SimpleMFA Get early access

Terms of Service

Last updated: 23 March 2026

Agreement

These Terms of Service ("Terms") govern your access to and use of Simple MFA ("the Service"), operated by James Plant, trading as Simple MFA ("we", "us", "our"). By installing or using Simple MFA, you agree to these Terms. If you are accepting on behalf of a company, you represent that you have authority to bind that company.

If you do not agree to these Terms, do not install or use the Service.

What the Service does

Simple MFA is a BigCommerce app that replaces the native BigCommerce storefront login flow with a hosted authentication system supporting password-based login and optional TOTP multi-factor authentication. The Service is intended for use by BigCommerce merchants ("you" or "merchant") on Stencil-themed storefronts.

Simple MFA operates independently of BigCommerce's authentication infrastructure. Passwords are stored and validated by Simple MFA, not by BigCommerce. A signed BigCommerce Customer Login JWT is issued upon successful authentication to create the BigCommerce session.

Account and installation

Access to the Service is granted via the BigCommerce App Marketplace OAuth flow. You are responsible for maintaining the security of your BigCommerce store and any admin credentials used to install or configure the app.

You must not share access to the Simple MFA admin panel with unauthorised parties. You are responsible for all actions taken under your installation.

Acceptable use

You agree to use the Service only for its intended purpose — adding authentication to your BigCommerce storefront. You must not:

  • Use the Service to process authentication for any store or domain other than your own authorised BigCommerce store
  • Attempt to reverse engineer, decompile, or extract the source code of the Service
  • Use the Service in any way that violates applicable laws or regulations, including data protection laws
  • Interfere with or attempt to disrupt the Service's infrastructure
  • Resell or sublicense the Service to third parties without our written consent

Your responsibilities to store customers

When you install Simple MFA, your store customers' login experience is handled by our Service on your behalf. You are responsible for:

  • Ensuring your store's privacy policy discloses that Simple MFA processes customer authentication data
  • Complying with applicable data protection laws in relation to your customers' personal data
  • Notifying your customers if you disable or uninstall the Service, as doing so will remove their stored credentials and require them to reset their password on next login

Billing and payment

Billing is processed by BigCommerce via their Unified Billing platform. By installing the paid tier of the Service, you authorise BigCommerce to charge the applicable fees to your payment method on file.

Free tier: Up to 200 credentialed customers (customers with an active local password) at no charge.

Standard tier: $12 per 100 credentialed customers per month above the free tier, up to 10,000 credentialed customers. Billing is based on the number of credentialed customers active in the previous calendar month, not total BigCommerce customer accounts or login events.

Enterprise: For stores with more than 10,000 credentialed customers, pricing is agreed by separate written arrangement. Contact hello@simplemfa.app.

Annual billing: Where an annual billing option is available, a 10% discount applies. Annual fees are non-refundable except as required by law.

We reserve the right to change pricing with at least 30 days' notice. Continued use of the Service after a price change takes effect constitutes acceptance of the new pricing.

Free tier limits and enforcement

When your store reaches the free tier limit of 200 credentialed customers, new customers will be unable to complete the first-login account claim process. Existing credentialed customers will always be able to log in and will never be blocked due to billing. MFA for enrolled customers will never be bypassed due to billing status.

To allow new customers to onboard, you must upgrade to the Standard tier.

Service availability

We aim to provide a reliable, high-availability service but do not guarantee uninterrupted availability. The Service depends on Cloudflare Workers and Cloudflare D1 infrastructure. Planned and unplanned maintenance, third-party outages, or events outside our control may affect availability.

We are not liable for any loss resulting from downtime, delays, or errors in the Service.

Data and privacy

Our collection and use of personal data is governed by our Privacy Policy, which forms part of these Terms. By using the Service, you agree to the Privacy Policy.

You retain ownership of your store's customer data. We process it only as necessary to provide the Service. On uninstallation, all customer credentials and associated data are permanently deleted from our systems.

Intellectual property

All intellectual property rights in the Service — including code, design, and documentation — remain with us. These Terms do not grant you any ownership rights in the Service. You are granted a limited, non-exclusive, non-transferable licence to use the Service for its intended purpose during the period your subscription is active.

Disclaimer of warranties

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be free from errors, vulnerabilities, or interruptions.

While Simple MFA significantly enhances storefront authentication security, no security product can guarantee complete protection against all threats. You are responsible for maintaining overall security practices for your store.

Limitation of liability

To the maximum extent permitted by applicable law, we shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business, arising from your use of or inability to use the Service.

Our total liability to you for any claim arising from these Terms or your use of the Service shall not exceed the total fees paid by you in the 12 months preceding the claim.

Indemnity

You agree to indemnify and hold us harmless from any claims, losses, or damages arising from your use of the Service in violation of these Terms or applicable law.

Termination

You may terminate your use of the Service at any time by uninstalling the app from your BigCommerce store. Uninstallation permanently deletes all customer credentials and data associated with your store from our systems.

We reserve the right to suspend or terminate your access to the Service at any time if you materially breach these Terms, with or without notice depending on the severity of the breach.

Changes to these Terms

We may update these Terms from time to time. Material changes will be communicated via email or in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Terms.

Governing law

These Terms are governed by the laws of England and Wales. Any disputes arising from these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Contact

For any questions about these Terms: hello@simplemfa.app

SimpleMFA
Privacy policy Terms of service Support

© 2026 Simple MFA. All rights reserved.