Terms of service

Postila provides infrastructure for uploading files, processing them (such as image transformation, metadata extraction, and malware scanning), and delivering them over a content delivery network, together with a web console, APIs, and an SDK.

• Provide accurate account information and keep it up to date.
• Keep your password and API keys confidential. Signing secrets and API keys grant access to your account’s content — you are responsible for activity performed with them.
• Tell us promptly at support@postila.app if you believe your credentials have been compromised.

• Paid plans are billed as subscriptions (monthly or annual) through Stripe. Prices and plan limits are listed on the pricing page.
• Storage capacity, file count, and maximum file size are enforced limits. Some bandwidth allowances are soft: exceeding them triggers warnings rather than cutting off delivery.
• If a renewal payment fails we will notify you and retry. If payment continues to fail after a grace period, your account moves to the free tier of its storage track (Free, or BYO Free on your own bucket); your files are not deleted, but that tier’s limits apply.
• You can cancel at any time from the billing page; paid features remain active until the end of the current billing period. Fees already paid are non-refundable except where required by law.
• We may change plan pricing or limits with reasonable advance notice.

You agree not to use the service to store or distribute:

• content that is unlawful, or that you do not have the rights to distribute;
• malware or malicious code — files uploaded to Postila storage, up to 100 MB, are scanned automatically on a best-effort basis, and files detected as infected are quarantined and never served (larger files, and files stored in your own bucket on a BYO plan, are not scanned);
• content that infringes intellectual-property or privacy rights of others;
• child sexual abuse material (CSAM). We have zero tolerance: accounts are terminated immediately, the material is preserved, and it is reported to the National Center for Missing & Exploited Children (NCMEC) and law enforcement as the law requires;
• phishing pages, fraud, spam, or content that impersonates another person or organisation.

These rules apply to everything served through Postila, wherever it is stored. On a bring-your-own-storage plan you remain responsible for the contents of your bucket, and we may stop serving, or disconnect, a bucket that is used to distribute content that breaks them.

To protect the service we may scan content we store or deliver: files uploaded to Postila storage are scanned for malware, and content served through our delivery network, including files from your own bucket, may be checked against known-CSAM hash lists by us or our infrastructure providers.

You also agree not to interfere with the service, probe or circumvent its security or metering, or resell it in a way that misrepresents it as your own infrastructure without the capacity to honour these terms toward your own users.

You keep all rights to the files you upload. You grant us the limited licence needed to operate the service: to store your files, cache them, process them (for example scanning and transforming them), and deliver them according to the delivery settings you choose. You are responsible for having the necessary rights to the content you upload and, if you serve content to your own users, for your own privacy and legal obligations toward them.

On a BYO plan you connect your own S3-compatible bucket, and your files are stored in your storage account rather than ours. The following terms apply in addition to the rest of this agreement when you use a BYO plan.

• Your credentials. You provide access credentials for your bucket. We encrypt them at rest and use them only to operate the service on your behalf — to authorise uploads to your bucket and to read your objects to deliver and transform them through our edge. You authorise this access for as long as the bucket is connected. You may disconnect at any time from the storage settings; to revoke access completely, also rotate or delete the key in your own provider account.
• Least privilege. You are responsible for scoping the credentials you give us — ideally a single-bucket, least-privilege key — and for rotating them.
• Your storage, your costs and availability. All charges your storage provider bills (storage, egress, request, and any other fees) are yours, and delivery of your files depends on your bucket and provider remaining available and correctly configured (including CORS for uploads and any access policy). We are not responsible for your provider’s pricing, uptime, durability, or data loss.
• Protection. Files in your bucket are delivered through our edge, which enforces the delivery protection available on your plan and selected by you. Protection applies only to access through Postila: anyone holding credentials to your bucket, or access you grant on your bucket or provider directly, is outside our control.
• Deletion. Deleting a file or closing your account removes it from the Postila registry and stops us serving it, but does not delete the underlying object from your bucket — you control and are responsible for the data in your own storage, including its deletion and retention.

To report content that violates these terms, email abuse@postila.app with the file URL and a description of the issue. We review reports promptly and may disable files or suspend accounts that violate these terms.

Copyright (DMCA). We respond to notices of claimed copyright infringement under the U.S. Digital Millennium Copyright Act. Our copyright policy lists what a valid notice must contain, our designated agent, and how to send a counter-notice if your content was removed by mistake. When we receive a valid notice we disable access to the material and forward the notice to the account holder.

Repeat infringers. We terminate the accounts of repeat infringers. An account that receives three valid copyright notices within six months is terminated; notices that were withdrawn, or successfully countered, do not count. We may terminate sooner for flagrant or wilful infringement.

We may suspend an account that violates these terms or presents a security or legal risk; while suspended, uploads and file delivery stop. We will lift suspensions imposed in error as soon as we identify them. You may close your account at any time. We may terminate accounts for sustained violations, with notice where practicable.

We work to keep the service fast and available, but it is provided without a guaranteed uptime commitment unless separately agreed in writing. We may change or retire features with reasonable notice for changes that materially reduce functionality.

The service is provided “as is” and “as available”. To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Malware scanning is a best-effort protective measure applied to files up to 100 MB uploaded to Postila storage — not a guarantee that all harmful content will be detected. Larger files, and files stored in your own bucket on a BYO plan, are not scanned. You remain responsible for validating files you accept from your own users.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, or consequential damages, or for lost profits, revenue, or data. Our total liability arising out of the service is limited to the amount you paid us in the twelve months before the event giving rise to the claim.

These terms are governed by the laws of the State of California, United States, without regard to conflict-of-law rules, and disputes will be resolved in the state or federal courts located in California.

We may update these terms as the service evolves. Material changes will be announced on this page with an updated “Last updated” date and, for significant changes, by email. Continuing to use the service after a change takes effect means you accept the updated terms.

Questions about these terms: support@postila.app.