Terms and Conditions

1. Who we are

CloudLinux.ro is operated by CLOUDZERO SRL, a Romanian company registered under J12/2983/2022, tax ID (CUI) 46180740, with its office at Sesul de sus 184A, Floresti, Cluj, Romania. Contact: [email protected], +40 733 403 403. In these terms "we", "us" and "CloudLinux" mean CLOUDZERO SRL; "you" and "the customer" mean the person or company holding the account.

2. Definitions

• Services: virtual servers, backup boxes, snapshots, IP addresses, network traffic and everything else you can order through the console at cloudlinux.ro.
• Console: the customer area at cloudlinux.ro where services are ordered and managed.
• Credit: the prepaid balance of your account, in euro, from which services are paid.
• Infrastructure partners: the data-center operators from whom we rent the capacity your services run on. We do not disclose which partner runs a given service.

3. Acceptance of these terms

These terms form the contract between you and us. You accept them when you create an account, again each time you make a deposit, and again when a new version is published. Each acceptance is recorded with the date and time, the version accepted, the IP address and the browser used, and that record is kept as evidence of the agreement, including towards payment providers in case of a payment dispute.

If you order on behalf of a company, you confirm that you are authorised to bind that company. If you do not agree with these terms, do not create an account or use the services.

4. Account

• You must be at least 18 years old and have the legal capacity to contract. One account per natural person or company; duplicate accounts opened with the same billing details may be treated as fraudulent and closed without notice.
• Registration and billing details must be true and complete and kept up to date. Invoices are issued on the billing profile you provide.
• You are responsible for everything done through your account, including by employees, contractors or anyone else you give access to. Keep your password private, use two-factor authentication, and tell us at once at [email protected] if you suspect unauthorised access.
• You may not sublicense, resell or transfer your account or your services to third parties without our written consent.

5. What the services are

We provide unmanaged infrastructure: a virtual server with the resources of the chosen plan, an IPv4 address, network connectivity, a console, and the tools in the customer area (power control, reinstall, snapshots, reverse DNS, rescale where available). You are the sole administrator of your servers. We do not configure, secure, update, monitor or support the operating system or the software you run on them, and we do not have access to your data except as described in section 19.

Your services run on capacity we rent from infrastructure partners. The rules those partners impose on us (acceptable use, abuse handling, network and resource policies) apply to you as well, and we enforce them. Where a partner suspends, limits or removes a service because of your use of it, we are entitled to do the same towards you.

Monitoring agent. Unless you turn it off in Settings → Notifications before ordering, every new Linux server receives at first boot a small monitoring agent: a few lines of shell and a cron entry that read disk and inode usage, memory and swap usage, system load and the number of processors from the operating system, the names of any failed system services and whether a reboot is pending, and send these to us every five minutes, and once a day the names and versions of the installed software packages. The agent receives no commands, opens no ports and gives us no access to the server or its data. We use the figures to show usage in the customer area and to warn you before a disk fills up, and the package list only to tell you which installed packages have known security vulnerabilities and how to update them.

Free monitoring. From our own systems we check, for every server, whether it answers on its open ports (every minute), which of a short list of well-known ports are reachable from the internet and what version the service there announces (daily), and whether its IP address is listed on public spam blacklists (daily). These checks only connect to the server as any visitor could; they do not log in or change anything. We use the results to show uptime and security findings in the customer area and to email you about outages, exposed services, blacklistings and serious vulnerabilities; you can turn these emails off for each server. You can remove it at any time with one command shown in the customer area, and servers ordered after you turn the setting off do not receive it.

Monitoring Pro. An optional paid add-on per server (included in Autopilot), billed by the hour with the server at the price shown when you turn it on, which you can turn off at any time. It adds the checks you configure: requests to the website addresses you enter (each minute, as an ordinary visitor would, only to public addresses) and connections to ports of your server, plus a daily check of the SSL certificate of those websites. If you turn on automatic restart, you authorise us to hard-reset the server, through the same power control as in the customer area, when it has answered neither its ports nor ping for 10 minutes, at most once every 6 hours; a hard reset can lose data not yet written to disk. Monitoring tells you about problems but does not guarantee that every outage is detected, and it does not change section 17 (Availability and maintenance).

Optional security scan. With Monitoring Pro you may install, by running a command we show you on your server, a weekly job that installs the open-source tools ClamAV and Lynis from your distribution, scans the website and home folders for known malware and audits the system configuration. It runs locally at low priority, deletes or changes nothing, and sends us only the results: the paths and detection names of infected files, the hardening score and the audit's warnings and suggestions. We use them only to show them to you and to email you about new detections. You can remove the job at any time with the command shown in the customer area.

