Allocus
How it works Pricing Docs Sign in

Terms of Service

Last updated 10 August 2026

Read this part if you read nothing else. Allocus is run by one person as a private individual, not a company. It is early-stage, there is no uptime guarantee, and your box is not backed up for you. Keep your own backups and don't put anything on it you cannot afford to lose.

Everything else below is the ordinary detail.

1. Who you are dealing with

Allocus is operated by Henning Holgersen, an individual developer based in Norway. There is no registered company behind it. Your contract is with that person directly, and support is answered by that person directly.

If a company is formed later, these Terms may be transferred to it. You'll be told if that happens, and nothing about your subscription will change without notice.

2. What the service is

You get one virtual machine — a "box" — in Paris, France, and a flat monthly price. You may deploy as many containerised applications to it as it will hold, reachable at <app>.<you>.allocus.dev over HTTPS. The price depends on the size of the box, not the number of apps.

Your box is a real machine with real limits. When you run out of memory or disk, apps stop working — the remedy is a larger plan, not a support ticket.

3. Your account

You sign in with GitHub, and you're responsible for what happens under your account. Keep your API key secret; anyone holding it can deploy to your box. If it leaks, revoke it from the dashboard and generate a new one.

You need to be at least 18.

You must keep a working email address on your account — it's the only way notices under these Terms can reach you, and the dashboard asks for one before it will do anything else. Keeping it current is your responsibility. Where a notice can't be delivered, posting it on the public service notices page counts as having given it.

4. Payment

  • Subscriptions are billed monthly in advance, in euros, through Stripe. Card details go to Stripe, never to Allocus.
  • Changing plan takes effect immediately and the difference is charged or credited at the time of the change.
  • You can cancel whenever you like. Your box keeps running until the end of the period you've already paid for, then it is deleted along with everything on it.
  • If a payment fails, you'll be told and given a chance to fix it before anything is suspended.
  • Prices can change with at least 30 days' notice, never mid-period.

Because Allocus is not yet a registered business, invoices are issued by an individual and do not carry VAT. If your accountant needs something specific, ask — it's easier to sort out early.

5. Refunds

If the service doesn't work for you, email within 14 days of your first payment and you get it back, no argument. Beyond that, partial months are not normally refunded — but if something on our side genuinely broke your service, say so and it will be dealt with fairly.

If you're a consumer in the EU or EEA, your statutory right of withdrawal applies on top of this and is not reduced by anything written here.

6. What you may not run

Nothing illegal where you are or where the servers are, and specifically none of the following:

  • Malware, phishing pages, or infrastructure for attacking other systems.
  • Sending bulk unsolicited email.
  • Cryptocurrency mining, or anything else whose purpose is to consume as much CPU as it can get — a fixed price only works if boxes are used like servers, not like a rented compute farm.
  • Reselling your box as shared hosting to third parties.
  • Material that sexually exploits children, incites violence, or that you have no right to distribute.

You keep all rights to your own code and content. Allocus claims no ownership over anything you deploy.

How this is enforced

Allocus does not monitor or review what you deploy. It acts on reports, which anyone can send to support@allocus.dev — the full procedure, the categories acted on immediately, and the route to challenge a decision are on the abuse and illegal content page, which forms part of these Terms.

In short: the response is the smallest one that ends the problem, ranging from a message asking you to fix something, through taking a single app offline, to suspending the account or closing it. Contested and non-urgent matters normally start with notice and a deadline. A short list of serious categories — child sexual abuse material, terrorist content, credible threats to life, malware and phishing, and attacks on third parties — is acted on immediately, and you're told afterwards rather than first.

Whenever something of yours is restricted you'll be given the facts it was based on, the rule or law relied on, and confirmation that a person decided it. You can challenge it within 30 days and a human will re-examine the case, answering within 10 working days; if the decision was wrong, everything is restored. Data belonging to a removed app is kept for 90 days so that restoration is actually possible.

These steps are how things are normally done, not a guarantee of process. Where a case is serious or doesn't fit the pattern, Henning Holgersen may act sooner or differently — but the explanation and the right to challenge always stand.

7. Availability, and the absence of a guarantee

There is no SLA. Allocus is maintained by one person on best effort. Boxes get restarted for maintenance, deploys occasionally fail, and outages will happen. Anything that must not go down should not depend solely on Allocus.

8. Backups are your responsibility

Tenant boxes are designed to be disposable — the value is meant to be in your git repository and your container images, both of which you can redeploy from. Volume snapshots are taken on a best-effort basis and are not a service you should rely on. There is no guaranteed restore, and there is no point-in-time recovery.

