Terms and Conditions

General provisions

This document constitutes the agreement between SC Delta Communications Network SRL, headquartered at Calea Văcărești 207, Sector 4, Bucharest, Romania, registered under no. J40/17458/2004, tax ID (CUI) 16890789, not a VAT payer, hereinafter referred to as "ServerHost", and any individual or legal entity using its services, hereinafter referred to as the "Client".

By placing an order or using the services, the Client fully accepts these terms and conditions. ServerHost reserves the right to modify these terms at any time, with prior notice to active Clients.

Services offered

ServerHost provides IT infrastructure services including, but not limited to: Web Hosting, Email Hosting, Docker Hosting, Kubernetes, GitLab Hosting, DevOps and SysAdmin Services, as well as services based on artificial intelligence.

The technical specifications, allocated resources, and pricing for each service are described on the official website at the time of ordering. ServerHost may modify plan specifications with at least 30 days prior notice.

Scope of responsibility: ServerHost manages the infrastructure — the operating system, web server, database, server-level security, backups and monitoring. Updating and maintaining the Client's applications (WordPress, plugins, themes, source code, frameworks and any software installed by the Client) remains the Client's responsibility, unless a separate application maintenance service has been explicitly contracted.

Registration and account

To access services, the Client must create an account by providing accurate, complete, and up-to-date information. The Client is responsible for:

• The confidentiality of authentication credentials (password, SSH keys, API tokens).
• All activities conducted through their account.
• Immediately notifying ServerHost of any suspected unauthorized access.

ServerHost shall not be liable for losses resulting from unauthorized account use due to the Client's negligence.

Payments and billing

Services are billed in advance according to the selected period (monthly, quarterly, semi-annual, or annual). Invoices are issued upon order confirmation and sent by email.

• Payment term: 5 business days from invoice issuance, unless otherwise agreed.
• Late payments: services may be suspended after the due date is exceeded. Data is retained for 7 days after suspension, after which it may be permanently deleted.

Prices are displayed in Romanian Lei (RON) or Euro (EUR). ServerHost is not a VAT payer; prices are final and do not include VAT. For orders shown in Euro, payment and invoicing are processed in Romanian Lei (RON), with the Euro amount automatically converted to Lei.

The available payment methods are detailed in the Payment methods section, and withdrawal and refunds in the Right of withdrawal and refunds section.

Acceptable use

The Client agrees to use ServerHost services exclusively for lawful purposes and in compliance with applicable Romanian and European legislation. The following are prohibited:

• Distribution of malware, ransomware, spyware, or any malicious code.
• Spam, phishing, or electronic fraud activities.
• DDoS attacks, unauthorized network scans, or attempts to gain unauthorized access to third-party systems.
• Storage or distribution of illegal content (CSAM, copyright-infringing content, etc.).
• Cryptocurrency mining without ServerHost's explicit consent.

Violation of these rules will result in immediate service suspension without refund and may be reported to the relevant authorities.

Suspension and termination

Suspension may be initiated by ServerHost in cases of: overdue payment, violation of the acceptable use policy, or at the Client's request.

Termination of the contract may be initiated:

• By the Client — at any time with written notice. Amounts paid for unused periods are non-refundable.
• By ServerHost — with 30 days notice in standard cases, or immediately in case of serious breach of terms.

Upon termination, the Client has 7 days to export their data. ServerHost is not liable for data loss after this period expires.

Service Level Agreement (SLA)

ServerHost guarantees 99.9% monthly uptime for hosting services, calculated excluding planned maintenance windows announced at least 24 hours in advance.

If the permitted downtime is exceeded, the Client may request a proportional credit as per the table below:

• 99.5% – 99.9%: 10% of the affected month's value
• 99.0% – 99.5%: 25% of the affected month's value
• Below 99.0%: 50% of the affected month's value

Credits are applied to future invoices and cannot be converted to cash. Credit requests must be submitted within 15 days of the incident.

Liability and warranties

ServerHost makes all reasonable efforts to provide secure and reliable services but does not guarantee that services will be free from any interruption or error.

ServerHost is not liable for:

• Data loss caused by the Client's actions or omissions.
• Indirect damages, loss of profit, or loss of business opportunity.
• Interruptions caused by force majeure events (natural disasters, nation-scale DDoS attacks, telecom operator failures).

