Draft for review by licensed counsel. Not for publication.This page contains 183 open points (highlighted) that must be resolved in the source documents before publication. Remove nothing by hand: resolve each point in the source draft and rebuild.

Terms of Service

The Terms of Service, the policies that form part of them (see Section 1), and related information.

Terms of Service

Version: 2.2 [OPEN: renumber on publication] · Effective: [OPEN: date]

Please read these Terms carefully. They explain how your subscription renews automatically and how to cancel it, what we are and are not responsible for, and how disputes are resolved. [COUNSEL: if Alternative B in Section 28 is chosen, add: "They include an agreement to resolve disputes by individual arbitration for U.S. users, with a right to opt out (Section 28)."]

These Terms of Service ("Terms") are an agreement between you and HidzoVPN, Inc., a Florida corporation ("HidzoVPN", "we", "us" or "our"). They apply to the HidzoVPN apps, websites, VPN service, accounts, billing, support and related services that link to these Terms (together, the "Services"). "Premium" means the paid HidzoVPN plan described in Section 5.2. The "Free Service" means use of the Services without a paid plan. A "Billing Provider" is Apple, Google or, for purchases on our website, HidzoVPN.

You accept these Terms when you tick the box or tap the button that says you agree to them, which we show before you create an account, start a trial or make a purchase [ENGINEERING: clickwrap at each of these points, and at first launch for guest use]. If you do not agree, do not use the Services. From their effective date, these Terms replace the Terms of Service dated 1 September 2025 [COUNSEL: acceptance by existing users — DEC-2026-001 §7; RSK-047].

1. Other documents that form part of these Terms#

1.1 These documents are part of these Terms: the Acceptable Use Policy; the Refund and Cancellation Policy; the plan, price, trial and offer terms shown to you at checkout; and any additional terms we show you for a specific feature. Our Privacy Policy explains how we handle personal information; it is not part of this contract, but we recommend that you read it.

1.2 If two of these documents conflict, this order applies: (a) mandatory law; (b) the terms shown and accepted at checkout; (c) for purchases billed by Apple or Google, the rules of that store for billing, cancellation and refunds; (d) feature-specific terms; (e) these Terms; (f) the Acceptable Use Policy and the Refund and Cancellation Policy. However, where the Refund and Cancellation Policy gives you more rights than these Terms, it prevails.

2. Who we are and how to contact us#

HidzoVPN, Inc. is a Florida profit corporation, Florida Department of State document number P25000060442. Our mailing address is 7901 4th Street North, Suite 9375, Saint Petersburg, FL 33702, United States. Our business address, telephone number and contact addresses for each purpose are listed on our Legal Information page at [OPEN: https://hidzovpn.com/legal]. Customer support: [email protected].

3. Who may use the Services#

3.1 You must be at least 18 years old and able to enter into a binding contract. [OPEN: align app-store age ratings with this rule — BRF-2026-001 P2-4]

3.2 If you use the Services for an organization, you confirm that you are authorized to accept these Terms for it, and "you" includes that organization.

3.3 You may not use the Services where the law, including sanctions and export-control law, prohibits us from providing them to you (Section 26).

4. Accounts, guest access and security#

4.1 Guest access. Some features of the Free Service can be used without an account. Guest access may use automatic server selection, limit session length and apply waiting periods between sessions [ENGINEERING: current values]. [OPEN — BRF-2026-001 D4: on the platforms where advertising is shown, guest access may show advertising and offer optional rewarded advertising to shorten a waiting period; this sentence must match the Privacy Policy §2 alternative chosen]

4.2 Accounts. An account is needed for Premium, restoring purchases and using more than one device. Sign-in methods are those shown in the app [ENGINEERING: e.g. email with a one-time code, Sign in with Apple, Google Sign-In].

4.3 Your responsibilities. Give accurate information and keep it up to date. Keep your email account, one-time codes and devices secure. Tell us at [email protected] if you think someone has accessed your account. We may ask you to verify your identity before we act on account requests.

4.4 Devices and sharing. Unless your plan says otherwise, a Premium account may be used on up to five supported devices that you own or control, with up to five simultaneous connections [ENGINEERING: confirm backend limits — CLM-019]. You may not sell, rent, share publicly or resell access to your account.

5. Free Service and Premium#

5.1 Free Service. The Free Service includes VPN connectivity with the limits shown in the app [ENGINEERING: current values]. We may change or end the Free Service at any time.

5.2 Premium. Premium features are those described in the offer, store listing or checkout screen when you buy [ENGINEERING: e.g. manual server and protocol selection, no in-app advertising, no session time limit, kill switch].

5.3 Platforms. The Services are available only on the platforms for which we offer an official download [ENGINEERING: current list, e.g. iOS and Android]. Beta and preview features may change or be withdrawn.

6. License to use our software#

6.1 We give you a personal, limited, revocable, non-exclusive and non-transferable license to install and use our apps on devices you own or control, only to use the Services in line with these Terms.

6.2 You may not, except where the law expressly allows it or as permitted by our Vulnerability Disclosure Policy: copy, modify or distribute the software; reverse engineer or decompile it; remove notices; bypass subscription checks, device limits or other technical controls; modify our apps to remove or bypass advertising in the Free Service; or resell or provide the Services to others as a commercial service without our written permission.

