Terms of service

1. Who this is between

These terms are an agreement between CloudContainer AS, org. nr. 934 512 887, Kongens gate 12, 7011 Trondheim, Norway (“CloudContainer”, “we”) and the person or company that creates an account (“you”). By creating an account you accept them.

2. What the service is

CloudContainer provides managed application hosting. A subscription gives you one or more isolated CloudContainer environments including application hosting, PostgreSQL, S3-compatible object storage, custom domains with automatic HTTPS, secret management, logs and metrics, daily backup, AI Security Review, AI Operations, a maintenance window and managed maintenance of the underlying environment.

We operate the environment. You are not required to administer Linux, containers or networking, and normal operation does not require shell access.

3. Your account

• You must provide accurate registration details and keep them current.
• You are responsible for the security of your credentials and for actions taken under your account.
• You must be at least 18 years old, or represent a company.
• Where the product supports additional users on your account, you remain responsible for what they do.

4. What you are responsible for

Your application, its source code, its content, and any personal data it processes remain yours. You are responsible for:

• The correctness, licensing and legality of the code you deploy.
• Having the right to process any data your application handles.
• Responding to findings from the AI Security Review before deploying regardless.
• Keeping your own copies of anything you cannot afford to lose, in addition to our backups.

5. Acceptable use

You may not use CloudContainer to:

• Break Norwegian or applicable law, or infringe someone else's rights.
• Send unsolicited bulk email, run phishing infrastructure, or distribute malware.
• Attack, scan or overload systems you do not own, including ours and other customers'.
• Mine cryptocurrency, or run workloads whose primary purpose is consuming compute rather than serving an application.
• Attempt to circumvent the isolation between environments.

We may suspend an environment immediately if it is causing active harm, and will tell you why. For anything less urgent we contact you first.

6. Fees and billing

• Prices are in NOK and exclude VAT. Norwegian customers are charged 25% VAT; EU business customers with a valid VAT number are reverse charged.
• Subscriptions are billed monthly or yearly in advance.
• Upgrades take effect immediately and are prorated. Downgrades take effect at the next billing period.
• Subscriptions are billed in advance. If an invoice is not settled, the environment is suspended before any data is removed; notice periods are described below.
• Late payment: we will remind you. If an invoice remains unpaid 14 days after the due date the environment may be suspended, and after a further 30 days deleted.
• Prices may change with 60 days' notice. A price increase entitles you to cancel before it takes effect.

7. Availability

We aim for continuous availability and publish incidents and historical uptime on our status page. We do not currently offer a contractual uptime commitment with service credits; the service is provided on a commercially reasonable efforts basis. The architecture is designed to keep our control plane out of your application's request path, which is a design property rather than a guarantee.

Planned maintenance is performed inside the service window you configure, where possible. Security fixes may be applied outside it with notice.

8. Data, backup and export

• Your data is yours. We do not use it to train models and we do not sell it.
• The CloudContainer is backed up daily, with restore points stored separately from the production environment.
• Database and object storage credentials are available to you, and your data can be exported at any time using standard tools.
• On termination the environment is suspended, then deleted along with its backups after the notice period. Export your data before then.

9. AI features

AI Security Review and AI Operations are automated advisory tools. They analyse changes, logs and metrics using an external AI model provider, and produce findings and suggested instructions. They do not modify your code or your database. They improve the odds of catching a problem early; they do not guarantee that your application is secure, correct or free of defects, and they do not replace your own testing and review. We are not liable for an issue an AI review did not detect.

10. Third-party services

Connecting GitHub, or any other third-party service, is subject to that provider's own terms. We are not responsible for their availability or their decisions.

11. Liability

We are liable for direct loss caused by our own negligence, limited in aggregate to the fees you paid in the 12 months preceding the event. We are not liable for indirect or consequential loss, lost profit, lost data where you have not maintained your own export, or loss caused by your own code. Nothing here limits liability that cannot be limited under Norwegian law, including for gross negligence or wilful misconduct.

12. Termination

• You may cancel at any time from the dashboard. Cancellation takes effect at the end of the paid period; we do not refund partial periods unless required by law.
• We may terminate for material breach that is not remedied within 14 days of notice, or immediately for serious misuse under section 5.
• We may discontinue the service with 90 days' notice and a pro-rata refund of prepaid fees.

13. Changes to these terms

We may update these terms. Material changes are announced by email at least 30 days before they take effect. Continuing to use the service after that constitutes acceptance; if you do not accept, you may cancel without penalty.

14. Governing law

Norwegian law applies. Disputes are subject to the ordinary Norwegian courts, with Trondheim District Court as the agreed venue. Consumer rights under mandatory Norwegian law are not affected.

Note on this document

These terms describe our intended commercial practice and are provided for transparency. They are not legal advice and should be reviewed by qualified counsel before being used as a binding contract.