Terms of Service

Tapinto opens a public HTTPS URL onto a server you run on your own machine, by holding open an outbound WebSocket from your CLI to our edge in the EU. The edge proxies incoming HTTPS requests over that socket to your local server and proxies the response back. For Model Context Protocol (MCP) traffic, the edge also parses JSON-RPC envelopes and surfaces them in a live inspector in your dashboard.

You remain responsible for whatever runs on your local machine and for whatever is exposed through your tunnel.

You sign in with a third-party identity provider (currently GitHub). You must be at least 16 years old and able to enter into a binding contract under the law that applies to you. You must keep your account credentials and API keys confidential. Any activity carried out through your account or API key is your responsibility. Notify us at [email protected] if you believe an API key has been compromised; you can also revoke keys yourself in the dashboard.

• Prices are quoted in USD and are inclusive of VAT and other applicable taxes. The price you see is the price you pay; where VAT is due it is accounted for out of that amount based on your billing location.
• Developer plan. $1 per month, tax inclusive, billed monthly in advance and renewing automatically until you cancel. It includes 500 HTTP tunnel-minutes and 250 MCP toolkit-minutes per monthly billing period. Included minutes do not roll over. Usage beyond the included minutes is metered at the per-minute rates below. You can cancel at any time from the Stripe billing portal; cancellation takes effect at the end of the billing period you have already paid for, and the included minutes remain available until then.
• We meter usage per tunnel-minute. A tunnel-minute starts when the edge accepts your CLI’s WebSocket and ends when the tunnel closes or is idle for the timeout window described in the dashboard.
• Free weekly quota. The first 60 tunnel-minutes of each calendar week (Monday 00:00 UTC – Sunday 23:59 UTC) are free, no credit card required. The quota does not roll over.
• Paid usage. After the free quota is consumed, usage is metered to Stripe at the current published rate (for example, $0.001 per basic tunnel-minute and $0.002 per MCP toolkit tunnel-minute as of the Effective Date). The authoritative current rates are shown on tapinto.dev/pricing and in your dashboard.
• Invoicing. Stripe invoices you at the end of each calendar month for that month’s metered usage. We may issue an out-of-cycle invoice if usage in a single month exceeds $500.
• Price changes. We may change prices on 30 days’ notice by email and a notice in the dashboard. A price change never applies retroactively to usage already metered.
• Failed payments. If a payment fails, we will email you. If the balance remains unpaid 14 days after the second reminder, we may suspend the Service for your account until payment is received.

If you are a consumer resident in the European Union, you have 14 days from the start of a paid plan to withdraw from it, under Directive 2011/83/EU, without giving a reason. To withdraw, email [email protected] from your account address within those 14 days. You do not have to use a particular form of words; saying you are withdrawing is enough.

What you get back. If you have not started a tunnel that consumes paid minutes, we refund the subscription fee in full. If you have, you asked us to begin supplying the Service immediately, and we may keep an amount proportionate to what you used before withdrawing — the metered minutes actually consumed. We refund the rest within 14 days of receiving your notice, using the same payment method.

Free-quota usage is not affected by any of this, because you have not paid for it.

You agree not to use the Service to:

• violate any law, including export control, sanctions, privacy, intellectual-property, or anti-spam law;
• host, transmit, or expose content that is unlawful, defamatory, infringing, deceptive, malicious (including malware, ransomware, spyware, phishing kits, or botnet infrastructure), child sexual abuse material, or that incites violence;
• attack the Service or anyone else — including denial-of- service attempts, abusive scraping, port scanning, or brute-forcing third parties from a Tapinto-issued domain;
• resell the Service as a generic ingress for someone else’s production traffic without our written agreement (the Service is built for development and testing);
• circumvent quotas, billing meters, rate limits, or account limits (for example by creating multiple accounts to harvest free-quota minutes);
• reverse-engineer, decompile, or extract source from non-open- source parts of the Service except to the extent that EU law gives you a non-waivable right to do so.

We may suspend or terminate access for any account we reasonably believe is engaged in the above — immediately if the activity threatens the integrity of the Service or third parties, and otherwise on reasonable notice.

Anything that flows through your tunnel — the HTTP requests, the responses, and the bodies of MCP messages — is “Your Content”. You own it. You grant us a limited, worldwide, royalty-free licence to host, transmit, parse, log, and display Your Content solely to the extent necessary to (a) operate the Service for you, (b) compute and bill usage, (c) show you inspector and replay views, and (d) prevent and investigate abuse. We do not use Your Content to train machine-learning models.

Where Your Content contains personal data, you are the controller and we process it on your behalf as your processor. Our Data Processing Agreement governs that processing, forms part of these Terms, and applies automatically — you do not need to sign it. It sets out exactly what is retained from a tunnel and for how long, and where it conflicts with these Terms on the processing of personal data, it prevails.

Tapinto is a conduit. The Service forwards bytes between your local server and clients on the public internet without pre-screening, moderating, or curating Your Content. We do not control what you choose to send through your tunnel and we do not endorse it. You are solely responsible for the legality, accuracy, and effects of Your Content and of the upstream servers it reaches. To the maximum extent permitted by law, and in addition to the limits in Section 13, we are not liable to you or to any third party for the content of data transiting the Service, for what your upstream server does with that data, or for damages that result from the data itself rather than from a failure of the tunnel infrastructure we operate. The inspector and replay views are a courtesy diagnostic for the account that owns the tunnel — they are not a moderation system and their availability does not imply any duty to review Your Content.