6.3 Open-source components are licensed under their own licenses, which prevail for those components. [ENGINEERING: publish the list of open-source licenses in the app — roadmap #29]

7. What a VPN does and does not do#

7.1 When the connection is active and working, the VPN encrypts traffic between your device and the VPN server you connect to [ENGINEERING: protocol and cipher matrix — CLM-008]. It does not make you anonymous, protect your device from malware or phishing, or stop websites, apps or your device from identifying you by other means.

7.2 You are responsible for checking that the VPN is connected, keeping your device and apps updated, and paying your internet and mobile-data charges.

7.3 We do not guarantee access to any particular website, app, streaming service or content. Other services may block VPN traffic. A server location shown in the app may be a virtual location that differs from the physical location of the server [ENGINEERING: confirm whether virtual locations are used].

7.4 Speed and availability depend on factors outside our control. Any description of speed or performance is not a guaranteed minimum.

7.5 You are responsible for complying with the laws of the place where you use the Services. Some countries restrict or prohibit the use of VPNs. The fact that our app can be downloaded in a country does not mean that its use there is lawful.

7.6 If your personal safety depends on protecting your identity or your communications, do not rely on the Services as your only protection.

8. Acceptable use#

You must use the Services lawfully and in accordance with our Acceptable Use Policy, which forms part of these Terms. The Acceptable Use Policy sets out the restrictions that apply to your use of the Services, how we learn of and handle possible abuse, the measures we may take (including automated measures), how a person reviews appeals, and how to complain [COUNSEL: DSA Art. 14(1) — EV-236].

9. Subscriptions, prices and taxes#

9.1 Premium can be bought through the Apple App Store, Google Play or our website [OPEN: other channels], or obtained with an Activation Code (Section 9.7). The price, billing period and other material terms shown at checkout apply to your purchase. Prices may differ by channel, country and currency.

9.2 Subscriptions are billed in advance for each billing period. Taxes are included in or added to the price as the law and the Billing Provider require.

9.3 For purchases through Apple or Google, the store is the seller or billing provider and its terms govern billing, cancellation and refunds. For website purchases, HidzoVPN is the seller and our payment processor [OPEN: Stripe entity] processes the payment.

9.4 If a payment fails, we or the Billing Provider may try again, ask you to update your payment method, or end Premium access.

9.5 Cryptocurrency. [OPEN: keep only if cryptocurrency payments are offered — BRF-2026-001 D7] Where we accept cryptocurrency, the purchase is a one-time prepayment for the period shown and does not renew automatically. Refunds for cryptocurrency purchases are described in the Refund and Cancellation Policy. [COUNSEL: sanctions and money-transmission review before launch]

9.6 Payment authorization. You authorize the seller shown at checkout to charge your payment method for each billing period, at the price disclosed to you, until you cancel.

9.7 Activation Codes. [OPEN — POL-RTOS-001 §0: keep only if a reseller program is launched] Premium may also be obtained with an Activation Code bought from an authorized reseller. An Activation Code gives Premium for the fixed period stated with it, does not renew automatically and can be redeemed only at [OPEN: hidzovpn.com/redeem]. Unredeemed codes expire [OPEN]. The reseller that sold the code is the seller and handles refunds, as described in the Refund and Cancellation Policy. We may refuse or deactivate a code that was lost, leaked, obtained fraudulently or sold in breach of the law or of our reseller terms [COUNSEL: user remedy where a code is deactivated for the reseller's breach — POL-RTOS-001 §4.3].

10. Free trials and introductory offers#

10.1 A free trial, where offered, lasts for the period shown when you sign up [OPEN: one trial length on every channel — CLM-031]. Eligibility is limited to new users unless the offer says otherwise.

10.2 AT THE END OF THE TRIAL, YOUR SUBSCRIPTION STARTS AUTOMATICALLY AND YOU WILL BE CHARGED THE PRICE SHOWN WHEN YOU SIGNED UP, UNLESS YOU CANCEL BEFORE THE CANCELLATION DEADLINE SHOWN AT SIGN-UP. For trials started through Apple, cancel at least 24 hours before the trial ends [VERIFY: Apple Support 118428 — Reported by AI reviewer; Google Play deadline]. For trials on our website, the deadline is shown at sign-up and in your confirmation [ENGINEERING: confirmation email].

10.3 An introductory price applies only to the period stated in the offer. After that, the subscription renews at the standard price shown in the offer.

11. Automatic renewal and price changes#

11.1 EXCEPT FOR CRYPTOCURRENCY PREPAYMENTS (SECTION 9.5) AND ACTIVATION CODES (SECTION 9.7), YOUR SUBSCRIPTION RENEWS AUTOMATICALLY AT THE END OF EACH BILLING PERIOD, AND YOU WILL BE CHARGED THE THEN-CURRENT PRICE FOR THE SAME BILLING PERIOD, UNTIL YOU CANCEL. You can cancel at any time (Section 12). [OPEN: if plans of one year or longer are offered, COUNSEL on German and French renewal rules]

11.2 For subscriptions bought on our website, we will tell you in advance of any price increase, in the way the law requires, and you may cancel before the new price applies. For subscriptions bought through Apple or Google, the store notifies you of price changes under its rules. [COUNSEL: notice period by jurisdiction — Cal. Bus. & Prof. Code §17602(g)(2); EV-226; EV-232]

11.3 We will send you reminders of your subscription terms, and notice before a plan of one year or longer renews, where the law requires it [COUNSEL: Cal. Bus. & Prof. Code §17602(b)(2), (h)(1); other state laws — EV-226; EV-232] [ENGINEERING: reminder channel for users without an email address].

