LatchID Terms of Service

Last updated: September 28, 2026

These terms govern LatchID, operated by Wrooms, Inc. (“Latch,” “we,” “us”), including our website, console, identity gateway, capsules, Latch Mail, and cloud connections or compute services when available. Contact auth@wrooms.ai. If you accept these terms for an organization, you represent that you have authority to bind it. Do not use a service you are not authorized to use.

These terms supplement the pricing, limits, and service conditions expressly disclosed for your order. A separate signed agreement controls only where it expressly overrides these terms. Nothing here overrides mandatory rights or applicable law.

Accounts and security responsibilities

• Provide accurate information and maintain control of registered domains, accounts, and billing contacts.
• Protect credentials and recovery methods; use the minimum permissions necessary. Keep application secrets, tokens, and cloud credentials out of browser code, public repositories, and support messages.
• Use only domains, identities, sender addresses, infrastructure, and content you own or are authorized to administer. Verification does not transfer ownership or eliminate the need for permission.
• Promptly report suspected compromise and revoke affected access. You are responsible for configurations and activity under your control, subject to applicable law and our own obligations.

Acceptable use: prohibited conduct

You must not use, enable, or knowingly facilitate Latch for:

• Fraud, phishing, impersonation, credential theft, account takeover, deceptive consent, or unauthorized collection or disclosure of information.
• Malware, ransomware, botnets, denial-of-service attacks, unauthorized scanning or exploitation, or interference with other users or infrastructure.
• Bypassing domain verification, callback restrictions, quotas, rate limits, entitlement checks, payment controls, suspension, or provider restrictions; creating replacement accounts to evade enforcement.
• Unsolicited bulk messaging, purchased or harvested recipient lists, misleading sender identities, or ignoring legally required opt-outs.
• Illegal content or activity, infringement of intellectual-property or privacy rights, unlawful harassment or exploitation, or violations of applicable sanctions and export restrictions.
• Reselling access, sublicensing paid designs, or representing yourself as Latch or a provider without express authorization.

Security testing requires authorization from the system owner and must not access unrelated data or disrupt service. Report suspected vulnerabilities privately to auth@wrooms.ai; this provision does not grant permission to test third-party systems.

Product and service rules

Identity, gateway, and provider connections

Latch connects application-specific identities to supported providers. Authentication establishes control of an account; it does not verify a person's legal identity, age, eligibility, creditworthiness, or entitlement to access your application. Application owners must validate results on their backend, enforce authorization, obtain required consents, maintain their own sessions, and provide accurate privacy notices. Matching email addresses alone must not be treated as authority to merge accounts. Tapping or sliding a capsule only opens the gateway; it is not successful authentication.

Provider availability depends on configuration, approval, and third-party operation. Managed connections do not transfer ownership of provider registrations or guarantee approval. Maintain recovery and migration plans. Do not present Latch as an emergency, safety-critical, or regulatory verification service.

Capsules, paid designs, and updates

Unless an applicable order says otherwise, a purchased capsule design grants a non-exclusive, non-transferable right to use that design through your entitled Latch account and authorized applications. It does not transfer copyright, trademarks, source-code ownership, provider rights, or a right to redistribute or resell the design. A one-time design purchase is not a lifetime hosting, support, authentication, or third-party service commitment.

Hosted capsules may receive managed runtime and security updates. Available release controls can select supported earlier runtimes, but rollback is not a guarantee that an insecure or incompatible version will remain supported indefinitely. Customers remain responsible for testing integrations and separately maintained or pinned copies.

Latch Mail

Use only verified and authorized sender domains and addresses. You must have a lawful basis to contact recipients, honor required consent and unsubscribe obligations, identify senders accurately, and comply with applicable messaging laws and delivery-provider rules. Latch's policy prohibits purchased or harvested lists and unsolicited bulk campaigns even where a particular message might otherwise be lawful.

A provider-accepted status is not proof of delivery, inbox placement, reading, or recipient consent. Limits, sender verification, plan entitlement, reputation, and provider controls may prevent sending. Do not repeatedly resend messages with an unknown status without checking the result; duplicate delivery remains possible across independent requests.

