1. About Helios
Helios is a private identity, authentication, authorization, and access-management service operated by LoArt & Dev, a private group operating through loart.dev.
Helios is available at https://auth.loart.dev.
It provides authentication and authorization for a limited collection of private applications and services available to authorized members of LoArt & Dev.
Helios is not offered to the general public.
Access is limited to individuals who have been specifically authorized to use the service.
These Terms of Service describe the conditions that apply when using Helios.
The current version of these Terms is publicly available at:
https://loart.dev/legal/helios-terms-of-service
2. Acceptance of These Terms
By accessing or using Helios, you agree to follow these Terms of Service.
If you do not agree with these Terms, you should not use Helios.
Because Helios is a private service, access may be removed if you do not agree to or comply with these Terms.
3. Private and Internal Use
Helios is provided exclusively for private and internal use by authorized members of LoArt & Dev.
There is no public registration or entitlement to create an account.
An account, invitation, role, or access grant does not create a contractual right to continued access to Helios or any connected application.
Access may be granted, changed, restricted, suspended, or revoked by authorized Helios administrators.
Helios is not currently operated as a commercial service and no fee is charged for access unless affected users are separately informed otherwise in the future.
4. Accounts
You may use Helios only through an account that has been created or authorized for you.
You agree to provide reasonably accurate information associated with your account and to keep important account information, such as your email address, reasonably current.
You may not:
- impersonate another user;
- use another person's account without authorization;
- deliberately provide false identity information;
- transfer your account to another person; or
- attempt to obtain access that has not been granted to you.
5. Account Security
You are responsible for taking reasonable steps to protect your Helios account.
This includes protecting:
- your password;
- authentication devices;
- multi-factor authentication credentials;
- passkeys;
- recovery codes;
- active sessions; and
- other authentication information associated with your account.
You should promptly report suspected unauthorized access to:
You should not knowingly share authentication credentials with another person.
6. Email Verification
Helios may require or encourage verification of the email address associated with your account.
Email verification helps confirm account ownership and may be used to support account recovery, security notifications, and other account functionality.
You are responsible for maintaining access to the email address associated with your account where email-dependent functionality is used.
7. Multi-Factor Authentication and Passkeys
Helios may provide additional security mechanisms including:
- authenticator-based multi-factor authentication;
- recovery codes;
- passkeys;
- WebAuthn authenticators; and
- other authentication methods.
You are responsible for maintaining access to authentication methods associated with your account.
Helios may require stronger authentication for certain accounts, applications, administrative privileges, or security-sensitive operations.
8. Connected Applications
Helios may be used to authenticate you to other private applications and services provided by or connected to LoArt & Dev.
Access to Helios does not automatically give you access to every connected application.
Each application may have its own:
- access requirements;
- roles;
- permissions;
- restrictions; and
- policies.
Helios may provide appropriate identity and authorization information to connected applications where necessary to authenticate you and determine your access.
9. Roles and Permissions
Helios uses roles, permissions, and access grants to control access to connected applications.
Application-specific roles are scoped to the applicable application.
For example, administrative access to one connected application does not automatically provide administrative access to another application or to Helios itself.
You may only use permissions legitimately assigned to your account.
The existence of a technical capability, endpoint, page, token claim, or accessible interface does not itself constitute authorization to use it.
You must not intentionally bypass or attempt to bypass access controls.
10. Administrative Access
Some users may receive administrative privileges for Helios or individual connected applications.
Administrative access to one application does not automatically provide administrative access to another application or to Helios itself.
Users with administrative privileges must use them only for legitimate operational, security, maintenance, support, or administrative purposes.
Administrative privileges may be modified or revoked at any time.
Administrative actions may be recorded in security or audit logs.
11. Acceptable Use
Use of Helios is subject to the LoArt & Dev Acceptable Use Policy.
Users must not intentionally:
- gain unauthorized access to another user's account;
- gain unauthorized access to an application, role, permission, or administrative function;
- bypass authentication or authorization controls;
- exploit known security vulnerabilities without authorization;
- interfere with the availability or operation of Helios;
- intentionally overwhelm or abuse authentication endpoints;
- distribute malware through Helios or connected services;
- steal or attempt to obtain another user's credentials;
- manipulate audit or security records;
- circumvent rate limits or other security protections;
- use Helios for unlawful activity; or
- knowingly compromise the security of Helios or connected applications.
Good-faith testing or troubleshooting performed with authorization is not considered prohibited activity.
The complete Acceptable Use Policy is available through:
12. Security and Vulnerability Reporting
Users should report suspected security vulnerabilities, account compromise, exposed credentials, suspicious communications, or other security concerns to:
Security testing beyond normal use should be performed only with appropriate authorization.
Additional requirements and security guidance are provided in the Helios Security Policy, available through:
13. Email and Security Communications
Helios may send transactional, account-related, or security-related communications concerning your account.
These may include:
- email verification;
- password reset;
- authentication notifications;
- account changes;
- security alerts;
- MFA changes;
- passkey changes;
- recovery-related communications; and
- important service notices.