ServerHost's total liability to the Client shall not exceed the amounts paid by the Client in the last 3 months for the affected service.

Modification of terms

ServerHost may modify these terms and conditions at any time. Changes will be communicated to active Clients by email at least 30 days before they take effect.

Continued use of services after the effective date constitutes acceptance of the new terms. If the Client disagrees with the changes, they may terminate the contract without penalty before the effective date.

Governing law and disputes

This agreement is governed by Romanian law. Any dispute shall first be resolved amicably. If no agreement is reached, the dispute shall be submitted to the competent courts of Bucharest, Romania.

For any questions regarding these terms, you may contact us at:

• Email: contact@serverhost.ro
• Address: SC Delta Communications Network SRL, Calea Văcărești 207, Sector 4, Bucharest, Romania

Payment methods

Services are paid by bank transfer to the company account, based on the proforma invoice issued when the order is placed. Please use your order number as the payment reference, so we can identify the payment quickly.

• Account holder: SC Delta Communications Network SRL
• IBAN (RON): RO06INGB0000999904254447
• Bank: ING Bank N.V.
• SWIFT/BIC: INGBROBU

The service is activated after the payment is confirmed. Card payment will be available soon, as an additional option. For orders shown in Euro, payment and invoicing are processed in Romanian Lei (RON).

Delivery and activation

Services are delivered electronically. Your account and service are activated within a maximum of 1 business day from payment confirmation, and the access details are sent by email.

Right of withdrawal and refunds

Business customers (legal entities). The statutory 14-day right of withdrawal under GEO 34/2014 applies exclusively to consumers (natural persons) and does not apply to legal entities. Services are contracted per billing period (monthly or multi-month). Cancellation can be made anytime from the client account and stops automatic renewal; the period already paid and activated is non-refundable. Setup fees and domains are non-refundable.

Consumers (natural persons). You have the right to withdraw within 14 days of concluding the contract, without justification. By placing the order and requesting immediate activation of the service, you agree to the start of provision and acknowledge that you lose the right of withdrawal once the service has been activated (Art. 16 GEO 34/2014). If you withdraw before provision is completed, you owe the proportional value of the period already used.

Refunds. Any approved refund is made using the same payment method used for the purchase, within a maximum of 14 days. Where a service could not be provided for reasons attributable to us, we refund the amounts collected in full.

Services based on artificial intelligence

This section applies to ServerHost services based on artificial intelligence, in particular the Edi assistant installed on the Client's website.

What the service does. Edi automatically generates answers for website visitors, using the indexed public content of the Client's site and the knowledge the Client adds from the client account. Answers are generated by a language model, not selected from a manually written list.

Roles. ServerHost is the provider of the AI system. The Client who activates the assistant on their website makes it available to their own visitors and is responsible for how it is configured and used, including for the content and instructions provided to it.

Transparency. Visitors are informed that they are interacting with an artificial intelligence system. The Client undertakes not to hide, remove or alter the interface elements that state this, and not to present the assistant as a natural person.

Limitations. Answers may contain errors or incomplete information. They are informative and do not constitute legal, medical, tax or financial advice. The assistant does not take decisions producing legal effects on visitors and does not replace human review; decisions regarding offers, orders and customer relations remain with the Client.

Prohibited use. In addition to the rules in the Acceptable use section, the Client may not use the service to manipulate people's behaviour, to score or classify individuals, for biometric identification, for emotion inference or for any other practice prohibited by European legislation on artificial intelligence. The Client does not add to the assistant's knowledge any special categories of data (health data, biometric data, political or religious beliefs and the like).

Where it runs and what is stored. The models run on ServerHost's own infrastructure in Romania, European Union. Questions, conversations and indexed content are not sent to artificial intelligence services outside ServerHost's infrastructure and are not used to train models made available to other clients. Conversations are kept in order to provide the service, to meter usage and so that the website owner can review them in their account. They are deleted automatically 90 days after the last message, and the client account shows the 20 most recent conversations for each site. Knowledge that the website owner adds or explicitly validates remains stored for as long as the service is active. The processing of personal data is described in the Privacy policy.

Service evolution. The language model and the technical components may be replaced with newer versions, without prior notice, as long as the service keeps its functionality. The wording of answers may vary from one query to another.

Usage and limits. The service is metered in tokens per month, according to the chosen package. The estimated number of questions shown on the website is indicative and is calculated from real average usage; actual usage depends on how complex the conversations are.

