Legal - Kreg Networks

Terms of Service

Last updated: September 2026

These Terms of Service are entered into with Kreg Networks, the trading name of Supernova - Telecomunicações e Sistemas de Informação, Lda., a company registered in Portugal under NIPC 517932970 ("Kreg Networks", "we", "us"), and its counterparty ("Client", "Customer", "you").

These Terms are governed by the laws of the Portuguese Republic, without prejudice to mandatory consumer-protection provisions in the country where you reside. For company identification and contact details, see the Company Information section.

1. Definitions

1.1. Client: The natural or legal entity with whom the agreement to supply products and services from Kreg Networks is concluded.

1.2. Services: Services from Kreg Networks. Every assignment to be delivered or that has been delivered by the supplier based on the agreement, as well as all materials and results produced that are intended for consumers.

1.3. Agreement: Each mutual acceptance (bank transaction/verbal agreement), confirmed in writing or by electronic mail, to supply one or more of the products or services from Kreg Networks.

1.4. Age and legal capacity: You must be at least 18 years old and have the legal capacity to enter into a binding agreement to order or use the Services. If you act on behalf of a company or other legal entity, you confirm that you are authorised to bind that entity to these Terms.

2. Applicability

2.1. Unless otherwise mutually agreed between parties in writing, the articles below apply to every offer, order, or agreement from or with Kreg Networks.

2.2. General terms and conditions from clients and, in particular, third parties are not binding on and do not apply to Kreg Networks.

3. Offer and Acceptance

3.1. All quotations and price indications by or on account of Kreg Networks are without obligation, unless specified otherwise by Kreg Networks in writing or by electronic mail.

3.2. Offers or quotations made by Kreg Networks are valid for 14 days unless specified otherwise.

4. Start of the Agreement

4.1. An agreement comes into force on the day on which the following conditions are fulfilled: The ordering system on the website is complete and the client has credited their payment to the financial account of Kreg Networks.

4.2. Parties are free to use other methods to demonstrate that the agreement has come into force.

4.3. Additions and amendments to the agreement must only be made in writing or by electronic mail.

5. Content Ownership and Intellectual Property

5.1. Customer Content Ownership. You retain all ownership rights to any content that you upload, post, email, transmit, or otherwise make available via the Services ("Customer Content"). Kreg Networks claims no ownership or control over any Customer Content, including any source code, applications, or other intellectual property you may develop, store, or transmit using our Services.

5.2. Customer Representations and Warranties. You represent and warrant that: (i) you own or have the necessary licenses, rights, consents, and permissions to use and authorize Kreg Networks to use all Customer Content as contemplated by these Terms of Service; and (ii) the Customer Content does not and will not: (a) infringe, violate, or misappropriate any third-party right, including any copyright, trademark, patent, trade secret, moral right, privacy right, right of publicity, or any other intellectual property or proprietary right or (b) violate any applicable law or regulation.

5.3. No Duty to Monitor. Kreg Networks is under no obligation to edit, monitor or review any Customer Content and assumes no responsibility or liability arising from Customer Content. However, Kreg Networks reserves the right to remove any Customer Content without notice.

5.4. Intellectual Property Infringement Policy. Kreg Networks respects the intellectual property rights of others and expects its users to do the same. Kreg Networks will respond to notices of alleged copyright infringement that comply with applicable law and are properly provided to us. For the full notice-and-takedown procedure, see our Notice & Takedown Procedure.

5.5. Repeat Infringer Policy. In appropriate circumstances, Kreg Networks will disable and/or terminate the accounts of users who are repeat infringers. Kreg Networks considers a "repeat infringer" to be a user who has been notified of infringing activity more than twice and/or has had Customer Content removed from the Services more than twice.

5.6. Counter-Notice. If you believe that your Content was removed mistakenly or misidentified, you may send us a written counter-notice. When we receive a counter-notice, we may reinstate the material in question, at our sole discretion.

5.7. Indemnification. You agree to defend, indemnify and hold harmless Kreg Networks and its affiliates, officers, directors, employees, and agents from and against any and all claims, damages, obligations, losses, liabilities, costs or debt, and expenses (including but not limited to attorney's fees) arising from: (i) your use of and access to the Services; (ii) your violation of any term of these Terms of Service; (iii) your violation of any third-party right, including without limitation any copyright, property, or privacy right; or (iv) any claim that your Customer Content caused damage to a third party. This defense and indemnification obligation will survive these Terms of Service and your use of the Services.

5.8. No Liability for Customer Violations. Kreg Networks is not liable for any damages that may occur from intellectual property violations, copyright infringement, or other illegal content that customers may be found with. The customer is solely responsible for all content it stores, processes, propagates, or transmits through Kreg Networks' services.

5.9. Compliance with European Law. Kreg Networks operates in compliance with applicable European laws, including but not limited to the E-Commerce Directive (Directive 2000/31/EC), the Copyright Directive (Directive 2019/790), and the Digital Services Act (Regulation (EU) 2022/2065). You agree to comply with all applicable European and national laws regarding your use of the Services.

6. Prohibited Activities

6.1. The following activities are strictly prohibited when using Kreg Networks services. For the full list, see our Acceptable Use Policy.

7. Duration, Renewal, Cancellation, and Termination

7.1. Initial term. Each service begins with the billing period selected at checkout or stated in the applicable order, product description, or written quotation. Custom hardware orders may be subject to a minimum term, deposit, setup charge, or other commitment stated in the quotation accepted by the client.

7.2. Automatic renewal. Unless the order expressly states otherwise, a recurring service renews automatically for successive periods equal to its current billing period. The renewal price, billing interval, and any applicable taxes are shown on the order or invoice. Kreg Networks will not change the billing interval without the client's agreement.

7.3. Recurring payment authorization. Where the selected payment method supports recurring authorization, the client authorizes Kreg Networks and its payment processor to charge the amount due on or around each renewal date until the service is cancelled. Where recurring charging is not supported, Kreg Networks will issue an invoice that the client must pay by its due date.

