Terms of Service

By accessing or using any part of the PandaStack platform — including pandastack.io, the dashboard at dashboard.pandastack.io, the API at api.pandastack.io, the command-line interface, and all products under the PandaStack umbrella (PandaWatch, PandaStack AI, PandaFlow, GrowDeck) — you agree to be bound by these Terms of Service ("Terms"). These Terms form a binding agreement between you and Pandastackio Inc ("PandaStack", "we", "us", or "our").

If you are using PandaStack on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms, and "you" refers to that organisation.

These Terms incorporate by reference our Privacy Policy and the Acceptable Use Policy in Section 3. If you do not agree to any of them, do not use the service.

You must be at least 18 years old (or the age of majority in your jurisdiction) and able to form a binding contract to use PandaStack. The service is not directed to children.

To use PandaStack you must create an account. You agree to:

• Provide accurate, complete, and current registration information, and keep it up to date.
• Maintain the security of your account credentials and not share them with others.
• Notify us immediately at support@pandastack.io if you suspect unauthorised access to your account.
• Be responsible for all activity that occurs under your account, including that of your team members.

We may require identity or payment verification (including a valid payment card) before enabling certain features or before a first deployment. We reserve the right to refuse registration, or to restrict, suspend, or cancel accounts at our discretion — particularly where we believe these Terms are being violated, or where an account appears to be created to evade a prior suspension, ban, or usage limit.

You may use PandaStack only for lawful purposes and in compliance with these Terms. You agree not to use the platform — or allow, enable, or facilitate its use — to host, run, deploy, build, distribute, transmit, or support any of the following:

• Malware, spyware, ransomware, viruses, worms, exploit kits, botnets, command-and-control (C2) infrastructure, keyloggers, or any malicious, deceptive, or destructive software.
• Phishing pages, credential-harvesting sites, fake login portals, brand impersonation, or any fraudulent or deceptive activity.
• Gambling, betting, casinos, online lotteries, sports-books, sweepstakes, "toto"/togel/slot sites, or any real-money or simulated-money wagering service, except where you hold all required licences AND have our prior written approval.
• Cryptocurrency mining, hashing, proof-of-work, airdrop-farming, or any compute-for-token or "free compute" arbitrage workload.
• Open proxies, VPN exit nodes, tunnels (e.g. self-hosted Cloudflare/Argo tunnels, xray, v2ray, trojan, sing-box, frp), anonymisation relays, or any service whose purpose is to route, relay, or conceal third-party or your own traffic to evade network controls.
• Pornographic, sexually explicit, or adult content. Child sexual abuse material (CSAM) is strictly prohibited and is reported to the National Center for Missing & Exploited Children (NCMEC) and/or law enforcement without notice.
• Spam, bulk unsolicited email or messaging, mailing-list or SMTP relays, or traffic-inflation / click-fraud schemes.
• Pirated software, cracks, keygens, warez, stolen data or credentials, or carding / fraud marketplaces.
• Content that is illegal, defamatory, harassing, hateful, or that infringes any third party’s intellectual-property, publicity, or privacy rights.
• Denial-of-service attacks, DDoS-for-hire ("booter/stresser") services, port or vulnerability scanning, mass scraping, or other activity directed at third parties or at our infrastructure.
• Attempts to gain unauthorised access to any PandaStack system or another user’s resources, or to break out of the sandbox, container, or tenant isolation of your workload.
• Reselling, sublicensing, white-labelling, or providing PandaStack as a service to third parties without our explicit written permission.
• Circumventing usage limits, quotas, billing controls, account verification, region controls, or security measures — including creating multiple accounts or organisations to evade limits, free-tier caps, or a suspension.

This list is illustrative, not exhaustive. We may refuse, restrict, quarantine, or remove any deployment, upload, project name, subdomain, or custom domain that we reasonably determine to be abusive, deceptive, or in violation of this policy.

To keep the platform safe, we operate automated systems that screen accounts, project names, uploaded files, source repositories, and deployed content for signals of abuse — including the categories in Section 3. These systems may, for example, scan a static upload or a container source repository at build time and use pattern matching and machine-learning classifiers to detect prohibited content or code (such as gambling content in any language, remote scripts piped to a shell, tunnelling/proxy tooling, or obfuscated payloads).

A deployment or upload that trips these systems may be blocked before it goes live, quarantined, or removed, and repeated or severe violations may result in account suspension. Screening is a safeguard, not a guarantee: we do not pre-review all content, and the absence of a block does not mean content complies with these Terms. If you believe an action was taken in error, contact support@pandastack.io.