12. How to cancel#

12.1 Cancelling stops future renewals. You keep Premium until the end of the period you have paid for, unless you receive a refund [ENGINEERING: QN-08-020]. Trials started through a store may end when cancelled, under that store's rules [VERIFY].

12.2 Apple: cancel in your Apple Account subscription settings. Google Play: cancel in Google Play subscriptions. Website purchases: cancel online in your HidzoVPN account at [ENGINEERING: self-service cancellation page]; you can also email [email protected] with the subject "Cancel Subscription" from your account email, or include that address in your message. Online cancellation is available without any further step that delays or obstructs it [ENGINEERING: if a retention offer is shown, a clearly labeled "click to cancel" option must be shown with it — Cal. Bus. & Prof. Code §17602(d), (e)(2); EV-226].

12.3 Deleting the app does not cancel a subscription. Deleting your account cancels the renewal of a subscription bought on our website [ENGINEERING: automatic cancellation of the Stripe subscription — POL-DEL-001 §1], but not of a subscription billed by Apple or Google; cancel those with the store first.

13. Refunds#

13.1 Refunds are governed by our Refund and Cancellation Policy and, for purchases through Apple or Google, by the rules of that store. Nothing in these Terms limits any right to a refund or other remedy that the law gives you.

13.2 Right of withdrawal (European Union and United Kingdom). If you live in the European Union or the United Kingdom and buy a subscription on our website, you have the right to withdraw from the contract within 14 days after the day the contract is concluded, without giving a reason, as described in the Refund and Cancellation Policy. To withdraw, use the "Withdraw from contract here" function in your account [ENGINEERING: withdrawal function live — RSK-051] or contact us. If you asked us to start the service during the withdrawal period and then withdraw, you pay an amount in proportion to the service provided until you told us you were withdrawing [COUNSEL: wording — CRD Arts. 9, 11a, 14(3); UK CCRs regs. 29–36; EV-232]. For purchases through Apple or Google, the store's process applies [VERIFY: trader for Google Play in the EEA/UK].

13.3 Please contact us before disputing a charge with your bank, so we can try to resolve the issue. This does not limit your right to dispute a charge.

14. Deleting your account#

You can delete your account in the app or as described in our Account and Data Deletion Policy. Deleting your account cancels the renewal of a subscription bought on our website [ENGINEERING: POL-DEL-001 §1], but does not cancel a subscription billed by Apple or Google. We delete or de-identify your information as described in the Privacy Policy and the Account and Data Deletion Policy.

15. Privacy#

Our Privacy Policy explains what information we process, why, for how long and what choices you have.

16. Third-party services#

16.1 The Services rely on third parties such as app stores, payment processors, sign-in providers and hosting providers [OPEN — D4: and, on platforms where advertising is shown, advertising networks]. Their own terms apply to your use of their services.

16.2 We are not responsible for third-party websites, content or products, including those shown in advertisements.

17. Additional terms for apps downloaded from the Apple App Store#

[Aligned with Apple's "Instructions for Minimum Terms of Developer's End-User License Agreement" (items 1–10, reviewed by AI reviewer on 2026-09-25); ENGINEERING: confirm whether a custom EULA is configured in App Store Connect — if not, Apple's Standard EULA governs the iOS license alongside these Terms; COUNSEL to confirm]

This Section applies if you downloaded our app from Apple's App Store. It is included at Apple's requirement.

  • These Terms are between you and HidzoVPN, not Apple. HidzoVPN, not Apple, is responsible for the app and its content.
  • Your license is a non-transferable license to use the app on Apple-branded products you own or control, as permitted by the Usage Rules in the Apple Media Services Terms and Conditions, including use by other accounts associated with the purchaser through Family Sharing or volume purchasing.
  • Apple has no obligation to provide maintenance or support for the app.
  • If the app fails to conform to any applicable warranty, you may notify Apple, and Apple will refund the purchase price, if any, of the app. To the maximum extent permitted by law, Apple has no other warranty obligation for the app.
  • HidzoVPN, not Apple, is responsible for addressing any claims relating to the app, including product-liability claims, claims that the app fails to meet legal or regulatory requirements, and consumer-protection or privacy claims, and for investigating and defending any claim that the app infringes a third party's intellectual-property rights.
  • You represent that you are not located in a country that is subject to a U.S. Government embargo or designated by the U.S. Government as a "terrorist supporting" country, and that you are not listed on any U.S. Government list of prohibited or restricted parties [COUNSEL (OFAC): this representation is required by Apple; whether the iOS app may be offered to users in comprehensively sanctioned jurisdictions is Board decision D3 — RSK-044; EV-223; publication blocker].
  • Questions, complaints or claims about the app may be sent to HidzoVPN, Inc., 7901 4th Street North, Suite 9375, Saint Petersburg, FL 33702, United States; [OPEN: telephone — QN-01-015]; [OPEN: [email protected]].
  • You must comply with third-party terms that apply when you use the app.
  • Apple and its subsidiaries are third-party beneficiaries of these Terms and, upon your acceptance of these Terms, may enforce them against you.