7.4. Customer cancellation. A client may submit cancellation through the client area at any time before the next renewal payment is processed. The client may request cancellation at the end of the already-paid billing period or immediate cancellation. A cancellation submitted after a renewal payment has been processed applies to the following billing period unless applicable law or the Refund & Withdrawal Policy requires otherwise.

7.5. Effect of cancellation. End-of-period cancellation keeps the service active until the end of the paid term. Immediate cancellation may stop access without delay and does not create a right to a pro-rata refund. Once a service is terminated, its data may be permanently deleted immediately and may not be recoverable. The client is responsible for exporting data and maintaining independent backups before cancellation.

7.6. Termination by Kreg Networks. Kreg Networks may suspend or terminate a service where the client fails to pay an amount when due, breaches these Terms or the Acceptable Use Policy, creates a security or fraud risk, provides false or incomplete account information, or where continued service would violate applicable law, sanctions, a court order, or a binding request from a competent authority.

7.7. Insolvency. To the extent permitted by applicable law, Kreg Networks may terminate the agreement if the client is declared bankrupt, enters insolvency or liquidation proceedings, obtains a suspension of payment, or ceases business.

8. Service Delivery and Provisioning

8.1. Conditions before delivery. Provisioning begins after Kreg Networks has received cleared payment and the order has passed automated or manual fraud, sanctions, identity, and availability checks. An order confirmation or payment receipt does not by itself mean that an order has passed review or that capacity has been reserved.

8.2. Cloud VPS.

8.2.1. Service type. A Cloud VPS is an isolated virtual machine running on physical infrastructure shared with other virtual machines.
8.2.2. Allocated resources. The service includes the processing, memory, storage, and network resources stated in the selected plan.
8.2.3. Isolation. Virtualisation separates customer environments, and other customers have no authorised access to the client's virtual machine or its data.
8.2.4. Customer control. Subject to the selected plan, technical limits, and these Terms, the client may install an operating system and software within the virtual machine.
8.2.5. Delivery estimate. Orders that pass automated review are normally provisioned within minutes. Delivery may take up to 24 hours where manual review, payment confirmation, corrected account information, capacity assignment, or technical intervention is required.
8.2.6. Shared bandwidth. Unless the plan or a written agreement expressly states otherwise, Cloud VPS network capacity is shared with other virtual machines on the same host and uplink. The stated port speed is a maximum rather than a guaranteed or reserved rate.

8.3. Instant dedicated servers.

8.3.1. Service type. An instant dedicated server assigns the capacity of a physical server to one client.
8.3.2. Dedicated resources. The server's processing, memory, and storage resources are not shared with other Kreg Networks customers.
8.3.3. Customer control. Subject to the ordered configuration, technical limits, and these Terms, the client receives administrative access and may install an operating system and software.
8.3.4. Delivery estimate. Servers advertised as in stock or instant are normally provisioned within minutes after the conditions in Article 8.1 are met. Delivery may take up to 24 hours where hardware testing, installation, network configuration, payment confirmation, or manual review is required.

8.4. Built-to-order and custom hardware. Custom dedicated and storage servers are sourced and assembled to the client's accepted specification. A typical estimate is 7–14 business days, but the specification, term, deposit, setup charges, price, and estimated delivery date in the written quotation control. Delivery estimates for custom hardware are not guaranteed because component supply, shipping, customs, data-centre access, and testing may affect the schedule.

8.5. Manual review.

8.5.1. Review triggers. Kreg Networks may pause and manually review an order where customer or payment details are materially incomplete, inconsistent, unverifiable, associated with elevated risk, or indicate possible unauthorised or fraudulent payment.
8.5.2. Proportionate verification. Kreg Networks may first seek confirmation through the selected payment processor, the registered email address, company-registration information, payment-authorisation evidence, or clarification of the intended service use.
8.5.3. Pending review. Provisioning remains paused while the review is underway or requested confirmation is outstanding. Payment does not require Kreg Networks to provision an order before the review is completed.

8.6. Refusal and refund before provisioning.

8.6.1. Rejection. Kreg Networks may reject an order where material information cannot be verified, the client does not respond within a reasonable period, inconsistencies remain unresolved, payment appears unauthorised, legal or sanctions restrictions apply, the service cannot be fulfilled, or the remaining fraud or compliance risk is unacceptable.
8.6.2. Refund destination. If Kreg Networks rejects a prepaid order before provisioning begins, Kreg Networks will void or refund the payment to the original payment method, subject to payment-processor restrictions and applicable law.
8.6.3. No alternative payout. Kreg Networks will not redirect a refund to another person, account, wallet, or payment method merely because the person placing the order requests it.

8.7. Delivery method and completion of provisioning.

8.7.1. Delivery event. A Cloud VPS or dedicated server is considered provisioned and delivered when Kreg Networks creates the access credentials and sends the delivery notification.
8.7.2. Notification channel. Kreg Networks sends the notification to the client's registered email address or through a support ticket for which a notification is sent to that address.
8.7.3. Secure credentials. The notification may direct the client to retrieve credentials securely from the client area or ticket instead of including sensitive credentials in the email.
8.7.4. Customer responsibility. The client must keep the registered email address accurate and secure and promptly report any delivery or access issue.

8.8. Delay. Kreg Networks will use reasonable efforts to notify the client of a material delay. Unless a guaranteed delivery date was expressly agreed in writing, stated delivery times are estimates rather than guarantees. Delay does not entitle the client to compensation, but if Kreg Networks cannot deliver the ordered service within a reasonable period, the client may cancel the undelivered order and receive a refund of amounts paid for that undelivered service.

8.9. Scope of service and support. Server and Cloud VPS services are delivered connected to the Kreg Networks network, with one or more public IP addresses and the port and bandwidth allocation stated in the selected plan. Kreg Networks installs the operating system selected at ordering and maintains and supports the underlying infrastructure, including hardware, power, cooling, network connectivity, and the virtualisation layer. Beyond that, services are unmanaged: the client is responsible for the operating system configuration, software, data, and security within the service.