We may suspend, disable, throttle, or terminate any project, deployment, database, custom domain, or account that we reasonably believe violates these Terms or the Acceptable Use Policy — immediately and without prior notice where the violation is severe, ongoing, illegal, or poses a risk to other users, our infrastructure, or our reputation (including IP-address or domain reputation). Where practicable we will notify you and provide an opportunity to remediate.

We may also throttle resources, block inbound or outbound network traffic, revoke API tokens, or take other technical measures to contain abuse. We are not liable for any loss resulting from action taken in good faith to enforce this policy, and such action does not entitle you to a refund where it results from your violation.

Reporting abuse. If you believe a site or service hosted on PandaStack violates this policy — for example phishing, malware, gambling, or infringing content — please report it to abuse@pandastack.io with the URL and a description. We review reports promptly and act where warranted. Valid intellectual-property and DMCA notices should include the information required by applicable law and be sent to the same address.

PandaStack provides cloud infrastructure services including, but not limited to: static site hosting, container deployments, managed PostgreSQL and MySQL databases, scheduled cron jobs, edge functions, uptime monitoring, analytics, and team-collaboration tools.

We strive to maintain high availability but do not guarantee uninterrupted service. Scheduled maintenance, infrastructure failures, upstream-provider incidents, or events beyond our reasonable control may cause downtime. We will make reasonable efforts to notify you of planned maintenance in advance.

We reserve the right to modify, deprecate, or discontinue any feature or product with reasonable notice.

For eligible paid plans, we target a monthly uptime of 99.9% for the serving of your deployed applications, measured over each calendar month and excluding: (a) scheduled maintenance for which we gave advance notice; (b) downtime caused by your configuration, code, or content; (c) suspension or throttling under Section 5; (d) free-tier resources and features labelled beta or preview; and (e) events outside our reasonable control (force majeure).

If we materially miss this target in a given month, you may request service credits by writing to support@pandastack.io within 30 days of the affected month. Service credits are applied to future invoices, are your sole and exclusive remedy for availability shortfalls, and in aggregate will not exceed the fees you paid for the affected service in that month. Enterprise customers may have a separate written SLA that governs instead of this section.

Support is provided by email and via the dashboard. Response targets vary by plan and are not a guarantee of resolution time.

Paid plans and usage-based charges are billed by Stripe. By providing payment details, you authorise us and our payment processor to charge your payment method for all fees you incur, including recurring subscription fees and metered usage (such as compute, database, build minutes, and bandwidth beyond your plan’s allowance).

• Subscription fees are billed in advance per cycle; metered usage is billed in arrears based on our measurements, which are conclusive absent manifest error.
• Fees are non-refundable except where required by law or expressly stated by us in writing.
• If a payment fails, we may retry and may suspend or downgrade the account while a balance is overdue.
• We may change pricing with at least 30 days’ notice; continued use after the effective date constitutes acceptance.
• You are responsible for all taxes, duties, and levies associated with your purchase, excluding taxes on our net income.
• You are responsible for costs incurred by your workloads, including those triggered by autoscaling, retries, or misconfiguration.

PandaStack offers a free tier subject to resource limits and fair-use. Free-tier resources are provided "as is", may carry lower priority, and may be reclaimed after prolonged inactivity or on the lifecycle schedule described below. We reserve the right to modify, meter, or discontinue the free tier at any time with reasonable notice.

Free-tier database lifecycle. A free-tier database follows a scheduled lifecycle regardless of your plan: after approximately 30 days it is suspended (compute stopped; your data is retained), and after a further grace period of about 14 days (approximately 45 days total) it and its data are permanently deleted. We send advance notifications before each step. To keep a database running, upgrade it to a paid tier before it is deleted. It is your responsibility to maintain your own backups; we are not liable for data lost to lifecycle reclamation after notice.

You retain all ownership of the code, data, files, and content you deploy on or transmit through PandaStack ("Your Content"). By using the service, you grant Pandastackio Inc a limited, worldwide, non-exclusive, royalty-free licence to host, store, cache, transmit, reproduce, and serve Your Content solely to provide, secure, and support the service for you.

You are solely responsible for Your Content and for ensuring it complies with applicable laws and does not infringe any third-party rights. You represent that you have all necessary rights to Your Content. While we do not routinely review the substance of your deployments, we operate the automated screening described in Section 4 and reserve the right to remove content that violates these Terms.

We process personal data in accordance with our Privacy Policy. To the extent you use PandaStack to process personal data of your own end users through Your Content ("Customer Personal Data"), you act as the controller and we act as your processor.