Transactional messages may originate from dedicated LoArt & Dev email infrastructure, including addresses under domains such as transactional.loart.dev.
The specific sender address may change as LoArt & Dev's email infrastructure evolves.
Users should not rely solely on a particular sender address as proof that a message is legitimate.
Helios will not intentionally ask you to send your password, MFA secret, recovery codes, or private passkey material by email.
If you are unsure whether a communication is legitimate, contact:
14. Suspension and Revocation
Access to Helios or individual connected applications may be suspended or revoked when reasonably necessary.
Reasons may include:
- leaving the authorized LoArt & Dev group;
- suspected account compromise;
- security concerns;
- misuse of the service;
- violation of these Terms;
- violation of the Acceptable Use Policy;
- maintenance or decommissioning of a service; or
- changes to application access requirements.
Immediate suspension may occur where reasonably necessary to protect Helios, LoArt & Dev, its users, or connected applications.
15. Availability
Helios is provided as a private service on a best-effort basis.
There is no guaranteed uptime, service-level agreement, response time, support availability, or guarantee of continued operation.
Helios may occasionally be unavailable because of:
- maintenance;
- software updates;
- hardware failures;
- network failures;
- power outages;
- security incidents;
- third-party service failures; or
- other technical problems.
16. Changes to the Service
Helios may be modified at any time.
Features may be:
- added;
- changed;
- restricted;
- temporarily disabled; or
- removed.
Connected applications may also be added, modified, or removed.
Reasonable efforts may be made to communicate significant changes where appropriate, but advance notice cannot always be guaranteed.
17. Data and Privacy
Use of Helios is also subject to the Helios Privacy Policy, available at:
https://loart.dev/legal/helios-privacy-policy
The Privacy Policy explains what information Helios may collect and how that information may be used, protected, retained, and shared with connected applications.
18. Backups and Data Loss
Reasonable efforts may be made to protect and back up Helios data.
However, Helios is a private service and does not guarantee that information, settings, account records, audit data, or other information can always be recovered following hardware failure, software defects, accidental deletion, corruption, or other incidents.
19. No Warranty
Helios is provided on an "as is" and "as available" basis.
To the extent permitted by applicable law, no warranties are made regarding:
- uninterrupted availability;
- error-free operation;
- fitness for a particular purpose;
- compatibility with every device or application; or
- absolute security.
Reasonable efforts are made to operate Helios securely and reliably, but no computer system can be guaranteed to be completely secure or continuously available.
20. Limitation of Responsibility
To the extent permitted by applicable law, the operator of Helios and LoArt & Dev are not responsible for indirect, incidental, consequential, or similar losses resulting from use of, inability to use, interruption of, or loss of access to this private service.
Nothing in these Terms is intended to exclude responsibility that cannot legally be excluded under applicable law.
21. Third-Party Services
Helios may depend on third-party software, infrastructure, or service providers.
Those services may experience outages, change their functionality, or operate under their own terms and privacy policies.
Helios and LoArt & Dev cannot guarantee the continued availability or behaviour of third-party services.
22. No Commercial Relationship
Helios is currently provided privately and without charge by LoArt & Dev.
Using Helios does not create an employment, partnership, commercial, customer, or service-provider relationship between you and LoArt & Dev or the operator of Helios.
Nothing in these Terms represents an offer to sell a product or service.
23. Termination of Helios
Helios may be discontinued at any time.
If the service is permanently discontinued, reasonable efforts may be made to notify affected users and appropriately handle remaining account information.
Continued operation of Helios is not guaranteed.
24. Changes to These Terms
These Terms may be updated when Helios or LoArt & Dev services change.
Material changes should be communicated to authorized users where reasonably practical.
Continued use of Helios after updated Terms take effect constitutes acceptance of the updated Terms where permitted by applicable law.
The Last Updated date at the beginning of this document identifies the current version.
The canonical current version is available at:
https://loart.dev/legal/helios-terms-of-service
25. Future Public or Commercial Use
These Terms are specifically written for the current private, internal, and non-commercial operation of Helios by LoArt & Dev.
They are not intended to govern a future public or commercial version of the service.
Before Helios is made available to the general public, offered commercially, or operated through a registered business, these Terms and the Helios Privacy Policy should be reviewed and updated as appropriate.
26. Governing Law
These Terms are governed by the applicable laws of Canada and the Province of Ontario, without regard to conflict-of-law principles, except where applicable law requires otherwise.
27. Related Policies
Use of Helios is also subject to the applicable:
- Helios Privacy Policy;
- Helios Security Policy; and
- LoArt & Dev Acceptable Use Policy.
Current legal documents are publicly available at:
28. LoArt & Dev and Contact Information
The primary LoArt & Dev website is:
Helios is available at:
Public legal documents are available at:
For account assistance, security concerns, questions about these Terms, or other Helios support requests, contact:
Transactional email addresses used by Helios are intended for automated service communications and should not be relied upon as support addresses.