Astris Terms of Service

Last updated: 22 October 2026

These Terms of Service ("Terms") are an agreement between you and Persis Creative Hub, S.L., a sociedad limitada registered in the Mercantile Registry of Valencia, with tax identification number B21813613 and its registered office at Calle Guillem de Castro 43, 46007 València, Spain ("Astris", "we", "us").

They cover astris.run, the Astris Console, the Astris API, the Astris MCP server and the Astris command-line tool (together, the "Service").

Who may use the Service during the preview. During the private preview, the Service is available only to customers who use it for their trade, business or profession, including sole traders. When you order, you confirm this and give us your business or trade name. This does not remove any consumer right that applies by law.

You accept these Terms in the acceptance step when you register or order. Before you pay, we show you the plan, its resources, its price and its billing period. We confirm your paid order and these Terms by email. If you act for an organisation, you confirm that you may bind it. You must be at least 18 years old.

1. The Service

1.1 Astris hosts the software you build. You connect a Git repository; Astris builds it and runs it at an HTTPS address, on an Astris hostname or on a domain you own. You can also create managed databases of the types offered in the Console at the time, object storage, scheduled jobs and background workers, within your plan's resources.

1.2 Preview and changes. The Service is in preview, and we improve it often. Preview status does not reduce your legal rights. We may change the Service to comply with the law, to fix a fault or a security risk, to keep it compatible, or to improve it. A change never adds a charge unless you choose to buy a different plan. If a change has more than a minor adverse effect on how you use the Service, we tell you by email in advance and explain it. You may then end the affected subscription without charge within 30 days. Price changes follow section 3.6.

1.3 Where the Service runs. The servers that run your applications and databases are in the European Union. Our providers and their locations are listed at astris.run/subprocessors. Any change that affects how we process personal data follows section 13.

2. Your account

2.1 You sign in with your GitHub account. Protect that account and your Astris API keys. You are responsible for the people, tools and AI agents you allow to act through your account, and for the instructions they give. You are not responsible for an action merely because it used your account if it resulted from our breach of these Terms.

2.2 Tell us at once at security@astris.run if you think someone else has used your account or an API key. You can revoke an API key at any time in the Console.

2.3 Give us accurate information and keep your email address current. We send notices about your account and these Terms to that address.

3. Plans, prices and payment

3.1 Plans. Each plan is a pool of memory, CPU and disk. There is no limit on the number of projects. Everything your account runs shares the pool. The plans are listed at astris.run/pricing. We show your plan's resources and price before you pay and include them in your order confirmation.

3.2 Over the pool. If a new application or database does not fit in your pool, Astris does not create it and offers you a larger plan. We never send an overage invoice.

3.3 Prices and tax. Prices are monthly and charged in US dollars. Business prices are shown without VAT. Before you pay, we show the tax that applies to your order and the total. Where the law requires us to charge VAT, we add it; where the reverse charge applies to a business customer in another EU country, your invoice says so. If consumer orders are offered in future, consumer prices will include VAT.

3.4 Payment and renewal. You pay in advance through Stripe for each monthly period. Your subscription renews each month until you cancel. Your plan starts when Stripe confirms payment. Before you order, we show the recurring price, the billing period and how to cancel. We do not see or store your full card number.

3.5 Failed payments. If a payment fails, we tell you, and Stripe may try again. Before we end your plan for non-payment, we tell you what is owed and give you a reasonable chance to pay. If the plan ends, section 9.3 applies.

3.6 Price changes. We may change the price of a renewing subscription to reflect changes in the cost of providing the Service, in taxes or in legal requirements. We email you the new price, the reason and the start date at least 30 days before it applies. A new price applies only from a billing period that has not yet been paid. You may cancel before then, at no charge.

3.7 Refunds. Cancellation takes effect at the end of the paid period, and you can use the Service until then. We do not refund a period because you stopped using the Service early. This does not affect a refund that the law or these Terms give you, including under sections 3.8, 9.4 and 14. Where we owe a refund, we pay it within the period the law requires and without a fee.