If your app holds data you would be upset to lose, arrange your own backups off the box.

9. Suspension and termination

An account can be suspended for non-payment, or immediately if something on the box is actively harming others — attacking third parties, serving malware, or the like. Where the situation allows for it, you'll be contacted first.

You can leave at any time. On termination the box and its contents are deleted, and that deletion is permanent. Export anything you want to keep beforehand.

One exception, in your favour: where an app was taken offline through the enforcement process in §6, its data is held for 90 days instead of being deleted immediately, so that a successful challenge can restore it — and so it still exists if an authority asks. While such a case is open, you also can't tear the box down yourself, because that would destroy the evidence the challenge would be decided on.

Allocus is an early-stage project and could be discontinued. If that happens you get at least 90 days' notice and a refund of any period paid for beyond the shutdown date.

10. Data processing

This section is the data processing agreement required by Article 28 of the GDPR. It applies whenever your apps handle other people's personal data. It takes effect automatically when you accept these Terms — you don't need to sign anything separately.

Roles

For personal data inside your apps, you are the controller and Allocus is the processor. You decide what is collected and why; Allocus only runs the machine it sits on. For your own account data, Allocus is the controller — see the Privacy Policy.

Scope

Subject matterHosting and running the applications you deploy
DurationAs long as your subscription is active
Nature and purposeStorage, execution and network delivery of your apps
Types of dataWhatever your applications process — determined entirely by you
Data subjectsWhoever uses your applications

Commitments

  • Instructions only. Your data is processed only to provide the service, and never for any independent purpose — no analysis, no profiling, no model training.
  • Location. Your box and its storage stay in the EU (Paris, France). Data is not moved outside the EU/EEA without telling you first.
  • Sub-processors. Two, both in the EU. Scaleway SAS (France) provides the compute, storage, network and DNS — this is where your apps and their data actually live. Microsoft Azure (France Central) holds off-site backups of the control-plane database; your app data is not stored there, but log output you request through allocus logs passes through that database and so may appear in those backups until they expire. You'll get at least 30 days' notice before another sub-processor is added, and you may terminate if you object. Stripe and GitHub handle account and payment data as described in the Privacy Policy, and never touch data inside your apps.
  • Access. The control plane cannot connect into your box; the network permits only outbound calls from it. Diagnostic commands run because you requested them. Direct administrative access is used only when you ask for help or to address a serious security problem, and it is not routine.
  • Confidentiality. Only the operator named above has any access, under a duty of confidentiality.
  • Security. The measures described in §9 of the Privacy Policy — hashed credentials, encrypted app config, network isolation, HTTPS throughout.
  • Breach notification. If your data is compromised, you'll be told without undue delay and in any case within 72 hours of it becoming known, with whatever detail is available — by email, and on the public service notices page so the warning still lands if your address has gone stale.
  • Assistance. Reasonable help with data subject requests, impact assessments and regulator questions, at no charge at current usage levels.
  • Deletion. When you terminate, the box and its storage are destroyed. A copy may persist in a backup for a short period until that backup expires.
  • Audit. You may ask for the information needed to demonstrate compliance with this section. Given the size of the operation, that means a written answer rather than an on-site inspection.

11. Liability

Allocus is provided as it is. To the extent the law permits, liability for any claim is limited to the amount you paid in the three months before it arose, and does not extend to lost profits, lost data, or business interruption.

Nothing here limits liability for intent, gross negligence, personal injury, or anything else that cannot be limited by law — including the mandatory rights of consumers.

You're responsible for what you deploy, and for covering claims that arise from it if it harms someone else.

12. Changes to these Terms

Material changes come with at least 30 days' notice, sent to the address on your account and posted on the service notices page. Continuing to use Allocus afterwards means you accept them. If you don't, cancel before they take effect and you'll be refunded for the remainder of the period.

13. Governing law

Norwegian law governs these Terms, and disputes belong to the Norwegian courts, with Oslo District Court as the agreed venue. If you're a consumer, this does not deprive you of the protection of mandatory rules in your own country of residence.

14. Contact

Henning Holgersen — support@allocus.dev. A person answers.

Docs GitHub support@allocus.dev FAQ Terms Privacy Notices Report abuse
Allocus · fixed-price app hosting · servers in Paris (fr-par) · *.allocus.dev

Allocus is an early-stage project operated by Henning Holgersen, an independent developer in Norway — there is no company behind it yet. Questions about data or billing? Email us — a person answers.