Cloud connections and compute

Connect only resources you are authorized to administer. You are responsible for your workloads, software licenses, resource permissions, backups, patching under your control, network exposure, and cloud-provider bills. Grant least-privilege access and review it regularly. Latch access does not replace your provider's agreement or security responsibilities.

Do not use cloud access for prohibited workloads, unauthorized cryptomining, abuse relays, or attempts to escape tenant or network boundaries. Availability depends on provider access, region, capacity, and platform configuration. A stopped workload may still incur storage, networking, reserved-capacity, or other provider charges. Removing a Latch connection does not necessarily terminate resources or charges at the provider.

Billing, subscriptions, cancellation, and refunds

The price, currency, billing interval, renewal conditions, included usage, and any disclosed overage or tax treatment shown at checkout or in your applicable order govern the purchase. A preview or estimate does not authorize a charge. A paid design, identity plan, mail plan, and third-party cloud bill are separate unless an order expressly bundles them. Free or administrator access applies only to the services expressly covered; it does not waive unrelated provider charges.

Recurring charges require the applicable disclosed subscription acceptance. To cancel, use the billing controls available for that service or contact auth@wrooms.ai for assistance identifying the subscription and cancellation process. Removing a capsule, disconnecting a provider, or stopping use is not a substitute for canceling an existing subscription. The applicable order and mandatory law govern the effective cancellation date and any remaining amounts.

Refund eligibility is governed by the applicable purchase terms and mandatory law; no blanket waiver of statutory refund or withdrawal rights is intended. Contact us with the order identifier and reason for a billing dispute. Do not include full card numbers. We may investigate suspected payment fraud or abuse, but a good-faith billing dispute does not waive your legal rights. We will not treat these terms as authorization for undisclosed fees.

Privacy, confidentiality, and customer data

Our Privacy Policy describes how we handle information. You retain rights to your application and content and grant only the permissions needed to provide and secure the service. Do not upload information you lack authority to process or disclose. Before using regulated or specially protected data, establish that the service and any required written data-processing terms are appropriate; do not assume certification, a business-associate agreement, or a particular data-residency commitment.

We must use information consistently with our stated purposes, applicable agreements, and law. These terms do not grant an unrestricted right to exploit customer information or excuse our own privacy or security obligations.

Enforcement, suspension, and termination

We may investigate credible reports and proportionately restrict a feature, sender, application, credential, or account for a material breach, suspected compromise, payment fraud, provider requirement, or legal obligation. We may act immediately when reasonably necessary to prevent harm or comply with law. Where feasible and lawful, we will give notice, explain the basis, and provide an opportunity to remedy the issue. We do not promise advance notice when it would increase risk or prejudice an investigation.

Send review requests to auth@wrooms.ai with relevant evidence. Do not evade restrictions while review is pending. We may preserve relevant records where necessary and lawful, and disclose them only consistently with applicable law and our privacy commitments. Suspension does not itself create a new fee or remove mandatory refund rights.

You may stop using Latch and request account closure. Arrange an alternative sign-in method and export information available to you before removing an integration. Ending Latch access does not automatically delete third-party accounts, revoke every downstream application session, stop cloud resources, or cancel separate subscriptions.

Availability, warranties, and responsibility

Except as expressly stated in a signed agreement or required by law, services are provided as available, without an uptime, delivery, uninterrupted-operation, or error-free guarantee. Third-party providers can change or discontinue their services. Previews and experimental features may change and are not a service-level agreement. Maintain appropriate backups, recovery methods, and independent checks for consequential decisions.

To the extent permitted by applicable law, we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement, and exclude liability for indirect or consequential losses arising from use of the service. These limitations do not exclude liability or remedies that cannot lawfully be limited, or obligations expressly accepted in a controlling signed agreement. Nothing excuses fraud, willful misconduct, or other conduct for which liability cannot lawfully be excluded.

Changes, disputes, and contact

Material changes will be identified by an updated date and additional notice where appropriate or legally required. Changes do not retroactively eliminate accrued rights or replace a required affirmative acceptance. Contact Wrooms, Inc. at auth@wrooms.ai to seek resolution of a concern; this does not prevent you from using legally available remedies or contacting a regulator. No mandatory arbitration, class-action waiver, or exclusive court is imposed by this page.