Terms of Service

1. Introduction

These Terms of Service ("Terms") govern your access to and use of atreoLINK, a service operated by Atreo Labs Ltd. ("we", "us"). By creating an account or using atreoLINK, you agree to be bound by these Terms. If you do not agree, do not use the service.

2. Service Description

atreoLINK provides secure remote access to home servers for you, your family and friends, and small groups you invite. The service includes:

• Custom subdomain provisioning (yourname.atreo.link)
• Custom domain support on eligible plans (currently Pro)
• Automatic TLS certificates issued and renewed on your server
• Encrypted remote access tunneling via WireGuard
• Automatic encrypted relay fallback (throttled) to keep your server reachable when it is behind carrier-grade NAT (CGNAT)
• Mobile and TV apps for iOS, Android, Apple TV, and Android TV with the WireGuard tunnel built in (push notifications are not available on TV platforms)
• End-to-end encrypted push notifications from atreoAGENT on your server to invited users
• Device pairing and management
• Multi-user account support for sharing with family, friends, and small groups

3. Payments and Billing

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries related to billing and handles returns. When you make a purchase, the purchase is made from Paddle and is also subject to Paddle's Checkout Buyer Terms.

All applicable taxes, including VAT and sales tax, are calculated and collected by Paddle at the point of sale. You do not need to calculate tax separately.

3.1 Subscriptions

Paid plans are billed on a recurring basis (monthly or annually, depending on your selection). Subscriptions automatically renew at the end of each billing period unless cancelled before the renewal date.

When you subscribe to a paid plan, your payment method is charged for the first billing period immediately through Paddle. You can cancel at any time — from your atreoLINK dashboard or the Paddle customer portal — with cancellation taking effect at the end of the current billing period, after which your account moves to the free plan. Your statutory right to cancel a new purchase (see our Refund Policy) is unaffected.

3.2 Free Plan

We offer a free plan that lets you connect one of your own servers and invite one other user, in addition to accessing any servers you have been invited to. The free plan is subject to the same Terms and may be modified or discontinued at our discretion with 30 days' notice.

Relay fair use on the free plan. The CGNAT relay is a fallback that carries your encrypted traffic when your server has no usable public inbound path. On the free plan, relay usage is throttled more heavily than on paid plans and is subject to fair use: where relay usage is excessive, sustained, or negatively affects other users or our infrastructure, we may rate-limit it further, temporarily restrict it, or discontinue relay access for the account. The relay is not intended as a general-purpose bandwidth service. See our Acceptable Use Policy.

3.3 Price Changes

We may change pricing at any time. For existing paid subscribers, price changes will take effect at the start of the next billing period following at least 30 days' notice.

4. Account Registration and Security

You must provide accurate information when creating an account. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account.

All accounts require two-factor authentication (TOTP). You are responsible for keeping your authentication credentials and recovery codes secure.

5. Acceptable Use

Your use of atreoLINK is subject to our Acceptable Use Policy, which is incorporated into these Terms by reference.

6. Data and Encryption

6.1 End-to-End Encryption

atreoLINK is designed so that we cannot see the contents of the traffic flowing between your devices and your server. Traffic through the WireGuard tunnel is encrypted end-to-end between your device and your server, and we cannot read it. It flows directly between them whenever a direct path is available. Where your server has no usable public inbound path (for example, behind carrier-grade NAT), the encrypted traffic may instead transit a relay operated by atreoLABS; the relay forwards it blind and cannot read it, although it processes connection metadata in transit (such as IP addresses, timing, and traffic volume) as described in our Privacy Policy. Traffic on the relay fallback path is throttled, and its performance is not guaranteed. We coordinate the connection (pairing, key exchange, and endpoint discovery), and on the relay fallback path we carry the encrypted traffic without being able to read it. Push notification payloads are encrypted end-to-end between atreoAGENT (running on your server) and the recipient device. We deliver them, but we cannot read them. Encrypted notification payloads and the routing metadata required to deliver them (for example, sender and recipient device identifiers and timestamps) are retained on our infrastructure as a bounded per-recipient archive: we keep at most the 100 most recent notifications per recipient, and the atreoLINK app's notification history reflects this window. When a new notification arrives at the cap, the oldest is permanently deleted in the same transaction, whether or not it was delivered, and it is no longer visible in the app; notifications that were not delivered before being rotated out by newer arrivals are lost.

