Terms of service

1. Who these terms are between

These terms are an agreement between OA6 Inc ("OA6", "we" or "us"), of 13580 Highway 5, Young America, MN 55937, and the organization that uses OA6 ("you"). If you accept them on behalf of an organization, you confirm that you have the authority to bind it. If your organization has signed a separate written agreement with us for OA6, that agreement wins wherever the two differ.

OA6 is made for administrators working on behalf of an organization. It is not offered to consumers.

2. Access to OA6

Only the organizations we have added can sign in to OA6, and we add them on request. An organization we add can start with a free trial. When the trial ends, OA6 stays available under a paid subscription, as section 9 describes.

OA6 is growing, so features can change, arrive or be withdrawn, and the service may be interrupted. Anything on this website that is not available yet carries a Status line that says so. Those descriptions are our current design, not a promise that a feature will ship as described.

3. What OA6 does, and does not do

• It works as you. Every lookup and every action uses the signed-in administrator's own sign-in, and Microsoft checks each one against that person's role. OA6 never gives anyone access their account does not already have.
• A person starts every change. Anything that can do harm waits on an approval card that names the operation and the object. Routine actions chosen from the right-click menu, such as a sync or a scan, are sent as soon as they are chosen, and OA6 then shows what was sent and offers Undo where there is one.
• It keeps no copy of your tenant. A read answers the question in front of you and is not kept afterwards.
• It runs on Microsoft Azure. The Security page describes what OA6 can reach, what it keeps and what leaves your tenant.

4. Your responsibilities

• Use it only where you are allowed to. You may use OA6 only on tenants and systems you are authorized to administer. If you administer tenants for other organizations, for example as a managed service provider, you are responsible for having their permission.
• Your accounts and roles are yours to manage. OA6 relies on the sign-ins, roles, Conditional Access and consent you set in your own tenant. Keep them current, and remove access for people who leave.
• You decide every change. You are responsible for the changes you choose and approve through OA6. Read each approval card before you approve it: OA6 shows what it will send, but the decision is yours.
• You keep your own keys. OA6 holds no keys for other vendors. The key for your AI model provider and the key for your SIEM stay with your administrators, and keeping them safe is your responsibility.

5. Acceptable use

You will not, and will not let anyone else:

• use OA6 on a tenant or system you are not authorized to administer;
• try to reach another customer's records, or get around the access list, the subscription check, the approval step or any other limit OA6 applies;
• probe, scan or load-test our services, or interfere with them, without our written permission (if you have found a security problem, tell us at sales@oa6.cloud);
• resell OA6, or provide it to anyone outside your organization, unless we have agreed to that in writing;
• copy, modify or reverse-engineer OA6, except where the law allows it regardless of these terms; or
• use OA6 to break the law, or the terms of Microsoft or any other provider whose service you use with it.

6. Ask OA6 and AI answers

Ask OA6 is off until an administrator turns it on, and it never runs on its own. When it is on and someone asks a question, a masked snapshot of what they have open goes from their browser straight to the model your organization chose, under your organization's own key. It does not pass through our servers. Your agreement with that model provider governs what it does with the request, and you are responsible for that agreement.

Masking replaces names and identifiers with placeholders, but it covers identifiers, not meaning: some text is sent as it appears in your tenant, and the Security page lists what. AI answers can be wrong or incomplete. Treat them as explanations and suggestions, check them before you act, and remember that nothing an answer suggests runs until a person chooses it.

7. Other services you use with OA6

OA6 works with Microsoft 365, Entra ID, Intune, Defender, Purview and Azure, and with any other platform you choose to connect. Your use of those services is governed by your agreements with their providers, not by these terms. We are not responsible for them, for their availability, or for changes they make that affect OA6. OA6 is not affiliated with or endorsed by Microsoft or any other vendor named on this website, and their names and marks belong to them.

8. Your data

• It stays yours. For the tenant data OA6 reads for you, you are the controller and we act only on your instructions, to provide OA6. The privacy notice sets out what we process and why.
• What we keep. Our service keeps metadata about your tenant rather than data from it: your tenant identifier, your subscription and the features you are entitled to. Every record is keyed on the tenant identifier Microsoft signs into the sign-in token.
• Your activity log. OA6 records the actions you approve in each administrator's browser. By default OA6 receives that log and uses it to run OA6, to build automations and to track telemetry for the service, and for nothing else. Any administrator can send theirs to your own SIEM instead, and OA6 then receives none for the tenants they choose.

Status OA6 receiving the activity log by default is not switched on yet. Today the log stays in each administrator's browser unless they send it to your own SIEM.

