Get started

Terms of Service

Version: 2.0
Last updated: 2026-05-27
Effective: on the date you first create an account, accept these Terms, or use the Service after this Version is posted.

These Terms of Service (the "Terms") are a binding agreement between you (the "Operator", "you", "your") and VPN Manager ("we", "us", "our"), the publisher of the VPN Manager desktop application, license server, website, storefront, and related services (together, the "Service"). By creating an account, ticking the acceptance box, paying for a plan, or using the Service in any way, you agree to these Terms and to the Privacy Policy. If you do not agree, do not create an account and do not use the Service.

Contents

  1. Definitions
  1. Eligibility and age
  1. What the Service is (and is not)
  1. Your account
  1. Trials, plans, billing, and auto-renewal
  1. Refunds and the 14-day right of withdrawal (EEA / UK)
  1. Stripe and payment processing
  1. License grant and scope of use
  1. Acceptable Use Policy
  1. You are the Operator — your obligations to your own customers
  1. Country and export-control restrictions
  1. Data we collect; data you control
  1. Your data-protection rights
  1. Cookies, analytics, and tracking
  1. International data transfers
  1. Security and breach notification
  1. Intellectual property
  1. Third-party and open-source software
  1. Suspension and termination
  1. Changes to these Terms
  1. Disclaimers
  1. Limitation of liability
  1. Indemnification
  1. Copyright complaints (DMCA / EU notice-and-action)
  1. Dispute resolution; class-action waiver; opt-out
  1. Governing law and venue
  1. Force majeure
  1. Assignment
  1. Severability and entire agreement
  1. Notices and contact
  1. Language and headings
  1. Change history

1. Definitions

2. Eligibility and age

3. What the Service is (and is not)

The Service is software that lets you host and operate your own VPN on infrastructure that you rent, own, or control, and to sell, distribute, or grant access to your own customers if you choose. We are not a public VPN provider. We do not route, monitor, or store the contents of any traffic that passes through your VPN tunnels. We do not own, control, or operate the servers on which you run your VPN, and we are not party to any contract you have with your hosting provider, payment processor (for your downstream sales), or end users.

4. Your account

To use most parts of the Service you must create a single account by providing a valid email address and a password of at least 8 characters. You agree to (a) keep your credentials confidential, (b) accept full responsibility for all activity under your account, (c) keep your information accurate and current, and (d) notify us promptly at support@vpnmanager.app if you suspect unauthorised access. You may not (i) hold more than one account without our prior written consent, (ii) share, sell, transfer, or sublicense your account, (iii) impersonate another person or misrepresent your affiliation, or (iv) attempt to bypass anti-abuse, trial-limit, or quota controls. We may, at our discretion, use device, network, and behavioural signals to detect duplicate or fraudulent accounts (see Privacy Policy §6).

5. Trials, plans, billing, and auto-renewal

Trial. New accounts may be offered a time-limited free trial (currently 14 days). Trials are provided "as is", may be limited in capacity, and may be changed, restricted, or withdrawn at any time. Trial abuse, including running multiple trials from the same person, device, or network, is a breach of these Terms.

Plans. Paid plans are shown at checkout with the price, the data allowance, the device limit (one connection per device), the renewal frequency, and the currency. Prices may be revised on at least 30 days' written notice for future renewal periods.

Auto-renewal disclosure (US states; mirrored for all customers). Unless cancelled, your paid plan automatically renews at the end of each billing period at the then-current price for that plan, charged to the payment method you provided. The renewal frequency is monthly. You will be charged on the calendar day that corresponds to the day you first subscribed (or the last day of the month if that day does not exist). We will send a renewal reminder by email at least once per year. You may cancel at any time through the account portal at [Address on file]'s billing page, by clicking "Cancel" inside the desktop app, or by emailing support@vpnmanager.app, using a method at least as easy as the one you used to sign up. Cancellation takes effect at the end of the current paid period; we do not pro-rate.

California Civil Code §17602 / New York GBL §527-a / Vermont 9 V.S.A. §2454a. These disclosures and the easy-cancel mechanism are provided in compliance with California, New York, Vermont, and other US state automatic-renewal laws. Where state law requires a separate, affirmative consent to the auto-renewal terms (e.g. Vermont), you provide that consent by ticking the dedicated checkbox at checkout.