9. Force Majeure

9.1. In terms of the agreement, force majeure is understood to mean everything relating to it as defined in terms of law and jurisprudence.

9.2. Kreg Networks will not be held to its obligations arising from the agreement if it is not possible to fulfill them as a result of force majeure. The agreement will then be dissolved.

10. Intellectual Property Rights

10.1. The client is permitted to download and use the software on the Kreg Networks site; this software is not subject to any intellectual property rights, or these rights are expressly not exercised (freeware).

10.2. The client must respect the intellectual property rights with regard to protected software and/or other works (including shareware) and shall protect Kreg Networks against any claim.

10.3. Kreg Networks respects intellectual property including but not limited to trademarks and copyrights. Kreg Networks reserves the right to disable access to rented out services if according to an intellectual property rights proprietor a client infringes intellectual property.

11. Liability

11.1. Kreg Networks offers unmanaged services. The activities of Kreg Networks depend on the cooperation, services, and deliveries of third parties, over which Kreg Networks has little or no influence. Therefore, Kreg Networks may not be deemed liable in any way for any loss that results from the relationship with Kreg Networks or the severance thereof, irrespective of whether the loss arises or becomes visible during the relationship with Kreg Networks.

11.2. The client shall safeguard Kreg Networks against all claims for compensation that may be raised by third parties with regard to losses that have been incurred in any way through the wrongful or improper use of products and services supplied to the client by Kreg Networks.

11.3. Kreg Networks is not responsible or liable for the content of promotional material supplied by the client.

11.4. The client is liable for all losses that may be incurred by Kreg Networks as a result of a shortcoming on the part of the client in the fulfillment of the obligations arising from the agreement and these conditions.

11.5. The client must notify Kreg Networks directly in writing of any changes to the client's details. Should the client not do so, the client is liable for any loss incurred by Kreg Networks as a result of this.

12. Complaints

12.1. With regard to observable defects, the client must make a complaint in writing at the most 8 days after delivery; should he fail to do so, all claims against Kreg Networks will lapse.

12.2. If the complaint is justified, the supplied products or services will be amended, replaced, or reimbursed, after consultation. For the full complaint procedure, see our Complaint Procedure.

13. Changes to the Terms and Conditions

13.1. Kreg Networks retains the right to change or supplement these Terms and Conditions.

13.2. Changes will also apply to agreements that have already been concluded, with due observance of a period of 30 days after written notification of the change.

14. Settlement of Disputes and Applicable Law

14.1. If a court ruling declares one or more articles of these conditions to be invalid, the other stipulations of these general conditions will remain in full force. Kreg Networks and the client shall consult on new stipulations to replace the invalid or canceled stipulations.

14.2. The agreement is subject exclusively to the laws of the Portuguese Republic. The courts of Portugal shall have jurisdiction over any disputes arising out of or in connection with these Terms, without prejudice to any mandatory consumer-protection provisions that may confer jurisdiction on the courts of the consumer's place of residence.

14.3. Alternative Dispute Resolution. Portuguese consumers may obtain information about consumer mediation, conciliation, and arbitration from CNIACC — Centro Nacional de Informação e Arbitragem de Conflitos de Consumo. We are not obliged, nor do we voluntarily commit, to participate in dispute-settlement proceedings before a consumer arbitration body, except where required by applicable law.

15. Network

15.1. Kreg Networks is responsible for maintaining a congestion-free network within its own infrastructure. However, Kreg Networks is not responsible for the operation of destination networks beyond its control.

15.2. While Kreg Networks guarantees that IPs are properly propagated to the internet space, we are not responsible for any blockings or restrictions implemented by destination networks that are a consequence of censorship or regional policies. Kreg Networks cannot be obliged to assist in bypassing these restrictions or blockings imposed by third-party networks.

16. Mining

16.1. Using Kreg Networks services for mining purposes (i.e., for cryptocurrencies) is prohibited, except with Kreg Networks' prior written consent.

17. Payment Conditions

17.1. Prices and billing period. Services are billed in advance for the billing period selected at checkout or stated in the applicable quotation. Before the client places an order, Kreg Networks displays the service description, billing interval, setup charges, and total price payable to Kreg Networks, including or excluding VAT as indicated at checkout. The client is responsible for providing accurate billing and VAT information.

17.2. Payment processors. Payments may be collected by independent card, bank, wallet, PayPal, or cryptocurrency processors. The processor may apply its own terms, privacy notice, identity checks, geographic restrictions, transaction limits, exchange rates, and technical requirements. Kreg Networks does not receive or store full card numbers or card verification codes.

17.3. Payment authorization. By submitting a payment method, the client confirms that the client is authorized to use it and authorizes Kreg Networks and the relevant processor to collect the initial payment. For recurring services, a payment method that supports recurring authorization may also be charged for later renewals in accordance with Article 7.3. This authorization remains in effect until cancellation, expiry, or revocation, but revoking a payment authorization does not cancel the underlying service or remove amounts already due.

17.4. Due date and nonpayment. An invoice must be paid in cleared funds by its stated due date. If payment is not received when due, Kreg Networks may suspend the affected service immediately without further notice. Suspension does not cancel the invoice or extend the billing period. Kreg Networks may terminate an unpaid service, after which its data may be permanently deleted immediately and may not be recoverable.

17.5. Failed and reversed payments. The client remains responsible for amounts that fail, are reversed, recalled, disputed, or charged back, together with reasonable processor or administrative costs to the extent permitted by law. Kreg Networks may immediately suspend services connected to a payment dispute or unauthorized-payment claim while the matter is investigated. The client should contact billing@kreg.io before opening a dispute so that Kreg Networks has an opportunity to investigate.

17.6. Taxes and fees. The client is responsible for VAT and other taxes shown at checkout or required by law. The client is also responsible for charges imposed by the client's bank, card issuer, wallet provider, cryptocurrency network, or other third party. Kreg Networks does not impose a payment-method surcharge unless it is disclosed before payment and permitted by applicable law.

