Vesopa Vesopa

Last updated 2026-09-08

Terms of Service

These terms are the agreement between you and Vesopa Software Ltd for your use of Vesopa OAuth at https://auth.vesopa.com. By creating an account or signing into an application through us, you accept them.

We have tried to write terms that say what they mean. If a clause here reads as though it is hiding something, tell us at info@vesopasoftware.com and we will either explain it or fix the wording.

1. Who we are

Vesopa Software Ltd, a company registered in the United Kingdom, company number 17362206, registered office Baglan, Port Talbot, SA12 7AX, Wales. We also trade as Vesopa EPOS.

2. What the service does

Vesopa OAuth is an identity provider. It holds one account for you and uses it to sign you into:

It is a sign-in service and nothing more. It does not take payments, hold your money, or run the applications you sign into.

3. Your account

Eligibility. You must be at least 16 to have a Vesopa account. If you are creating an account for a business, you confirm you are entitled to act for that business.

Accurate details. Give us a real email address or phone number you control. It is how we send one-time codes and how you get back in when something goes wrong. An account with a dead recovery address is an account we may not be able to rescue.

One account per person. Do not create accounts in bulk, under other people's names, or to get round a limit or a suspension.

Look after your credentials. You are responsible for what happens under your account. Keep your password to yourself, do not share one-time codes with anyone — including anyone claiming to be us, because we will never ask you for one — and turn on a second factor. A passkey is the strongest option and takes about twenty seconds to set up.

Tell us if it goes wrong. If you think someone else has got into your account, change your password, revoke your sessions and devices from your account page, and write to security@vesopa.com.

4. Signing in, and remembering devices

You can sign in with an email address and password, an emailed one-time code, an SMS one-time code, or by linking Google, Apple, Microsoft or GitHub. You can add multi-factor authentication using an authenticator app, SMS, or a passkey.

If you tick "remember this device", we keep you signed in on that device until you sign out or revoke it. Only do that on a device other people cannot use. You can see and revoke every remembered device from your account.

5. How you may use the service

The rules are in the Acceptable Use Policy, and they form part of these terms. In summary: do not attack the service, do not use it to defraud or impersonate anyone, do not abuse the SMS or email routes, and do not use it to break the law.

6. Applications you connect

Before an application receives anything about you, we show you a consent screen naming the application and what it will get, and you can refuse. You can withdraw that consent at any time from Connected apps in your account.

Third-party applications are not ours. Their operator decides what they do with your data, under their own terms and their own privacy policy, and they become an independent data controller for it. We check applications before we approve them and we remove ones that break our rules, but we are not responsible for how an approved third-party application behaves, and any dispute about it is between you and its operator.

Revoking an application's access at our end stops us telling it anything further. It does not delete what that application already stored — ask the application for that.

7. If you are a developer

Registering an application on Vesopa OAuth means these additional terms apply to you, and you take on some real obligations to other people's users.

You must:

You must not:

We may review, test, rate limit, suspend or remove any application. Where we can, we tell you first and give you a chance to fix the problem. Where an application is actively harming users, we act first and explain afterwards.

8. Availability, changes and support

We want the service up all the time, because a sign-in service that is down takes every product with it. We keep it monitored and we fix outages as our first priority.

We do not promise a specific uptime figure in these terms, and we will not pretend to one we have not committed to in a signed agreement. Maintenance happens; where it is planned and disruptive we give notice.

We may change, add to or withdraw features. Where a change would break something you have built on us, we give reasonable notice and, where we can, a migration path.

9. Charges

Where Vesopa OAuth is provided free, it is free. Where it forms part of a paid Vesopa product or a paid developer plan, the price and payment terms are the ones you agreed when you signed up for that product or plan, and those terms sit alongside this one. We will not start charging you for something that was free without telling you first.

10. Suspension and termination

By you. Delete your account at any time from your account page, or by writing to privacy@vesopa.com. See Data retention and deletion for what happens next.

By us. We may suspend or close an account or an application if it breaks these terms or the Acceptable Use Policy, if it is being used to attack or defraud someone, if the law requires it, or if the account has been dormant for a very long time and we have warned you. Except where the harm is immediate or the law forbids it, we tell you why and give you a route to reply.

What termination means. You stop being able to sign into applications through us. Data is handled as set out in the retention policy. Clauses that by their nature should survive — liability, governing law, and anything about data already processed — do survive.

11. Intellectual property

The service, its software, design and documentation remain ours. Nothing here transfers ownership of them to you.

Your data remains yours. We take only the licence we need to run the service for you: to store your data, process it, and pass it to applications you have consented to. That licence ends when the data is deleted.

12. Liability

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited.

If you are a consumer, your statutory rights are unaffected by anything here. We are responsible for loss you suffer that is a foreseeable result of us breaking these terms or failing to use reasonable care and skill. We are not responsible for loss that was not foreseeable.

If you use the service for business purposes, then to the extent the law allows: the service is provided as it is, without implied warranties; we are not liable for loss of profit, loss of business, loss of goodwill, or indirect or consequential loss; and our total liability arising out of these terms in any twelve-month period is limited to the greater of the amount you paid us for the service in that period, or £100.

We are not liable for the acts or omissions of a third-party application you choose to connect, or of an identity provider you choose to sign in with.

13. Indemnity

If you register an application, you agree to cover us against claims, losses and reasonable costs arising from your application breaking these terms, misusing user data, or infringing someone else's rights. This does not apply to a consumer using the service for personal purposes.

14. Changes to these terms

We may update these terms. The date at the top is the current version. Where a change materially affects your rights or your obligations, we will tell you by email or in the account area before it takes effect. Continuing to use the service after that means you accept the new version; if you do not, you can delete your account.

15. Law and disputes

These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction. If you are a consumer resident elsewhere in the UK or in the EU, you keep the protection of the mandatory laws of the place you live, and you may bring proceedings there.

Before anything formal, please write to info@vesopasoftware.com. Most disputes are a misunderstanding, and misunderstandings are cheaper to fix by email.

16. Odds and ends

Questions about any of this: privacy@vesopa.com. All our policies are listed at /policies.