18. Changes to the Services#

18.1 We may update, change or stop features, servers, locations, protocols or plans for legitimate reasons, such as security, legal requirements, technical changes or changes in our providers. We will give reasonable notice of a change that materially reduces a paid feature, where practicable and where the law requires it.

18.2 If we permanently stop providing a paid subscription that you bought on our website before the end of its paid period, and not because you broke these Terms, we will refund the unused part of the period or offer you an equivalent service [OPEN: confirm].

18.3 If you are a consumer in the European Union or the United Kingdom and a change to a paid feature has more than a minor negative effect on you, we will tell you in advance, and you may end your subscription free of charge within 30 days after the change and receive a refund for the unused period [COUNSEL: Directive (EU) 2019/770 Art. 19; UK law].

19. Intellectual property and feedback#

19.1 HidzoVPN and its licensors own the Services, including the software, designs, text, trademarks and logos. You receive only the license described in Section 6.

19.2 If you send us feedback or suggestions, you allow us to use them without payment or attribution.

20. Disclaimers#

TO THE EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE". WE DO NOT PROMISE THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE OR SECURE AGAINST EVERY THREAT, OR THAT THEY WILL GIVE ACCESS TO ANY PARTICULAR CONTENT. TO THE EXTENT PERMITTED BY LAW, WE EXCLUDE IMPLIED WARRANTIES, INCLUDING OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT.

If you are a consumer in the European Union or the United Kingdom, you have legal rights if a paid service is not provided with reasonable care and skill or does not conform to the contract; this Section does not limit those rights. If the law of your place of residence gives you other rights that cannot be excluded, this Section does not affect them.

21. Limitation of liability#

21.1 TO THE EXTENT PERMITTED BY LAW, WE ARE NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, DATA OR GOODWILL.

21.2 TO THE EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICES OR THESE TERMS IS LIMITED TO THE AMOUNT YOU PAID FOR THE SERVICES IN THE 12 MONTHS BEFORE THE EVENT THAT GAVE RISE TO THE CLAIM [OPEN: add a minimum amount for users of the Free Service, e.g. US$50].

21.3 Nothing in these Terms limits liability that cannot be limited by law, including, where applicable, liability for fraud, gross negligence, willful misconduct, or death or personal injury caused by negligence, or your statutory rights as a consumer. [COUNSEL: New Jersey TCCWNA-specific drafting for Sections 20–22 — Reported]

22. Indemnity#

To the extent permitted by law, you will compensate HidzoVPN for claims, losses and reasonable legal costs arising from your unlawful use of the Services or your breach of these Terms. This does not apply to losses caused by our own fault [COUNSEL: EU/UK unfair-terms review; whether to exclude consumers in the EU and UK expressly].

23. Suspension and termination#

23.1 You may stop using the Services at any time. To end a subscription, cancel it (Section 12).

23.2 We may suspend or end your access if you break these Terms or the Acceptable Use Policy, if we reasonably suspect fraud or a security threat, if payment fails, or if the law, a court, an authority or an app store requires it. Where reasonable and lawful, we will tell you first and give you a chance to fix the problem. The Acceptable Use Policy explains how decisions are made and how to appeal.

23.3 If we end a paid subscription because we reasonably determined that you seriously broke these Terms, you are not entitled to a refund, except where the law requires one.

23.4 Sections 9 (amounts owed), 13, 19 to 22 and 26 to 30 continue after termination. Your license under Section 6 ends.

24. Requests from authorities#

We respond to requests from courts, governments and law-enforcement authorities as described in our Law Enforcement Guidelines [OPEN: link — POL-LE-001]. Requests must be sent to the address given there. We may challenge requests that are invalid or overbroad.

25. Changes to these Terms#

25.1 We may update these Terms. We will publish the new version with its effective date and keep earlier versions available [OPEN: archive].

25.2 If a change is material, we will give you reasonable notice before it takes effect, for example by email or in the app, and, where the law requires it, ask for your agreement. If you do not agree, you may cancel before the change takes effect [COUNSEL: whether continued use after notice is sufficient for existing subscribers — DEC-2026-001 §7; RSK-047].

25.3 A change to Section 27 or 28 does not apply to a dispute that either of us knew about before the change took effect.

26. Sanctions and export controls#

[COUNSEL: OFAC counsel to approve this section — RSK-044; BRF-2026-001 P0-6, P1-1, D3]

26.1 The Services are subject to United States sanctions and export-control laws and may be subject to the laws of other countries. You may not use the Services in a way that would cause HidzoVPN to breach those laws.

26.2 You may not use the Services if you are, or act for, a person on a U.S. sanctions list or a person with whom U.S. persons are prohibited from dealing, or if you are acting for a government that is subject to U.S. sanctions, unless the law permits it.