AgentBox. An optional paid add-on chosen when ordering a server, billed by the hour with the server at the price shown on the order page. We install on the server a desktop, a browser, a web terminal and AI agent software from their publishers; you use the agent with your own account at its provider, under that provider's terms, and we neither hold nor pay for that account. The server and everything on it are yours: you have root access, and the console opens the desktop and terminal only through short-lived links that you can switch off on the server. You are responsible for everything the agent does on your instructions or on its own, as if you had done it yourself, including purchases, messages, accounts it creates and the sites it visits. Using an agent for spam, fake accounts, scraping that breaches a site's terms, fraud, card testing or getting around security checks is forbidden and is handled as abuse under section 14 (Abuse reports, suspension and termination for breach). Outgoing mail on port 25 is closed on AgentBox servers.

Windows apps on AgentBox. Where your server supports it, you can install an optional tool that runs Microsoft Windows in a virtual machine on your AgentBox. Windows is not included in any price and we do not sell or provide Windows licences: you must use your own valid licence that permits this use, and you confirm this each time you install the tool. You alone are responsible for complying with Microsoft's licence terms. Windows needs more processor, memory and disk than the AgentBox itself, and the tool is offered only on servers that can run it.

6. Ordering, limits and provisioning

• Orders are placed from the console and are paid from your credit. A server can be ordered only while your credit covers at least one hour of its price.
• Each account starts with a limit of 3 servers running at the same time. You can ask for a higher limit from the servers page; we review each request and may approve a different number, decline, or ask for more information.
• Creating servers only to delete them shortly after is not a legitimate use of an hourly service. Creating more than 5 servers and deleting each within 2 hours results in a warning; if the pattern repeats, the ability to create servers is removed from the account.
• Provisioning usually takes under a minute, but depending on plan and location a server may need up to 20 minutes to become reachable, and Windows installations up to one hour. We charge from the moment the server is ready; a failed provisioning is not charged.
• Plans and locations may be out of stock or withdrawn. We may refuse any order, in particular when the account verification in section 7 is not satisfied.

7. Account verification

To protect ourselves and the cardholders whose cards are used on the platform, new accounts are verified after the first payment. We compare the billing details, the card data returned by the payment provider and the location the account was created and paid from. When they agree, the credit is released automatically; otherwise a member of our team reviews the account, usually within a few hours, and may ask for proof of identity or of company representation. Prepaid, virtual and gift cards are always reviewed by hand. Until the account is approved the credit is held and no service can be ordered. If we cannot verify the account, we refund the card payments, cancel the related invoices and close the account.

8. Prices and billing

• Prices are shown in euro in the console and on the website. For customers invoiced in Romania and consumers in the EU, VAT is added as required by law; for VAT-registered businesses in other EU countries the reverse-charge mechanism applies.
• Services are billed by the hour, in advance for the hour that starts, from your credit. Every started hour counts as a full hour, including the hour in which a service is deleted.
• Each server has a monthly cap: within a calendar month you never pay more than the monthly price shown for it, however many hours it runs. The cap resets on the first of each month.
• A server is billed from the moment it is provisioned until the moment it is deleted, whether it is powered on or off, because its resources, disk and IP address stay reserved for you. To stop paying, delete it.
• Snapshots and backup boxes are billed by the hour on the same principle. Traffic above the included monthly allowance is billed at the rate shown on the server page per started terabyte.
• Price changes for existing services are announced at least 30 days in advance by email; new prices apply from the next calendar month. Price changes for new orders apply immediately.

9. Deposits, invoices and refunds

• You add credit by card through our payment provider or, where offered, by bank transfer. A paid invoice is issued automatically for each deposit, on the billing profile of the account, and sent to your email.
• Credit is prepaid and is consumed by the services you create. Credit that has been used is not refundable. Credit added by mistake and not yet used may be refunded on request to the original payment method; the refund is reduced by the payment provider's non-refundable fees.
• If you are a consumer in the EU you may withdraw from a deposit within 14 days of making it, to the extent the credit has not been used; by ordering a service during that period you ask us to start performing immediately and acknowledge that the credit consumed by that service is no longer refundable.
• Auto top-up, when you enable it, charges your saved card for the amount you chose whenever your credit falls below the threshold you set. You can disable it at any time in the console.
• Promotional credit has no cash value and is never refunded.

