Terms of Service

Who we are. SrvYard is operated by Spykra Technologies UK Ltd, a company registered in England & Wales (No. 14554019), whose registered office is 86–90 Paul Street, London, England, EC2A 4NE, United Kingdom ("Spykra", "we", "us"). You can reach us at [email protected] or on +44 (0)7769 243907.

Who you are. "You" is the person who creates the account and, if you create it for a company or another organisation, that organisation as well. By accepting these terms for an organisation you confirm that you have the authority to bind it.

How you accept them. You accept these terms when you create an account, when you sign in with a social account for the first time, or when you start using the service, whichever happens first. If we change the terms we tell you first (see Changes to the service and to these terms).

What else applies. These terms form one agreement together with the documents they refer to: the Privacy Policy, the Cookie Policy, the Refund Policy and, where you process personal data through SrvYard, the Data Processing Agreement. If two of them conflict, the Data Processing Agreement wins for personal data that SrvYard processes on your behalf, and these terms win for everything else. A separate written agreement signed by both of us wins over these terms for the points it covers.

Business and consumer customers. SrvYard is built for people who run servers, usually as part of a trade, business or profession. If you are a consumer, meaning an individual using the service wholly or mainly outside your trade, business, craft or profession, nothing in these terms takes away the rights you have by law. Where a clause below is limited to business customers, or to consumers, it says so.

SrvYard is a control panel for servers you run yourself. It logs in to a server you own or have created at a cloud provider, over SSH, and runs prepared scripts to install software, deploy releases, manage certificates, databases, backups and monitoring, and to keep the result visible to your team. The Documentation describes what it does and does not do; the features and about pages summarise it.

What the Service is not. SrvYard does not host your sites, registers no domains and hosts no email. Your sites run on your machines, in your own provider account, and you pay that provider directly. We do not resell cloud servers and we do not add a mark-up to your provider's charges. If you stop using SrvYard, your servers, sites and databases keep running as they were.

Supported software. The Service supports Ubuntu 24.04 LTS and 26.04 LTS servers, and the site types, runtimes and databases listed in the Documentation. It does not deploy or manage Docker, Docker Compose or Kubernetes, and Python, Ruby, Go, Java and .NET are not managed site types. Something that works on a server by hand may not be something the Service supports; the Documentation is the source of truth.

Changes to the Service. We improve, change and sometimes remove features. We will not remove a feature of a paid plan that you rely on without telling you first, and we will give at least 30 days' notice of a removal that materially reduces what you pay for, unless a security issue or a legal requirement means we must act sooner.

1. You must be at least 18 years old and able to enter a binding contract to hold an account. The Service is not for children.
2. Give us accurate information and keep it up to date, including a working email address. We use it to send security messages, receipts, and notices under these terms.
3. Keep your credentials safe. You are responsible for what happens under your account until you tell us it has been compromised. Use a strong password, turn on two-factor authentication (an authenticator app or a passkey), and end sessions you do not recognise from the Security page. An owner can require two-factor authentication for every member of an organisation.
4. Members. You decide who joins your organisation and with which role. You are responsible for your members' use of the Service as if it were your own, and for removing people who should no longer have access. Roles control what a member can do in the Service; they do not change who is responsible under these terms.
5. One person, one account. Do not share one account between several people, and do not create several free accounts to get around the limits of a plan.
6. Owner. The owner of an organisation holds its subscription and can delete it. If the owner leaves, transfer ownership first.

Plans. The Plans, their prices and their limits (such as the number of servers, sites, members and organisations, and which features are included) are shown on the pricing page and in the Billing page of the console. They are the price list for this agreement and we do not repeat the numbers here, so that they cannot drift out of date. The Hobby plan is free.

Billing periods. Paid plans are billed in advance, monthly or yearly, as you choose at checkout. Prices are in pounds sterling (£), euros (€) or US dollars ($), in the currency you choose when you pick a plan. If tax applies to a charge, it is added and shown on your invoice.