17.7. Account credit. Any account credit is not a bank deposit, has no cash value, cannot be transferred between accounts, and may be used only toward eligible Kreg Networks invoices unless applicable law requires otherwise.

Cryptocurrency Payments

17.8. Processor checkout. Cryptocurrency payments are handled through the cryptocurrency processor presented at checkout. Kreg Networks does not provide a cryptocurrency exchange, wallet, custody, investment, or money-transmission service. The processor's checkout terms and mandatory purchaser disclosures apply in addition to these Terms.

17.9. Fiat-denominated invoices. Unless an invoice expressly states otherwise, Kreg Networks prices services in the fiat currency displayed on the invoice. The processor calculates the cryptocurrency amount using its quoted exchange rate. A cryptocurrency quotation is valid only for the time shown on the processor's payment page.

17.10. Correct asset, network, and amount. The client must send the exact cryptocurrency amount, using the exact asset and blockchain network specified by the processor, to the address or invoice generated for that transaction. Sending a different asset, using an unsupported network, reusing an expired address, or paying an expired, underpaid, or overpaid invoice may delay or prevent crediting. Recovery is not guaranteed and processor or network fees may be deducted where recovery is possible.

17.11. Confirmation and finality. A cryptocurrency order is not paid until the processor reports the required blockchain confirmations and confirms settlement to Kreg Networks. Broadcasting a transaction does not constitute cleared payment. Blockchain transactions are generally irreversible; Kreg Networks cannot cancel, reverse, or retrieve a transaction sent to the wrong address, asset, or network.

17.12. Screening. Cryptocurrency payments may be subject to processor KYC, KYB, anti-money-laundering, sanctions, fraud, and blockchain-analytics screening. Kreg Networks or the processor may request additional information, delay settlement, reject a payment, or return funds where required by law or compliance controls.

17.13. Cryptocurrency refunds. Eligibility for a refund is determined by the Refund & Withdrawal Policy. Where a cryptocurrency refund is approved, the refund asset, amount, exchange rate, destination, processing method, and deduction of network or processor fees follow the selected processor's rules and technical capabilities. The client is not guaranteed the original cryptocurrency amount or the market value of that cryptocurrency at a later date. The client may be required to complete verification and provide a compatible refund address.

17.14. Recurring invoices paid with cryptocurrency. Unless the selected cryptocurrency processor expressly supports and the client authorizes recurring payment, cryptocurrency payments do not automatically renew a service. The client must pay each renewal invoice before its due date using the payment options then available.

18. Refunds

18.1. For full refund terms, including the EU 14-day right of withdrawal, early performance of services, statutory exceptions, and payment-method-specific refund handling, see our Refund & Withdrawal Policy.

19. Consumer Right of Withdrawal

19.1. If the client is an EU consumer acting outside a trade, business, craft, or profession, the client generally has 14 days from conclusion of a distance service contract to withdraw without giving a reason, subject to the exceptions and conditions in applicable law and the Refund & Withdrawal Policy.

19.2. Where the client asks Kreg Networks to begin providing a service during the 14-day withdrawal period, Kreg Networks may require the client's prior express request. If the client then withdraws before the service has been fully performed, the client may be required to pay an amount proportionate to the service supplied up to the time of withdrawal, where permitted by law.

19.3. The right of withdrawal may be lost once a service has been fully performed where performance began with the consumer's prior express consent and acknowledgment that the right would be lost following full performance. Any separate statutory exception applicable to personalized goods, activated licenses, domain registrations, or digital content will apply only where its legal conditions are met.

19.4. Contractual cancellation under Article 7 is separate from the statutory right of withdrawal. Cancelling renewal stops future billing as described in Article 7 but does not by itself create a refund right for a billing period that has already begun.

20. Data Processing & DPA

20.1. Our processing of your personal data is governed by our Privacy Policy, which is incorporated herein by reference.

20.2. Where you act as a business controller processing personal data through our services, you are responsible for your own GDPR compliance. Upon request, we will enter into a Data Processing Agreement (DPA) with business clients as required by Article 28 of the GDPR. To request a DPA, contact privacy@kreg.io.

21. Service Level & Availability

21.1. Kreg Networks provides its services on a best-effort basis. We do not guarantee a specific uptime percentage unless a Service Level Agreement (SLA) is expressly agreed in writing for a particular service. Where an SLA applies, its terms are set out in the product description or a separate SLA schedule.

21.2. Scheduled maintenance, force majeure events, and outages caused by client-side actions (including AUP violations) are excluded from any uptime calculation.

22. Sanctioned Countries

22.1. Kreg Networks does not provision services or allow registration from persons, entities, or operations located in, organised under, or ordinarily resident in jurisdictions or territories subject to applicable sanctions, export controls, or other legal restrictions. Kreg Networks may refuse or terminate any account where providing or continuing the service would violate such restrictions or applicable law.

23. Final Provisions

23.1. These terms and conditions and any other document referred to in these terms and conditions constitute the entire agreement between us. These terms and conditions replace any agreement, contract, discussion, negotiation, or correspondence in the past.

23.2. Any breach of these terms and conditions by any party shall void the rights of that party.

23.3. Any complaint or request for information may be addressed to the designated email address provided by Kreg Networks. We try to respond as quickly as possible, but we do not guarantee a response in the timeframe considered useful by you.

Acceptable Use Policy

Last updated: September 2026

1. Introduction

This Acceptable Use Policy ("AUP") forms an integral part of our Terms of Service and is incorporated by reference into every agreement between you and Kreg Networks ("we", "us"). By using our services you agree to comply with this AUP. We may update this AUP from time to time; material changes will be notified to existing clients at least 30 days before taking effect.

Capitalised terms not defined here have the meaning given in our Terms of Service.

2. General Principle

You may use our services only for lawful purposes and in a manner that does not infringe the rights of, restrict, or inhibit anyone else's use of the services, the network, or our infrastructure. You are responsible for all activity originating from your account, your services, and any IP addresses assigned to you, whether conducted by you, your employees, your authorised users, or any third party to whom you have granted access.

