Developer terms

Version 1.0, in force from October 15, 2026.

These terms are between you and Atheron Network Inc. ("Atheron", "we", "us"), 1631 Dickson Ave., Suite 1100, Kelowna, BC V1Y 0B5, Canada, Business Number 788400448. They apply when you register or run an app that uses Sign in with Atheron, our developer portal, our developer API, our sandbox or our MCP server (together, the "developer platform"). If you act for a company, you accept them for that company and confirm you may.

1. Your account and your team

• You use your own Atheron account to sign in. Keep it secure and turn on two-step sign-in.
• You are responsible for everything done by your team in the developer platform, and for who you give the owner, admin and developer roles.
• You must be old enough to hold an Atheron account and, to take an app live, pass the identity check (Bedrock) or have your business pass its check.
• Tell us at once if you think somebody else has your credentials.

2. Credentials

• Client secrets, certificates' private keys, API keys and webhook signing secrets are yours to protect. Never put them in code that runs in a browser or ships in an app, in a public repository, or in a URL.
• Rotate a credential you think is exposed, and revoke the old one. We may revoke any credential we find exposed.

3. What your app may do

• Ask only for the scopes your app needs, and use what you receive only for what you told people on the consent screen and in your privacy policy.
• Follow our Data-use policy, which is part of these terms.
• Sign people in only through our pages. Never ask anybody for their Atheron password, recovery codes or authenticator codes.
• Respect a person's choice: when they take back access, stop using what you received from us, as the Data-use policy says.
• Do not try to get around our rate limits, review, suspension or security, test our systems without written permission, or use the platform to harm anybody.

4. Your app's name, brand and claims

• Your app's name, logo, description and links must be truthful and yours. They must not suggest Atheron made, runs or endorses your app.
• Do not use Atheron, ATON or our product names or marks in your app's name, logo or domain. You may say your app works with Atheron.
• Follow our button and branding rules.

5. Review, suspension and appeals

• We review every app before it can sign in people outside your team, and changes to a live app's name, logo, links or sensitive scopes.
• We may refuse an app, or suspend an app or a developer account at once, when we reasonably believe it breaks these terms or puts people at risk. We tell you why in the portal, and we may tell the people who connected the app.
• You may appeal in the portal. A person who did not make the original decision looks at it again where we can.

6. Your privacy policy

Your app must link its own privacy policy, which must explain what you receive from Atheron, why, how long you keep it, who you share it with and how people can ask you to delete it. You are responsible for your app's compliance with the privacy laws that apply to you.

7. Security and incidents

Keep what you receive from Atheron secure, with care at least equal to industry practice. If you learn of unauthorised access to it, tell us within 72 hours at security@aton-network.org and help us tell the people affected.

8. Fees and limits

The developer platform is free within the limits of your quota tier. We may change the limits, tiers and any fees with at least 30 days' notice in the portal, except where we must act at once to protect people or our systems.

9. Changes to the platform and to these terms

We may change or stop parts of the developer platform. We will give at least 30 days' notice of a change that breaks existing apps, where we can. We may update these terms; the new version is shown in the portal and applies once you accept it, and you cannot keep making changes to apps until you do.

10. Ending

You may stop at any time by removing your apps. We may end your access if you seriously or repeatedly break these terms. When access ends, your apps stop signing people in, and sections 3, 6, 7, 11 and 12 continue to apply to what you received.

11. Responsibility

The developer platform is provided as it is and as available. To the extent the law allows, we are not liable for indirect or consequential losses, and our total liability to you in connection with these terms is limited to CAD 100. You are responsible for your app and for claims arising from it, and you will compensate us for losses we suffer because your app or your team broke these terms or the law. Nothing here limits liability that cannot be limited by law.

12. Law

These terms are governed by the laws of British Columbia and the federal laws of Canada that apply there, and the courts of British Columbia decide any dispute, unless the law where you live gives you a right to go to your own courts.

13. Contact

Questions about these terms: developers@aton-network.org.