Terms of Service

1. Agreement to Terms

By creating an account, checking the acceptance box, or otherwise using TeamGroup ("Service"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you do not agree, you must not use the Service.

If you are using TeamGroup on behalf of a business or organization, you represent that you have authority to bind that organization to these Terms and that the organization accepts them.

We record your acceptance of these Terms including the version number, your email address, timestamp, and IP address as required for compliance with applicable law.

2. Who We Are

TeamGroup is operated by InControl Solutions Inc., a corporation organized under the laws of the State of Washington, United States. TeamGroup is a software client that allows you to connect multiple Microsoft 365 and personal Microsoft accounts and view your Microsoft Teams conversations in a unified interface.

TeamGroup is an independent product and is not affiliated with, endorsed by, sponsored by, or an official product of Microsoft Corporation. Microsoft, Microsoft Teams, and Microsoft 365 are registered trademarks of Microsoft Corporation. Use of TeamGroup does not alter your agreement with Microsoft or your organization's Microsoft 365 policies.

3. Eligibility

You must be at least 16 years of age to use TeamGroup. By using the Service, you represent that you meet this age requirement. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at privacy@teamgroup.app and we will promptly delete the account.

4. Your Account

You sign in using your email address and a one-time verification code — there are no passwords. You are responsible for maintaining the security of your email account, as it is your sole means of authenticating with TeamGroup. One account per email address is permitted.

You must provide accurate and current information. You are responsible for all activity that occurs through your account.

5. Connecting Microsoft Accounts

TeamGroup allows you to connect Microsoft 365 work/school accounts and personal Microsoft accounts via Microsoft's OAuth 2.0 authorization framework. When you connect an account:

• You authenticate directly with Microsoft — InControl Solutions Inc. never receives, stores, or has access to your Microsoft password.
• You grant TeamGroup OAuth permissions to read your Teams chats, messages, channels, and related data on your behalf via the Microsoft Graph API.
• Your Microsoft OAuth tokens are encrypted at the application layer using AES-256-GCM encryption before being stored in our database. The encryption key is derived from a secret maintained separately from the database.
• You can disconnect any Microsoft account at any time. Disconnecting immediately revokes our access and triggers deletion of that account's data from our servers within 30 days.
• You may also revoke TeamGroup's access directly through Microsoft at myapps.microsoft.com.

Corporate Account Responsibility: You are solely responsible for ensuring that you have the right to connect any Microsoft account you add to TeamGroup. If your organization's IT, security, or data governance policies restrict third-party application access to Microsoft 365 data, you must obtain appropriate written authorization before connecting a corporate account. InControl Solutions Inc. accepts no liability for violations of your organization's policies.

6. License to Use the Service

Subject to these Terms, InControl Solutions Inc. grants you a limited, non-exclusive, non-transferable, revocable license to access and use the TeamGroup web application and mobile apps for your personal or internal business use.

You may not:

• Copy, modify, distribute, sell, or sublicense any part of the Service
• Reverse engineer, decompile, or attempt to extract the source code
• Resell or provide access to TeamGroup as a service to third parties without written permission
• Use the Service for any purpose that violates these Terms or applicable law

7. Acceptable Use

You agree not to use TeamGroup to:

• Violate any applicable federal, state, or local law or regulation
• Access, store, or transmit any material that is unlawful, harmful, defamatory, or infringing
• Gain unauthorized access to Microsoft accounts, networks, or systems
• Interfere with, disrupt, or impose unreasonable load on the Service or underlying infrastructure
• Use automated tools, bots, or scripts to access the Service at scale or scrape data
• Circumvent any rate limiting, security measure, or access control
• Impersonate any person or organization

Violation of this section may result in immediate suspension or termination of your account and, where appropriate, referral to law enforcement.

8. Data Security

We implement the following security measures to protect your data. These are factual descriptions of our current practices — we do not make guarantees that cannot be supported:

• Encryption in transit: All communication between your device and our servers uses HTTPS/TLS. All communication with the Microsoft Graph API uses HTTPS.
• Encryption at rest — credentials: Microsoft OAuth tokens (access tokens, refresh tokens, client secrets) are encrypted using AES-256-GCM at the application layer before being written to the database. Decryption requires a separate encryption key.
• Encryption at rest — database: Our database is hosted on Azure SQL Server, which uses Transparent Data Encryption (TDE) to encrypt data files, log files, and backups at rest.
• Authentication: TeamGroup uses passwordless email OTP authentication. No passwords are stored. Session tokens are issued upon verification and transmitted only over HTTPS.
• Access controls: Application-layer rate limiting is enforced on all API endpoints. Security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy) are set on all responses.

