Terms of Service

Last updated: October 18, 2026

1. Introduction

These Terms of Service ("Terms") constitute a binding legal agreement between you ("you," "your") and Innospike, UAB ("Company," "we," "us," or "our") governing your access to and use of the services available at https://getmac.io ("Service").

By accessing or using the Service in any manner, including visiting, browsing, registering, authenticating, or purchasing a subscription, you acknowledge that you have read, understood, and agreed to be bound by these Terms and our Privacy Policy.

If you do not agree to these Terms or the Privacy Policy, you must not access or use the Service.

You represent and warrant that you have the legal authority to enter into these Terms and to comply with all applicable local, national, and international laws and regulations in connection with your use of the Service.

Your continued use of the Service after any changes to these Terms constitutes your acceptance of such changes.

2. Changes to the Terms

We are constantly working to improve our Service, and as a result, these Terms may need to change.

We reserve the right to modify these Terms at any time.

If we make material changes, we will:

  • Post a notice on our website at https://getmac.io,

  • Send you an email notification (if we have your email address),

  • Or notify you through other reasonable means.

If you do not agree with the updated Terms, you are free to reject them; however, you will no longer be able to use the Service.

If you continue to use the Service after the effective date of any change, it means you accept the updated Terms.

Except for changes made by us as described here, no other amendment or modification of these Terms will be effective unless in writing and signed by both you and us.

Where you and we have signed a separate agreement, such as an order form, that agreement prevails over these Terms to the extent of any conflict. Where a Data Processing Agreement has been executed, it prevails in respect of personal data.

3. Privacy Policy

Please review our Privacy Policy, which explains how we collect, use, and protect your personal data in connection with the Service.

4. Eligibility, Account Registration, and Accuracy of Information

By creating an account or accessing the Service, you represent and warrant that:

  • You are at least 18 years old.

  • The information you provide is accurate, complete, and up to date at all times.

  • You have the legal authority to enter into these Terms.

Providing false, inaccurate, outdated, or incomplete information may result in immediate suspension or termination of your account, without refund.

You are solely responsible for maintaining the confidentiality of your authentication credentials and for all activities that occur under your account.

5. Third-Party Services and Responsibility

We use third-party providers ("Third Party Services") to help deliver and improve our Service, including authentication, payments, network security, and analytics.

Your interactions with Third Party Services are governed by their own terms and privacy policies. We are not responsible for the content, practices, or failures of any Third Party Services.

6. Payment Terms and Auto-Renewal

The Service is offered on a subscription basis with recurring billing cycles.

By purchasing a subscription, you authorize us to charge your payment method at the beginning of each billing period for the applicable subscription fee, at the then-current non-promotional rate.

Subscriptions will automatically renew for the same duration unless canceled before the end of the current billing period.

You may cancel your subscription at any time by accessing your billing settings. Cancellation will take effect at the end of your current billing period, and your subscription will not be renewed.

You will retain access to the Service until the end of the period already paid for.

Paid Services cannot be canceled mid-term for a refund.

If you do not wish to be charged for the next billing period, you must cancel your subscription before it renews.

Where we have agreed different payment terms with you in writing, such as payment by invoice, those terms apply instead.

7. Free Trials, Proofs of Concept, and Promotions

We may offer free trials, proofs of concept, promotions, or discounts at our sole discretion.

We reserve the right to modify, suspend, or discontinue any free trial or promotion at any time without prior notice.

Participation in any promotional offer does not guarantee future availability or continuation of the same terms.

Free trials and proofs of concept are provided without the availability commitments described in Section 15, unless we have agreed otherwise in writing.

8. Refund Policy

All purchases and subscription payments are final and non-refundable, including usage-based resources such as minutes, concurrency, or compute time.

You may cancel your subscription at any time; however, cancellation will take effect at the end of your current billing period, and you will continue to have access to the Service until that date.