Failed payments. If a payment fails, we may retry the charge, suspend the Service, and ultimately terminate the account if the issue is not resolved within a reasonable period.

6. Refunds and the 14-day right of withdrawal (EEA / UK)

EEA / UK consumers. If you are a consumer resident in the European Economic Area, the United Kingdom, or Switzerland, you have a statutory right under the EU Consumer Rights Directive 2011/83/EU and the UK Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 to withdraw from this contract within 14 calendar days of its conclusion without giving any reason. To exercise the right, send a clear statement (email is sufficient) to support@vpnmanager.app before the 14-day period expires.

Immediate-performance waiver. Because the Service is a digital service that we begin providing immediately on activation, if you expressly request immediate performance and acknowledge that you lose your withdrawal right once performance has begun, you waive that right to the extent the Service has been fully performed before the 14 days expire. You give that consent by ticking the dedicated "Start immediately and waive my 14-day withdrawal right" checkbox at checkout. If we have not obtained that explicit, unticked consent, the withdrawal right survives in full.

Refunds outside the cooling-off window. Beyond the statutory rights above, paid plans are non-refundable except where required by law or where we, in our sole discretion, offer a goodwill refund. Refunds are made to the original payment method within 14 days.

7. Stripe and payment processing

Card and bank-transfer payments are processed by Stripe, Inc. ("Stripe"). By providing payment information you agree to Stripe's terms and privacy policy (available at stripe.com/legal) and authorise Stripe to charge your payment method for the amounts due. We do not store full card numbers; payment-card data is tokenised by Stripe. We retain only Stripe's payment reference, the amount, the currency, and the date for accounting and dispute purposes (see Privacy Policy §3). Where Stripe is not available we may offer manual / test-card / free fallbacks at our discretion.

8. License grant and scope of use

Subject to your continued compliance with these Terms, we grant you a limited, personal, non-exclusive, non-transferable, non-sublicensable, revocable licence to (a) install and run the desktop application on devices you own or control, (b) operate the licence server and connect to our update feed, and (c) use the storefront / admin / API features included in your Plan, in each case solely for your internal business of hosting and selling your own VPN. You may not: reverse-engineer (except where mandatory law permits), decompile, derive source code, tamper with, forge, or bypass licence tokens, trial limits, data-quota limits, the consent mechanism, or any digital-rights-management measures; resell, sublicense, lease, or redistribute the VPN Manager software itself as if it were your own product (you may, of course, sell VPN access that you host using it); use the Service to build a directly competing product; or use the Service in violation of any applicable law.

9. Acceptable Use Policy

You agree that you will not, and you will require your End Users not to:

You agree to maintain and publish an Acceptable Use Policy of your own that binds your End Users to at least these standards, and to take prompt action on credible abuse reports concerning your service.

10. You are the Operator — your obligations to your own customers

Because you host the VPN and contract with your own End Users, you are the data controller for any Personal Data of your End Users, and you are the merchant of record for any sales you make to them. You are solely responsible for: (a) your own customer-facing terms and privacy policy; (b) your own lawful basis to process your End Users' data; (c) any local consumer-protection, tax, VAT/GST, withholding, anti-money-laundering, and licensing law that applies to your service; (d) handling subject-access, deletion, and other rights requests from your End Users; (e) responding to law-enforcement requests directed at your service; and (f) any logging policy you choose to operate or not to operate on your VPN servers. We process Personal Data about your End Users only as needed to provide the Service to you (for example, issuing per-customer licence tokens) and only on your documented instructions; that processor relationship is governed by our data-processing terms, available on request at support@vpnmanager.app.

11. Country and export-control restrictions

You may not use, install, sell, or operate the Service in or to any Embargoed Country or to any individual or entity on a US, EU, UK, or UN sanctions, denied-parties, or terrorist-financing list. You acknowledge that the use, sale, or operation of VPN software is restricted, regulated, or unlawful in a number of countries, including without limitation Belarus, China, Iran, North Korea, Oman, Russia, Turkey, Turkmenistan, and the United Arab Emirates, and that the list above is non-exhaustive and changes over time. You are solely responsible for assessing local law before deploying the Service to a given jurisdiction. We make no representation that the Service is appropriate or available for use in any particular location.

