

Flow2FA disclaims all warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, availability, reliability, security, and uninterrupted operation.

Flow2FA does not warrant that:

• the website or Flow2FA Services will meet your requirements;
• the website or Flow2FA Services will be uninterrupted, secure, timely, or error-free;
• OTP or authentication messages will be delivered, accepted, read, or acted upon within any particular time;
• carriers, aggregators, registries, WhatsApp/Meta, or other third-party providers will approve, deliver, or support any message;
• any data, report, analytics, or result will be accurate or complete;
• any defects will be corrected;
• the website or Flow2FA Services will be free from malware or harmful components; or
• your use will comply with any law, regulation, industry rule, or carrier requirement.

You are responsible for your own compliance with applicable laws and for obtaining professional advice where needed.

To the maximum extent permitted by law, Flow2FA and its officers, directors, employees, contractors, affiliates, licensors, vendors, and service providers will not be liable for any indirect, incidental, special, consequential, exemplary, punitive, or enhanced damages, including lost profits, lost revenue, lost business, lost goodwill, lost data, service interruption, message delivery failures, carrier blocking, registration rejection, regulatory fines, or reputational harm, even if advised of the possibility of such damages.

To the maximum extent permitted by law, Flow2FA's total liability arising out of or relating to these Terms or your use of the website will not exceed USD $100.

If you are a paying Customer and a separate written agreement applies, the liability limits in that written agreement will apply to your paid use of the Flow2FA Services.

Some jurisdictions do not allow certain exclusions or limitations of liability. In those jurisdictions, our liability will be limited to the maximum extent permitted by law.

You agree to defend, indemnify, and hold harmless Flow2FA and its officers, directors, employees, contractors, affiliates, licensors, vendors, and service providers from and against any claims, demands, actions, damages, losses, liabilities, costs, and expenses, including reasonable legal fees, arising out of or relating to:

• your access to or use of the website or Flow2FA Services;
• your User Content;
• your authentication messages, recipient data, consent practices, or credential-security practices;
• your violation of these Terms;
• your violation of any applicable law, regulation, carrier rule, platform rule, or third-party right;
• your misuse of the website or Flow2FA Services;
• your breach of any representation or warranty; or
• any dispute between you and your customers, end users, message recipients, vendors, or third parties.

Flow2FA may control the defense of any matter subject to indemnification. You must cooperate with Flow2FA in defending such matters.

You must not use, export, re-export, import, sell, transfer, or provide access to the website or Flow2FA Services in violation of applicable export control, sanctions, anti-boycott, or trade compliance laws.

You represent that you are not located in, organized under the laws of, or ordinarily resident in any country or territory subject to comprehensive sanctions, and that you are not identified on any restricted party list.

You must not use the website or Flow2FA Services for any prohibited end use.

Flow2FA is based in the United States. The website and Flow2FA Services may be accessed from other countries.

You are responsible for ensuring that your access to and use of the website and Flow2FA Services complies with laws that apply to you, your business, your data, your authentication messages, and your recipients.

We do not represent that the website or Flow2FA Services are appropriate or available in every country or jurisdiction.

These Terms are governed by the laws of the State of New York, United States, without regard to conflict-of-law rules.

If any mandatory consumer protection, privacy, telecommunications, or other law gives you rights that cannot be waived by contract, nothing in these Terms limits those rights.

Before filing a claim, you and Flow2FA agree to try to resolve any dispute informally.

You must first send a written notice describing the dispute to Flowstates Inc, 330 Madison Avenue, 27th Floor, New York, NY 10017, United States, or by email to legal@flowstates.net.

Flow2FA will send notices to the email address associated with your account or otherwise available to us.

The parties will attempt to resolve the dispute in good faith for at least 30 days after notice is received.

Subject to any informal dispute resolution requirement above, you and Flow2FA agree that any dispute arising out of or relating to these Terms will be brought exclusively in the state or federal courts located in New York County, New York, and each party consents to the personal jurisdiction and venue of those courts.

You agree that a breach of provisions relating to intellectual property, confidentiality, security, or unauthorized use may cause irreparable harm to Flow2FA.

Flow2FA may seek injunctive or equitable relief without posting a bond or proving actual damages, in addition to any other remedies available at law or in equity.

Flow2FA will not be liable for any delay, failure, loss, or damage caused by events outside our reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, labour disputes, internet or telecommunications failures, carrier outages, cyberattacks, denial-of-service attacks, power failures, government actions, regulatory changes, supply chain failures, or failures of third-party providers.

You may not assign or transfer these Terms without Flow2FA's prior written consent.

Flow2FA may assign or transfer these Terms in connection with a merger, acquisition, financing, restructuring, sale of assets, corporate transaction, or by operation of law.

Any attempted assignment in violation of this section is void.

Flow2FA's failure to enforce any provision of these Terms does not constitute a waiver of that provision or any other provision.

Any waiver must be in writing and signed by Flow2FA.

If any provision of these Terms is found to be invalid, illegal, or unenforceable, the remaining provisions will continue in full force and effect.

The invalid, illegal, or unenforceable provision will be modified to the minimum extent necessary to make it valid, legal, and enforceable, or, if modification is not possible, it will be severed.

These Terms, together with any policies or documents incorporated by reference, constitute the entire agreement between you and Flow2FA regarding your use of the website.

For Customers using paid Flow2FA Services, these Terms operate alongside the applicable Customer agreement, Order Form, Data Processing Agreement, Acceptable Use Policy, Privacy Policy, and any other applicable written terms.

For questions about these Terms, contact:

Flowstates Inc, doing business as Flow2FA
330 Madison Avenue, 27th Floor
New York, NY 10017
United States

Legal Contact: legal@flowstates.net

Privacy Contact: dataprotectionofficer@flowstates.net

Website: flow2fa.com