You will not receive a refund or credit for any portion of the subscription period already paid, regardless of usage.

Except as required by applicable law, as explicitly stated in these Terms, or as agreed with you in writing, we do not offer refunds or credits for any used or unused Service time.

We reserve the right to deny refund or credit requests at our sole discretion, including but not limited to cases of abuse, fraud, or violation of these Terms.

9. Customer Content and License

You retain full ownership of any data, content, and materials ("Customer Data") you upload or process through the Service.

You grant us a non-exclusive, worldwide, royalty-free license to host, store, copy, process, and transmit your Customer Data solely for the purpose of providing and maintaining the Service.

We do not sell, share, or analyze Customer Data for marketing, advertising, or any unrelated purposes.

We do not use Customer Data to train machine learning models.

We process Customer Data only as necessary to operate, secure, and support the Service, or where you have asked us to.

10. Data Retention and Deletion

Virtual machines provisioned through the Service are ephemeral by design.

When a virtual machine is terminated, deleted, or expires:

  • Its disk image and all data written to it are deleted from the host.

  • We cannot restore that data, and we do not retain a copy of it for you.

Where the Service provisions a virtual machine as a continuous integration runner, that machine is destroyed when the job it was created for completes. Data written during a job does not persist beyond it, and is not available to any subsequent job.

Because of this, you should treat any data you need to keep as data to be written to a destination you control before the job ends.

11. Customer Responsibilities and Prohibited Activities

You must:

  • Use the Service only for lawful purposes and in accordance with all applicable laws.

  • Maintain accurate and current account information.

  • Monitor and control all activities conducted through your account.

  • Respect the rights and security of others.

You must NOT:

  • Engage in illegal activities (including fraud, money laundering, child exploitation, terrorism financing).

  • Upload or distribute abusive, harassing, defamatory, obscene, or otherwise unlawful content.

  • Send spam, phishing, scams, or unauthorized mass communications.

  • Introduce viruses, malware, spyware, ransomware, or other malicious software.

  • Attempt unauthorized access to systems, servers, databases, or to any other customer's instances, data, or network traffic.

  • Attempt to escape, bypass, or interfere with the isolation boundary of a virtual machine, or with the systems that operate the Service.

  • Use crawlers, spiders, or scrapers against our websites without prior written permission. This does not restrict automating your own use of the Service through our documented API, CLI, or integrations, which is what they are for.

  • Perform or facilitate denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks.

  • Reverse-engineer, decompile, or disassemble any part of the Service.

  • Circumvent security features or authentication measures.

  • Conduct penetration testing, vulnerability scanning, or load testing against the Service without our prior written consent, which we will not unreasonably withhold.

  • Use the Service to compete with Innospike, UAB or develop competing products.

Violation of these responsibilities may result in immediate account suspension or termination without refund, and reporting to law enforcement authorities if necessary.

12. Backups

The Service does not provide a backup facility, and the ephemeral nature of virtual machines described in Section 10 means data written inside an instance is not backed up by us.

You remain responsible for retaining your own copies of source code, build outputs, and any other material you need to preserve.

13. Intellectual Property

All rights, title, and interest in the Service and all related intellectual property are the exclusive property of Innospike, UAB or its licensors, including but not limited to software, infrastructure, service architecture, platform designs, data structures, APIs, technical solutions, and concepts, methods, ideas, and know-how.

Nothing in these Terms grants you ownership or license rights in our intellectual property except the limited rights to use the Service as expressly permitted under these Terms.

14. Security and Infrastructure

We operate the Service on hardware we own and manage, located in a Tier III data centre in Lithuania, in the European Union. We do not rely on hyperscale public cloud providers to deliver virtual machines.

Compute isolation. Each virtual machine is a hardware-virtualised guest, created through Apple's Virtualization framework, with its own kernel, filesystem, and memory. Virtual machines do not share an operating system with one another.

