Legal Information

Last updated: March 18, 2026

Imprint (Impressum)

Alexander Renz
UUXO
Germany
Email: hello@resistro.org

Responsible for content according to § 55 Abs. 2 RStV: Alexander Renz

Terms of Service

1. Scope

These Terms of Service ("Terms") govern your use of Resistro Cloud ("Service"), a managed database backup service operated by Alexander Renz ("Provider", "we"). By creating an account, you agree to these Terms.

2. Service Description

Resistro Cloud provides managed database backup monitoring, encrypted cloud storage, and alerting for PostgreSQL and MariaDB/MySQL databases. The service consists of:

• A web dashboard at cloud.resistro.org
• An API for programmatic access
• A lightweight agent binary that runs on your server
• Encrypted backup storage on EU-hosted infrastructure

3. Accounts

You must provide accurate information when creating an account. You are responsible for maintaining the security of your credentials and API keys. You must notify us immediately of any unauthorized access.

4. Free and Paid Plans

The free plan provides self-hosted backup functionality with no cloud features. Paid plans (Pro, Business, Enterprise) are billed monthly or annually through our payment processor Paddle. Prices are listed on resistro.org and include applicable taxes.

5. Cancellation

You may cancel your subscription at any time. Access continues until the end of the current billing period. Backup data is retained for 30 days after cancellation, then permanently deleted.

6. Encryption

All backups are encrypted on your server before transmission using AES-256. The encryption key is generated and stored exclusively on your infrastructure. We cannot access, decrypt, or recover your backup data. Loss of your encryption key means permanent loss of access to your encrypted backups.

7. Availability

We aim for 99.9% uptime but do not guarantee it for free or Pro plans. Enterprise plans include an SLA. Scheduled maintenance is announced at least 24 hours in advance.

8. Limitation of Liability

The Service is provided "as is". We are not liable for data loss resulting from: your failure to maintain encryption keys, misconfiguration of backup schedules, or force majeure events. Our total liability is limited to the fees paid in the 12 months preceding the claim.

9. Termination

We may terminate accounts that violate these Terms, are used for illegal purposes, or remain inactive for more than 12 months. We will provide 30 days notice except in cases of abuse.

10. Changes

We may update these Terms with 30 days notice. Continued use after changes constitutes acceptance.

11. Governing Law

These Terms are governed by the laws of the Federal Republic of Germany. Place of jurisdiction is Munich, Germany.

Privacy Policy (Datenschutzerklärung)

1. Controller

Alexander Renz, UUXO, Germany. Email: hello@resistro.org

2. Data We Collect

• Account data: Email address, name, hashed password
• Billing data: Processed by Paddle (our payment processor). We do not store credit card numbers.
• Technical data: Database names, backup metadata (size, duration, status), agent hostname and version, IP addresses in access logs
• Backup data: Encrypted with your key. We cannot read it.

3. Legal Basis (Art. 6 GDPR)

• Contract performance (Art. 6(1)(b)): Account management, service delivery
• Legitimate interest (Art. 6(1)(f)): Security logging, abuse prevention
• Consent (Art. 6(1)(a)): Marketing emails (opt-in only)

4. Data Processing

• Hosting: Hetzner Online GmbH, Germany (EU). Data never leaves the EU.
• Payments: Paddle.com Market Ltd, UK. Paddle acts as Merchant of Record.
• Email: SMTP via our own infrastructure (EU-hosted).

5. Data Retention

• Account data: Until account deletion + 30 days
• Backup data: Per your retention policy, max 30 days after cancellation
• Access logs: 90 days
• Billing records: 10 years (German tax law)

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Delete your data (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Lodge a complaint with a supervisory authority

To exercise these rights, email hello@resistro.org.

7. Cookies

We use only essential cookies (session token stored in localStorage). No tracking cookies, no analytics, no third-party scripts.

8. Security

All connections use TLS 1.3. Passwords are hashed with bcrypt. Backup data is AES-256 encrypted end-to-end. Infrastructure is hosted in ISO 27001 certified Hetzner data centers in Germany.