Service Terms

I. Application of the terms

1. These terms govern the services provided by ONECLICK HOSTING LTDA (Brazilian company registration CNPJ 39.833.784/0001-74), under the OCH brand, to the customer.
2. They govern the rights and responsibilities of both the provider and the customer.
3. The terms apply from their electronic acceptance, at sign-up or when ordering.
4. Words in the singular include the plural and vice versa, unless expressly stated otherwise.
5. "Provider" means the service provider and "user" means the customer.

II. General conditions

1. The user agrees not to use or order any service from the provider if they have not accepted or do not agree with these terms.
2. No abusive action can be justified by the involvement of third parties. The user is responsible for actions performed on the services ordered, including by third parties to whom they give access.
3. The provider is not responsible for failures or unavailability of third-party services beyond its control (internet access providers, for example).
4. If the provider breaches these terms, the user may request a refund of the last paid invoice of the affected service.
5. If the user breaches these terms, the provider may suspend ongoing support requests until the non-compliance is resolved.
6. Continued non-compliance may result in temporary suspension or cancellation of the service.
7. When abuse is confirmed, the provider will take the necessary measures to stop the incident as soon as possible. Depending on its severity, the service may be suspended immediately. The provider will then seek a resolution together with the user. The user cannot demand immediate reactivation of the service if it poses a risk of a new incident.
8. If illegal activities are identified, the provider reserves the right to share information with the competent authorities.

III. Content and data

1. Server storage uses disk redundancy to protect data in case a disk fails.
2. The automatic backups offered in the dashboard are a convenience and are stored on the provider's infrastructure. The user is responsible for keeping backups of their data outside this infrastructure.
3. The provider is not responsible for data loss caused by the user, such as accidental deletion, operating system reinstallation or configuration changes.
4. The user is responsible for all content stored on or transmitted through the services.

IV. Billing and payment

1. The amounts charged are the prices advertised on the website on the date of the order, including promotions in external advertising and on partner websites.
2. All services are monthly. The renewal invoice is issued 7 days before the due date and may be paid until the due date or, if it is not a business day, until the next business day. The deadline for each invoice is shown in the dashboard.
3. In Brazilian reais, payment is made by Pix or credit card; in US dollars, by credit card. Where available for the payment method, the user may authorize automatic payment, which can be turned off at any time in the dashboard.
4. Email reminders are sent for manual payments, and payment confirmations are sent for all payment methods.
5. Services that are powered off or suspended are charged the same as an active service, since the resources and data remain reserved. Suspension does not change the due date.
6. Plan upgrades are made in the dashboard, charging the difference proportional to the days remaining in the period. Downgrades are requested through support.
7. For payments in Brazilian reais, a service invoice (NFS-e) is issued to the CPF or CNPJ entered in the dashboard. The invoice for the first payment of each service is issued after the refund period.
8. If the service is cancelled, its unpaid invoices are cancelled automatically.
9. The provider may refuse changes to the service while there is an overdue invoice. In this case, the user must pay it before requesting the change.
10. Price changes for services already ordered are announced by email at least 30 days in advance and apply from the first invoice due after that period.
11. Improperly disputing a payment with the bank or card issuer (chargeback) may result in suspension of the services and refusal of new orders, without prejudice to the collection of amounts due.

V. Suspension and cancellation

1. The user may cancel the service at any time, through the account dashboard or support. Cancellation may be immediate, with removal of the data and no refund for the remaining days of the period already paid (subject to the Refund Policy), or scheduled for the end of the period already paid, with no new invoices issued. A scheduled cancellation can be undone in the dashboard until the scheduled date; in that case, automatic payment, if any, is not reactivated.
2. The provider may cancel the service for violation of these terms, without prior notice; for non-payment, as described below; when an order is not paid within 5 days of being placed; or when the service is discontinued, with notice by email and in the dashboard at least 30 days in advance.
3. Services with an invoice not paid by the deadline are automatically suspended from the following day. The deadline is shown in the account dashboard.
4. During suspension, the service's data and IPv4 address are kept. After cancellation, the IPv4 and IPv6 addresses are released and cannot be recovered.
5. Services suspended beyond the deadline are automatically cancelled. Cancellation is permanent and cannot be undone. The deadline is shown in the account dashboard.
6. Data stored on the service, including backups, is permanently deleted upon cancellation. All dates are shown in the account dashboard and notified by email.
7. The provider reserves the right to suspend, reinstall, modify or cancel the service immediately and without prior notice if at least one item listed in the "PROHIBITED ACTIVITIES" section of these terms is identified.

VI. Refund policy

1. The user may request a full refund through support within 7 (seven) calendar days after paying for the initial order of the service.
2. The refund is made to the same payment method used, and the service is cancelled.
3. No refund is given in case of violation of these terms or misuse of the resources ordered.
4. The provider may refuse new orders from anyone who repeatedly orders and requests refunds.

VII. Prohibited activities

1. Use of copyrighted content without authorization, including IPTV and retransmission of channels, movies or events without a license.
2. Sending unsolicited email (spam) or malicious software.
3. Sharing illegal files, including via torrent.
4. Abusive actions against other servers, networks or users, including unauthorized port or vulnerability scanning.
5. Scams, fraud and phishing.
6. Cryptocurrency mining.
7. Botnets, command and control servers and malware distribution.
8. Flooding, denial of service or amplification attacks.
9. Proxies, VPNs or email relays open to third parties, and Tor exit nodes.
10. Use that impairs the operation of the physical server or the network for other users.
11. Hosting illegal content, child sexual abuse material, racist content or content inciting hatred or violence.
12. Any other illegal activity.

