Sign up

Legal Terms

By signing in to Innstance, you agree to the terms below. They cover your use of the service, your account, billing, what we do with your information, what you may host, how to report a problem, and what we do when the rules are broken. We've tried to keep them plain.

1. The service

Innstance is a hosting platform. You install the Innstance CLI (the innstance command; ifhost still works), choose a runtime, and we run your application in lightweight, region-pinned virtual machines in our infrastructure. We may change our providers, regions, instance types, or underlying technology at any time without notice.

2. Your account

You must be at least 18, or the age of legal majority where you live, to use Innstance. You sign in to access your account. You are responsible for everything that happens under your account, and for keeping your credentials and API tokens safe.

3. Plans and payment

We offer Free, Hobby, Pro, and Team plans with the resource pools published at /pricing. Paid plans renew monthly until you cancel. We accept card and USDC on Base. By subscribing, you authorize us to charge your selected payment method on a recurring basis. Performance add-ons are separate monthly subscriptions on top of your plan: each renews until you cancel it, and cancelling your plan does not cancel them. Extra traffic is bought in advance at the rates listed on the pricing page. Visitor traffic past your monthly allowance and the extra traffic you bought is never billed. Two things are not written off: backups and exports you download past them, and extra traffic you used from a purchase that was later refunded. Both are taken from your next traffic purchase. No refunds for partial periods except where required by law. Crypto payments are irreversible.

One-time payments convert into days of plan time at the monthly rate of the plan they name, and they extend any time you already have. Changing plans with a one-time balance converts your remaining time into the new plan at equal dollar value. On a recurring subscription, an upgrade applies immediately and charges only the prorated difference for the rest of the paid period, and a downgrade takes effect when the paid period ends. Activating a paid plan from the free plan requires paying for at least one full month of it. A crypto transfer smaller than that is held on your account until your total reaches a full month, at which point the whole balance converts into plan time. Held amounts never expire and are not refunded.

If a renewal fails or a one-time plan runs out, accounts with at least one full month of past payments keep running for 7 more days. Those days are chargeable service, and your next payment covers them before it buys new time.

Traffic allowances are monthly and measure traffic that reaches our servers. You can buy extra traffic at the published rates. Extra traffic never expires. When both your monthly allowance and any extra traffic are used up, your apps and sites stop serving until more traffic becomes available.

4. Your content

You retain all rights to the code, data, and other content you deploy ("Your Content"). You grant us a limited license to host, store, copy, execute, transmit, and display Your Content, and to analyze it with the automated checks described in section 5, solely to operate, secure, and provide the service, to enforce these terms, and to keep and disclose it where sections 5 and 11 say we may. You are solely responsible for Your Content and for having the rights needed to deploy it.

You promise that Your Content, and the way you use the service, is not deceptive, defamatory, obscene, pornographic, or unlawful and follows section 6; that Your Content contains no viruses, malware, or other malicious code and does not infringe anyone's copyright, trademark, privacy, or other rights; and that you have every right, license, and permission needed to publish it, including the consent of any identifiable person it shows.

Your Content includes what your automation and AI agents produce (section 8), and anything other people post through what you host. If what you host lets others publish content, you are responsible for that content too, including handling complaints about it and taking down what breaks these terms.

5. What we collect, check and share

To run the service we collect: your identity provider's account identifier, email address, and display name when you sign in. Card details never touch our systems and are handled by our payment provider. For crypto payments we record wallet addresses, transaction identifiers, and amounts, which are also public and permanent on the blockchain and cannot be deleted or changed by us.

Because we own and operate the machines that run Your Content, we have technical access to it: your code, files, application data, environment settings, and application secrets, including credentials for third-party AI providers. Secrets are encrypted at rest and are never returned by our APIs. We also keep operational data: build logs (kept for minutes), runtime logs, deployment records, resource and traffic measurements, and your application settings. Visitors to your applications have their traffic pass through our infrastructure; we process it on your behalf to serve and measure it. We do not sell personal information.