Free trials. Where a free trial is offered at checkout, it is shown before you pay and on the Billing page. A trial ends on the date shown and your payment method is then charged for the first period unless you cancel before that date.

Payment. Payments are processed by Stripe. Your card details go to Stripe; SrvYard does not receive, see or store your card number. We store a reference to your Stripe customer and the brand and last four digits of your payment method so we can show them to you. By paying you accept Stripe's terms for payment processing.

Renewal. A paid plan renews automatically at the end of each period at the then-current price until you cancel.

Changing plan. You can upgrade or downgrade from the Billing page; changes are prorated. A move to a plan whose limits your current use exceeds is refused until you have reduced that use. A downgrade does not delete existing servers or sites, but you cannot create new resources beyond the limits of your plan.

Failed payments. If a payment fails, Stripe retries it according to the retry settings we use with Stripe. If it cannot be collected, the subscription ends and the organisation returns to the Hobby plan, with the limits that plan has. Your existing resources are kept.

Price changes. We may change prices for future periods. For a paid plan we give at least 30 days' written notice, and a new price never applies to a period you have already paid for. You can cancel before the new price applies.

Invoices. Invoices and receipts are available from the Billing page and are issued through Stripe.

Cancel any time. The owner can cancel from the Billing page. Cancellation takes effect at the end of the period you have paid for; until then the plan stays active, and you can resume the subscription before it ends. When it ends the organisation moves to the Hobby plan, and the Billing page refuses a cancellation while your use is larger than the Hobby limits so that nothing is left over the limit. Cancelling does not touch your servers.

14-day refund. We refund a paid-plan charge in full if you ask within 14 days of the charge, without asking you to explain. The Refund Policy says how to ask, how long a refund takes to arrive, and how this relates to your statutory right to cancel. It is part of these terms.

Your statutory rights. If you are a consumer, you may have a legal right to cancel a distance contract within 14 days, and rights if the Service is faulty or not as described. Our 14-day refund is offered to every customer, consumers and businesses alike, and does not reduce those rights.

Pay-as-you-go cloud costs. Charges made by your cloud provider for servers, storage or traffic are paid to that provider, not to us, and we cannot refund them.

1. Yours. You own, or have the right to manage, every server, account and credential you connect. You are the one who decides what runs on Your Servers.
2. You authorise us to act. When you connect a server or an account, you authorise the Service to log in and to carry out the actions you request, using the credentials you provide. The management user SrvYard creates can run commands as root through sudo, so treat the right to manage a server as root-equivalent and keep the number of owners and admins small.
3. You are responsible for Customer Content. We do not review it and we are not responsible for it. You are responsible for its lawfulness, for having the rights to it, and for the software, configuration, patches, access and data on Your Servers.
4. Your backups. Backups of your sites and databases are made to storage you provide and stay in your control. You are responsible for checking that they run, that they can be restored, and for the keys and passphrases that protect them. We do not hold a copy of your site data and cannot restore it for you.
5. Run it yourself. The Service runs prepared scripts; it does not remove your responsibility to understand what is being run. A rollback does not undo database migrations, and a health check that fails after a release does not roll the release back by itself.
6. Revoke what you no longer need. Removing a connection in the Service does not revoke its token at the provider, and does not remove the SSH key the Service installed. If you stop using the Service, revoke those yourself.

You must not, and must not let anyone else, use the Service or Your Servers connected to it to:

• host, store, transmit or link to content that is illegal, or that infringes someone's intellectual property, privacy or other rights, including child sexual abuse material, terrorist content and content that incites violence or hatred;
• send spam or unsolicited bulk messages, or run phishing or fraud;
• distribute malware or run command-and-control infrastructure;
• mine cryptocurrency on servers you do not own, or in breach of your provider's rules;
• launch or take part in denial-of-service attacks, or scan, probe or attack systems you do not own or have permission to test;
• gain or try to gain unauthorised access to the Service, another customer's data, or any system, or interfere with the Service's security measures;
• overload the Service, scrape it to build a competing product, or resell access to it without our written agreement;
• circumvent plan limits, rate limits or the rules of a plan;
• use the Service in breach of export-control or sanctions laws.