The Service incorporates standard cryptography and is generally classifiable as mass-market under US Export Administration Regulations (ECCN 5D992.c) and EU Reg. 2021/821. You will comply with all applicable US, EU, and UK export-control laws, including the EAR and OFAC sanctions programs.

12. Data we collect; data you control

A full description of what we collect, why, and for how long is in the Privacy Policy. In summary, we collect (a) account information (email, salted password hash, account timestamps), (b) licence and plan data, (c) fingerprinted error / crash reports, (d) product analytics, (e) device / network signals used for anti-abuse, (f) payment references from Stripe, and (g) consent records (Terms version, IP, timestamp). We do not collect, inspect, route, or store the contents of any traffic that passes through your VPN tunnels.

13. Your data-protection rights

Depending on where you live, you may have rights to access, rectify, erase, restrict, port, or object to the processing of your Personal Data, and to withdraw consent at any time (without affecting prior processing). California, Colorado, Connecticut, Virginia, Utah, Texas, and other US-state residents have additional rights, including the right to opt out of the sale or sharing of Personal Data and of certain profiling. We do not sell or share Personal Data for cross-context behavioural advertising. To exercise any right, email support@vpnmanager.app with the words "Privacy Request" in the subject line. We will respond within the timeframes required by applicable law (generally 30 days under GDPR; 45 days under CCPA, extendable once). We honour the Global Privacy Control (GPC) signal as a valid opt-out request.

14. Cookies, analytics, and tracking

The desktop application and website use a small number of cookies, local-storage entries, and product-analytics events to keep you signed in, remember preferences, count installations, and measure feature usage. Analytics are on by default. You may turn them off in the application settings; doing so does not affect your ability to use the paid features.

15. International data transfers

Our licence server and website are currently hosted in the United States at the IP address shown in the application. If you are in the EEA, the UK, or Switzerland, your Personal Data will be transferred outside your country. Where required, we make those transfers under the 2021 Standard Contractual Clauses (EU Commission Implementing Decision 2021/914) and the UK International Data Transfer Agreement (or the UK Addendum to the EU SCCs), together with any supplementary technical and organisational measures we determine are appropriate. A copy of the executed clauses is available on request to support@vpnmanager.app.

16. Security and breach notification

We protect data with industry-standard measures, including password hashing (salted; never plaintext storage), encrypted transport (HTTPS / TLS), access controls, brute-force throttling, and periodic backups. No system is perfectly secure, but we work to keep your data safe. If we become aware of a Personal Data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, and we will notify affected users without undue delay where the breach is likely to result in a high risk.

17. Intellectual property

The Service, including its software, source code, designs, documentation, branding, trademarks, and all related content, is owned by us or our licensors and is protected by copyright, trademark, and other intellectual-property laws. Nothing in these Terms grants you any right in our trademarks or brand. Feedback you provide is non-confidential and you grant us a perpetual, worldwide, royalty-free licence to use it.

18. Third-party and open-source software

The Service includes open-source components, including Xray-core (MPL-2.0). Those components remain governed by their own licences, which are included with the distribution. The presence of an open-source component does not relicense the rest of the Service.

19. Suspension and termination

By us. We may suspend, restrict, or terminate your account immediately and without prior notice if (a) you breach these Terms, (b) you breach the AUP, (c) you misuse trials or attempt to defeat anti-abuse controls, (d) we are required to do so by law or a competent authority, (e) you become subject to sanctions, or (f) we discontinue the Service. We will refund any unused, pre-paid amounts for the current billing period unless the termination was for breach.

By you. You may stop using the Service and delete your account at any time through the account portal or by emailing support@vpnmanager.app. Deletion is subject to records we are required to keep by law or for tax / accounting / dispute purposes (see Privacy Policy §11).

Survival. Sections 7 (Stripe), 12–15 (data), 17 (IP), 21–25 (disclaimers, liability, indemnification, dispute resolution), and any other provision that by its nature should survive, survive termination.

