Shared Account and Privacy Terms
Effective date: 2026-03-25
1. Scope
These terms govern the shared DBR77 account system used across DBR77 products other than Consultify, including account administration, identity management, authentication, entitlement routing, and related account-level privacy processing.
2. Covered products
Depending on entitlement, the shared account may provide access to:
- IRIS,
- DBR77 IIoT interfaces and portals,
- Digital Twin,
- Marketplace,
- Vector-linked interfaces,
- Masterclass,
- other shared-login DBR77 products or modules identified in the applicable Offer, Order Form, or SOW.
3. Account model
Unless DBR77 expressly designates an account as individual-use or limited-access, the shared account model is organization-managed. Customer administrators control invitations, seat assignment, role configuration, access reviews, and deprovisioning for their organization.
4. Relationship to product terms
The shared account system provides authentication, identity administration, and entitlement routing only. Access to the shared account does not expand a customer's license, product scope, hosting rights, data rights, usage limits, or commercial entitlements beyond the applicable product-specific terms and commercial documents.
5. Information processed for shared login
Shared login data may include:
- user identity and business contact details,
- organization membership and tenant affiliation,
- role, seat, and administrator assignment data,
- login timestamps, device and browser metadata, and IP address,
- MFA events, session identifiers, and sign-in history,
- security, fraud-prevention, and access-review logs.
6. Purposes
DBR77 uses this account-level data to:
- authenticate users,
- provision access to entitled products and modules,
- manage account security and administrator controls,
- prevent fraud, abuse, and unauthorized access,
- maintain auditability of account actions,
- comply with legal and security obligations.
7. Roles of the parties
DBR77 generally acts as controller for shared-login identity administration, authentication security, billing-linked entitlement routing, and account audit logs.
The customer's organization and its administrators remain responsible for deciding which users should receive access, which roles are appropriate, and when access should be revoked.
8. Administrator responsibilities
Customer administrators must:
- ensure that only authorized users are invited and provisioned,
- maintain accurate user and role assignments,
- promptly remove or disable access for departed, suspended, or unauthorized users,
- avoid shared credentials,
- supervise contractor, advisor, consultant, and integrator access,
- ensure that each user is authorized to act on behalf of the organization where applicable.
9. User responsibilities
Each user must protect their credentials, use the account only for authorized business purposes, and comply with the applicable product terms, AI policy, and acceptable-use rules.
10. Shared controls
DBR77 may enforce centralized authentication, session, password, MFA, SSO, audit, fraud-prevention, and abuse controls across the shared account stack.
11. Sharing and retention
Shared-login data may be shared internally with personnel and service providers who support identity, hosting, security, communications, and support operations on a need-to-know basis.
DBR77 retains shared-login data for as long as reasonably necessary to operate accounts, maintain security, support customer administration, comply with legal obligations, and preserve appropriate audit trails.
12. Suspension and deprovisioning
DBR77 may disable accounts, sessions, API access, or product entitlements where reasonably necessary to address security risk, legal risk, fraud, abuse, payment issues, or access beyond the contracted scope.
13. Relationship to common policies
This document supplements the main privacy-policy.md, cookie-policy.md, and ai-policy.md. If there is a conflict on account-authentication matters, this document controls for the shared login flow.