Legal & terms

These Terms of use ("Terms") set the conditions for using web hosting, domain registration, server rental and related Services ("Services") offered by Bananas Hosting ("Company", "we" or "our"). By using or accessing the Services you accept these Terms. If you do not accept them, you must not use the Services.

1.1 Purpose and scope

These Terms cover all Services provided through the Company's website (www.bananashosting.com) or other channels. The Company provides the Services "as is" and gives no warranty.

1.2 User obligations

• You must use the Services for lawful purposes. Illegal activity (for example piracy, spam, DDoS attacks) is forbidden.
• You must not overload the Company's servers. CPU use may not exceed 80%.
• You must be at least 18 years old or have legal guardian consent.
• The Company may suspend Services at any time. For a breach we give 24 hours' notice except in emergencies, when notice is not required.

1.3 Automatic payment and subscription renewal

All hosting services run as automatically renewing subscriptions on Stripe:

• The saved credit/debit card is charged at the end of each period.
• If the card has insufficient funds or bad details, we retry 3 times (once per day).
• After 3 failed attempts the account is automatically suspended.
• On a suspended account the website, email and panel access are closed.

1.4 Prohibited content

Prohibited content includes, without limitation:

• Obscene or illegal pornographic material.
• Files that infringe copyright (MP3, films, etc.).
• Viruses, trojans or malware.
• Pages with racist or hate speech.
• Spam lists or tools for bulk unsolicited email.
• Sites for drugs, weapons or illegal trade.
• Unlicensed gambling sites.
• Propaganda targeting any government.

1.5 Account security

You must keep your account password secret. The Company is not responsible for shared passwords. Two-factor authentication (2FA) is recommended and may be made mandatory.

1.6 Data backup

The Company automatically backs up files on the servers. You remain responsible for backing up your own data. The Company is not liable for data loss, including loss caused by server issues.

1.7 Domain registration

Domain registration is provided by Bananas Hosting through the ResellerClub API. The service is processed via ResellerClub (part of Endurance International Group) as the official registrar API. All domain registrations are fully subject to ResellerClub policies, terms and ICANN (Internet Corporation for Assigned Names and Numbers) rules. By requesting a domain registration you automatically accept ResellerClub's Terms of use, Privacy policy and other related documents. Those documents are published on ResellerClub's official site (resellerclub.com). Bananas Hosting is not a party to those terms and acts only as an intermediary.

Bananas Hosting accepts no direct legal liability for domain registrations. This includes, without limitation: domain ownership, renewal, transfer, dispute resolution or any legal action about a domain. You take on all legal duties of the registration (for example WHOIS verification, GDPR compliance, UDRP claims) and must deal with ResellerClub directly. Bananas Hosting is not responsible for interruption, error or delay in Services provided through the ResellerClub API (API faults, ResellerClub maintenance, etc.). You use the service accepting these risks and may not claim damages from Bananas Hosting.

The Company supports .com, .net, .org, .io, .co, .me and other popular TLDs; supported extensions may change with ResellerClub's catalogue. Registration terms are 1–10 years. Renewal reminders are emailed 30, 15 and 7 days in advance. ResellerClub processes registration confirmation within 24 hours; delays belong to ResellerClub.

• WHOIS privacy (Domain Privacy Protection) is an extra-cost ResellerClub add-on ($2/year or ResellerClub's price). It is provided under ICANN rules and protects user data, but full privacy is not guaranteed.
• Domain transfer through the ResellerClub API is free (with an EPP code). Transfer takes 5–7 days and depends on ResellerClub approval. Bananas Hosting is not responsible for transfer errors.
• Disputes use the UDRP procedure through ResellerClub. You must apply to ICANN-accredited mediators (for example WIPO); Bananas Hosting is not a party.
• The Company does not guarantee domain ownership; you must verify availability and ownership through ResellerClub. After registration ownership is yours, but the name is held in ResellerClub's registry.
• Premium domains (high-demand or specially priced names) carry extra ResellerClub fees. Those fees may change with the market.
• IDN (Internationalised Domain Names) is supported; Unicode characters are accepted for ResellerClub IDN-capable extensions (.tr, .eu, etc.), subject to validation.
• Domain parking is available through the ResellerClub integration; ad-revenue share on parked domains follows ResellerClub policy.
• Last-minute auction buys are supported via ResellerClub's backorder service; the winning user pays extra fees and Bananas Hosting is not responsible for auction outcomes.
• Developer documentation for the API is ResellerClub's (developer.resellerclub.com). Bananas Hosting's own API for this service is limited.
• Security: DNSSEC can be enabled but must be integrated with ResellerClub's DNS. You must manage DNS settings.
• Extra notice: ResellerClub may restrict registrations from certain countries (for example sanctioned countries). You must check those restrictions.
• Data retention: Domain registration data is stored on ResellerClub servers that follow GDPR/KVKK. Bananas Hosting may access it but does not share it.
• Cancel and refund: Domain registrations are not refundable (ICANN rule); on cancel remaining term may be partly refunded after ResellerClub fees.
• Support: Bananas Hosting provides ticket support for domain issues, but the final resolution is referred to ResellerClub. Response time: 48 hours.
• Legal disclaimer: You indemnify and hold Bananas Hosting harmless from any legal, financial or administrative penalty arising from domain use (for example trademark infringement, spam fines).