3. Technical Restrictions

Cloud VPS only: sustained CPU utilisation above 80% on a single core for more than 30 consecutive minutes. This restriction does not apply to dedicated servers, where the client is entitled to use the full resources of the physical CPU.
Installation of unlicensed Microsoft products or any other unlicensed/cracked software.
Use of IP addresses not assigned to your account, including spoofing, hijacking, or announcing unauthorised BGP routes.
Operation of public recursive DNS resolvers open to the internet.
Operation of open proxies, open SOCKS servers, or open SMTP relays.
Operation of Tor exit nodes, VPN exit nodes, or any service that anonymises third-party traffic to the public internet, without our prior written consent.
Cryptocurrency mining, mining pools, or any other form of distributed-computing workloads, whether for your own benefit or for third parties, without our prior written consent.
Creation of VPN/GRE/IPsec tunnels for the purpose of bypassing security measures, evading abuse controls, or masking the origin of prohibited traffic.

4. Network Abuse

Sending of unsolicited bulk email (UBE / spam), whether commercial or otherwise, including the operation of bulk-mailing lists to which recipients have not expressly opted in.
Operation of command-and-control (C2) servers, malware distribution, redirect chains, or botnet infrastructure.
Network scanning, port scanning (including nmap), vulnerability scanning, or probing of any kind directed at networks you do not own or are not authorised to test.
Launching or facilitating (distributed) denial-of-service attacks (DoS / DDoS), including the operation of stresser/booter services.
Actions that result in the blacklisting of our IP ranges by reputation services (Spamhaus, SpamCop, UCEPROTECT, SURBL, etc.).
Amplification attacks via DNS, NTP, Memcached, CLDAP, or any other protocol.

5. Prohibited Content

CSAM — as defined by EU Directive 2011/93/EU. We report all detected CSAM to the relevant national hotline and to law enforcement.
Terrorist content and content inciting, promoting, or glorifying terrorism, as defined by Regulation (EU) 2021/784 (TCO Regulation) and applicable national law.
Counterfeit merchandise operations (luxury goods, designer items, etc.).
Unlicensed pharmaceutical distribution platforms.
Financial fraud schemes, carding operations, phishing, or links to such content.
Non-consensual intimate imagery (NCII), including so-called "revenge porn".
Bestiality or sexual content involving minors.
Hostile activities targeting governmental bodies, regulatory agencies, or critical infrastructure.
Content that incites violence or hatred against any group based on race, ethnicity, religion, nationality, sexual orientation, gender, age, or disability.

6. Email & Marketing

All bulk email must comply with the EU GDPR marketing rules and the ePrivacy Directive (Directive 2002/58/EC, as amended).
Recipients must have opted in, and every message must include a working unsubscribe mechanism.
Sending email with forged headers, deceptive subject lines, or from spoofed addresses is prohibited.
Outbound TCP port 25 (SMTP) is blocked by default on all servers and Cloud VPS instances. We may unblock it on request at our discretion, subject to successful KYC (identity) or KYB (business) verification, a stated legitimate use case, and continued compliance with this Policy. We may re-block the port at any time if abuse, spam, or deliverability complaints occur.

7. DSA Notice-and-Action Mechanism

Pursuant to Article 16 of the EU Digital Services Act (Regulation (EU) 2022/2065), we provide a mechanism allowing any individual or entity to notify us of allegedly illegal content hosted on our infrastructure. Notices can be submitted through our Abuse & DMCA Report page or by email to abuse@kreg.io. For the full procedure, see our Notice & Takedown Procedure.

8. Enforcement & Penalty Ladder

Violations of this AUP are addressed on a case-by-case basis. Depending on severity, recurrence, and intent, we may apply the following graduated measures:

Level 1 — Warning: a written notice describing the violation and a deadline to remediate (typically 24–72 hours). Suitable for first-time, non-critical, unintentional violations.
Level 2 — Service suspension: partial or full suspension of the offending service pending remediation. Applied for repeat violations, serious network abuse, or where the violation causes harm to third parties.
Level 3 — Immediate termination: permanent termination of the service and, where warranted, all services on the account. Applied for CSAM, terrorism, malware/C2, DDoS, phishing, fraud, or any violation causing serious harm.
Level 4 — Account closure & ban: closure of the entire account and a permanent ban on future purchases. Applied for the most serious violations or repeat offending across services.
Cost recovery: where a violation causes us to incur reasonable and documented third-party costs (e.g., upstream abuse fees, IP-range cleanup, emergency engineering), we may pass those costs to your account, limited to the amount actually incurred.
Referral to authorities: where the violation involves suspected criminal activity, we will preserve evidence and report to the competent law-enforcement and regulatory authorities.

For CSAM, terrorism, and imminent-harm situations, we reserve the right to skip the warning stage and proceed directly to suspension/termination and law-enforcement referral.

9. Appeal Process

If your service has been suspended or terminated under this AUP and you believe the action was taken in error, you may appeal by emailing abuse@kreg.io within 14 days of the action. Please include your service ID, a detailed explanation, and any supporting evidence. We will review the appeal within 7 business days and notify you of the outcome. Where an appeal is upheld, the service will be reinstated and any related charges credited.

10. Jurisdiction & Local Law

Operations that violate the laws applicable where the service is physically hosted will not be tolerated. Where multiple jurisdictions apply, the applicable legal requirements must be observed. We may suspend services and cooperate with competent authorities where required or permitted by law.

11. Catch-All

Any conduct that may harm our business operations, reputation, network, or other clients — even if not expressly listed above — is strictly forbidden. We reserve the right to determine, in our reasonable discretion, whether a particular activity violates this AUP.

12. Reporting Violations

To report suspected violations of this AUP, contact our abuse team at abuse@kreg.io, or use our Abuse & DMCA Report page. For emergencies (active attacks, CSAM, terrorism), please mark your email subject with "[URGENT]".