3.8 Consumers: right of withdrawal. This section applies only if you are a consumer in the EU. You may withdraw from your first subscription contract within 14 days after it is made, without giving a reason. Send a clear statement to support@astris.run or to our registered office; no particular form is required. If you asked us to start the Service during those 14 days and then withdraw, you pay only a proportionate amount for the Service supplied before you told us. Starting a hosting subscription does not, by itself, remove your withdrawal right. We refund any amount due within 14 days of your notice, to the original payment method, without a fee.

3.9 Money-back guarantee on the first payment.

You can ask for your money back for any reason within 30 days of your first payment. Write to support@astris.run from the email address of your account.
We refund the full amount of that first payment, tax included, to the card you paid with. We then end your plan, as for any other cancelled plan.
The guarantee covers the first payment of each customer, once. It does not cover later payments, renewals or upgrades.
We may refuse a refund for an account that we suspended or closed because it broke these Terms or the acceptable use policy.
Your bank decides when the money shows on your statement.

4. Your content and your data

4.1 You own your content. "Customer Content" means the code, repositories, builds, environment variables, secrets, databases, files, objects, logs and other data that you or your applications put into the Service. You keep all rights in it. You give us only the rights we need to host, build, run, copy, back up and transmit it to provide the Service, and to comply with the law.

4.2 Your responsibility. You are responsible for your Customer Content and for having the rights to use it, for your applications, for how they process personal data, and for the notices and consents your own users need.

4.3 Personal data you host with us. When your Customer Content includes personal data, we process it for you as your processor. The Data Processing Terms in section 13 apply.

4.4 Your own copies. Our backups are described in section 4.6. We recommend that you also keep your own copy of your source code and of data you cannot easily recreate. This recommendation does not reduce our obligations or your rights.

4.5 Our access. We access Customer Content only to provide the Service, to carry out your support or restore requests, to investigate a fault or misuse, to protect the Service, or to meet a legal obligation. Access is limited to authorised people and follows section 13.

4.6 Backups. We back up each managed Postgres database every night and keep each backup for 30 days, in a separate provider account. At your request, our team restores the most recent backup; changes made after it are not included. Our backup service covers managed Postgres databases. It does not cover Redis, which is a cache, files that an application writes to its own disk, or objects in your storage buckets.

5. Acceptable use

5.1 You must not use the Service, or let anyone use it, to:

break the law, or host or send illegal content, including material that sexually exploits children;
infringe the intellectual property, privacy or other rights of others;
send spam, run phishing pages or distribute malware;
attack, scan, probe or overload any system or network, including the Service and other customers' applications, or get around the Service's limits, isolation or access controls;
mine cryptocurrency, run an open proxy or relay, or run a public file-sharing or anonymisation service;
reach, or try to reach, another customer's applications, databases or data;
resell the Service as bare hosting without our written consent. Hosting your own product for your own customers is allowed.

5.2 Restrictions. We may restrict the affected content, application or account where this is reasonably necessary to deal with illegal content, a breach of these Terms, or a serious risk to the Service or to others. We act objectively and in proportion. Where we can, we tell you first and give you a reasonable chance to fix the problem. If we must act at once, we may do so without warning. Where the Digital Services Act requires a statement of reasons, we give it no later than when the restriction takes effect. It explains the restriction, its grounds, any use of automated means and how to challenge it.

5.3 Reporting illegal content. Anyone, with or without an account, may report content hosted on Astris that they believe is illegal by email to abuse@astris.run. Please include the exact location of the content (normally its URL), why you believe it is illegal, your name and email address (not required for reports about child sexual abuse material), and a statement that the report is accurate and made in good faith. We confirm receipt, review the report, and tell you our decision and how to ask us to reconsider it. Our team makes these decisions.

5.4 Digital Services Act contacts. Authorities, the European Commission and the European Board for Digital Services may contact us at legal@astris.run. Users of the Service may contact us at abuse@astris.run, where a person answers. We accept messages in Spanish and English.