10. Payment disputes and chargebacks

If you believe a payment was made in error, contact us first at [email protected]; most questions are settled within one business day. A chargeback opened with your bank without contacting us is treated as a breach of these terms: all services on the account are suspended immediately, the account is blocked until the dispute is settled, and we submit to the payment provider the record of your acceptance of these terms, the invoice, the account verification data and the usage log of the services paid with the disputed amount. If the dispute is decided in our favour or withdrawn, access is restored after the disputed amount, the fees charged to us by the payment provider and an administrative fee of €25 have been paid. Where a chargeback leaves your account with a negative balance, the balance is a debt payable within 14 days.

11. Running out of credit

You are responsible for keeping enough credit to cover your services. We email you when your credit is low. When the credit reaches zero, the hourly billing continues to be due and we may power off your services; if the balance is not topped up within 7 days, we may delete the services and their data without further notice and without liability. Any negative balance remains payable.

12. Acceptable use

You may use the services only for lawful purposes and in a way that does not harm us, our infrastructure partners, other customers or third parties. The following are prohibited, whether done by you or by anyone using your services:

• Any activity that is illegal under Romanian law, EU law or the law of the country where the server is located or where the activity has effect, including the violation of export control and sanctions rules.
• Sending unsolicited bulk or commercial email, running open mail relays or proxies, forging headers or sender identity, and any activity that leads to our or our partners' IP addresses being blacklisted (see section 13).
• Phishing, fraud, scams, fake login pages, and the impersonation of brands, people or institutions.
• Distributing or hosting malware, botnet command-and-control, exploit kits, stolen credentials or credit card data.
• Denial-of-service attacks in any form, port or vulnerability scanning of systems you do not own, intrusion attempts, brute-force attacks and any unauthorised access to systems, networks or data.
• Content that infringes copyright, trademarks or other rights, including illegal IPTV streaming, pirated software and unlicensed media; and the operation of file-sharing or torrent nodes for infringing content.
• Child sexual abuse material, terrorist content, incitement to violence or hatred, and content that is defamatory or violates the privacy of others.
• Cryptocurrency mining, farming, plotting or similar proof-of-work workloads, and any other workload designed to consume the maximum resources of a shared host continuously.
• IRC servers and bots, public open proxies or VPN exit nodes offered to the public, Tor exit nodes, and any service whose purpose is to anonymise abusive traffic.
• Gambling, adult or high-risk content where it is illegal in the server's location or where it generates complaints against our network.
• Reselling or subletting the services, or offering free or shell hosting on them, without our written consent.
• Circumventing the limits of your plan, the account limits in section 6, the verification in section 7 or any suspension; and abusing, threatening or harassing our staff.

13. Email, reverse DNS and blacklists

Outbound mail port 25 may be blocked on new servers and is opened on request once the account has a payment history. Any bulk mailing requires a double opt-in list, a working unsubscribe link, correct SPF, DKIM and reverse DNS, and compliance with the laws on commercial communications. Reverse DNS records you set are applied by us or by our partners and can take up to 24 hours. If your activity causes an IP address or range of ours or of a partner to be listed on a blacklist, we may suspend the service immediately and re-invoice you the costs charged to us for the clean-up, which are at least €100 per incident plus €100 per hour of work.

14. Abuse reports, suspension and termination for breach

• When we receive a complaint about your server, from a partner, a third party or our own monitoring, we email you what was reported and show it on the server page together with a statement form. You must investigate, fix the problem and send us your statement within 24 hours, or sooner if the notice says so. We may forward your statement to the complainant or to the partner.
• Depending on the severity, we may suspend the server immediately: it is powered off and you cannot start, change or delete it until we lift the suspension. A suspended server continues to be billed. We may also null-route an IP address under attack or used for an attack, and we may bill you the traffic and costs caused by an attack you caused.
• Without a timely statement, with a repeated report, or with a serious breach (sections 10 and 12), we may terminate the service or the account without notice and without refund, delete the data, and keep the remaining credit to cover our costs. We cooperate with law enforcement and may disclose account data where the law requires it.

15. Fair use of resources and IP addresses

• Virtual servers share physical hosts. You may use the full resources of your plan, but sustained use at the maximum of the CPU, disk I/O or network for hours on end, or load that degrades other customers, may be throttled, and we may ask you to move to a larger plan or a dedicated resource.
• Each server receives one IPv4 address (and IPv6 where available). You have no right to a specific address: we may change it with prior notice when a partner requires it, and addresses are not transferable between accounts.
• Traffic allowances are per server and per calendar month and are not transferable.