We do not hold the keys required to decrypt your tunnel traffic or your push notifications. If you lose the keys stored in your mobile app, you will need to re-pair.

6.2 Metadata

While we cannot see the contents of your traffic, we do process connection metadata required to run the service, for example, which accounts are online and when devices pair. We also see the list of apps you have configured on your server (their names, the addresses you use to reach them inside your home network, and which members you've granted access to). This is required to route member access and replay configuration to your agent. When your server falls back to the CGNAT relay, we additionally process connection metadata in transit (source and destination IP addresses, timing, and traffic volume); the relay holds this in memory only and keeps no persistent store of it. See our Privacy Policy for detail.

7. Account Deactivation

7.1 Voluntary Cancellation

You may cancel your account at any time from the atreoLINK dashboard or by contacting support. Upon cancellation:

• Your subscription will remain active until the end of the current billing period.
• At the end of the billing period, your paired servers and invited users are suspended, not deleted. Coordination services for suspended servers — including relay fallback, push notifications, and setting up new devices — stop working. Your data (servers, members, apps, subdomains) is retained; we reserve the right to delete data after a prolonged period of inactivity, on notice.
• You may reactivate one server on the free plan once your account is within free-plan limits (one server, one invited user) by unpairing any additional servers and removing extra members. Resubscribing to a paid plan restores access to your estate, provided it is within the limits of the plan you choose; if you resubscribe to a plan smaller than your estate, reactivate your servers once you are within the new plan's limits.
• Account metadata may be retained for operational and legal purposes after closure. You may permanently delete your account and its data at any time from the account page in Settings on the atreoLINK dashboard (any active subscription must be cancelled first, and paired servers unpaired).

7.2 Non-Payment

If a subscription payment fails, we will attempt to collect payment and notify you. If payment is not resolved within 30 days of the due date:

• Your account will be downgraded to the free plan. Servers and invited users beyond free-plan limits are suspended, not deleted, and can be reactivated once your account is within free-plan limits or you resubscribe.
• Custom domains and other paid-only features are deactivated.

7.3 Termination by Us

We may suspend or terminate your account immediately if you violate these Terms or our Acceptable Use Policy. For other reasons, we will provide 30 days' written notice before termination.

8. Intellectual Property

atreoLINK and its original content, features, and functionality are owned by Atreo Labs Ltd. You retain all rights to the data you transmit through the service.

The atreoAGENT software that runs on your server is open source. Your use of atreoAGENT is governed by the Apache License 2.0 (see the licence file distributed with the software), and nothing in these Terms restricts the rights that licence grants you. Third-party components included in our software are licensed under their respective licences.

9. Disclaimer of Warranties

atreoLINK is provided on an "AS IS" and "AS AVAILABLE" basis. We make no warranties, express or implied, regarding the service's reliability, availability, or fitness for a particular purpose. We do not warrant that the service will be uninterrupted or error-free.

atreoLINK is operated on a best-effort basis. There is no service-level agreement (SLA) or uptime guarantee. Outages, maintenance windows, and extended downtime may occur, and no compensation or service credits are provided for unavailability.

10. Limitation of Liability

To the maximum extent permitted by law, Atreo Labs Ltd. shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of data, loss of profits, or business interruption. Our total aggregate liability shall not exceed the greater of $100 or the amounts paid by you to us in the 3 months preceding the claim.

Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under applicable law. If you are a consumer, nothing in these Terms affects your statutory rights.