• What we never do. We do not sell your data, and we do not use it for advertising.
• Deleting it. You can ask us at any time what we hold about your organization, and ask us to correct or delete it, by writing to sales@oa6.cloud. Deleting your organization's records cannot be undone.

9. Fees

OA6 is priced per person, counted as the Microsoft 365 suite licenses your organization has assigned (Business Premium, E3, E5 or E7, or their A or G equivalents), as Microsoft reports them when your administrator buys.

• Buying in OA6. Under 2,000 people, one of your OA6 administrators buys a subscription in the OA6 dashboard, billed monthly or yearly at the price it shows before they buy. From 2,000 people, or for several tenants, OA6 is sold by a quote, and the fees and billing are the ones in the quote you accept.
• Paying. We invoice through Square, and you pay on Square's own page. We never see or store your card or bank details. Unless the quote or the purchase says otherwise, fees do not include taxes, and we add the taxes that apply.
• Renewal. A subscription renews at the end of each month or year, with a new invoice, until it is ended as section 11 describes.
• Late payment. If an invoice is not paid when it is due, OA6 stays available for your plan's grace period. After that, OA6 is not available to your organization until the invoice is paid, and your administrators are sent to pay it when they sign in.

10. Ownership and feedback

We own OA6, including its software, this website, and the OA6 name and marks. While these terms are in effect, we give you a non-exclusive, non-transferable right to install the OA6 extension and use OA6 for your organization's own administration, as these terms allow. If you send us feedback or suggestions, we may use them without any obligation to you.

11. Stopping, suspension and ending

• You can stop at any time. Remove the extension and revoke OA6's consent in Microsoft Entra ID, without asking us, and OA6 stops reaching your tenant immediately. That does not stop a subscription renewing: to stop that, write to us at sales@oa6.cloud before its next invoice, and it ends when the period already paid for ends. Invoices already sent stay due, and any commitment in a quote you accepted continues as that quote says.
• We may suspend access for an administrator or an organization when we need to, to stop a security threat, a breach of section 5 or something the law requires. We will tell you promptly and restore access once the reason has gone.
• Either side may end these terms if the other breaches them materially and does not put it right within 30 days of being told.

Sections 8, 10 and 12 to 16 continue after these terms end.

12. No warranty

OA6 is provided "as is" and "as available". As far as the law allows, we give no warranties beyond those stated in these terms, including any implied warranty of merchantability, fitness for a particular purpose or non-infringement. We do not promise that OA6 will be uninterrupted or free of errors, or that AI answers will be correct. OA6 does not replace your own judgment, your backups or your change control.

13. Limits on liability

As far as the law allows, neither side is liable to the other for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, however they arise. Each side's total liability under these terms is limited to the fees you paid us for OA6 in the 12 months before the claim arose. If you have paid us nothing, you use OA6 at your own risk, and we will pay nothing.

These limits do not apply to liability that the law does not allow to be limited, to your obligation to pay fees, or to a breach of section 5.

14. Claims from others

You will defend us against any claim by a third party that arises from your use of OA6 on a tenant or system you were not authorized to administer, or from a breach of section 5, and you will pay any damages and costs finally awarded on that claim.

15. Changes to these terms

If we change these terms, we will say so on this page and update the date at the top. The next time one of your organization's OA6 administrators signs in to the OA6 dashboard, OA6 shows them the new terms and asks them to accept or decline. Until an administrator accepts them, OA6 is not available to anyone in your organization, and declining them has the same effect. If a change materially affects your rights, we will also email the administrator on your account before it takes effect, rather than only updating the page.

16. Governing law and disputes

These terms are governed by the laws of the State of Minnesota, United States, without regard to its rules on conflicts of law. Any dispute about them will be heard in the state and federal courts located in Minnesota, and both sides agree to those courts' jurisdiction.

17. The rest of the agreement

• These terms, the privacy notice and any quote you accept or purchase your organization makes in OA6 are the whole agreement between us about OA6.
• Each person who uses OA6 also accepts the end user license agreement, which covers their own use of the software. Where it and these terms differ, these terms win.
• Neither side may transfer these terms without the other's agreement, except to a successor in a merger or a sale of the business.
• If a court finds part of these terms unenforceable, the rest still applies. Not enforcing a term straight away does not waive it.
• Neither side is responsible for a delay or failure caused by events beyond its reasonable control.
• We send notices to the administrator's email address on your account. Send notices to us at sales@oa6.cloud, or by post to 13580 Highway 5, Young America, MN 55937.

Questions

Write to sales@oa6.cloud, or use the contact form on the pricing page.