Automated checks

To keep the service safe, we check what is published on it. Our checks can look at: the names chosen for sites, apps, and agents, when they are created; the files uploaded to sites, for pages that collect passwords, wallet recovery phrases, payment card details, or wallet signatures, and for redirects or code that sends visitors' data somewhere else; the types of file uploaded on the free plan; images uploaded to sites, including images embedded in their pages, styles, and scripts, which we compare with digital fingerprints of known child sexual abuse material when they are in a format that comparison can read; the public addresses of what you host, which we compare with lists of known dangerous sites; and the text of pages, to classify what they are for. We may repeat any check at any time, including in daily and weekly rescans and whenever someone reports a problem. A check can hold or quarantine content until a person reviews it (section 11).

These checks may use the following providers. Each receives only what its check needs:

We keep the results of these checks with our moderation records. The checks do not change your responsibility for Your Content, and they will not catch everything: we are not obliged to review content before or after it is published.

When we share information

We disclose information about you or Your Content only:

Reports and the people who send them

When someone uses our report form, we keep what they send: the address reported, the category, the details given, and any name and email address they provide. We keep the network (IP) address a report came from only in a scrambled form (a salted hash), which we use to spot many reports from one source; the counters that limit how many reports one address, and one network, can send hold the address or network itself and expire within an hour. We clear the reporter's name, email address, copyright signature, and scrambled network address 365 days after we close the report, together with the name, postal address, telephone number, and signature in a counter-notice or in a statement from the person shown in intimate images. We don't tell the owner of the content who reported it, except for copyright notices and counter-notices, which we pass on in full because each side needs to be able to contact the other (section 10).

Records we keep for safety

We keep a record of every moderation decision: what we did, when, why, and what prompted it. When we hold, quarantine, or remove content, we keep it out of public view rather than deleting it, so it can serve as evidence or be restored. When we ban an account, we keep the identifiers needed to stop it coming back, such as its sign-in account identifier and email address. We keep these records for as long as we need them to handle appeals, repeat abuse, legal claims, and our legal obligations. Material we report to NCMEC is kept, with restricted access, for at least one year, the period US law sets for these reports.

6. Acceptable use

These rules apply to everything you host or run on Innstance, at any address we serve, including custom domains: your sites, apps, agents, and files, and anything they send. They cover content made by your automation or AI agents and content that other people post through what you host. You may not use Innstance to host, promote, or facilitate:

  1. gambling, betting, lotteries, sweepstakes casinos, or real-money games, unless we have agreed to it in writing;
  2. pornography, sexually explicit material, or commercial sexual services;
  3. child sexual abuse material, or any content that sexualizes minors, which we report to the authorities;
  4. intimate images of a person shared without their consent, or deceptive synthetic images, audio, or video of real people;
  5. phishing, including fake sign-in, wallet, or payment pages; collecting passwords, wallet recovery (seed) phrases, private keys, or payment details by deception; and wallet drainers;
  6. impersonation of any person, company, or organization, or of Innstance, including through the name of a site, app, or agent;
  7. fraud and scams, including pyramid or Ponzi schemes and fake investment, airdrop, or giveaway offers;
  8. malware, exploits, cryptominers, botnets, or attack infrastructure;
  9. terrorist or violent-extremist content, threats of violence, or content that incites violence or hatred against people because of their race, ethnicity, national origin, religion, sex, gender identity, sexual orientation, disability, or similar characteristics;
  10. open proxies, VPN or proxy services offered to others, open redirects, and link shorteners;
  11. pirated, counterfeit, or other infringing material, including material that infringes copyright or trademarks;
  12. spam, and pages made to manipulate search results;
  13. other people's private information, such as identity documents, financial details, health information, or home addresses, published without their permission; or
  14. anything that is unlawful where you are or where your visitors are.

You also may not: use Innstance to harm other people or systems; send spam; launch denial-of-service attacks; scan, probe, or attack our infrastructure or other customers; mine cryptocurrency on any plan; use more than your fair share of shared resources; get around our limits, our checks, or an enforcement action; or resell the service without our written agreement.

We may remove any content, rename or reclaim any name, and suspend or end any account that we determine, in our judgment, breaks these rules or exposes Innstance, its users, or its providers to legal or security risk. Section 11 explains how we enforce these rules.

7. Free plan rules and names

The free plan is for trying Innstance, and it has extra limits that make it unsuitable for abuse. On the free plan:

We hold a free site that breaks one of these rules until a person reviews it. On any plan, we treat executable files and installers as a sign of possible abuse and may hold a site that contains them for review.