26.3 We may restrict registration, payment methods, downloads, server access or support in particular countries or regions, or for particular persons, where we consider it necessary to comply with the law.

26.4 [OPEN — D3: paid plans are not available to persons located in [countries]]

27. Governing law and courts#

27.1 These Terms are governed by the laws of the State of Florida, United States, without regard to its conflict-of-laws rules. The UN Convention on Contracts for the International Sale of Goods does not apply.

27.2 Except as Section 27.3 provides, and subject to Section 28, disputes will be heard by the state courts in Pinellas County, Florida, or the federal court for the district that includes Pinellas County [COUNSEL: venue — RSK-046].

27.3 Consumers. If you are a consumer, you keep the protection of the mandatory laws of the country and state where you live. If you live in the European Union or the United Kingdom, you may bring proceedings in the courts where you live, and we may bring proceedings against you only in those courts [COUNSEL: Brussels Ia Arts. 18–19; UK equivalent — VERIFY]. Either of us may bring an eligible individual claim in a small-claims court.

28. Resolving disputes#

28.1 Talk to us first. Before starting a claim, please send a written description of the dispute, your account email and the outcome you want to [OPEN: [email protected]]. We will try in good faith to resolve it within 30 days. This does not prevent either party from seeking urgent relief or from starting proceedings to prevent a claim from becoming time-barred.

28.2 [COUNSEL: DEC-2026-002 — choose one of the alternatives below and delete the other]

Alternative A — courts. Disputes are resolved in the courts identified in Section 27.

Alternative B — individual arbitration for U.S. users with opt-out (for counsel to draft in full). If you live in the United States, disputes will be resolved by binding individual arbitration administered by [COUNSEL: provider and rules], except for small-claims matters and claims for injunctive relief concerning intellectual property. You may opt out within 30 days after first accepting these Terms by emailing [OPEN]. CLASS AND REPRESENTATIVE ACTIONS ARE NOT PERMITTED IN ARBITRATION UNDER THIS SECTION. [COUNSEL: full clause; mass- arbitration protocol; public-injunction carve-out for California; carve-outs; severability; state-law review]

29. General#

29.1 Electronic communications. You agree that we may give you notices, receipts and other communications electronically, including by email and in the app.

29.2 Events outside our control. We are not responsible for failures caused by events beyond our reasonable control.

29.3 Transfer. You may not transfer your rights under these Terms. We may transfer these Terms to a successor to our business, and we will tell you if we do so.

29.4 No waiver; severability. If we do not enforce a provision, we do not give up the right to do so later. If a court finds a provision unenforceable, the rest of these Terms continue to apply.

29.5 Entire agreement. These Terms and the documents listed in Section 1 are the entire agreement between you and us about the Services. This does not exclude anything we told you that the law treats as part of our contract with you.

29.6 Language. These Terms are written in English. If a translation differs, the English version prevails, unless the law of your place of residence requires otherwise.

30. Contact#

HidzoVPN, Inc. · Legal Information page: [OPEN: https://hidzovpn.com/legal] · Support: [email protected] · Legal notices: [OPEN: [email protected]]

Part of the Terms of Service

Acceptable Use Policy

Version: 1.0 [OPEN] · Effective: [OPEN: date]

This Acceptable Use Policy is part of our Terms of Service. It applies to everyone who uses HidzoVPN, with or without an account [ENGINEERING: first-launch acceptance screen that covers guest users]. It is issued by HidzoVPN, Inc., a Florida corporation.

1. What you may not do#

Except as permitted by our Vulnerability Disclosure Policy, you may not use HidzoVPN, or help or allow anyone else to use it, to:

  1. break any law that protects other people, their property, networks or systems, or any law of the United States [COUNSEL (consumer and OFAC): scope — see Part C.1; a global "any law" rule would treat use of a VPN where VPNs are restricted as a breach];
  2. create, access, store, share or promote child sexual abuse material, or exploit or endanger a child in any way;
  3. commit or help commit fraud, phishing, identity theft, money laundering or unauthorized payments;
  4. send spam or other unsolicited bulk messages;
  5. create, distribute or control malware, ransomware, spyware, botnets or other malicious code;
  6. gain or attempt to gain unauthorized access to any account, device, network or system, including by credential stuffing or brute-force attacks;
  7. scan, probe or test the security of any system without its owner's permission;
  8. take part in denial-of-service attacks or other attacks that overload or disrupt a network or service;
  9. infringe copyright, trademarks or other rights of others, including by sharing content you are not authorized to share;
  10. harass, threaten or incite violence against any person, or support terrorism;
  11. collect data from websites or services in a way that breaks the law;
  12. use the Services in a way that places an unreasonable load on our network or degrades it for other users;
  13. interfere with or attack HidzoVPN's servers, apps, accounts or billing systems, get around plan or device limits, or modify our apps to remove or bypass advertising in the Free Service [OPEN — BRF-2026-001 D4];
  14. resell, share publicly or provide access to the Services as a commercial service without our written permission; or
  15. use the Services after we have suspended or closed your account.

