Terms of Service
Product: OIA Shield24 | Bitrix24 Marketplace App: infinitybht_llc.oia_shield24
1. Scope of Service
These Terms of Service ("Terms") govern your use of OIA Shield24, an enterprise Bitrix24 API Gateway and Zero-Trust Middleware Service operated on a distributed Edge Worker and Stateful Queue infrastructure. By installing OIA Shield24 on your Bitrix24 portal, creating proxy endpoints, or routing vendor API traffic through our infrastructure, you agree to these Terms.
2. Zero-Trust Architecture & Cryptography
OIA Shield24 operates on a 100% Tenant Isolation and Zero-Trust model. API keys issued to vendors are stored strictly as SHA-256 hashes (`api_key_hash`). Bitrix24 OAuth access and refresh tokens are encrypted at rest using AES-GCM Web Crypto and decrypted dynamically only in sub-10ms edge memory during request execution.
3. Acceptable Use & Quotas
You agree to use OIA Shield24 only for lawful Bitrix24 REST API integrations. You must not attempt to use OIA Shield24 for malicious DDoS attacks, credential stuffing, or bypassing Bitrix24 global portal rate limits in bad faith. OIA Shield24 enforces per-endpoint single-threaded rate pacing (`EndpointQueueDO`) to preserve your Bitrix24 portal health.
4. Subscriptions & Pricing Tiers
OIA Shield24 offers Starter (Free), Developer ($10/month), and Enterprise ($29/month) plans billed through the Bitrix24 Subscription / OIA License Server. Prices are subject to change; the current price for each plan is always shown in-app at checkout before you subscribe. Features, proxy endpoint allowances, and CIDR IP filters are strictly governed by your selected plan tier.
5. Service Level Agreement (SLA) & Performance
OIA Shield24 targets 99.9% edge uptime across globally distributed edge gateway locations. Sub-10ms middleware execution is guaranteed for standard JSON payload validations, excluding upstream latency from Bitrix24 portal API servers.
6. Termination & Legal Contact
You may uninstall OIA Shield24 at any time from your Bitrix24 portal. Upon uninstallation, all stored endpoint configurations, IP allowlists, and hashed API keys are permanently deleted. For legal inquiries, contact legal@oiashield24.com.