Refund and Cancellation Policy
Last updated: 21 October 2026
1. Scope
These terms apply to paid X-Road security server services offered through securityserver.io by CloudExp OÜ (Estonian registry code 16263842) to businesses and organisations. The service is intended for business or professional use and not for consumers.
2. Subscriptions and billing
Each security server is billed monthly in advance. The price and next billing date are displayed at checkout. Prices include no VAT, because CloudExp OÜ is not registered for VAT. Payments are processed through Stripe. Subscriptions renew automatically until cancelled. There is no standard free trial unless expressly stated in a specific offer.
3. Cancellation
You may cancel from the dashboard or request cancellation through an authorised contact at support@securityserver.io. Cancellation takes effect at the end of the current paid billing period. Service remains available until then and no new period will be charged. Where the dashboard displays a precise effective date, that date applies. Cancellation does not release amounts already due.
4. Refunds
We do not ordinarily refund unused time when you cancel during a paid billing period. We refund erroneous and duplicate charges and provide refunds where required by applicable law. If we materially fail to provide the service, remedies and any proportionate refund will be assessed under the agreement and applicable law; no automatic outage-based refund is promised. Approved refunds are generally sent through Stripe to the original payment method; settlement times depend on the payment providers and banks.
5. Failed payments
Stripe retries failed payments. If payment still fails and the subscription ends, the server is suspended. A server is also suspended when a cancelled subscription reaches the end of its paid period.
When a server is suspended, the running server and its disks are deleted at once. We keep the backups of that server for 30 days after suspension begins. After that we permanently delete the backups, including the off-site copy. We send one warning email about 7 days before this. The dashboard shows the exact date. Our daily job may run up to about one day after that date.
If you subscribe again within the 30 days, we set up a new server. We do not restore the old server or its data automatically.
6. Data at the end of service
Before a subscription ends, you must arrange to preserve any data or settings you require and request exports where available. We do not promise a post-termination download window or an export feature that is not expressly included in the service. The server, keys, disks and backups are deleted as described in section 5 and in accordance with the Standard Service Terms and Data Processing Agreement. Invoices and records retained under legal obligations are excluded.
You remain responsible for X-Road membership and security-server registration actions and for arranging revocation of relevant certificates; support may assist.
7. Price changes
We provide at least 30 days’ notice of an increase in recurring prices. You may cancel before the new price takes effect.
8. Contact
support@securityserver.io. See also the Terms of Service.