2. File sharing (P2P)#

[ENGINEERING: state the method. If P2P is limited by blocking ports: "We may block ports commonly used for peer-to-peer file sharing on some servers. We do not inspect the content of your traffic to do so." If limiting P2P requires classifying or inspecting traffic, this section and Section 3 must be rewritten to describe it — RSK-028.] Where peer-to-peer file sharing is available, you may use it only for content you have the right to share.

3. How we become aware of abuse#

We monitor the health and security of our systems. We do not monitor the content of your traffic or the websites you visit [ENGINEERING: attestation required; must match Privacy Policy §3.3]. We learn of possible abuse from:

  • complaints from network operators, hosting providers, rights holders, other users and authorities;
  • automated protections that do not inspect the content of your traffic, such as limits on connection rates, blocked outbound ports (for example, ports commonly used to send spam) and limits on simultaneous connections [ENGINEERING: list the controls actually in place]; and
  • account, device and payment signals, such as repeated failed sign-ins or chargebacks.

We do not record the websites you visit, the content of your traffic or your DNS queries [ENGINEERING: attestation EV-201, EV-202; claims register entry required — CLM-034]. We keep connection information only as described in Sections 3.3 and 11 of our Privacy Policy. [ENGINEERING: complete — "We therefore cannot link a VPN server IP address and time to a particular user" / "We can link a VPN server IP address and time to a user only within X minutes of the connection" — must match the Law Enforcement Guidelines §3; register as a claim in the Claims Register]

4. What we may do#

Depending on how serious the problem is, whether it has happened before and the law, we may: warn you; limit or block certain functions or ports; block a device or payment method [ENGINEERING and COUNSEL: retention of blocked identifiers — Privacy Policy §11]; suspend your access; or close your account. Some of these measures are applied by automated rules; a person reviews every appeal. Where reasonable and lawful, we will tell you first and give you a chance to fix the problem. We act without advance notice when this is necessary to prevent harm, protect security, comply with the law or respond to serious abuse. Where we obtain actual knowledge of apparent child sexual abuse material, we report it to the National Center for Missing & Exploited Children as U.S. law requires [COUNSEL: whether HidzoVPN is a "provider" under 18 U.S.C. §2258E].

If we reasonably determine that you have seriously broken this policy and close your paid account for that reason, you are not entitled to a refund, except where the law requires one [COUNSEL: EU/UK unfair-terms review].

4A. Repeat infringement#

We will terminate, in appropriate circumstances, the accounts of users who repeatedly infringe copyright [COUNSEL (copyright): a repeat-infringer policy that can be reasonably implemented under the Company's logging model — 17 U.S.C. §512(i)(1)(A)].

5. Reporting abuse#

To report abuse of our Services, email [OPEN: [email protected] — mailbox to be created] with the IP address, date, time and time zone, and a description. We may not be able to act on reports that do not include this information.

6. Appeals#

If you think we have restricted or closed your account by mistake, email [email protected] with the subject "Account Appeal", your account email or, if you use HidzoVPN without an account, the installation identifier shown in the app, and an explanation. We will review your appeal and reply [OPEN: within X business days]. An appeal does not lift an urgent restriction while it is reviewed.

7. Security research#

If you find a security vulnerability in our Services, please follow our Vulnerability Disclosure Policy [OPEN: link — POL-VDP-001]. Testing that follows that policy is not a breach of this Acceptable Use Policy.

8. Changes#

We may update this policy. We will publish the new version with its effective date.

Part of the Terms of Service

Refund and Cancellation Policy

Version: 1.0 [OPEN] · Effective: [OPEN: date]

This policy explains how to cancel a HidzoVPN subscription and when you can get a refund. It forms part of our Terms of Service. It is provided by HidzoVPN, Inc., a Florida corporation. "Premium" means the paid HidzoVPN plan described in our Terms of Service. Nothing in this policy limits any right you have under the law of the place where you live.

1. Cancel at any time#

Except for cryptocurrency prepayments (Section 6) and Activation Codes (Section 5A), your subscription renews automatically until you cancel [ENGINEERING: confirm the renewal configuration in Stripe, Apple and Google — CLM-025]. Cancelling stops the next renewal. You keep Premium until the end of the period you have already paid for, unless you receive a refund [ENGINEERING: QN-08-020].

Where you boughtHow to cancel
Our website (including purchases made in the Android app downloaded from our website [ENGINEERING: confirm billing path])Online in your account: [ENGINEERING: Account → Subscription → Cancel subscription]. You can also email [email protected] with the subject "Cancel Subscription" from your account email, or include that address in your message. An email cancellation takes effect when we receive it; if we charge you after that, we will refund the charge.
Apple App StoreOn your iPhone or iPad: Settings → your name → Subscriptions → HidzoVPN → Cancel Subscription.
Google PlayIn the Play Store: Payments and subscriptions → Subscriptions → HidzoVPN → Cancel subscription.
GermanyUse the "Verträge hier kündigen" button at [ENGINEERING: URL] [COUNSEL: §312k BGB; whether it may sit behind sign-in]
FranceUse the cancellation function at [ENGINEERING: URL] [COUNSEL: Code de la consommation L.215-1-1]

Deleting the app does not cancel your subscription. Deleting your account cancels the renewal of a website subscription [ENGINEERING: POL-DEL-001 §1], but not of an Apple or Google subscription.