Privacy Policy

Last updated: September 2026

1. Data Controller

The data controller responsible for your personal data is:

Kreg Networks, the trading name of Supernova - Telecomunicações e Sistemas de Informação, Lda., a company registered in Portugal under NIPC 517932970,
Email: privacy@kreg.io

We do not designate a Data Protection Officer (DPO), as our core activities do not involve large-scale, regular and systematic monitoring of data subjects or large-scale processing of special categories of data, and are therefore not required to under Article 37 of the GDPR. For all privacy matters, contact us at the email above.

2. Personal Data We Collect

Kreg Networks is a privacy-focused provider. We collect only the minimum data required to operate your account, deliver services, and meet our legal obligations. We do not monitor or access the content of client servers, do not sell personal data, and do not use client data for advertising. We collect the following categories:

Identity data: full name, company name, and fiscal or tax identification number where supplied for account or invoicing purposes.
Contact data: email address, postal address, telephone number.
Account & authentication data: username, hashed password, security questions, two-factor secrets.
Billing & payment data: invoicing address, VAT number, payment method identifier (e.g., card BIN, PayPal email, crypto transaction IDs). We do not store full card numbers or CVVs; these are handled by PCI-DSS-compliant payment processors.
Service usage data: IP addresses assigned to your services, bandwidth/traffic counters, control-panel login logs, support ticket correspondence, abuse reports involving your account.
Technical logs: access logs for our own website and client area, RIR/RIPE assignment records, WHOIS data (where applicable), email metadata for abuse handling. Services are unmanaged and we do not access the operating systems, files, or content hosted on client servers, nor do we collect logs from inside them.
Marketing data: consent records for newsletters and promotional communications.

3. Purposes and Legal Bases

We process your personal data only where we have a lawful basis under Article 6 of the GDPR:

Performance of a contract (Art. 6(1)(b)) — to provision, bill, support, and terminate the services you ordered; to maintain account records and authenticate your identity.
Legal obligation (Art. 6(1)(c)) — to retain billing and tax records under Portuguese fiscal law (typically 10 years); to comply with lawful requests from law enforcement; to fulfil AML/CFT obligations where applicable.
Legitimate interests (Art. 6(1)(f)) — to prevent and investigate abuse, fraud, and network attacks; to enforce our Acceptable Use Policy and Terms of Service; to secure our infrastructure; to communicate with you about service-affecting incidents. These interests are balanced against your rights and never override your fundamental freedoms.
Consent (Art. 6(1)(a)) — for non-essential cookies, marketing emails, and optional surveys. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Recipients of Your Data

We share personal data only with the following categories of recipients, and only to the extent necessary:

Payment processors (e.g., PayPal, Stripe, crypto payment gateways) for transaction execution.
Law enforcement, judicial, and regulatory authorities, where required by law or court order, or in emergencies involving imminent harm, CSAM, terrorism, or other serious crime.
Professional advisers (lawyers, accountants) under confidentiality obligations.

We do not sell your personal data to third parties.

5. International Transfers

Some service providers may process personal data outside the EU/EEA. Where this occurs, we rely on an applicable transfer mechanism, such as:

Standard Contractual Clauses adopted by the European Commission, together with transfer assessments and supplementary safeguards where required; or
An adequacy decision covering the recipient country; or
Another lawful transfer mechanism under Chapter V of the GDPR.

You may request a copy of the safeguards used for such transfers by contacting us at privacy@kreg.io.

6. Retention Periods

In accordance with the storage limitation principle (Article 5(1)(e) GDPR) and our transparency obligations under Articles 13(2)(a) and 14(2)(a) GDPR, we retain personal data only for as long as necessary for the purposes described in this Policy, as follows:

Account & billing records: for the duration of the contract plus 10 years (Portuguese tax-retention requirement).
Network traffic data: we are not subject to any legal obligation to retain network traffic logs and we do not retain them.
Website and client-area access logs: up to 90 days for security purposes, except where a longer retention is legally required.
Client servers: services are unmanaged; we do not access client servers and do not retain logs from inside them.
Support tickets: for the duration of the contract and up to 3 years after closure, so that we can handle related service and billing matters.
Marketing consent records: until consent is withdrawn, and for a limited period afterwards solely to evidence that the withdrawal was actioned.

7. Your Rights Under the GDPR

You have the following rights, which you may exercise by contacting us at privacy@kreg.io:

Access — a copy of the personal data we hold about you.
Rectification — correction of inaccurate or incomplete data.
Erasure ("right to be forgotten") — subject to legal retention obligations.
Restriction of processing — pending verification or while a dispute is resolved.
Data portability — receipt of your data in a structured, machine-readable format.
Objection — to processing based on legitimate interests or for direct marketing.
Withdrawal of consent — at any time, without affecting prior processing.
Right to lodge a complaint with the CNPD (Portugal).

We respond to valid requests within one month, extendable by two further months where the request is complex or numerous (we will inform you of any extension within one month).

8. Security Measures

We implement appropriate technical and organisational security measures to protect personal data, including access controls, encryption where appropriate, and procedures aligned with the GDPR breach-notification requirements (Art. 33–34). No internet-connected system can be guaranteed 100% secure.

9. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it, in accordance with Article 33 of the GDPR. Where the breach is likely to result in a high risk to you, we will also notify you without undue delay, as required by Article 34.

10. Cookies

We use cookies required for core website functions such as sessions, authentication, security, and the shopping cart. With your consent, we also use Matomo analytics cookies to understand website usage. For full details and consent controls, see our Cookie Policy.

11. Children

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have done so, please contact us and we will delete the data promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. We will post the updated version on this page and update the "Last updated" date. Material changes will be communicated to existing clients by email at least 30 days before taking effect.

13. Contact

For any questions about this Privacy Policy or your personal data, contact us at privacy@kreg.io, or see our Contact Information.

Refund & Withdrawal Policy

Last updated: September 2026

1. Right of Withdrawal (EU Consumers)

1.1. Pursuant to Directive 2011/83/EU and Portuguese Decreto-Lei n.º 24/2014, a consumer — a natural person acting for purposes outside that person's trade, business, craft, or profession — generally has the right to withdraw from a distance service contract within 14 days without giving a reason.