Responsibility for Your Servers. Because you deploy on your own servers, the content and activity on them are your responsibility. If a complaint, court order or a provider's notice concerns what runs on Your Servers, you deal with it. We may pass a valid notice on to you.

Security research. If you find a vulnerability, report it through the Security page. Good-faith research that follows that page is welcome.

The Service connects to Third-Party Services at your request: cloud providers (such as Hetzner, DigitalOcean, Vultr, Akamai (Linode), Amazon EC2 and Lightsail, or Proxmox), Git hosts, DNS and storage providers, and notification channels. Your relationship with them is governed by their terms and by your own accounts, and they are not our subcontractors. We are not responsible for their availability, charges or conduct, or for what a token you give us is allowed to do at the provider.

Free subdomains. Where we offer a free subdomain for a site, its DNS record is managed through Cloudflare. The name is a licence to use, not property. We may refuse, reserve or reclaim a name, for example for abuse, impersonation, trademark reasons or if the site is removed.

Payment and optional AI features. Stripe processes payments, and Anthropic and OpenAI provide optional AI features; see AI features and the Privacy Policy.

You own your content. You keep all rights in Customer Content. You grant us a limited, worldwide, non-exclusive licence to host, copy, process and transmit what you put into the Service, only as needed to provide it to you (including support you ask for) and to meet our legal duties.

What we hold. The Service stores Account Data and the information needed to manage Your Servers: encrypted credentials, settings, deployment history and logs, and the records described in the Privacy Policy. Your site files and databases stay on Your Servers.

Export. You can download a JSON export of your personal account data from your profile page. An owner can export an organisation's configuration from the settings; without a passphrase the export contains no secrets, and with a passphrase it includes secrets sealed under that passphrase. Exports are kept for 7 days. You can also read most things through the REST API, on the plans that include it.

Delete. You can delete your account from your profile page, after entering your password; it is deleted immediately and cannot be undone. An organisation can be deleted by its owner once its servers have been removed from the Service; removing a server from SrvYard does not delete the machine. How long other records are kept is described in the Privacy Policy.

After the end. When an organisation or account is deleted, we stop connecting to your servers. Anything running on Your Servers keeps running. Revoke the credentials as described in Your servers and your responsibility.

The Service, its software, design, text, documentation and brand are owned by Spykra or its licensors and are protected by law. We give you a non-exclusive, non-transferable, revocable right to use the Service during the agreement, for your own business or personal purposes, in line with these terms. Parts of the Service use open-source software under its own licences; those licences apply to those parts.

You must not copy, modify, reverse engineer or attempt to extract the source code of the Service except as the law allows despite this clause, and you must not remove proprietary notices. You will not use the SrvYard name or logo in a way that suggests we endorse you, without our written permission.

If you send us feedback or suggestions, you allow us to use them without restriction or payment. We do not claim ownership of anything else you send.

The REST API and webhooks are included in the plans that list them. They are governed by these terms and by the limits below.

• Tokens. API tokens belong to one organisation, carry scopes and can never do more than the member who created them. Keep them secret. You are responsible for anything done with a token until you revoke it, and a token stops working if its owner leaves the organisation. A token is shown once when you create it.
• Rate limits. API requests are limited to 60 a minute per token, and heavier operations (such as scans, exports and bulk actions) to 10 a minute. Requests over the limit are refused with an error; do not try to get around the limit with several tokens. Sign-in, registration and similar endpoints have their own limits.
• Webhooks. Outgoing webhooks are signed; verify the signature before you trust a request. Endpoints that fail repeatedly are disabled, and delivery history is kept for a limited time.
• Versioning. The API is versioned. We may add to it at any time, and will give reasonable notice before removing or changing something in a way that breaks a client.
• Fair use. Use the API to run your own servers and integrations. Do not use it to attack the Service or to harvest it.