To avoid being charged for the next period, cancel before the renewal time shown in your account or store. Times for website purchases are shown in [ENGINEERING: time zone].

European Union and United Kingdom: see Section 4 for your right to withdraw and get a refund.

1A. Subscriptions started before this policy#

[OPEN — COUNSEL (BRF-2026-001 P1-2; RSK-012): remedy for website subscribers who enrolled under the Terms dated 1 September 2025, for example: "If you subscribed on our website before [date], we will ask you to confirm your subscription before your next renewal" or "you may request a refund of renewal charges made before [date]".]

2. Free trials#

If you cancel a trial before the cancellation deadline, you will not be charged. For trials started through Apple, cancel at least 24 hours before the trial ends [VERIFY: Apple Support 118428; Google Play deadline]. When you start a trial on our website, we send you a confirmation that states the date the trial ends, the price that will be charged after it and a link to cancel online [ENGINEERING]. If you cancel a website trial, you keep Premium until the trial ends [ENGINEERING]. [OPEN: an additional reminder before the trial ends — timing; card-network rules require the reminder content for trials of 7 days or less to be in the sign-up confirmation — EV-406]

3. Refunds for purchases on our website#

[OPEN — BRF-2026-001 D5: choose Alternative A or Alternative B and delete the other]

Alternative A — statutory refunds and discretionary review. We give refunds where the law requires it, including under Section 4. We also review other refund requests individually and may grant a full or partial refund, for example if you were charged by mistake or could not use the service because of a problem on our side.

Alternative B — 30-day refund on your first payment.

  • First payment: you can request a full refund, including any tax charged, within [OPEN: 30] days of your first paid charge. You can use this once per person, account and payment method.
  • Renewals: you can request a full refund of a renewal charge within [OPEN: 7] days of the renewal.
  • Other requests are reviewed individually, and we will refund where the law requires it.

[COUNSEL: 16 C.F.R. Part 239 if "money-back" wording is used in advertising; add a claims-register entry before any marketing use]

Service failures (both alternatives): [OPEN: if Premium is unavailable for more than 72 consecutive hours because of a problem on our side, you can request a pro-rata refund or credit for that time].

How to request: email [email protected] from your account email, or include that address in your message, with the date and amount of the charge. Approved refunds are returned to the original payment method [OPEN: within X business days of approval]. Your bank may take longer to show the refund.

4. Right of withdrawal in the European Union and the United Kingdom#

[COUNSEL: EU/UK consumer counsel to approve this section — EV-232]

4.1 If you live in the European Union or the United Kingdom and buy a subscription on our website, you can withdraw from the contract within 14 days after the day the contract is concluded, without giving a reason.

4.2 To withdraw, use the "Withdraw from contract here" function in your account, then confirm with "Confirm withdrawal"; we send you an acknowledgement by email straight away [ENGINEERING: withdrawal function, available throughout the withdrawal period — RSK-051]. You can also tell us clearly by email to [email protected]. You may use the model withdrawal form below, but you do not have to. If you cancel within the 14-day period, we will ask whether you also want to withdraw and receive a refund under this Section [ENGINEERING: prompt in the cancellation flow].

4.3 If you expressly asked us to start Premium during the withdrawal period and then withdraw, you pay only for the paid service provided until you told us, calculated day by day. You pay nothing for any free-trial period, and nothing at all if you did not make that request. We refund without undue delay and no later than 14 days after we receive your withdrawal, to the payment method you used, free of charge. [COUNSEL: confirm treatment of a VPN subscription as a service contract; checkout must capture the express request and acknowledgement — CRD Arts. 7(3), 8(8), 14(3)–(4); UK CCRs reg. 36]

4.4 For purchases through Apple, Apple handles withdrawals under its own process. For Google Play purchases [VERIFY: whether HidzoVPN or Google is the trader for EU/UK withdrawal purposes — EV-232].

Model withdrawal form#

(complete and return this form only if you wish to withdraw from the contract)
— To [OPEN: HidzoVPN, Inc., EU/UK business address — DEC-2026-001 §4.4; RSK-046], [OPEN: telephone], [email protected]:
— I/We hereby give notice that I/We withdraw from my/our contract for the provision of the following service: HidzoVPN Premium
— Ordered on
— Name of consumer(s)
— Address of consumer(s)
— Signature of consumer(s) (only if this form is notified on paper)
— Date
(Optional: account email, to help us find your account.) [COUNSEL: optional field added to the CRD Annex I(B) model form — acceptable? Annex I(B) text verified first-hand, Cellar consolidated CRD, 2026-09-25]

5. Purchases through Apple or Google#

5.1 Apple: Apple handles refunds for App Store purchases. We cannot issue refunds for Apple purchases. Request a refund at https://reportaproblem.apple.com.

5.2 Google Play: you can ask Google Play for a refund. You can also ask us at [email protected]; we apply Section 3 to Google Play subscriptions [OPEN: or state the rule for the Google channel] and issue approved refunds through Google Play [VERIFY: Google Play Help 15574908, 15574897 — EV-232].

