Terms of Service

Obsidian Guard provides supported approval, hold, detection, notification, API, and activity-history capabilities for risky operational actions. The service and Shopify integration are currently in private beta and may change as platform approval and validation continue.

Documentation describes the current supported boundary; it does not convert planned or developing functionality into a commitment.

You must be at least 18 and authorized to accept these Terms for yourself or the organization using the service. You are responsible for accurate account information, safeguarding credentials, controlling membership, and promptly reporting suspected compromise.

Organization owners and administrators are responsible for assigning roles and reviewers appropriate to their internal authority.

• Configure rules, approvers, notification destinations, and platform permissions carefully and test them before operational reliance.
• Ensure reviewers have authority and sufficient context to decide each request.
• Verify downstream Shopify or third-party state after failures, detected bypasses, or manual-follow-up messages.
• Do not submit secrets, prohibited data, full payment-card data, or unnecessary personal information.
• Maintain independent business continuity, fraud, inventory, accounting, and access-control procedures.

Shopify and other providers control their permissions, APIs, webhooks, availability, data, native buttons, and account policies. Obsidian Guard does not replace Shopify permissions and cannot guarantee that every native or third-party action is intercepted, held, detected, attributed, reversed, or prevented.

Refunds submitted through the protected path can be approved before an execution attempt. Shopify's native Refund button is not globally blocked. Fulfillment holds/releases and other actions depend on supported Shopify state and valid permissions.

Current public plans are Refund Guard Preview, Refund Guard, Store Guard, and Control Guard. Paid pricing may be monthly or annual as displayed at purchase. Annual totals, not equivalent monthly figures, are the billed amount.

SMS and WhatsApp use monthly mobile-alert credits. They are not unlimited. When a cap is reached and overage is not enabled, mobile channels can pause until reset or allowance changes. Any paid overage/add-on must be expressly presented and accepted before charge.

Cancellation, refund, tax, price-change notice, and billing-dispute terms require confirmation in the applicable order or checkout and legal review before public availability.

• Do not violate law, infringe rights, harass, deceive, or facilitate harmful or unauthorized activity.
• Do not probe or access another customer's data, bypass access controls or rate limits, introduce malware, disrupt service, or reverse engineer except where law expressly permits.
• Do not resell or sublicense the service without written permission.
• Do not use approvals as a substitute for professional, legal, financial, fraud, or safety judgment.

You retain rights in data you provide. You authorize us and our providers to host, process, transmit, and secure it to provide, support, and protect the service. Each party will use reasonable care with the other party's non-public information and may disclose it to personnel/providers who need it and are bound by appropriate obligations.

Privacy handling is described in the Privacy Policy. Formal data-processing and confidentiality terms may be added in a signed agreement.

Obsidian Guard software, documentation, branding, and service content are owned by Obsidian Guard, LLC or its licensors. These Terms grant only the limited right to use the service during an authorized subscription or beta. Feedback may be used to improve the service without obligation, provided it does not require disclosure of your confidential information.

API access is private beta and plan-gated. Keep keys and signing secrets server-side, comply with rate limits, validate webhook signatures, and process retries idempotently. Request creation is not currently idempotent, and approval does not prove that your separate downstream operation succeeded.

We work to operate the service reliably but do not promise uninterrupted availability, notification delivery, detection completeness, or a specific service level. We may change, suspend, limit, or discontinue beta functionality, especially when required by security, law, Shopify, or another provider. Support is provided through the published private-beta contact paths.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” WE DISCLAIM IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. OBSIDIAN GUARD REDUCES RISK AND CREATES CONTROL EVIDENCE; IT DOES NOT GUARANTEE PREVENTION OF FRAUD, LOSS, BYPASS, ERROR, OR UNAUTHORIZED ACTION.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR LOST PROFITS, REVENUE, DATA, OR BUSINESS INTERRUPTION. OUR AGGREGATE LIABILITY ARISING FROM THE SERVICE WILL NOT EXCEED THE AMOUNT PAID FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. SOME JURISDICTIONS DO NOT ALLOW ALL LIMITATIONS, SO THEY MAY NOT APPLY.

You may stop using the service and cancel as provided in the product or applicable order. We may suspend access to protect customers or the service, address non-payment, comply with law/provider requirements, or respond to a material breach.

After termination, access ends and data is handled under the Privacy Policy and applicable agreement. In-flight requests or held fulfillment may require manual resolution in Shopify; cancellation does not automatically reverse or release external platform state.

The existing service terms designate Delaware law and state or federal courts located in Delaware, without regard to conflict-of-law rules. This provision, any required venue/address detail, consumer exceptions, and dispute process require qualified legal review before public launch.

We may update these Terms as the private beta and service change. Material changes will be communicated through an appropriate email, account, or product notice, and the last-updated date will change. If applicable law requires consent, we will request it.

Questions or legal notices may be sent to [email protected]. Security reports should go to [email protected].