20. Changes to these Terms

We may update these Terms from time to time. Material changes will take effect 30 days after we post the new version on the website and email a notice to the address on your account; non-material changes (typos, structural edits, contact updates) may take effect immediately. Your continued use of the Service after the effective date means you accept the updated Terms. For material changes, you may also be asked to re-accept at next sign-in. If you do not agree, you may cancel under §19 before the effective date, and any pre-paid unused balance for the current period will be refunded.

21. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, OR UNINTERRUPTED OPERATION, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW. WE DO NOT WARRANT THAT THE SERVICE WILL BE ERROR-FREE, SECURE, OR THAT IT WILL MEET ANY PARTICULAR PERFORMANCE OR REVENUE GOAL. The Service is not designed for use in high-risk environments where failure could lead to death, personal injury, or environmental damage. Nothing in this section excludes statutory consumer rights that cannot be excluded by contract.

22. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL WE OR OUR AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE FOR: (a) ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES; (b) LOSS OF PROFITS, REVENUE, GOODWILL, BUSINESS OPPORTUNITY, OR ANTICIPATED SAVINGS; (c) LOSS, CORRUPTION, OR INACCURACY OF DATA; OR (d) THIRD-PARTY CLAIMS AGAINST YOU; IN EACH CASE WHETHER OR NOT WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, AND REGARDLESS OF THE THEORY OF LIABILITY.

Aggregate cap. OUR TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (i) THE AMOUNTS YOU PAID US IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM, AND (ii) ONE HUNDRED US DOLLARS (US$100).

Carve-outs. The cap above does not apply to (a) our fraud, wilful misconduct, or gross negligence; (b) liability for death or personal injury caused by our negligence; (c) any liability that cannot, by applicable law, be excluded or capped; or (d) your unpaid fees.

EEA / UK consumer savings clause. If you are a consumer in the EEA, the UK, or Switzerland, nothing in these Terms limits or excludes any liability or right that cannot be limited or excluded under your local consumer-protection law. To the extent any provision of these Terms is more restrictive than that law allows, it is read down to the maximum permitted by that law and the rest stays in force.

23. Indemnification

You agree to defend, indemnify, and hold harmless us, our affiliates, and our respective officers, directors, employees, and agents from and against any third-party claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Service; (b) your breach of these Terms or the AUP; (c) the operation of your own VPN service, including any contract with your End Users, your billing, your hosting choices, your logging policy, your acts or omissions, and any claim brought by an End User or by a regulator concerning your service; (d) your violation of any law; or (e) your infringement of any third-party right. This indemnity is non-mutual to the extent permitted by law; consumers in jurisdictions that prohibit non-mutual indemnification clauses are subject only to the mandatory rules of their local law.

24. Copyright complaints (DMCA / EU notice-and-action)

If you believe content distributed via the Service infringes your copyright, send a notice to our designated agent that contains: (a) a physical or electronic signature of the rights-holder or authorised agent; (b) identification of the copyrighted work; (c) identification of the allegedly infringing material with enough detail to locate it; (d) your contact details; (e) a good-faith statement that the use is not authorised; (f) a statement, under penalty of perjury, that the information is accurate and you are authorised to act. Our designated agent:

> DMCA Agent — VPN Manager
> [Address on file]
> Email: support@vpnmanager.app (subject line: "DMCA Notice")

Counter-notices may be sent to the same address. We comply with EU Directive 2000/31/EC and the relevant national notice-and-action procedures for non-US complainants; the same agent receives EU notice-and-action requests. We maintain a policy of terminating, in appropriate circumstances, the accounts of repeat infringers.

25. Dispute resolution; class-action waiver; opt-out

Step 1 — informal resolution. Before starting any formal proceeding, send a written notice describing the dispute to support@vpnmanager.app. We agree to negotiate in good faith for 30 days.

Step 2 — mediation (optional). If informal resolution fails, either party may propose non-binding mediation under the rules of the JAMS International Mediation Rules (or, for EU/UK consumers, the rules of the consumer's local mediation body).