Names

Names for sites, apps, and agents are given out first come, first served, but a name is not your property. You may not choose a name that impersonates a person, company, brand, or Innstance; that is a misspelling or look-alike of one; that suggests a sign-in, wallet, payment, or giveaway page for someone you don't represent; or that promotes gambling, adult content, or scams. We may refuse a name when you choose it or hold it for review, and we may rename, reclaim, or retire any name: for example, when it breaks these rules, when someone with a better claim to it asks us to, or when it has been removed for abuse. We never give out again a name that we removed for abuse.

8. Automation and AI agents

If you use a tool, script, or automation to deploy or act on your behalf, its actions are your actions. You are responsible for what it deploys, the resources it consumes, and the credentials it uses.

This includes AI agents and coding assistants, whether they run on your computer, somewhere else, or as an agent you host on Innstance. Anything that automation or an AI agent creates, publishes, or sends at your direction is Your Content: you are its author and publisher, and you are responsible for it as if you had made it yourself, so check what your automation publishes. Agents you host on Innstance run on the AI provider accounts and credentials you give them and act on the instructions they receive; we don't decide what they create. You are responsible for who can instruct your agents and for what they do in response.

9. Reporting a problem

Anyone can report content hosted on Innstance, with or without an account, using our report form at https://innstance.impossibuild.ai/abuse. Use it for any site, app, or agent we host, including those on custom domains.

What a good report contains

Never send us copies of child sexual abuse material or intimate images, and never link to copies of them: give only the address where you saw the material on Innstance. You can also report child sexual abuse material to NCMEC's CyberTipline at report.cybertip.org.

How quickly we respond

Reports of child sexual abuse material, intimate images shared without consent, phishing, and malware go to the front of the queue: we review them within 1 hour where possible, and always within 24 hours. We review all other reports within 72 hours. While we review a report, we may hold the content so that it is not served.

What happens next

When you send a report, the form shows you a reference number; quote it if you write to us about the same report again. We check the report against these terms and the law. If the content breaks them, we act as section 11 describes; if it doesn't, we close the report. If you gave us your email address, we may use it to ask you for more information.

If we act on your content

If we hold, quarantine, or remove something you host, or restrict your account, we tell you, normally in your dashboard (or, if your account is suspended, when you try to sign in), unless the law doesn't allow it or telling you would put someone at risk or help abuse continue. The notice says what we did and for how long, which rule or law it was based on, the facts we relied on, whether it came from a report or from our own checks, whether automated means were used to detect the content or to decide, and how to appeal. When the matter concerns the safety of children or intimate images shared without consent, the notice says only that the content is under review, or what we decided, and nothing about what started it or how it was found.

Appeals

If you think we got it wrong, you can appeal through the same form: open the appeal form, give the address concerned and your email address, and explain why. A person reviews every appeal. If we agree with you, we reverse the decision and restore what we took down. You can also use the appeal form to send a copyright counter-notice (section 10).

Requests from authorities

Law enforcement and other authorities can send requests and orders through the same form. Choose the closest category, or "Something else", and give in the details the authority you act for, the legal basis for the request, and an official email address for our reply. We review each request under the law that applies to it and may ask for more information or for formal legal process. Unless the law forbids it or telling them would put someone at risk, we may tell the customer concerned about a request.

We respond to notices of claimed copyright infringement under the US Digital Millennium Copyright Act (17 U.S.C. § 512). Send notices through the report form, choosing "Copyright". A notice must include:

  1. your physical or electronic signature (in the form, you type your full name);
  2. identification of the copyrighted work you say is infringed or, if the notice covers several works on one site, a representative list of them;
  3. identification of the material you say is infringing, and its address (URL) on Innstance, so we can find it;
  4. information we can use to contact you: your name and email address, and, if you wish, a postal address and telephone number;
  5. a statement that you have a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law; and
  6. a statement that the information in the notice is accurate and, under penalty of perjury, that you are authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.

Before you send a notice, consider whether the use is allowed, for example as fair use. Under US law, anyone who knowingly and materially misrepresents that material is infringing, or that it was removed by mistake, can be liable for damages (17 U.S.C. § 512(f)).

