Data Processing Agreement

Last update: 20/09/2026. This DPA is part of the Terms of Service. Your own account and billing data are covered by the Privacy Policy.

1. Roles

1.1 You are the controller for data you put on the service. We are the processor. We host infrastructure. We do not decide why you collect that data.

2. Processing

2.1 We process the personal data you store or send through the service, for the term of the service, to provide the hosting you ordered.

2.2 We follow your use of the panel and your written requests. We may refuse instructions that look unlawful or that put the network at risk.

3. Security and subprocessors

3.1 Staff who can see customer systems are under confidentiality duties. You secure the OS, apps, passwords, and backups on your servers.

3.2 You allow us to use the infrastructure, network, backup, email, and registrar providers needed to run the service. We stay responsible to you for them. If we change a material subprocessor we will note it here or by email. You have 14 days to object. If we cannot accommodate that, you may stop the affected service. Refunds follow the Terms.

3.3 If hosted data leaves the EEA, we use Standard Contractual Clauses or another approved safeguard. Servers are in Cyprus.

4. Requests, breaches, and deletion

4.1 We will help with end-user requests using the tools in your panel. We often cannot search inside your VPS or mailboxes.

4.2 If a breach of our systems affects your hosted personal data, we will tell you without undue delay after we confirm it.

4.3 When the service ends, export your data first. We may delete it after termination. Recovery, if any, may be billed as labour and is not guaranteed.

5. Other

5.1 You may ask reasonable written questions about our security. On-site audits are only by written agreement and at your cost.

5.2 Liability follows the Terms. We may update this DPA when we update the Terms.