5A. Activation Codes bought from a reseller#

[OPEN — POL-RTOS-001 §0: keep only if a reseller program is launched] An Activation Code gives Premium for a fixed period and does not renew, so there is nothing to cancel. Refunds and any statutory withdrawal right for a code are handled by the reseller that sold it. If we deactivate a code because the reseller broke its agreement with us, contact [email protected] [COUNSEL: remedy — POL-RTOS-001 §4.3].

6. Cryptocurrency purchases#

[OPEN — BRF-2026-001 D7: keep only if cryptocurrency payments are offered] Cryptocurrency purchases are one-time prepayments and do not renew automatically. Refunds, where available under this policy, are paid to a wallet address you control, in [OPEN: the same asset / USDC], for [OPEN: the U.S. dollar value of your original payment / the amount of cryptocurrency received], less network fees. For withdrawals under Section 4, we pay the network fees and refund in the same asset unless you agree otherwise. We do not send refunds to third parties. Blockchain payments cannot be reversed. [COUNSEL: sanctions screening before any refund; money-transmission review before launch]

7. Chargebacks#

If you think you were charged incorrectly, please contact us first so we can try to resolve it. This does not affect your right to dispute a charge with your bank or card issuer.

8. Contact and complaints#

HidzoVPN, Inc. · [email protected] · Legal Information page: [OPEN: https://hidzovpn.com/legal] [OPEN: state a response time only if support can meet it] [OPEN: link to a complaints procedure — Payments Rulebook §5.6]

Supplements the Terms of Service

Vulnerability Disclosure Policy

Version: 1.0 [OPEN] · Effective: [OPEN: date]

HidzoVPN, Inc. accepts reports of security vulnerabilities in our Services. This policy explains how to report a vulnerability, what testing we authorize and what commitments we make. It supplements our Terms of Service. We do not pay rewards for reports.

1. How to report#

Email [OPEN: [email protected]] [OPEN: with our PGP key at https://hidzovpn.com/.well-known/pgp-key.txt]. Please include the affected app, version, website or server; a description of the vulnerability and its possible impact; the steps needed to reproduce it; and how we can contact you. Our contact details are also published in https://hidzovpn.com/.well-known/security.txt [ENGINEERING: file live — RFC 9116].

2. What we will do#

  • We will acknowledge your report within [OPEN: 3] business days [ENGINEERING: owner named; rota in place].
  • We will tell you at least every [OPEN] days whether the issue is still open [ENGINEERING].
  • We will tell you when the vulnerability has been fixed [ENGINEERING].
  • If you wish, we will credit you publicly once the issue is fixed.

3. Scope#

In scope: the HidzoVPN iOS app from the App Store; the HidzoVPN Android app from Google Play or our website; the domains listed here [OPEN: list]; and our VPN servers when you connect to them as an ordinary user of your own account.

Out of scope: services, networks, hypervisors and facilities run by third parties, including Apple, Google, our payment processor and our hosting providers; physical attacks; social engineering of our staff or users; denial-of-service testing; and reports produced only by automated scanners without a demonstrated impact.

4. Rules for testing#

When you test, you must:

  • use only accounts you own or have been given permission to use;
  • not intercept, collect, record or analyze the traffic, tunnel addresses or sessions of any other user;
  • not access, change or delete data belonging to other users — if you reach such data, stop, do not copy, keep or disclose it, delete any copy after you report it, and report it to us;
  • not degrade the Services for other users;
  • not use a vulnerability beyond what is needed to show that it exists;
  • not demand payment in return for not disclosing a vulnerability; and
  • keep the details confidential until the earlier of [OPEN: 30] days after we release a fix and [OPEN: 90] days after your report, unless we agree another date in writing.

Nothing in this policy prevents you from reporting a vulnerability to a national computer security incident response team (CSIRT), ENISA or another competent authority.

5. Our commitments to you#

[COUNSEL: scope and wording — CFAA-aware counsel]

If you comply with this policy:

  • we will not bring a civil claim against you under the U.S. Computer Fraud and Abuse Act, state computer-crime laws, 17 U.S.C. §1201 or our Terms of Service for research that complies with this policy;
  • for that research, we waive the restrictions in Section 6.2 of our Terms of Service and items 6, 7 and 13 of Section 1 of our Acceptable Use Policy; and
  • we will not report that research to law-enforcement authorities as a crime.

These commitments do not apply if you access, keep or disclose other users' data beyond what Section 4 allows, demand payment, disrupt the Services, or disclose before the date in Section 4. They do not limit any notification the law requires us to make about a vulnerability, an incident or a personal-data breach. They bind only HidzoVPN, Inc.; they do not bind any government authority or any other person, and they cannot authorize testing of systems that others own or operate. Our authorization does not cover the laws of the country where you, or the server you test, are located.

6. Legal notifications and your information#

If a vulnerability is being actively exploited, the law may require us to notify the competent CSIRT and ENISA and to inform users. We will not name you in those notices unless the law requires it or you agree [COUNSEL]. We may be unable to engage with, credit or reward people who are located in sanctioned countries or appear on sanctions lists [COUNSEL: OFAC]. We process your contact details as described in our Privacy Policy [OPEN: link; confirm the Privacy Policy covers researcher data].

7. Changes#

We may update this policy. We will publish the new version with its effective date. Questions: [OPEN: [email protected]].