6. Support

Every plan includes diagnostics in the Console, in the Astris MCP server and in the command-line tool. Growth and higher plans also include email support from our team at support@astris.run. Customers on every plan may contact us at that address about billing, cancellation, privacy, legal matters and backup restores.

7. Our intellectual property

7.1 The Service, its software and documentation, and the Astris name and logo belong to us or our licensors. Your Customer Content is not included. You may use the Service as your subscription and these Terms allow, including during any retrieval or switching period. Open-source components remain under their own licences.

7.2 You must not copy, resell or rebuild the Service, or reverse-engineer it, except where the law allows it despite this sentence.

7.3 Feedback. If you send us suggestions about the Service, we may use them without payment to you. This does not give us your Customer Content or let us use personal data or confidential information for another purpose.

8. Services you connect

You may connect services you choose, such as GitHub, domain registrars and AI coding tools. Their own terms govern your relationship with them, and you control the permissions you give them. We remain responsible for our own obligations and for the suppliers who work for us.

9. Cancellation, suspension and termination

9.1 Cancellation. You can cancel from the Billing page of the Console, or by email to support@astris.run. Cancellation takes effect at the end of the paid period, and you can use the Service until then. Withdrawal (section 3.8) and switching (section 14) follow their own rules.

9.2 Account deletion. You can ask us to delete your account at support@astris.run. You do not have to remove your applications first. We confirm the effect on your subscription and resources before we act where this is unclear. We keep only the records the law requires, as the Privacy Policy explains.

9.3 When a plan ends. When your paid plan ends through cancellation or non-payment, your applications stop and we withdraw the access keys to your storage buckets. We keep your remaining Customer Content, backups and DNS settings for 30 days, at no charge, so that you can get a copy of your data or restart a plan. During those 30 days you can ask us at support@astris.run for a copy of your data, databases and stored files, and we provide it at no charge. You do not need to buy a plan to get this copy. We email you before the deletion date. After the 30 days we delete the remaining Customer Content, backups and settings, or sooner if you instruct us. A longer period applies where section 14 or the law requires it.

9.4 Termination by us. We may end a subscription if we stop offering the Service or can no longer reasonably provide it for genuine legal, technical or operational reasons. We give at least 30 days' notice by email, unless the law or a serious risk requires faster action. We may suspend or end an account for a material breach of these Terms; where the breach can be fixed, we explain it first and give you a reasonable chance to fix it. Non-payment follows section 3.5. We refund prepaid fees for any period in which we will no longer provide the Service. Your rights to retrieve and switch your data remain.

9.5 Ending the contract does not affect rights or payments that have already arisen. Terms about ownership, liability limits, disputes and outstanding remedies continue where their purpose requires. Section 13 continues while we process personal data for you, and retrieval and deletion duties continue until done.

10. Our commitment

10.1 We provide the Service with reasonable care and skill and in line with these Terms. Like any online service, it can have faults or interruptions. When it does, we work to fix them, and the remedies under these Terms and the law remain available. We do not warrant that the Service suits a purpose we have not agreed to support.

10.2 Nothing in these Terms limits the rights you have as a consumer that the law does not allow a contract to take away.

11. Liability

11.1 Liability that is not limited. Nothing in these Terms excludes or limits liability for fraud, wilful misconduct, gross negligence, death or personal injury caused by negligence, or any other liability the law does not allow us to limit. Nothing in this section limits anyone's rights under data protection law.

11.2 Consumers. The exclusions and the cap in this section do not apply to consumers; the law governs their remedies.

11.3 Business customers. Subject to 11.1, neither party is liable to the other for indirect loss of profit, revenue, business or goodwill. Our total liability to a business customer for events in any contract year is limited to the higher of (a) the fees paid for the Service in the 12 months before the first event giving rise to the claim, and (b) twelve times the monthly fee at the time of that event. Refunds do not count towards this limit. A contract year is each 12-month period from the subscription start date.