No system is perfectly secure. While we take these measures, we cannot guarantee that unauthorized third parties will never be able to defeat them. You use the Service at your own risk and agree to notify us immediately at security@teamgroup.app if you become aware of any security breach or unauthorized use of your account.

9. Data Breach Notification

In the event of a security breach involving your personal information, we will comply with the Washington State Data Breach Notification Act, RCW 19.255.010. Specifically:

• We will notify affected Washington residents in the most expedient time possible and no later than 30 days after we discover a qualifying breach.
• If a breach affects more than 500 Washington residents, we will notify the Washington State Attorney General within 30 days.
• If you are located in the European Union or European Economic Area and we are subject to the General Data Protection Regulation (GDPR) with respect to your data, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible.
• Notifications will describe the nature of the breach, the types of information involved, the steps we are taking, and any steps you can take to protect yourself.

10. Health Data

TeamGroup is a communications client — we do not intentionally collect, process, or sell consumer health data as defined under the Washington My Health MY Data Act (RCW 19.373). The content of your Microsoft Teams messages is stored solely to display it to you and is not analyzed, processed for health information, or shared with third parties for any purpose.

If you believe your health data has been processed in a manner inconsistent with this statement, contact us at privacy@teamgroup.app.

11. Your Data and Content

Ownership: You and your organization retain all ownership of the content in your Microsoft Teams conversations. InControl Solutions Inc. claims no ownership over your messages, files, or data.

License to operate: By using TeamGroup, you grant InControl Solutions Inc. a limited, non-exclusive, royalty-free license to store, process, and display your Teams data solely as necessary to provide the Service to you.

Data retention: We retain your Teams data while your account is active. If you disconnect a Microsoft account, data associated with that account is deleted within 30 days. If you delete your TeamGroup account, all your data is deleted within 30 days.

Data portability: You may request an export of your account data by contacting support@teamgroup.app. We will respond within 30 days.

12. Plans and Billing

TeamGroup offers a free plan (limited to one connected Microsoft account) and paid Pro plans (unlimited accounts). All billing is handled through Stripe, a PCI-DSS compliant payment processor. InControl Solutions Inc. does not store your payment card information.

• Subscriptions: Paid plans are billed in advance on a monthly or annual cycle.
• Cancellation: You may cancel at any time. Access continues until the end of the current paid period. No partial-period refunds are issued.
• Refund policy: Refunds are not provided for partial billing periods. If you were charged in error, contact us within 30 days of the charge at billing@teamgroup.app.
• Price changes: We will provide at least 30 days' advance written notice of any price changes. Changes will not apply to your current billing period.
• Failed payments: If payment fails, we will notify you and retry. Sustained payment failure may result in downgrade to the free plan.

13. Third-Party Services

TeamGroup integrates with the following third-party services to operate:

• Microsoft Graph API — for accessing your Teams data. Subject to Microsoft's Terms of Service and Privacy Policy.
• Stripe — for payment processing. Subject to Stripe's Terms of Service.
• Microsoft Azure — for cloud hosting and database services.
• SMTP2GO — for delivering email verification codes.

Your use of third-party services is subject to those providers' own terms. InControl Solutions Inc. is not responsible for the practices, availability, or accuracy of third-party services.

14. Service Availability

We aim for high availability but do not guarantee uninterrupted access. TeamGroup is dependent on the Microsoft Graph API and Azure infrastructure; outages, API changes, or rate limiting by Microsoft are outside our control and may affect service quality. We will communicate planned maintenance and significant known issues through the app or via email where reasonably practicable.

We reserve the right to modify, suspend, or discontinue any aspect of the Service with reasonable notice, except in emergencies where immediate action is required.

15. Intellectual Property

The TeamGroup name, logo, software, design, user interface, and documentation are the intellectual property of InControl Solutions Inc. and are protected by copyright, trademark, and other applicable laws. Nothing in these Terms grants you any right to use InControl Solutions Inc.'s trademarks or brand assets without prior written permission.

16. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS. WE DO NOT WARRANT THE ACCURACY OR COMPLETENESS OF ANY DATA RETRIEVED FROM THE MICROSOFT GRAPH API.

Some jurisdictions do not allow exclusion of implied warranties. Where such exclusions are prohibited by applicable law, they apply to the fullest extent permitted.

17. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ONMION LLC AND ITS MEMBERS, OFFICERS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICE, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PROFITS, OR BUSINESS INTERRUPTION.

OUR TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNT YOU PAID ONMION LLC IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) $100 USD.

NOTHING IN THESE TERMS EXCLUDES OR LIMITS OUR LIABILITY FOR: (I) DEATH OR PERSONAL INJURY CAUSED BY OUR GROSS NEGLIGENCE; (II) FRAUD OR FRAUDULENT MISREPRESENTATION; (III) ANY LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED UNDER APPLICABLE LAW, INCLUDING WASHINGTON'S CONSUMER PROTECTION ACT (RCW 19.86).

18. Indemnification

You agree to defend, indemnify, and hold harmless InControl Solutions Inc. and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service in violation of these Terms; (b) your violation of any third-party right, including any intellectual property, privacy, or proprietary right; or (c) your violation of applicable law.

19. Termination

By you: You may terminate your account at any time through the app's account settings. Your data will be deleted within 30 days following the request.

By us: We may suspend or terminate your account immediately, without prior notice, if we determine in good faith that you have materially violated these Terms, engaged in fraudulent or illegal activity, or if we are required to do so by law or court order. We will endeavor to provide notice unless prohibited.

Effect of termination: Upon termination, your license to use the Service immediately ends. Sections 8, 9, 15, 16, 17, 18, 20, and 21 survive termination.

20. Governing Law

These Terms and any dispute arising from them are governed by and construed in accordance with the laws of the State of Washington, United States, without regard to its conflict-of-law provisions.

Disputes that cannot be resolved informally will be resolved in the state or federal courts located in King County, Washington. You and InControl Solutions Inc. each consent to personal jurisdiction and venue in such courts.

If you are a consumer resident of the European Union, you may also have the right to bring a claim in your local courts under EU law.

Nothing in these Terms limits your ability to file a complaint with a regulatory authority, including the Washington State Attorney General's Office or, for EU residents, your local data protection authority.

21. Washington Consumer Protection

InControl Solutions Inc. operates in compliance with Washington's Consumer Protection Act, RCW 19.86. We do not engage in unfair or deceptive acts or practices in trade or commerce. All descriptions of our security measures, features, and data practices in these Terms and our Privacy Policy are accurate and reflect our actual operations.

If you believe we have engaged in a deceptive or unfair practice, you may contact the Washington State Attorney General's Consumer Protection Division at atg.wa.gov/file-complaint in addition to contacting us directly.

22. Changes to These Terms

We may update these Terms at any time. We will notify you of material changes by: (a) sending an email to the address associated with your account, and (b) displaying a notice in the app, at least 14 days before the new terms take effect.

Your continued use of the Service after the effective date constitutes acceptance of the revised Terms. The version number and effective date at the top of this page indicate which version applies. If you do not accept the revised Terms, you must stop using the Service and delete your account before the effective date.

23. General

• Entire agreement: These Terms, together with our Privacy Policy, constitute the entire agreement between you and InControl Solutions Inc. regarding the Service and supersede all prior agreements.
• Severability: If any provision of these Terms is found unenforceable by a court of competent jurisdiction, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will remain in full effect.
• No waiver: Failure by InControl Solutions Inc. to enforce any right under these Terms does not waive that right.
• Assignment: You may not assign your rights under these Terms without our written consent. We may assign our rights and obligations in connection with a merger, acquisition, or sale of assets.

24. Contact Us

For questions, concerns, or requests related to these Terms:

• Legal/Terms: legal@teamgroup.app
• Privacy/Data: privacy@teamgroup.app
• Security: security@teamgroup.app
• Billing: billing@teamgroup.app
• Support: support@teamgroup.app
• Company: InControl Solutions Inc., Washington State

Statutory references: Washington Consumer Protection Act (RCW 19.86), Washington Data Breach Notification Act (RCW 19.255.010), Washington My Health MY Data Act (RCW 19.373), Washington Arbitration Act (RCW 7.04A). EU users may have additional rights under the General Data Protection Regulation (GDPR Regulation (EU) 2016/679).