Single-use runners. Where the Service provisions a virtual machine as a continuous integration runner, that machine serves exactly one job. Its runner registration cannot be reused, and the machine is destroyed when the job ends. No workload runs on a machine that has previously executed another customer's workload.

Dedicated capacity. Dedicated hosts can be reserved. Where capacity is reserved, exclusivity is enforced by our scheduler rather than by operational practice: a host assigned to your project will not accept an instance belonging to any other project.

Transport security. Our public API, dashboard, and website are served over TLS.

Operational access. Access to the systems that operate the Service is restricted to authorized personnel. Service credentials are held in a secrets manager rather than in source control or configuration files, and infrastructure hosts hold credentials scoped to themselves.

Security practices. We maintain technical and organizational measures appropriate to the Service, review them as the Service changes, and remediate identified weaknesses on a risk-prioritized basis.

We may update these measures as the Service evolves, provided that the overall level of security they provide is not materially reduced.

We do not currently hold ISO 27001 certification or a SOC 2 report, and we do not represent otherwise.

15. Service Availability

For self-service plans, the Service is provided without a specific availability commitment. We operate it with the intent of continuous availability and publish incidents on our public status page.

Where we have agreed specific availability commitments with you in writing, those commitments apply instead of this Section.

Availability commitments cover infrastructure and services we operate. They do not extend to third-party platforms the Service integrates with, including source control and continuous integration providers, whose availability is outside our control.

We may suspend the Service for scheduled maintenance. Where maintenance is likely to affect your use of the Service, we will give advance notice through the status page or by email.

16. Data Protection and Processing

Where we process personal data contained in Customer Data, we do so as a processor acting on your instructions, and you act as controller.

We will:

  • Process such personal data only to provide the Service and as instructed by you,

  • Impose confidentiality obligations on personnel with access to it,

  • Engage subprocessors only as described in Section 25, and under contractual terms no less protective than those we owe you,

  • Assist you, so far as reasonably practicable, with requests from data subjects and with your obligations under Articles 32 to 36 of the GDPR,

  • Make available to you the information reasonably necessary to demonstrate compliance with these obligations, and

  • Delete or return such personal data on termination, except where retention is required by law.

A Data Processing Agreement is available on request and, once executed, forms part of these Terms. Where a subprocessor processes personal data outside the European Economic Area, we rely on the European Commission's standard contractual clauses or another lawful transfer mechanism. Our error tracking provider processes data in the United States on that basis; the others listed in Section 25 process it in the European Union.

17. Security Incident Notification

If we become aware of a security incident that compromises the confidentiality, integrity, or availability of your Customer Data, we will notify you without undue delay after becoming aware of it, and in any event within 48 hours of confirming it — in sufficient time to allow you to meet your own notification obligations under Article 33 of the GDPR.

Our notification will describe what we know of the nature of the incident, the categories of data affected, the measures we have taken, and our recommendations, and we will provide updates as the position becomes clearer.

We will not condition such notification on your acceptance of any limitation of liability.

18. Warranty Disclaimer

Except as expressly stated in Sections 14 through 17, as separately agreed with you in writing, or as required by applicable law, and to the maximum extent permitted by applicable law:

  • The Service is provided on an "as is" and "as available" basis.

  • We disclaim implied and statutory warranties of merchantability, fitness for a particular purpose, title, and non-infringement.

  • We make no warranty that the Service will meet your particular requirements, that it will be uninterrupted or error-free, or that every error will be corrected.

  • We make no warranty regarding the use, availability, or reliability of any third-party service, network, or software used in connection with the Service.

  • No advice or information obtained by you from us creates any warranty not expressly stated in these Terms.

You acknowledge that the Service may be subject to limitations and delays inherent in the use of the Internet and electronic communications.

Nothing in this Section limits or qualifies the commitments we make in Sections 14 through 17, or anything separately agreed with you in writing.