11.4 Loss of data. If lost data is covered by section 4.6 and a backup is available, we restore the most recent backup at your request. A restore is not your only remedy; any other liability follows this section and the law.

12. General

12.1 Changes to these Terms. We may change these Terms to reflect a change in the law, a necessary change in how the Service works, or a clarification that does not reduce your rights. We email you a material change and its reason at least 30 days before it applies, unless the law requires a shorter period. A change does not affect a claim that has already arisen or a period already paid for. If a change materially disadvantages you, you may end your subscription before it applies and receive a refund of any prepaid period. Price changes follow section 3.6.

12.2 Sanctions and export controls. You must not use the Service in breach of sanctions or export-control laws that apply to you or to us. We may ask for information we reasonably need to confirm that we may lawfully serve you, and we may refuse or restrict the Service where the law requires it. If a restriction affects an existing subscription, we explain its effect where the law allows. Refunds and data retrieval follow sections 9 and 14 and the law.

12.3 Governing law and courts. Spanish law governs these Terms. If you are a consumer, this does not remove the protection of mandatory laws that apply to you, and you may bring proceedings in the courts that consumer law makes available to you. The competent courts are those set by applicable procedural law.

12.4 Notices. We send notices to the email address on your account. You send notices to legal@astris.run or by post to our registered office.

12.5 Transfer. You may ask to transfer this agreement to another person or organisation, and we will not unreasonably refuse. We may transfer it to a successor that takes over the Service and its obligations, and we will tell you in advance. A transfer does not reduce your rights.

12.6 Events outside our control. Neither party is responsible for a failure to perform to the extent the law excuses it because of an event that could not reasonably be foreseen or avoided. The affected party takes reasonable steps to limit the effects and resumes performance as soon as possible. This does not remove the right to end the contract, to recover payment for a service not provided, or to retrieve data.

12.7 The contract. These Terms, your order information and any agreement both parties have expressly accepted form the contract. Section 13 forms part of it where we process personal data for you. The Privacy Policy explains how we handle personal data; accepting these Terms is not consent to everything in that policy. If a provision cannot be enforced, the rest continues to apply. Not enforcing a right once does not waive it.

12.8 Language. These Terms are in English, and for business customers the English version governs. Consumers receive contract information in the language the law requires.

12.9 Contact. Persis Creative Hub, S.L., Calle Guillem de Castro 43, 46007 València, Spain, legal@astris.run.

13. Data Processing Terms

These terms apply when we process personal data in your Customer Content for you. They meet Article 28 of the EU General Data Protection Regulation (GDPR). They form part of these Terms; no separate signature is needed (GDPR Art. 28(9)).

13.1 Roles and instructions. You decide the purposes of the processing and give the instructions. We are your processor. If you are yourself a processor for another controller, you confirm that you may appoint us as a sub-processor. You are responsible for collecting and disclosing the data lawfully, for the notices your users need and for the lawfulness of your instructions. We remain responsible for our own duties under data protection law.

13.2 Subject matter and duration. We build, host, run, store, transmit, back up and restore your applications and related resources. Processing continues while we provide the Service and during any transition, retrieval or deletion period, and ends when the data has been returned or deleted, except where the law requires us to keep it.

13.3 Nature and purpose. Processing includes receiving, storing, computing, organising, retrieving, transmitting, backing up, restoring and deleting data. The purpose is to provide the hosting you choose, and never an independent purpose of ours.

13.4 Data and people concerned. The data may include names, contact details, account and online identifiers, communications, transaction records, application records and any other personal data you instruct us to process, about your users, customers, staff, contractors and others. You decide the actual categories. Before you use the Service for special-category data or criminal-offence data, contact us so that we can agree on the safeguards.