VIII. Privacy and data protection

1. The controller of personal data is ONECLICK HOSTING LTDA (CNPJ 39.833.784/0001-74). Data processing follows the Brazilian General Data Protection Law (Law 13,709/2018).
2. To use the services, the user provides registration data (name, email and, optionally, CPF or CNPJ). Usage data is also recorded, such as IP address, browser, access dates and actions taken in the dashboard.
3. The data is used to provide the services, bill and issue invoices, provide support, send communications about the account and the services, prevent fraud and abuse, and comply with legal obligations.
4. Card details are entered directly with the payment providers (Mercado Pago and Stripe) and are not stored by the provider.
5. Data is shared only with those involved in providing the services: payment providers, accounting and the city government (service invoices), and infrastructure, network and email delivery suppliers, as well as Google and Telegram when the user chooses to sign in with Google or receive notifications on Telegram. Authorities receive data only under a legal obligation or court order.
6. Access records are kept for at least 6 months, as required by the Brazilian Internet Civil Framework (Marco Civil da Internet), and tax data for the legally required period. Other data is kept while the account exists.
7. Through support, the user may request confirmation, access, correction, portability or deletion of their data, and withdraw consents, subject to the legal retention periods.
8. The website uses cookies necessary for its operation (session, language and security) and, on some pages, cookies for measuring advertising campaigns.
9. Promotional messages can be turned off at any time through the link in the email itself or in the dashboard. Communications about the account and the services cannot be turned off.

IX. Support

1. Support is provided by ticket, 24 hours a day, 7 days a week.
2. The provider reserves the right to deny support to users without an active plan or who do not meet the criteria for the support requested.
3. The provider may refuse support in situations not directly related to the services provided, such as configuration of third-party software or applications.
4. Support will be stopped immediately in case of offensive messages or inappropriate language.

X. VPS servers

1. The user is responsible for actions taken in the account dashboard and through the API, including power operations and operating system reinstallation.
2. VPS servers are delivered in shared environments. In case of excessive use, processing performance may be automatically restricted to balance usage with the other servers.
3. Plans have unlimited traffic on a 1 Gbps port. If usage harms the network of other users, the speed may be limited.
4. The user is responsible for the security of the server: passwords, access keys, system updates and firewall configuration. A compromised server, or one used in attacks, may be isolated or suspended until it is fixed.
5. DDoS protection is automatic and mitigates the most common attacks, but does not guarantee availability against attacks of any volume.
6. Any activity performed on the server is the user's responsibility during the service period, and connection information may be provided to authorities upon official request.

XI. Additional services

1. The additional MySQL database and storage (Drive) services are no longer sold and will end on 12/04/2026. The items below apply to existing contracts until that date.
2. The MySQL database service does not limit the number of tables, but may be limited if the total database size exceeds 10 GB.
3. Likewise, the MySQL service may be limited if abuse or an excessive number of connections (or queries) in a short period of time is identified.
4. In both cases (items 2 and 3), prior notice will be given by ticket before any limitation is applied.

XII. Referral program

1. Eligible users receive a referral link and code in the dashboard. A person who signs up through the link (valid for 30 days) or enters the code when ordering, and has never paid an OCH invoice, gets US$ 4.00 (R$ 20.00 in Brazilian reais) off the second invoice of a VPS server, as account credit.
2. The referring user receives US$ 6.00 (R$ 30.00 in Brazilian reais) of account credit when the referred person pays the second invoice of that server, at least 7 days after the first payment.
3. Account credit is automatically deducted from invoices paid manually, always leaving a minimum amount to pay. With automatic payment, it stays in the balance for the next manual invoice. It cannot be converted into cash and cannot be transferred.
4. Users with an active service, first payment 30 or more days ago, no chargebacks in the last 12 months and no service blocked for irregular use are eligible to refer. The limit is 10 approved referrals every 12 months.
5. Verification is automatic. Referrals between accounts of the same person, or from someone who was already a user with another account, do not count. For this check, the provider uses account and payment data, stored only in encrypted form.
6. Promoting the link through spam or paid ads using the OCH brand is prohibited. In case of fraud or abuse, referrals are rejected, credit is removed and the account may be suspended.
7. If a payment from the referred person is refunded or charged back, the corresponding credit of the referring user is removed.
8. The provider may change or end the program at any time; credit already granted remains valid.

XIII. Account security

1. The user is responsible for keeping their password, API tokens and recovery codes confidential, and for all actions taken with them. Enabling two-step verification is recommended.
2. If unauthorized access is suspected, the provider may end sessions, revoke tokens and require a password change.
3. The account holder is responsible for all services ordered on the account.

XIV. Limitation of liability

1. To the extent permitted by law, the provider is not liable for lost profits, loss of revenue, data or opportunities, or indirect damages resulting from the use or unavailability of the services.
2. To the extent permitted by law, the provider's total liability is limited to the amount of the last paid invoice of the affected service.
3. The provider is not liable for failures caused by unforeseeable circumstances or force majeure, such as natural disasters, power or third-party network failures, attacks and decisions by authorities.
4. The user is liable for claims, fines and damages caused to third parties or to the provider by their use of the services, and the provider has the right to seek reimbursement.

XV. Governing law and jurisdiction

1. These terms are governed by the laws of Brazil, including the Brazilian Consumer Protection Code, where applicable.
2. The courts of the City of São Paulo, State of São Paulo, Brazil, are elected as the venue, without prejudice to the right of a user who is a consumer to bring action in the courts of their place of residence.