Our role with respect to Your Content is the technical equivalent of a mere conduit / hosting intermediary under Articles 4 and 6 of Regulation (EU) 2022/2065 (Digital Services Act) and the corresponding provisions of national law. We are eligible for the liability exemptions those provisions afford and these Terms do not waive them.

If you believe a Tapinto tunnel is hosting or transmitting content that infringes your intellectual-property rights or otherwise breaches Section 5, send a notice to [email protected]. To be actionable, your notice must include:

• the full https://<slug>.tapinto.it URL of the tunnel and, where applicable, the path of the specific resource you are reporting;
• a description of the right that is being infringed or the policy that is being breached, with enough detail for us to locate the material;
• your contact details (name, postal address, email, and a phone number where reasonable);
• a statement made in good faith that you believe the use is not authorised by the rightsholder, by law, or by these Terms;
• a statement that the information in your notice is accurate, and — on penalty of perjury for U.S. DMCA notices — that you are authorised to act on behalf of the rightsholder affected;
• your physical or electronic signature.

We act on valid notices by suspending or removing the offending tunnel and, where possible, notifying the account owner. The account owner may submit a counter-notice with the same information, including a statement under penalty of perjury that the material was removed as a result of mistake or misidentification, and a consent to the jurisdiction of the courts described in Section 16. Repeat-infringer accounts will be terminated. We will not act on notices that are abusive, automated without human review, or that target content protected by EU law (for example, lawful security research or news reporting).

Our designated agent for receiving notices under 17 U.S.C. § 512(c) is reachable at the same address above; we maintain a records log of notices received as required by EU and U.S. law.

The Service, the tapinto.dev website, the brand, the logo, and the software in our private repositories are owned by Cre8-it B.V. and are protected by intellectual-property law. Parts of the CLI are released under an open-source licence in the public repository; those parts are governed by their respective licence files, not by these Terms. Nothing in these Terms transfers any of our intellectual-property rights to you.

The Service depends on third-party services (in particular, Microsoft Azure for hosting, Stripe for payments, Cloudflare for DNS, GitHub for OAuth, and Sentry for error monitoring). Your use of those services through Tapinto remains subject to their own terms.

We may label parts of the Service as “beta”, “preview”, or “experimental”. Those features are provided as-is, may be changed or removed without notice, and are not covered by any service-level commitment.

We aim for high availability but we do not currently offer a contractual uptime guarantee on free or pay-as-you-go usage. Where you have a separate written agreement with us that includes service levels, that agreement controls.

We perform planned maintenance from time to time. We try to announce maintenance windows in advance via the dashboard or status page.

You can stop using the Service or delete your account at any time from the dashboard. Termination by you takes effect at the end of the current billing period; usage already metered remains payable.

We may suspend or terminate your account immediately if you materially breach these Terms (including the Acceptable Use section), if required by law, or if your account creates a security risk for the Service or its other users. We will give you notice and a reasonable opportunity to cure where the circumstances allow.

On termination, your right to use the Service ends. We will delete your data within the windows described in the Privacy Policy, subject to records we are required by law to retain (for example invoices for accounting purposes).

To the maximum extent permitted by law, the Service is provided “as is” and “as available”. We do not warrant that the Service will be uninterrupted, error-free, secure against every conceivable attack, or that it will meet your specific requirements. Statutory warranties that cannot be excluded under the law that applies to you are not affected.

To the maximum extent permitted by law:

• We are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, goodwill, or data, even if we were advised of the possibility.
• Our total aggregate liability arising out of or relating to the Service is capped at the greater of (a) the amount you paid us for the Service in the 12 months immediately before the event giving rise to the claim, or (b) one hundred US dollars ($100).
• Nothing in these Terms limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be limited under the law that applies to you. If you are a consumer, your statutory rights are not affected.

If you use the Service in the course of a business, you agree to indemnify us against claims, losses, and reasonable legal costs arising from (a) your breach of these Terms, (b) Your Content, or (c) your violation of any law or any third party’s rights through your use of the Service. This indemnity does not apply to consumers.

We may update these Terms from time to time. If we make a material change, we will email you and post a notice on the dashboard at least 30 days before the change takes effect. Continued use of the Service after the change takes effect constitutes acceptance. If you do not agree to the change, you can stop using the Service and delete your account before it takes effect.

These Terms are governed by the laws of the Netherlands, excluding its conflict-of-laws rules and the United Nations Convention on Contracts for the International Sale of Goods. The courts of Amsterdam, the Netherlands have exclusive jurisdiction over any dispute arising out of or relating to these Terms, except that if you are a consumer you may also bring proceedings in the courts of the EU member state where you live, and we may bring proceedings against you in those courts.

The European Commission’s online dispute resolution platform is available at ec.europa.eu/consumers/odr. We are not obliged to participate in alternative dispute resolution proceedings before a consumer arbitration board, and generally do not do so.

• Entire agreement. These Terms, together with the Privacy Policy and any pricing on /pricing, are the entire agreement between you and us regarding the Service.
• Severability. If a clause is held unenforceable, the rest of these Terms remain in effect.
• No waiver. Our failure to enforce a clause is not a waiver of our right to enforce it later.
• Assignment. You may not assign these Terms without our prior written consent. We may assign these Terms to an affiliate or in connection with a merger, acquisition, or sale of assets, on notice to you.
• Notices. Legal notices to us must be sent to [email protected]. Notices to you may be sent to the email address on your account or posted in the dashboard.

Questions about these Terms: [email protected].