1.2. For a service contract, the withdrawal period runs for 14 days from the day the contract is concluded. If the final day falls on a legally recognized non-working day, applicable law may extend the deadline.

1.3. To exercise the right of withdrawal, the consumer must send a clear statement of the decision to withdraw to billing@kreg.io before the withdrawal period expires. The consumer may identify the account, service, order, and invoice so that Kreg Networks can process the request without delay.

1.4. This statutory right applies only to qualifying consumers. It does not apply to clients purchasing wholly or mainly for business or professional purposes, and it remains subject to the statutory exceptions described below.

2. Effects of Withdrawal

2.1. Where a valid withdrawal applies, Kreg Networks will reimburse payments covered by the withdrawal without undue delay and no later than 14 days after receiving the withdrawal notice. Reimbursement will normally use the original payment method unless the consumer expressly agrees otherwise, subject to the technical and compliance requirements of the payment processor.

2.2. If the consumer expressly requested that service begin during the withdrawal period and then withdraws before performance is complete, Kreg Networks may deduct or charge an amount proportionate to the service supplied up to the time the withdrawal notice was received, where permitted by applicable law.

2.3. The consumer remains responsible for returning or ceasing use of anything that applicable law requires following withdrawal. Withdrawal does not require Kreg Networks to preserve hosted data after service access ends; the consumer should export all required data before requesting immediate termination.

3. Early Performance and Statutory Exceptions

3.1. Because hosting and infrastructure services are commonly provisioned shortly after payment, checkout may ask a consumer to expressly request performance during the 14-day withdrawal period. Starting performance does not automatically remove every statutory withdrawal right; the consequences depend on the type of supply, the extent of performance, the consent collected, and applicable law.

3.2. The right of withdrawal may be lost when a service has been fully performed after the consumer expressly requested early performance and acknowledged that full performance would end the right of withdrawal.

3.3. Statutory exceptions may also apply to goods made to the consumer's specifications or clearly personalized, sealed or activated software, licenses, domain registrations, and digital content not supplied on a tangible medium. Kreg Networks relies on an exception only where its legal requirements are met and the required information and consent have been provided.

3.4. Terms specific to built-to-order hardware, including deposits, sourcing costs, setup work, minimum term, cancellation, and any non-refundable amount, will be stated in the written quotation before the client accepts it.

4. Money-Back Guarantee (Where Applicable)

4.1. Where a service is explicitly advertised with a money-back guarantee, the following conditions apply:

4.1.1. The guarantee applies for the period stated in the product description (e.g., 7 or 30 days) starting from the moment the service is provisioned.

4.1.2. The guarantee applies only to first-time purchases of the specific service; renewals are not eligible.

4.1.3. Services terminated for AUP violations are not eligible for a refund under the guarantee.

4.1.4. Refunds under the guarantee are issued to the original payment method within 14 days.

4.2. If no money-back guarantee is advertised for a service, refunds are at our sole discretion.

5. Service Cancellation by the Customer

5.1. The client may cancel a recurring service through the client area at any time before the next renewal payment is processed. No fixed advance-notice period applies unless a written quotation for a custom service expressly states one.

5.2. The client may choose cancellation at the end of the current paid billing period or immediate cancellation. End-of-period cancellation prevents the next renewal and leaves the service active until the paid term ends. Immediate cancellation may stop access and begin permanent data deletion without delay.

5.3. Cancellation submitted after a renewal payment has been processed applies to the following billing period. It does not reverse the completed renewal or create a pro-rata refund for unused time, except where required by law or an advertised money-back guarantee.

5.4. Cancelling a payment authorization with a bank, card issuer, PayPal, wallet, or payment processor does not cancel the service. The client must submit cancellation through the client area and remains responsible for invoices incurred before cancellation takes effect.

6. Service Termination by Us

6.1. If we terminate your service for a breach of our Acceptable Use Policy or Terms of Service, no refund will be issued and you remain liable for any outstanding fees.

6.2. If we terminate for our own commercial reasons (e.g., discontinuation of a product), we will issue a pro-rata refund for the unused portion of the billing period.

6.3. If we terminate due to a force-majeure event, no refund is due but we will use reasonable efforts to migrate you to an equivalent service.

7. Chargebacks & Payment Disputes

7.1. Clients should contact billing@kreg.io before initiating a chargeback or payment dispute so that Kreg Networks can investigate the transaction and attempt to resolve the issue.

7.2. Kreg Networks may immediately suspend services associated with a chargeback, reversal, recall, or unauthorized-payment claim while the matter is investigated. Suspension protects the account and infrastructure and does not determine whether the claim is valid.

7.3. If a dispute is decided against the client or is found to be fraudulent, Kreg Networks may terminate the affected services, recover the unpaid amount and reasonable processor costs to the extent permitted by law, and refuse future orders. Nothing in this section limits a consumer's legal right to dispute a genuinely unauthorized or incorrectly processed payment.

8. Refund Method

8.1. Approved refunds are normally issued to the original payment method. Processing time depends on the payment processor and financial institution, although Kreg Networks will initiate any refund required by consumer withdrawal law without undue delay and within the applicable legal deadline.

8.2. For cryptocurrency payments, the refund asset, amount, exchange rate, destination, processing method, and deduction of network or processor fees follow the selected processor's rules and technical capabilities. A refund is not guaranteed to equal the original cryptocurrency amount or its later market value. Additional verification and a compatible refund address may be required.

8.3. Kreg Networks may not redirect a refund to a different person or unrelated payment method where this would conflict with fraud-prevention, anti-money-laundering, sanctions, card-network, or processor requirements.