11. Indemnification

You agree to indemnify, defend, and hold harmless Atreo Labs Ltd., its directors, employees, and contractors from any claims, damages, liabilities, losses, costs, or expenses (including reasonable legal fees) arising out of or in connection with: (a) your use of the service; (b) any content you transmit, host, or expose through the service; (c) the actions of any family member or other person you have invited to your account; or (d) your breach of these Terms or our Acceptable Use Policy.

12. Eligibility and Permitted Use

You must be at least 16 years old to create an atreoLINK account. If you are under 18, you confirm that you have permission from a parent or legal guardian.

A parent or legal guardian who holds an account may invite their own minor children to use the service as members of their household — for example to reach apps on the family server or receive push notifications. By inviting a child you confirm that you are their parent or legal guardian, you consent to the processing of their information described in our Privacy Policy on their behalf, and you accept responsibility for their use of the service. The account holder remains responsible for all activity under their account, including that of any family member they invite.

atreoLINK is licensed for use within your household or a small group of people you know — your family and friends, or the internal team of a small business or organisation — to access servers you control. Reselling the service, incorporating it into a service you provide to your own customers, or otherwise providing access to the general public is not permitted under these Terms. If you want to build on atreoLINK commercially, contact us for a separate agreement.

13. Export Control and Sanctions

The service is not available to users located in, or who are nationals of, any country or territory subject to comprehensive sanctions imposed by the United Kingdom, the European Union, or the United States Office of Foreign Assets Control (OFAC). You are responsible for complying with all applicable export control, sanctions, and import laws.

You agree not to use the service to circumvent geographic restrictions imposed by third parties, evade lawful surveillance or law enforcement, or commit any criminal offence.

14. Backup and Third-Party Dependencies

You are solely responsible for backing up data on your own server. atreoLINK does not back up data stored on or transmitted through your server, and we are not liable for any data loss.

The service depends on third-party providers, including (without limitation) DigitalOcean for hosting, Cloudflare for edge delivery, DNS, and relay control-channel fronting, OVH (OVHcloud) for relay hosting when your server is behind carrier-grade NAT, Postmark for transactional email, Paddle for billing, Apple Push Notification service and Firebase Cloud Messaging (via Expo) for push delivery, and your own internet service. We are not responsible for outages, errors, or behaviour of those third-party providers.

15. Force Majeure

We will not be liable for any failure or delay in performing our obligations under these Terms where such failure or delay results from any cause beyond our reasonable control, including but not limited to acts of God, war, terrorism, civil unrest, government action, network or infrastructure failures, third-party service outages, denial-of-service attacks, or pandemic.

16. Governing Law and Jurisdiction

These Terms are governed by the laws of England and Wales. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

If you are a consumer, this section does not deprive you of the protection of any mandatory consumer-protection provisions of the law of the country in which you reside.

17. Assignment

You may not assign or transfer your account or any rights under these Terms without our prior written consent. We may assign or transfer our rights and obligations under these Terms to an affiliate or successor in connection with a merger, acquisition, restructuring, or sale of assets.

18. Severability

If any provision of these Terms is held to be invalid or unenforceable by a court of competent jurisdiction, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect.

19. No Waiver

Our failure to enforce any right or provision of these Terms shall not be deemed a waiver of that right or provision. Any waiver must be in writing and signed by us.

20. Survival

The following sections survive termination of these Terms: 6 (Data and Encryption), 8 (Intellectual Property), 9 (Disclaimer of Warranties), 10 (Limitation of Liability), 11 (Indemnification), 13 (Export Control and Sanctions), 16 (Governing Law and Jurisdiction), 18 (Severability), and 20 (Survival).

21. Entire Agreement

These Terms, together with our Acceptable Use Policy, Privacy Policy, and Refund Policy, constitute the entire agreement between you and Atreo Labs Ltd. regarding the service, and supersede all prior agreements and understandings.

22. Changes to These Terms

We may update these Terms from time to time. We will notify you of material changes by email or through the service at least 30 days before they take effect. Continued use of the service after changes take effect constitutes acceptance of the updated Terms.

23. Contact

If you have questions about these Terms, contact us at support@atreolabs.com.