1.8 SSL certificates

Bananas Hosting offers SSL certificates to secure all hosted websites.

1.9 Email services and disclaimer

1.9.1 Email services disclaimer

Email services are provided for lawful, legitimate communication. The following disclaimers and limits apply:

Bananas Hosting puts user privacy first. This policy follows KVKK (Turkish Personal Data Protection Law) and GDPR. Collected data is used only to provide the Services.

2.1 Data we collect

We collect:

• Personal details: name, surname, email, phone, address.
• Cookies: for session management.
• Log files: access logs are not kept.
• Support interactions: tickets are deleted after set intervals.
• Analytics: Google Analytics (anonymised).
• Social interactions: LinkedIn, Twitter shares.
• Hosting data: website traffic (opt-in).
• Security data: failed sign-in attempts.

2.2 How we use data

We use data to:

1. Personalise the Service: plan suggestions from your preferences.
2. Billing: automatic invoices.
3. Support: troubleshooting.
4. Marketing: opted-in newsletters (unsubscribe right).
5. Legal compliance: tax filings, court orders.
6. Security: fraud detection.
7. Improvement: service-quality analysis.
8. Third-party sharing: payment providers (Stripe, PayPal), hosting partners (Cloudflare).
9. Emergencies: notice of a data breach.
10. Anonymous statistics: industry reports.

2.3 Data protection

Data is protected with AES-256 encryption. Servers are in EU locations (for GDPR).

2.4 Your rights

KVKK/GDPR rights:

• Access: view your data.
• Rectification: update incorrect data.
• Erasure (right to be forgotten): have your data deleted.
• Objection: object to marketing.
• Portability: export your data.

3.1 Refund when the system is unavailable

If the Service is unavailable (technical faults caused by the Company, unreachable servers), you are treated as justified and we apply:

• In months that fall under the 99.9% uptime guarantee, we credit or extend the period for the billed downtime.
• If unavailability lasts more than 24 hours, that period's fee is fully refunded or deducted from the next period.
• A refund request must be made within 7 days of the outage being identified.

3.2 Cancellation

You may cancel at any time:

• Cancel from the customer panel.
• Prepaid periods are not partly or fully refunded (except system faults under 3.1).
• After cancel the account enters a 7-day suspension process (section 8).

Payments are processed securely on Stripe:

• Visa, MasterCard and American Express are accepted.
• All payments are automatically renewing subscriptions.
• 3D Secure is required.
• Crypto, bank transfer or EFT are not accepted.
• Invoices include 20% VAT.

DDoS protection is provided with Cloudflare.

5.1 Security measures

• Firewall: ModSecurity.
• Encryption: SSL required.
• User education: security tips.
• Incident response: within 1 hour.

You are responsible for content you upload. The Company complies with the DMCA.

6.1 Infringement procedure

Notice address: [email protected]

The Company is not liable for indirect damages.

7.1 Excluded damages

The Company and our brand are never responsible for any crime a user is involved in.

8.1 After automatic payment fails

When an automatic Stripe charge fails:

• We retry 3 times, once per day.
• After 3 failed attempts the account is automatically suspended.
• Website, email and panel access on a suspended account are fully closed.
• Data is not yet deleted but is unreachable.

8.2 Grace period (7-day wait)

Suspended accounts get a 7-day tolerance:

• If payment is made within 7 days the account is automatically reactivated (all access opens).
• During this time data is stored securely but is unreachable.
• At the end of day 7 (168 hours) the account and all its data are fully deleted (Terminate).
• A notice is shown in the panel in the last 24 hours.

8.3 After permanent deletion

• All web files (/home directory) are permanently deleted.
• MySQL databases are dropped (they cannot be restored).
• Email accounts and their contents are deleted.
• User data is also removed from backups.
• This cannot be undone; data-recovery requests are refused.

8.4 Cancellation by the user

• You may request cancel from the panel.
• The account is suspended at the end of the last paid period.
• The 7-day process above then runs.

8.5 Immediate termination by the Company

The account is closed with no grace period if:

• Serious security breaches (hacking, malware, phishing).
• Child sexual abuse or terrorist propaganda.
• Attacks that would damage the server.
• Takedown requests from legal authorities.

Changes are published on the website. Continued use is acceptance. Notice: emailed 15 days in advance.