13.5 Our obligations. We:

process the data only on your documented instructions, including about transfers outside the EEA, unless EU or Member State law requires otherwise, in which case we tell you first unless that law forbids it;
tell you at once if, in our opinion, an instruction breaks the GDPR or other data protection law;
ensure that the people who process the data are bound by confidentiality;
apply the technical and organisational measures required by GDPR Article 32, including those in Annex 1;
use sub-processors only as section 13.6 allows;
help you, as far as the nature of the processing allows, to answer requests from people exercising their data protection rights;
help you meet your duties under GDPR Articles 32 to 36;
tell you without undue delay after we become aware of a personal data breach affecting your data, and give you the relevant information as it becomes available;
at your choice, return or delete the data when the Service ends, and delete remaining copies unless EU or Member State law requires us to keep them;
give you the information needed to show that we meet this section, and allow and contribute to audits, including inspections, by you or an auditor you appoint. We plan routine audits with you on reasonable notice. We never use timing, frequency or charges to block an audit needed to establish compliance, investigate a credible concern or meet an authority's requirement.

If a person asks us about data we process for you, we refer them to you and help you as required.

13.6 Sub-processors. You give general written authorisation for the sub-processors listed at astris.run/subprocessors, which names each entity, its function and its processing locations. We email you at least 30 days before we add or replace a sub-processor that will process your personal data. You may object on reasonable data protection grounds during that period, and we will work with you to resolve it before the new sub-processor processes your data. If we cannot resolve it, you may end the affected Service and receive a refund of the unused prepaid period. We bind each sub-processor to the protection GDPR Article 28 requires, and we remain responsible to you for its work.

13.7 International transfers. We do not transfer personal data to a recipient outside the EEA without your instructions and a lawful basis under Chapter V of the GDPR. The sub-processor list names the countries and the safeguard for each transfer (an adequacy decision or the European Commission's Standard Contractual Clauses). We give you the safeguards on request. If a lawful transfer cannot be kept in place, we do not make or continue it.

Annex 1: Technical and organisational measures

Access. Administrative access is limited to authorised staff with individual accounts and multi-factor authentication. Access rights are reviewed and removed when no longer needed.
Customer separation. Customer environments are kept apart, and access to the hosting control systems is restricted. Customers never receive access to the hosting control panel.
Credentials. Astris API keys are stored only as one-way hashes with a short prefix. Deployment credentials and application secrets are available only to the functions and people that need them.
Network. The Console and public application addresses use HTTPS. Administrative interfaces are restricted.
Backups. Managed Postgres databases are backed up nightly, encrypted in storage, and kept for 30 days in a separate provider account with restricted access.
Operations. We apply relevant fixes, review access, record and investigate security events, respond to personal data breaches and test restores.
Deletion. Retention rules apply to live data and to backup copies. Data kept only because of a legal duty is restricted from ordinary use.
Review. We review these measures as risks and the Service change, and we do not materially reduce them.

14. Switching and data retrieval

14.1 Your choices. You may ask to switch to another provider, to move your exportable data to your own systems, or to end the Service and have your data deleted. Write to support@astris.run. No advance notice period applies.

14.2 Help with switching. We help you, and any receiving provider you authorise, in good faith, and we keep the Service running during the agreed transition.

14.3 Transition. We normally complete the transition within 30 days. If that is technically not possible, we explain why within 14 working days of your request and propose another period of no more than seven months. You may ask once for an extension.

14.4 Data included. Exportable data includes your code, files, database contents, stored objects, retained logs and backups, environment and domain settings, job configuration and other data generated through your use of the Service, to the extent we hold it. We do not export our own software, internal credentials, other customers' data, or material protected by our or a third party's intellectual property, but no exclusion will block the export of data you are entitled to.

14.5 Formats. Before the switch, we tell you the export methods, formats and any known technical restrictions. Where the law requires a structured, commonly used and machine-readable format, we provide it.

14.6 Retrieval and deletion. After the transition, you have at least 30 days to ask us for a copy of your exportable data, which we provide at no charge. We then delete it, unless you ask for earlier deletion or the law requires otherwise.

14.7 Charges. We charge no switching fee. The normal subscription price applies only while we keep providing the Service, and we refund any prepaid amount for the period after the switch is complete.

This document is adapted in part from templates published by General Legal, PC under CC0. General Legal has not reviewed it.