Some features use AI models run by other companies. They are optional or limited in what they receive, and they can be wrong.

• Deployment explanations (Business plan, switchable per organisation) send the end of a failed deployment's output, with secrets removed and never environment values, to an AI provider to produce a plain explanation and suggestions.
• The chat assistant on the documentation site answers questions from the documentation and, when you are signed in, can look up the plan, servers, sites and recent deployments of your account to answer you. A person can take over the chat or you can open a ticket instead.
• Documentation search uses an embedding provider to match your query with documentation text.

AI output is a suggestion, not advice, and may be incomplete or wrong. Check it before you act on it, especially before running a command on a production server. We do not make decisions about you using AI that have legal or similarly significant effects. What is sent, to whom, and where it goes is described in the Privacy Policy and the Data Processing Agreement.

We may offer features labelled beta, preview or experimental. They are provided as they are, may change or be withdrawn without the notice that applies to other features, may be less reliable, and are not covered by any commitment about support. Do not rely on them for anything that cannot be rebuilt.

No uptime guarantee. The Service is provided on an as-available basis. We work to keep it running, but we make no commitment about availability or uptime, and no service credit or compensation is due for downtime, unless we have signed a separate written agreement that says otherwise. We may suspend the Service briefly for maintenance and will try to avoid disruption.

Your servers are independent. The Service controls Your Servers; it is not in the path of your sites' traffic. If the Service is unavailable, your sites keep running, but you cannot deploy or change them through the Service until it is back. Keep a way in to your servers that does not depend on us.

Status. Where we publish a status page, it is linked from the website footer.

Support. Documentation and the documentation chat are available to everyone. Account holders can open a support ticket from the console, and anyone can use the contact form or write to [email protected]. We answer as soon as we reasonably can and promise no response time unless a separate written agreement says so.

By you. You can stop using the Service at any time, cancel your subscription as described above, and delete your account.

By us. We may suspend or end your access, for all or part of the Service, if:

• you materially breach these terms, including the acceptable use rules, and have not fixed it within a reasonable time after we told you (or immediately, where the breach is serious, harms others, or puts the Service at risk);
• an amount due is unpaid after we have told you;
• we are required to by law or by an order of a court or regulator; or
• we stop providing the Service, in which case we give at least 30 days' notice and refund the unused part of any prepaid period.

Where we can, we tell you what we did and why, and we restore access when the cause is dealt with. Suspension for abuse may be immediate.

Effect. When the agreement ends, your right to use the Service ends. We stop connecting to Your Servers; they are not stopped or deleted. The clauses that by their nature should continue (payment owed, intellectual property, liability, the governing law and any rights accrued) continue. Termination does not affect your right to a refund under the Refund Policy.

We will provide the Service with reasonable care and skill. We do not promise that it will be uninterrupted or error free, that it will meet every requirement you have, or that it will work with every server configuration. Except as these terms state, and to the extent the law allows, we give no other warranties or conditions, express or implied, including about fitness for a particular purpose.

Consumers. If you are a consumer, the Service is provided with reasonable skill and care, and in line with its description, as the Consumer Rights Act 2015 requires, and nothing here limits those rights.

Nothing in these terms limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot be limited or excluded by law. If you are a consumer, nothing limits your statutory rights.

Subject to that, for business customers:

1. Excluded losses. We are not liable for loss of profit, revenue, business, contracts, goodwill or anticipated savings, for loss or corruption of data, for loss caused by downtime of Your Servers or sites, or for indirect or consequential loss, however it arises, even if we were told it was possible.
2. Cap. Our total liability to you for all claims arising out of or in connection with the Service in any period of 12 months is limited to the greater of (a) the fees you paid us for the Service in the 12 months before the event that gave rise to the claim and (b) £100.
3. Your servers. You are responsible for Your Servers, their content and their backups. We are not liable for loss or damage caused by what you or a third party run on them, by actions you request through the Service, or by a script you write or approve.