• We process Customer Personal Data only to provide the service and on your documented instructions (including these Terms), and as required by law.
• We apply appropriate technical and organisational measures to protect Customer Personal Data, including encryption in transit, encryption of secrets at rest, tenant isolation, and access controls.
• We engage sub-processors (such as our cloud, payment, and email providers) to deliver the service; they are bound by obligations consistent with this section.
• We will assist you, taking into account the nature of processing, with data-subject requests and security-incident obligations, and will notify you without undue delay of a personal-data breach affecting Customer Personal Data.
• On termination, we delete or return Customer Personal Data in accordance with Section 16, except where retention is required by law.

If you require a separate Data Processing Agreement (DPA) or Standard Contractual Clauses for cross-border transfers, contact privacy@pandastack.io. An executed DPA, where provided, supplements and — to the extent of any conflict on data-processing matters — prevails over this section.

We treat your deployment configurations, environment variables, secrets, and data as confidential. Secrets are encrypted at rest, and we will not access your deployment environment except as necessary to provide support (with your consent), to operate, secure, or protect the platform and its users, to enforce these Terms, or to comply with law.

You are responsible for securing your own application code, dependencies, credentials, and access. You must promptly report any suspected vulnerability or breach affecting PandaStack to support@pandastack.io.

The PandaStack platform, including all software, trademarks, logos, and documentation, is owned by Pandastackio Inc and is protected by applicable intellectual-property laws. Nothing in these Terms grants you a right to use our trademarks or branding without our prior written consent. If you submit feedback or suggestions, you grant us a perpetual, royalty-free licence to use them without obligation to you.

Open-source components used in PandaStack are subject to their respective licences.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF HARMFUL COMPONENTS, OR THAT DATA WILL NOT BE LOST.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, PANDASTACKIO INC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, BUSINESS, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE SERVICE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL AGGREGATE LIABILITY TO YOU FOR ANY CLAIMS ARISING UNDER THESE TERMS SHALL NOT EXCEED THE GREATER OF (A) THE FEES PAID BY YOU TO PANDASTACK IN THE THREE MONTHS PRECEDING THE CLAIM, OR (B) USD $100. SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS, SO SOME OF THE ABOVE MAY NOT APPLY TO YOU.

You agree to defend, indemnify, and hold harmless Pandastackio Inc, its officers, directors, employees, and agents from any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the service; (b) Your Content; (c) your violation of these Terms or the Acceptable Use Policy; or (d) your violation of any third-party rights or applicable law.

You may cancel your account at any time from the dashboard. Upon cancellation, your deployments are terminated. Unless a shorter period applies (for example the database lifecycle in Section 9), Your Content is retained for 30 days after cancellation to allow export, after which it is deleted.

We may suspend or terminate your access immediately if you breach these Terms, fail to pay, create an account to evade a prior suspension, or if we are required to do so by law. We will make reasonable efforts to notify you before termination unless the violation is severe (e.g. active abuse or a security threat).

Provisions that by their nature should survive termination (including Sections 8, 10, 11, 13, 14, 15, 16, and 18) will continue to apply after termination.

These Terms are governed by and construed in accordance with the laws of the State of Delaware, USA, without regard to its conflict-of-law principles.

Any dispute arising from or relating to these Terms or the service shall first be attempted to be resolved informally by contacting support@pandastack.io. If the dispute is not resolved within 30 days, it shall be submitted to binding arbitration in Delaware, USA, under the rules of the American Arbitration Association, except that either party may seek injunctive relief in a court of competent jurisdiction. To the extent permitted by law, disputes will be resolved on an individual basis and not as part of a class action.

We may update these Terms from time to time. We will notify you of material changes via email or an in-dashboard notice at least 14 days before they take effect. Your continued use of the service after the effective date constitutes your acceptance of the updated Terms.

• These Terms, together with the Privacy Policy and any DPA or order form, constitute the entire agreement between you and PandaStack regarding the service.
• If any provision is found unenforceable, the remaining provisions continue in full force, and the unenforceable provision is modified to the minimum extent necessary.
• Our failure to enforce any right or provision is not a waiver of that right.
• You may not assign these Terms without our written consent. We may assign them freely, including in connection with a merger, acquisition, or sale of assets.
• Nothing in these Terms creates a partnership, agency, or employment relationship between you and PandaStack.

For questions about these Terms, contact us at: support@pandastack.io (abuse reports: abuse@pandastack.io).

Pandastackio Inc
Delaware, USA