9. Exceptions

9.1. The following are non-refundable:

9.1.1. Domain registrations and transfers (subject to the respective registry's policies).

9.1.2. SSL certificate issuances once the certificate has been issued.

9.1.3. One-time setup fees once provisioning has begun.

9.1.4. Services terminated for AUP/TOS violations.

9.1.5. Custom work, professional services, and migrations once work has commenced.

9.1.6. Licenses and software activations once activated.

10. Contact

10.1. For any refund or withdrawal request, contact us at billing@kreg.io, or see our Contact Information.

Notice & Takedown Procedure

Last updated: September 2026

1. Purpose

This Notice & Takedown Procedure describes how third parties can notify Kreg Networks of allegedly illegal content hosted on our infrastructure, and how we handle such notices. It implements our obligations under the EU Digital Services Act (Regulation (EU) 2022/2065, "DSA"), the E-Commerce Directive (Directive 2000/31/EC), and applicable national law.

2. How to Submit a Notice

Notices can be submitted through our Abuse & DMCA Report page or by email to abuse@kreg.io. For emergencies (active attacks, CSAM, terrorism), mark your email subject with "[URGENT]".

3. Requirements for a Valid Notice

Pursuant to Article 16(3) of the DSA, a valid notice must contain:

A sufficiently substantiated explanation of the reasons why the content is alleged to be illegal;
A clear indication of the exact electronic location of that content (URL, IP address, port, hash, or other precise identifier);
The name and email address of the notifier;
A statement of good faith that the information in the notice is accurate and complete.

Notices that do not meet these requirements may be rejected. We will inform the notifier of the reasons for rejection and how to submit a valid notice.

4. Copyright Infringement (DMCA-style)

For claims of copyright infringement, the notice must additionally include:

A physical or electronic signature of the copyright owner or a person authorised to act on their behalf;
Identification of the copyrighted work claimed to have been infringed;
Identification of the material that is claimed to be infringing and information reasonably sufficient to permit us to locate the material;
Your contact information, including your address, telephone number, and email address;
A statement by you that you have a good faith belief that use of the material in the manner complained of is not authorised by the copyright owner, its agent, or the law;
A statement that the information in the notification is accurate and that you are authorised to act on behalf of the copyright owner.

5. Our Assessment

Upon receipt of a valid notice, we will assess it without undue delay. We will take one of the following decisions:

Remove or disable access to the content if the notice is substantiated;
Reject the notice if it is unfounded, insufficiently substantiated, or the content is manifestly legal;
Request additional information from the notifier where the notice is incomplete.

6. Statement of Reasons

Where we remove, disable, or restrict access to content, we will provide a statement of reasons to both the notifier and the affected client, pursuant to Article 17 of the DSA. The statement will include:

The decision taken and the reasons for it;
The legal basis relied upon;
Information on the client's right to submit a counter-notice.

7. Counter-Notice

If your content was removed or disabled and you believe it was removed mistakenly or misidentified, you may submit a counter-notice to abuse@kreg.io. The counter-notice must include:

Your name, email address, and service ID;
Identification of the removed content;
A statement under penalty of perjury that you have a good faith belief the content was removed or disabled as a result of mistake or misidentification;
Your consent to the jurisdiction of the competent courts.

Upon receipt of a valid counter-notice, we may reinstate the content within 10 business days, at our sole discretion, unless we receive notice from the original notifier that they have filed a court action seeking to restrain the alleged infringement.

8. Repeat Infringers

In appropriate circumstances, Kreg Networks will disable and/or terminate the accounts of users who are repeat infringers, as described in our Terms of Service.

9. Reporting CSAM

Child Sexual Abuse Material (CSAM) is reported immediately to the relevant national hotline and to law enforcement. We do not provide a counter-notice mechanism for CSAM content. All detected CSAM is permanently removed and evidence is preserved for law enforcement.

10. Contact

For any questions about this procedure, contact us at abuse@kreg.io.

Complaint Procedure

Last updated: September 2026

1. Purpose

This Complaint Procedure describes how clients and third parties can file a complaint with Kreg Networks and how we handle complaints. We are committed to resolving complaints fairly, promptly, and transparently.

2. What Constitutes a Complaint

A complaint is any expression of dissatisfaction about our services, products, staff, or business practices that requires a formal response. This includes, but is not limited to:

Service quality or performance issues;
Billing disputes;
Support interactions;
Provisioning delays;
Conduct of staff or contractors.

Abuse reports and notice-and-takedown requests are handled under our Notice & Takedown Procedure, not this Complaint Procedure.

3. How to File a Complaint

Complaints can be submitted by email to support@kreg.io. Please include:

Your name and account/client ID (if applicable);
A clear description of the complaint;
The date(s) of the incident(s);
Any relevant order numbers, ticket IDs, or invoice numbers;
The outcome you are seeking.

4. Acknowledgement

We will acknowledge receipt of your complaint within 2 business days. The acknowledgement will include the name of the person handling your complaint and an estimated timeframe for a full response.

5. Investigation and Response

We will investigate your complaint and provide a substantive response within 10 business days. If the investigation requires more time, we will inform you of the delay and provide an updated estimate.

Our response will include:

A summary of the complaint;
The findings of the investigation;
Any corrective action taken or proposed;
Information on how to escalate the complaint if you are not satisfied.

6. Escalation

If you are not satisfied with the response, you may escalate the complaint to management by emailing management@kreg.io. Management will review the complaint and the initial response, and provide a final decision within 15 business days.

7. External Dispute Resolution

If you remain dissatisfied after exhausting our internal complaint procedure, you may:

For consumers in Portugal: contact CNIACC for information about consumer mediation, conciliation, and arbitration;
Lodge a complaint with the relevant supervisory authority (CNPD for data protection matters).

We are not obliged, nor do we voluntarily commit, to participate in dispute-settlement proceedings before a consumer arbitration body.

8. Confidentiality

All complaints are handled confidentially. Information about a complaint is shared only with the parties involved and the staff members responsible for handling it.

9. Non-Retaliation

We will not retaliate against any client for filing a good-faith complaint. Filing a complaint will not result in degraded service, increased pricing, or termination of your account.

10. Contact

For any questions about this Complaint Procedure, contact us at support@kreg.io.