When we receive a valid notice, we promptly remove or disable access to the material and tell the owner of the content, with a copy of the notice. If a notice leaves something out, we may ask the sender to complete it. For trademarks, including counterfeit goods and look-alike brand names, choose "Trademark" in the form.

Counter-notices

If your material was removed because of a copyright notice and you believe that was a mistake or a misidentification, you can send a counter-notice through the appeal form. It must include:

  1. your physical or electronic signature;
  2. identification of the material that was removed and the address where it appeared before it was removed;
  3. a statement under penalty of perjury that you have a good faith belief that the material was removed or disabled as a result of mistake or misidentification of the material to be removed or disabled; and
  4. your name, address, and telephone number, and a statement that you consent to the jurisdiction of the federal district court for the judicial district in which your address is located or, if your address is outside the United States, for any judicial district in which we may be found, and that you will accept service of process from the person who sent the original notice or their agent.

When we receive a valid counter-notice, we send a copy to the person who sent the original notice and tell them that we will restore the material in 10 business days. We restore it no sooner than 10 and no later than 14 business days after we receive the counter-notice, unless the person who sent the notice first tells us that they have filed a court action to stop the claimed infringement.

Repeat infringers

We terminate, in appropriate circumstances, the accounts of people who repeatedly infringe copyright. We terminate an account that receives three valid copyright notices within twelve months. A notice does not count if it was withdrawn, or if the material was restored after a counter-notice and the sender did not start a court action. We may terminate an account sooner in egregious cases, such as a site made to distribute pirated or counterfeit material, or material put back up after we removed it.

11. Enforcement

When content or an account breaks these terms or the law, we choose a response that matches the harm, how clear the breach is, and the account's history. Depending on the case, we may:

For child sexual abuse material, phishing, malware, and other active attacks on people, we act immediately and without warning, and we may suspend the whole account at once. We report child sexual abuse material to NCMEC.

Before anything we took down for abuse is deleted, we keep a copy out of public view as evidence, and deleting that evidence is always a separate, deliberate step. Material we report to NCMEC is kept for at least one year, the period US law sets for these reports, and we may keep records for longer where the law requires or allows it.

If we terminate your account, you may not open a new account, or use someone else's, without our written permission, and you may not publish again on Innstance any content we removed. You can appeal any decision described in this section (section 9).

12. Suspension, non-payment, and deletion

Free accounts: your sites, apps, and agents stop running 24 hours after the account becomes (or starts) free. That window is granted once and does not restart. If you paid for less than one full month in total, your resources run for exactly the time you paid for and stop when it ends.

Accounts with at least one full month of past payments: your resources keep running for 7 days after a failed or lapsed payment, and those days are chargeable as described in section 3. After the stop, your data is kept for 30 days. Upgrading or paying at any point before deletion brings everything back. Hosted agents are an exception: a stopped agent is destroyed rather than retained, so we are not holding your provider credentials for a machine that no longer runs. A site, app, or agent that is held or quarantined (section 11) is never deleted or destroyed this way; deleting it is a separate, deliberate step.

Separately, we may suspend or terminate your account at any time if you breach these terms, if your use poses a security or operational risk, or if required by law, as section 11 describes. After termination, we may delete Your Content and account data after a reasonable grace period, except what we keep under sections 5 and 11 or must keep by law.

13. Disclaimer of warranties

The service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that it will be uninterrupted, error-free, or secure.

14. Limitation of liability

To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, revenue, or profits, arising from your use of the service.

15. Indemnification

You will defend and indemnify us against claims, damages, and expenses arising from Your Content, your use of the service in breach of these terms, or your violation of any law or third-party right.

16. Changes

We may update these terms. If a change is material, we will tell you before it takes effect, in your dashboard or by email. Changes we must make for legal or security reasons may take effect immediately. If you don't agree to a change, stop using the service before it takes effect. Continued use of the service after a change takes effect means you accept the new terms.

17. General

If any part of these terms is found unenforceable, the rest remains in effect. You may not assign these terms without our consent; we may assign them freely. These terms are the entire agreement between us regarding the service.

To contact us about these terms, including to send us a legal notice, use the report form. We send notices to you in your dashboard or to the email address on your account.