19. Limitation of Liability

To the fullest extent permitted by law:

  • We shall not be liable for indirect, incidental, consequential, special, punitive, or exemplary damages.

  • We shall not be liable for loss of profits, revenues, goodwill, or business opportunities.

  • Our maximum aggregate liability arising out of or related to these Terms shall not exceed the total amount paid by you for the Service during the twelve (12) months preceding the claim.

We may agree a different limit with you in writing.

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, for fraud, for intentional misconduct, or for gross negligence.

20. Indemnity

You agree to indemnify, defend, and hold harmless Innospike, UAB, its affiliates, employees, and agents from any claims, liabilities, damages, losses, and expenses arising out of:

  • Your use or misuse of the Service,

  • Your violation of these Terms,

  • Your violation of any law or the rights of any third party.

21. Assignment

You may not assign or transfer your rights or obligations under these Terms without prior written consent.

We may assign or transfer these Terms to an affiliate, or in connection with a merger, acquisition, or sale of assets, on notice to you.

22. Governing Law and Dispute Resolution

These Terms are governed by the laws of the Republic of Lithuania and applicable European Union regulations.

Before initiating any court proceedings, you and we agree to attempt to resolve disputes through confidential binding arbitration in Lithuania under Lithuanian Arbitration Law.

If arbitration is unavailable or unenforceable, disputes shall be resolved exclusively in the courts of Lithuania.

23. Links to Other Websites

Our Service may contain links to third-party websites or services. We are not responsible for the content, practices, availability, or security of such third-party services.

Your use of external websites is at your own risk.

24. Error Reporting and Feedback

You may provide suggestions, ideas, bug reports, or feedback ("Feedback").

By submitting Feedback, you grant us a worldwide, perpetual, irrevocable, royalty-free license to use and exploit such Feedback without any obligation to you.

We are under no obligation to review or implement Feedback.

If you believe you have found a security vulnerability in the Service, please contact us at [email protected]. We will acknowledge your report.

We will not pursue action against good-faith research that:

  • does not access, modify, or retain any other customer's data,

  • does not degrade or disrupt the Service for others,

  • is reported to us promptly, and

  • is not disclosed publicly before we have had a reasonable opportunity to fix it.

Research meeting those conditions is permitted despite the restriction on testing in Section 11.

25. Subprocessors

We may use third-party subprocessors to assist with hosting, analytics, operations, payments, and security. The current list of our subprocessors is available at:

https://getmac.io/subprocessors

We will update that page before a new subprocessor begins processing Customer Data. You may ask us to notify you of changes by email.

You may object to a new subprocessor within 30 days of being notified, on reasonable grounds relating to the protection of personal data. We will work with you to find an alternative. If we cannot accommodate the objection, you may terminate the affected part of the Service and we will refund any prepaid fees covering the remainder of the term for that part, notwithstanding Section 8.

26. Severability

If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.

27. Compliance with Export Laws and Sanctions

You may not use, access, or otherwise export or re-export the Service except as authorized by applicable law, including, without limitation, European Union regulations, United States export control laws, and applicable local laws.

By using the Service, you represent and warrant that you are not:

  • Located in, organized under the laws of, or a resident of any country or territory that is subject to comprehensive sanctions or embargoes, including but not limited to Cuba, Iran, North Korea, Syria, Russia, Belarus, and the Crimea, Donetsk, and Luhansk regions of Ukraine;
  • Designated on any sanctions or restricted parties list maintained by the European Union, United States Department of the Treasury (Office of Foreign Assets Control), U.S. Department of Commerce (Bureau of Industry and Security), United Nations Security Council, or other relevant government authority;
  • Acting on behalf of or providing access to the Service to any person or entity described above.

We reserve the right to restrict, suspend, or terminate access to the Service, without notice or liability, if we reasonably believe that your use of the Service violates applicable sanctions or export control laws.

28. Contact

Innospike, UAB — Lithuania, European Union

[email protected]

Terms of Service | GetMac