Step 3 — binding arbitration (US and other non-EEA/UK parties). Any remaining dispute will be resolved by binding individual arbitration administered by JAMS under its Streamlined Arbitration Rules (claims under US$250,000) or its Comprehensive Arbitration Rules (claims at or above that amount), seated in the state and federal courts located in New Castle County, Delaware, conducted in English. Judgment on the award may be entered in any court of competent jurisdiction.

Class-action waiver. To the maximum extent permitted by law, you and we agree to bring claims only in our individual capacities and not as a plaintiff or class member in any purported class, collective, or representative action, and the arbitrator may not consolidate more than one person's claims or preside over any form of representative proceeding. If the class-waiver is found unenforceable in a particular case, the dispute will proceed in court (not arbitration).

Opt-out (US). You may opt out of the arbitration clause and class waiver by sending written notice to support@vpnmanager.app within 30 days of first accepting these Terms; the notice must state your name, account email, and that you opt out.

EU / UK consumers carve-out. If you are a consumer resident in the EEA, the UK, or Switzerland, §25 Steps 3 and the class-waiver do not apply to you. You retain the right to bring proceedings in the courts of the country in which you are domiciled, in accordance with Reg. (EU) 1215/2012 (Brussels I bis) or your local equivalent, and the substantive consumer-protection law of that country continues to apply.

EU Online Dispute Resolution. EU consumers may also use the European Commission's online dispute-resolution platform at https://ec.europa.eu/consumers/odr, citing our email support@vpnmanager.app.

26. Governing law and venue

These Terms are governed by the laws of the State of Delaware, USA (suggested defaults: the State of Delaware, USA, excluding its conflict-of-laws rules, if the Operator is based outside the EEA/UK; or England and Wales if based in the UK). The exclusive venue for any non-arbitrable dispute is the state or federal courts located in the state and federal courts located in New Castle County, Delaware, except where exclusive jurisdiction is mandated by law (e.g. consumer's home jurisdiction in the EEA/UK). The UN Convention on Contracts for the International Sale of Goods does not apply.

> Why these defaults. Delaware is widely accepted for SaaS contracts because of its mature commercial-law bench and minimal home-court bias. England and Wales is the natural default for UK-based operators; both jurisdictions enforce arbitration awards under the New York Convention.

27. Force majeure

Neither party will be liable for delay or failure caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, government action, sanctions, embargoes, epidemic, pandemic, fire, flood, earthquake, labour dispute, internet or hosting-provider outage, denial-of-service attack, or failure of an upstream telecommunications or cloud provider. The affected party will use reasonable efforts to mitigate and to resume performance as soon as practicable. Force majeure does not excuse payment obligations.

28. Assignment

You may not assign or transfer these Terms or any rights under them without our prior written consent, and any attempt to do so is void. We may assign these Terms in connection with a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, on notice to you.

29. Severability and entire agreement

If any provision of these Terms is held unenforceable, the rest stay in force and the unenforceable provision is reformed to the minimum extent necessary to make it enforceable. These Terms, together with the Privacy Policy, our checkout disclosures, and any order form you sign with us, are the entire agreement between you and us on this subject and supersede any prior or contemporaneous communications.

30. Notices and contact

We may send notices to you by email at the address on file, by an in-app banner, or by posting on the website. You must send notices to us by email at support@vpnmanager.app and, for legal-process notices, also by post to VPN Manager, [Address on file].

31. Language and headings

These Terms are made in English. Translations are provided for convenience; if there is any conflict, the English text controls (except where applicable law requires otherwise). Headings are for convenience and do not affect interpretation. Words like "including" are not limiting.

32. Change history

| Version | Date | Summary |
| --- | --- | --- |
| 1.0 | 2026-04-01 | Initial published Terms (preserved as the inline termsPage in website/src/views.js). |
| 2.0 | 2026-05-27 | Restructured for multi-jurisdiction coverage; added EU/UK 14-day cooling-off, US state auto-renewal disclosures, AUP, country-restriction list, OFAC / export-control, SCCs / IDTA, 72-hour breach notification, DMCA agent, tiered dispute resolution + class waiver + 30-day opt-out + EU/UK carve-out, force majeure, definitions, change history. |


If you have any questions about these Terms, please email support@vpnmanager.app.