16. Security, backups and your data

• You are responsible for securing your servers: updates, firewalls, strong passwords, keys, and the behaviour of the software you install.
• Backups are your responsibility. Snapshots and backup boxes are provided on a best-effort basis and do not replace an off-site backup; we do not guarantee that a snapshot can be restored. We are not liable for data loss from hardware failure, software faults, attacks, deletion or any other cause.
• When you delete a server, its disk is destroyed immediately and cannot be recovered. When an account is closed, by you or by us, remaining services are deleted and the data is gone; billing records are kept as long as the law requires.

17. Availability and maintenance

We aim at 99.9% network availability per month, measured as the reachability of the server's IP address, and we use commercially reasonable efforts to reach it, but we do not guarantee uninterrupted service. Excluded are scheduled maintenance announced in advance, emergency maintenance, outages caused by you or your software, suspensions under these terms, attacks, and events outside our reasonable control, including outages at our partners and upstream networks. Credits for downtime may be granted at our discretion, in the form of account credit, and never exceed the price of the affected service for the affected month.

18. Liability

• The services are provided as described, without any other warranty. We are not liable for indirect or consequential damage, lost profits, lost revenue, lost data, business interruption or reputational harm.
• Our total liability towards you for all claims in any period of 12 months is limited to the amounts you paid us for the affected services in the 3 months before the event that gave rise to the claim. This limit does not apply to liability that cannot be limited by law.
• You indemnify us and our partners against any claim, fine, damage or cost, including legal fees, arising from your content, your use of the services or your breach of these terms.

19. Personal data

We process your account and billing data as a controller, as described in our Privacy Policy. For personal data you store or process on your servers, you are the controller and we act only as a processor of the hosting infrastructure; a data processing agreement is available on request. We access the content of your servers only with your consent, to handle an abuse report, or when the law requires it.

20. Software and licences

Operating system images and applications are provided under their own licences, which you accept when you install them. You are responsible for licensing any software you bring, including Windows and commercial control panels, and for the licence fees shown at order time. Licences we sell (for example Plesk, CloudLinux OS, KernelCare or Imunify360) are bound to one public IP address, either of a server hosted with us or of a server you run elsewhere, paid a month in advance from your credit and renewed monthly. You are responsible for the address you give being yours and for the edition you choose matching the server. A cancelled licence keeps working until the end of the month already paid and is not refunded; a licence ends when the monthly renewal cannot be paid, and a licence on a server hosted with us also ends when that server is deleted. Our name, logo and website content belong to CLOUDZERO SRL and may not be used without written permission.

21. Term and termination

• The contract runs for as long as you keep an account. You can delete any service at any time from the console; billing stops with the hour in progress. You can close the account by deleting all services and asking us by email.
• We may terminate the contract with 30 days' notice by email, and without notice in the cases of sections 10, 11, 12 and 14, or when a partner withdraws the capacity a service runs on.
• On termination, remaining services are deleted as described in section 16, unused credit is refunded under section 9, and any debt remains payable.

22. Changes to these terms

We may change these terms. Changes are announced in the console and by email at least 30 days before they take effect, except when a change is required by law or by a partner, in which case it takes effect on publication. You will be asked to accept the new version on your next console visit and at your next deposit; using the services after the new version takes effect means you accept it. If you do not agree, delete your services and close the account before the new version applies.

23. Law, disputes and consumer rights

These terms are governed by Romanian law. Disputes are heard by the competent courts of Cluj-Napoca, Romania, unless mandatory consumer protection rules give you the right to another forum. Consumers may also address the National Authority for Consumer Protection (ANPC, anpc.ro) or use the EU online dispute resolution platform at ec.europa.eu/consumers/odr. If a clause of these terms is found invalid, the rest remains in force.

24. Domain names

Domain names are registered, transferred and renewed through an accredited registrar on your behalf, under the registry rules of each extension and the ICANN policies where they apply. Registration and renewal are paid in advance from your credit for the whole period and are not refundable once the registry has accepted the order, because the name is reserved for you from that moment. You must give true registrant details; registries and the registrar may verify them, and a domain with false details can be suspended. Auto-renew is on by default and charges your credit about 30 days before expiry; if the credit is missing we warn you by email, and a domain that is not renewed expires, stops resolving and may be deleted or sold by the registry after its grace period. Transfers out are always possible with the transfer code shown in the console, subject to the registry's lock period after registration. We host the DNS zone on the registrar's nameservers unless you set your own.

25. Contact

CLOUDZERO SRL, Sesul de sus 184A, Floresti, Cluj, Romania. Email: [email protected]. Phone: +40 733 403 403. Abuse reports: through the contact form or at the same address.