Consumers. If you are a consumer, we are liable for losses that were a foreseeable result of our breaking these terms or of our failing to use reasonable care and skill. We are not liable for losses that were not foreseeable, or for business losses, since you do not use the Service for a business.

For business customers: you will compensate us for losses, damages and reasonable costs that arise out of a claim by a third party that Customer Content, or your use of the Service in breach of these terms, infringes the law or the rights of that third party. We will tell you promptly about the claim, let you control its defence if you want to, and give reasonable help at your cost. This clause does not apply to consumers.

We handle personal data under the UK GDPR, the Data Protection Act 2018 and, where it applies, the EU GDPR. For Account Data, we are the controller; see the Privacy Policy. For personal data in Customer Content that we process for you while providing the Service, you are the controller (or processor) and we are your processor, and the Data Processing Agreement forms part of these terms and applies automatically. Platform data is stored in UK and EU data centres.

We may update these terms, for example to reflect a change in the law, a new feature, or a change in how we work. If the change is material, we give you at least 30 days' notice by email to the address on your account, and by a notice in the console, before it takes effect. The version number and the effective date at the top of this page change. If you do not agree, you can cancel before the date it takes effect. If you carry on using the Service after that date, you accept the new terms. A change that makes the terms more favourable to you, or that is needed to comply with the law at once, can take effect sooner. Earlier versions are available from us on request.

We give you notice by email to the address on your account, and in the console. A notice by email is treated as received the day after it is sent. Keep your address up to date.

You give us notice by email to [email protected] or by post to Spykra Technologies UK Ltd, 86–90 Paul Street, London, England, EC2A 4NE, United Kingdom. Security reports go through the Security page; support requests go through a ticket.

1. Entire agreement. These terms and the documents they refer to are the whole agreement between us about the Service and replace earlier understandings about it. Neither of us relies on a statement not set out in them, except that this does not limit liability for fraud.
2. Severability. If a part of these terms is found to be invalid or unenforceable, the rest stays in force, and the part is replaced by the nearest valid wording.
3. No waiver. A delay or a failure to enforce a right is not a waiver of it.
4. Assignment. You may not transfer your rights or duties under these terms without our written consent. We may transfer ours to a company that takes over the Service, if your rights are not reduced, and we will tell you.
5. Subcontracting. We may use sub-contractors and sub-processors to provide the Service; we remain responsible for them as these terms and the Data Processing Agreement provide.
6. Third parties. Nobody who is not a party to this agreement has a right under the Contracts (Rights of Third Parties) Act 1999 to enforce any of its terms.
7. Events outside our control. Neither of us is liable for a failure caused by an event outside its reasonable control, including a failure of a provider, an internet or power outage, or an attack, as long as it takes reasonable steps to limit the effect. This does not excuse payment.
8. No partnership. Nothing here makes us partners, agents or employer and employee.
9. Language. These terms are in English; a translation is for convenience only.

These terms, and any dispute or claim arising out of them or the Service (including non-contractual ones), are governed by the law of England and Wales. For business customers, the courts of England and Wales have exclusive jurisdiction. If you are a consumer, you can bring a claim in the courts of the part of the UK where you live, or, if you live in the EU, in the courts of your country, and the mandatory consumer protection rules of the country where you live continue to apply to you. Before starting a claim, please write to us; most problems are solved by a message to [email protected].

Spykra Technologies UK Ltd, registered in England & Wales, No. 14554019. 86–90 Paul Street, London, England, EC2A 4NE, United Kingdom. Email: [email protected] · Phone: +44 (0)7769 243907 · Contact form.

All legal documents are listed in the legal hub.