Complaints. Any complaint about how the assistant works, including a wrong or inappropriate answer, can be sent through the contact page or from the messages section of the client account.

Data processing agreement

This section serves as a data processing agreement between ServerHost, as processor, and the Client, as controller, for the personal data the Client stores or processes through our services. It applies from the activation of any service and supplements the other provisions of these terms.

Subject matter and duration. We process the data solely in order to provide the ordered services, for the duration of the contract. Upon its termination, data is deleted as described in the Suspension and termination section, and the Client may request a copy before deletion.

Categories of data and data subjects. These depend on what the Client chooses to host. Typically: accounts, orders, invoices and messages of their own customers, held in the hosted databases and files; mailbox correspondence, in the case of the email service; code, artefacts and pipeline data, in the case of Docker, Kubernetes or GitLab services; visitor conversations with the AI assistant, in the case of the Edi service, described separately in the Services based on artificial intelligence section. ServerHost does not decide what data is uploaded and does not use it for its own purposes.

Client instructions. We process the data only on the Client's instructions, expressed through the service order, the settings in the client account and the requests sent through the official support channels. An exception applies where a legal obligation requires otherwise, in which case we inform the Client, if the law allows it.

Staff access. Included management means that ServerHost's technical staff may access the Client's systems for maintenance, updates, incident resolution and restores. Access is limited to the people who need it, is performed on named accounts and is subject to a confidentiality obligation that survives the end of employment.

Security. We apply appropriate technical and organisational measures: our own infrastructure in Romania, European Union, restricted administrative access, separation of services between clients, backups, monitoring and security updates, encryption in transit for public services.

Sub-processors. We do not transfer the Client's hosted data to other providers for processing. The artificial intelligence services run entirely on ServerHost infrastructure, with no external model providers. Should we ever use a sub-processor for a service, we will inform the Client in advance and they may object by terminating that service.

Transfers outside the European Union. We do not carry out such transfers. The data stays on our infrastructure in Romania.

Assistance with data subject rights. The Client is responsible for handling requests received from data subjects. At their request, we provide reasonable technical assistance to identify, export, correct or delete the data held on our services.

Security incidents. In the event of a personal data breach affecting personal data processed on behalf of the Client, ServerHost will inform the Client without undue delay after becoming aware of the breach and will provide, as the information becomes available, the information reasonably necessary for the Client to fulfil its obligations under Articles 33 and 34 GDPR. Assessing the risk and notifying the supervisory authority or the data subjects remain with the Client, as controller.

Verification. Upon reasoned request, we make available to the Client the information needed to demonstrate compliance with these obligations.

Deletion or return of the data. Upon termination of the service, at the Client's choice, ServerHost will return or export the personal data processed on their behalf, or delete it, except for data whose retention is required by applicable law. Copies held in backup systems are removed according to the normal retention cycle and remain protected and not used for any other purpose until they are deleted. This clause does not cover the data that ServerHost processes in its own name and is required by law to keep, such as invoices and contractual records.

Annex 1 — The Edi service (AI assistant). For the Edi service, processing on behalf of the Client has the following parameters.

• Data subjects: the visitors and users of the Client's website.
• Categories of data: the messages written by the visitor and the generated answers, the IP address, the language, the page where the conversation started and its time; where the Client's integration provides them, the necessary details about the account, services or orders of the user logged in on their website.
• Nature and purpose: operating the assistant on behalf of the Client, generating answers based on the indexed content and on the knowledge added by the Client, keeping the conversation context, metering usage, running and securing the service.
• Duration: for the duration of the service. Operational conversations are deleted automatically 90 days after the last message. Knowledge added or validated by the Client remains stored for as long as the service is active.
• Place of processing: Romania, European Union, on ServerHost infrastructure.
• Instructions: the data is processed solely in order to provide the Edi service and in accordance with the Client's instructions, expressed through the settings in their account.
• No training: conversations and data processed through Edi are not used to train or fine-tune artificial intelligence models and are not used to improve the assistants of other clients.

Contact. For requests concerning the protection of personal data and the application of this agreement, the Client may contact ServerHost at dpo@serverhost.ro.

Processing that ServerHost carries out in its own name, such as invoicing and contractual communications, is not covered by this section and is described in the Privacy policy.