Log inStart free
Aloof

Terms of service

Effective: 14 October 2026

These Terms of Service ("Terms") are an agreement between you and Enigmatic IT Solutions FZE, a company registered in the United Arab Emirates ("Aloof", "we", "us"). They cover your use of Aloof: the website at www.aloof.si, the dashboard, docs, API, CLI, MCP server and the hosting platform behind them (together, the "Service"). Our Privacy Policy explains how we handle personal data.

1. Accepting these Terms

By creating an account, or by using the Service, you agree to these Terms. If you use the Service for a company or other organisation, you confirm that you're authorised to accept these Terms for it, and "you" means that organisation. If you don't agree, don't use the Service.

You must be at least 18 years old, or the age of majority where you live, to use the Service.

2. Your account

  • Give us a valid email address and keep your account and billing details accurate. You can sign in with a password or with a single-use magic link sent to your email.
  • Keep your password, email account, API keys, deploy tokens and OAuth grants secure. You're responsible for everything done with your account and credentials, and for the people and tools you give access to.
  • AI agents. You can let AI assistants and agents use the Service through our API and MCP server, including to create an account, deploy, scale, run commands or spend credit. Anything an agent does with access you or your organisation granted is treated as your action under these Terms. You can revoke an agent's access at any time. If you build a product that lets your own users act on Aloof through an agent, you're responsible for their use as well.
  • Tell us straight away at security@aloof.si if you think your account or credentials have been compromised.
  • One person or organisation shouldn't open multiple accounts to get around Free plan limits or the starting credit.

3. The Service

Aloof is a platform for hosting backends, APIs, workers and related services. You can deploy from a git repository or container image, attach volumes and managed Postgres databases, add custom domains, read logs and manage everything through the dashboard, CLI, API and MCP server. Compute and data are hosted on Hetzner Cloud in Nuremberg, Germany, and encrypted off-site backups are stored in Helsinki, Finland.

We keep improving the Service, so features may be added, changed or removed. If we remove a feature you're paying for, or make a change that materially reduces the Service, we'll give you reasonable notice where we can. Features we describe as beta, preview or coming soon may change or stop at any time and are provided without any commitment.

4. Acceptable use

You may not use the Service, or let anyone else use it, to:

  • host, store or distribute illegal content, or content that infringes anyone's intellectual property, privacy or other rights;
  • abuse others, including harassment, threats, malware, phishing, fraud, or attacks on other systems (such as denial-of-service attacks, port scanning or unauthorised access attempts);
  • send spam or other unsolicited bulk messages;
  • mine cryptocurrency;
  • probe, test or break our security or isolation, access other customers' data, or interfere with the Service or its infrastructure (security research is welcome when reported to security@aloof.si and done responsibly, without harming data or availability);
  • get around usage limits, billing, metering or suspension, for example by creating accounts to get repeated free usage;
  • resell or provide the Service itself as a hosting platform to others without our written permission (running your own products and services on Aloof for your users is fine);
  • break any law or regulation that applies to you or to us, including sanctions and export control laws.

We can remove content or suspend resources that break these rules (see section 7). If you notice abuse on Aloof, report it to legal@aloof.si.

5. Your data and how we process it

"Customer Data" means your code, container images, environment variables, application logs, databases, volumes, snapshots and backups, and anything your end users send to your apps. You keep all rights to your Customer Data. You give us only the permissions we need to host, run, copy, back up, transmit and display it to provide the Service to you.

You're responsible for your Customer Data and its lawfulness, for having the rights and permissions to use it, for your own end users, and for keeping your own backups of anything important. We run backups to help recover from failures, but they don't replace your own.

Data processing terms

Where Customer Data includes personal data, you are the controller (or a processor acting for your own customer), and we are your processor (or sub-processor). This section is our data processing agreement with you under Article 28 of the GDPR, and it also applies under the UAE PDPL and other data protection laws as far as they apply. We will:

  • Follow your instructions. Process Customer Data only to provide the Service, as described in these Terms and as you set it up and use it, unless the law requires otherwise (in which case we'll tell you first if the law allows).
  • Keep it confidential. Make sure the people we authorise to process Customer Data are bound by confidentiality.
  • Keep it secure. Keep appropriate technical and organisational measures in place, as described on our Security page.
  • Use approved subprocessors. You authorise the subprocessors listed in our Privacy Policy. We'll update that list before adding or replacing a subprocessor that handles Customer Data, and you can object at privacy@aloof.si. If we can't resolve a reasonable objection, you can stop using the Service, and we'll refund any prepaid credit you haven't used. We hold our subprocessors to data protection obligations at least as protective as these, and we stay responsible for them.
  • Help you. Help you, as far as reasonably possible, respond to requests from data subjects, carry out data protection impact assessments and meet your security and breach obligations. Most data can be managed directly through the dashboard, API and CLI.
  • Tell you about breaches. Notify you without undue delay after becoming aware of a personal data breach affecting your Customer Data, with the information you reasonably need.
  • Delete it at the end. When you delete resources or your account, delete the Customer Data in them. Encrypted backup copies roll off within our backup rotation (up to about 3 months), unless the law requires us to keep them.
  • Show compliance. Make available the information reasonably needed to show we meet these obligations, and allow and contribute to audits by you or an auditor you appoint, with reasonable notice, at your cost, no more than once a year unless a regulator requires it or there's been a breach, and subject to confidentiality.
  • Transfer it lawfully. Customer Data is hosted in the EU. Where it is accessed from or transferred outside the EEA (including from the UAE, where Aloof is operated), we'll use the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

The subject matter of the processing is the hosting of your apps and data; it lasts for as long as you use the Service; the types of personal data and categories of data subjects are whatever you and your end users put into the Service. Our own handling of your account and billing data, as controller, is covered by our Privacy Policy. If you need a signed data processing agreement, email privacy@aloof.si.

We may look at Customer Data only to provide or support the Service, fix a problem, keep the Service secure, enforce these Terms or comply with the law, and only as far as needed.

6. Fees and billing

Each workspace is on a plan: Free, Hobby ($5 a month) or Pro ($20 a month). The plan fee comes back to you as included usage for that month. Usage beyond what your plan includes is paid from a prepaid credit balance that you top up by card through Stripe. Prices are in US dollars and exclude tax. VAT, GST or sales tax is added at checkout where it applies, and Stripe issues an invoice for every payment. Current prices are on our Pricing page.

  • Plans (Hobby, Pro) are monthly and renew until cancelled. You can cancel at any time. A card-paid plan stays active until the end of the paid month; a balance-paid plan changes immediately. Plan fees for a partly used month aren't refunded.
  • Usage (compute per second, storage, backups, egress) is charged as it accrues, whatever your plan, until you delete the resources.
  • Prepaid credit doesn't expire while the account is open and is non-refundable, except where we charged you in error or decide a refund is fair after reviewing an unintended charge. The starting credit is promotional and has no cash value.
  • Billing errors are corrected by refund or credit when reported within 60 days.
  • Deleting your account removes its resources and forfeits remaining credit. Invoices are kept as the law requires.
  • The Free plan is hard-capped and never draws on your balance: when the month's included usage is used up, your apps pause until the next month or until you upgrade. On a paid plan, when your credit runs out, your apps are suspended and resume automatically after a top-up.
  • Card payments are processed by Stripe under Stripe's terms. You authorise us, through Stripe, to charge your payment method for subscriptions and top-ups you choose.
  • We may change prices with at least 30 days' notice by email or in the dashboard. Changes apply from your next billing month; if you don't agree, you can cancel before then.

The full policy, with how to cancel and request a refund, is in Billing.

If you're a consumer, nothing in these Terms limits any mandatory rights you have under the consumer law where you live.

7. Suspension and termination

By you. You can stop using the Service at any time. Cancel any plan, destroy resources you no longer need, and request account deletion as described in Deleting your account.

Suspension by us. We may suspend all or part of your account or resources, without prior notice where the situation calls for it, if: you break section 4 or another important part of these Terms; your use creates a security risk or harms the Service, other customers or third parties; your payment fails or your credit runs out; we're required to by law or by an authority; or we reasonably suspect fraud. We'll limit a suspension to what's needed, tell you why where we're allowed to, and lift it once the problem is fixed.

Termination by us. We may terminate your account: immediately, if you seriously or repeatedly break these Terms or we must do so by law; or for any other reason with at least 30 days' notice. If we terminate for a reason other than your breach, we'll refund any prepaid credit you haven't used.

What happens next. When your account ends, your right to use the Service stops and your resources and Customer Data are deleted as described in section 5. Before you close an account, or during any notice period, export what you want to keep. Sections that by their nature should continue (including 5, 6 for amounts owed, 9 to 12 and 15) survive termination.

8. Availability and support

We work to keep the Service available and reliable, but we don't guarantee any particular uptime or performance, and there are no service credits, unless we agree otherwise in writing (for example in a separate service level agreement). The Service may be interrupted for maintenance, upgrades, failures of our providers or networks, or events outside our control. Live status checks are on our Status page. Support is provided as described in our Support docs.

9. Disclaimer of warranties

The Service is provided "as is" and "as available". As far as the law allows, we disclaim all warranties, whether express, implied or statutory, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, and that the Service will be uninterrupted, error-free or secure, or that data won't be lost. You're responsible for how you use the Service and for deciding whether it's suitable for your needs. This doesn't affect warranties or rights that can't be excluded by law.

10. Limitation of liability

As far as the law allows:

  • neither party is liable for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, business, goodwill or data, however caused, even if told they were possible;
  • our total liability for all claims arising from or relating to these Terms or the Service is limited to the greater of (a) the amounts you paid us in the 12 months before the event giving rise to the claim and (b) US$100.

These limits don't apply to liability that can't be limited by law, such as for fraud, gross negligence, wilful misconduct, or death or personal injury caused by negligence, or to your payment obligations and your obligations under section 11.

11. Indemnity

You'll defend and indemnify Aloof, its affiliates and their officers, employees and contractors against third-party claims, and the resulting losses, damages, fines and reasonable costs (including legal fees), that arise from your Customer Data, your apps or your end users, your breach of these Terms or of the law, or anything done through your account (including by AI agents you've authorised). We'll tell you promptly about any such claim, let you control the defence, and cooperate reasonably at your cost. You can't settle a claim in a way that imposes obligations on us without our written consent.

12. Intellectual property

We and our licensors own the Service, including its software, design, documentation, and the Aloof name and logo. We give you a limited, non-exclusive, non-transferable right to use the Service under these Terms while your account is active. You may not copy, modify or reverse engineer the Service except as the law allows or as an open-source licence permits (section 13), and you may not use our brand in a way that suggests we endorse you without our permission.

If you send us feedback or suggestions, we can use them freely, without any obligation to you.

13. Third-party services and open source

The Service works with third-party services that you may choose to use, such as GitHub, container registries, log drain destinations, DNS providers, Let's Encrypt and AI assistants. Your use of them is governed by their own terms, and we're not responsible for them. Payments are handled by Stripe under Stripe's terms.

Parts of the Service, including the CLI and other tools we publish, may be available under open-source licences. Those licences govern your use of that code, and nothing in these Terms limits your rights under them. You're responsible for complying with the licences of any software, images and dependencies you deploy.

14. Changes to these Terms

We may update these Terms from time to time. We'll change the effective date at the top, and for material changes we'll give you at least 30 days' notice by email or in the dashboard before they take effect, unless a change is needed sooner for legal or security reasons. If you keep using the Service after the changes take effect, you accept them. If you don't agree, stop using the Service and close your account before then.

15. Governing law and disputes

These Terms, and any dispute or claim arising out of or in connection with them or the Service (including non-contractual disputes), are governed by the laws of the United Arab Emirates.

Before starting any formal proceedings, please contact us at legal@aloof.si so we can try to resolve the dispute informally. If it isn't resolved within 30 days, either party may bring it before the competent courts of the United Arab Emirates, which will have exclusive jurisdiction. Either party may still seek urgent interim relief in any competent court.

If you're a consumer, you may also have the right to bring a claim in the courts where you live, and the mandatory consumer protection laws of your country continue to apply.

16. General

  • Entire agreement. These Terms, the Privacy Policy and any policies they refer to are the whole agreement between you and us about the Service, and replace any earlier agreements on the same subject.
  • Force majeure. Neither party is liable for a delay or failure caused by events beyond its reasonable control, such as natural disasters, wars, power or network failures, provider outages, or government action. This doesn't excuse payment obligations.
  • Assignment. You can't transfer these Terms without our written consent. We may transfer them to an affiliate or as part of a merger, acquisition or sale of assets, and we'll tell you if we do.
  • Severability and waiver. If part of these Terms is unenforceable, the rest stays in effect. If we don't enforce a right, we haven't waived it.
  • Notices. We'll send notices to the email address on your account or show them in the dashboard. Send legal notices to legal@aloof.si.
  • Language. These Terms are written in English. If they're translated, the English version prevails, unless the law requires otherwise.

17. Contact

Legal questions and notices: legal@aloof.si. Privacy: privacy@aloof.si. Security reports: security@aloof.si.