Legal

Terms of Service

Consumer and business terms for Kepeink's authenticated reverse-connectivity beta, including endpoint-control rules, withdrawal, billing, remedies, and abuse handling.

Terms of Service

  • Release date: 2026-07-15
  • Effective date: 2026-07-15
  • Service and complaint contact: support@kepeink.hu
  • Abuse contact: abuse@kepeink.hu

LAUNCH BLOCKER — COMPLETE THE OPERATOR IDENTITY: the service provider is [FULL LEGAL NAME] e.v., a Hungarian individual entrepreneur with registered address [FULL REGISTERED ADDRESS], individual-entrepreneur registration number [REGISTRATION NUMBER], tax number [TAX NUMBER], registered by [REGISTERING AUTHORITY] (the Operator, we, us, or our). Do not publish or accept these Terms while a bracketed field remains.

These Terms of Service (Terms) govern Kepeink between the Operator and the individual or organisation using the Service (Customer, you, or your). Consumers and business users may use the Service. A consumer is a natural person acting outside their trade, business, craft, or profession. Consumer rights described below apply only where the Customer legally qualifies as a consumer. The Privacy Notice explains personal-data processing and is not a request for consent.

You accept these Terms only when an authenticated human user checks the separate Terms checkbox and selects the acceptance button. The acceptance record identifies the dated documents and their exact cryptographic hashes. Merely requesting an authentication email does not constitute acceptance. We will make the accepted Terms and contract confirmation available on a durable medium; keep that confirmation.

1. Eligibility

You must be at least 18 years old and have legal capacity to contract. If you use Kepeink for an organisation, you confirm that you have authority to act for it. Account and billing information must be accurate and kept current.

The Service is not directed to children. Do not create an Account for a person under 18 or allow a child to control a Tunnel credential.

2. What Kepeink is—and is not

Kepeink is an authenticated, usage-metered reverse-connectivity service. You install an Agent on a device or infrastructure that you own or are lawfully authorised to control. The Agent establishes an outbound authenticated connection to Kepeink. At your express configuration, Kepeink accepts inbound connections for a designated hostname and relays them through that Agent to the endpoint you selected.

Every Tunnel must expose only a specific service or endpoint you own or are authorised to administer. Kepeink is not an anonymous VPN, residential proxy network, exit-node marketplace, IP-address resale service, scraping proxy, censorship-circumvention service, consumer internet proxy, or public relay for arbitrary traffic. It does not supply a general outbound internet connection and must not be made to function as one.

You must not expose or chain through Kepeink a forward proxy, open relay, SOCKS server, VPN gateway, Tor exit, general-purpose HTTP CONNECT service, traffic-resale endpoint, or other facility that lets a person choose arbitrary third-party destinations. You must not configure an Agent target that you do not own or lawfully control. We may apply technical destination restrictions and promptly disable conduct that could turn the Service into a public proxy.

The legal classification of a function depends on the facts and applicable law. Nothing in these Terms guarantees classification as mere conduit, caching, hosting, or another intermediary category. We do not undertake a general monitoring obligation, but we may operate proportionate security and abuse controls and act on sufficiently substantiated notices or lawful orders.

3. Accounts and Workspaces

An Account is the verified identity associated with an email address. A Workspace is a tenant, access-control, and billing boundary. A Tunnel maps a public hostname to an Agent-connected endpoint. Customer Content includes traffic, hostnames, configuration, files, commands, and other material submitted, exposed, or relayed at your direction.

  • Keep Account, session, API, and Agent credentials secret and use multi-factor authentication where available.
  • Use separate machine credentials for automation. Never place credentials in public repositories, images, browser code, support messages, or shared logs.
  • Grant the least access needed and promptly revoke obsolete or suspected credentials.
  • Notify security@kepeink.hu without undue delay of suspected compromise.
  • You are responsible for activity performed with your valid credentials to the extent permitted by applicable law, except where the activity results from our breach or failure to use required care.

4. Endpoint and security responsibilities

You are responsible for the lawful administration, hardening, patching, authentication, backup, capacity, and availability of your infrastructure and Customer Content. You must:

  • own or have documented permission to administer every exposed device, origin, domain, certificate, service, network, and dataset;
  • restrict the Agent's operating-system permissions and network reach to what the Tunnel needs;
  • authenticate an exposed application unless it is intentionally public;
  • maintain independent backups and an alternative access path; and
  • assess whether exposing the endpoint creates privacy, employment, contractual, or regulatory obligations to another person.

Do not use Kepeink as the sole control path for life-safety systems, emergency services, medical devices, industrial control, transport, energy, financial trading, high-risk authentication, or any use where interruption or compromise could cause death, bodily injury, material property damage, or serious regulatory harm. The beta Service is not designed for those uses.

5. Acceptable use

You must comply with applicable law, third-party rights, disclosed provider rules, and these Terms. You must not use or enable use of the Service to:

  • create a general-purpose proxy, anonymous-access service, IP-resale service, traffic relay, or outbound internet gateway described in §2;
  • handle child sexual abuse material, material exploiting minors, terrorist content, or other illegal content;
  • operate malware, ransomware, exploit kits, phishing pages, credential harvesting, fraud, identity-theft infrastructure, exfiltration tools, or botnet command-and-control;
  • send spam, unsolicited bulk messages, or abusive automated communications;
  • conduct denial-of-service activity, credential stuffing, brute force, port scanning, intrusive testing, or unauthorised access;
  • infringe intellectual-property, confidentiality, privacy, data-protection, publicity, or other rights, or defame, harass, threaten, or stalk;
  • circumvent sanctions, export controls, court orders, legally required restrictions, metering, quotas, authentication, or security controls;
  • misrepresent origin, identity, authority, or affiliation;
  • attack, scrape, or probe the Service except as permitted by mandatory law or written security-testing authorisation; or
  • resell, sublicense, white-label, or incorporate the Service into a third-party connectivity product without a signed commercial agreement.

You may use the documented API for legitimate automation. Automated clients must use machine credentials, respect quotas, and avoid patterns that impair availability.

6. Customer Content and privacy roles

You retain your rights in Customer Content. You grant us a non-exclusive, worldwide, royalty-free licence for the contractual term and only to the extent necessary to receive, route, transmit, temporarily buffer, secure, troubleshoot, and act on Customer Content to provide the Service, comply with law, and enforce these Terms.

Where you determine the purpose and means of personal-data processing in Customer Content, you are normally controller and the Operator normally acts as processor. The Data Processing Addendum applies to that processing, including where a consumer is a controller under the GDPR. The household exemption may apply to some purely personal activity, but we do not determine that for you. Each party is an independent controller for data it uses for its own Account administration, billing, security, legal compliance, and dispute purposes. You must give legally required notices to people whose data you route.

In passthrough mode, application payload is intended to remain encrypted between the visitor and your endpoint. In terminated mode, the routing edge decrypts traffic in memory to proxy it. Service metadata and security events are processed as described in the Privacy Notice.

7. Agent and intellectual property

The Service, Agent, installers, interfaces, documentation, trademarks, and Operator-authored materials are owned by or licensed to the Operator. Subject to these Terms, we grant you a limited, revocable, non-exclusive, non-transferable licence during the contract to install and run the Agent solely to use Kepeink for your own authorised endpoints.

Except where mandatory law permits otherwise, you must not sell, sublicense, remove proprietary notices from, derive source from, or exploit proprietary Service components. Open-source components remain governed by their licences. You may provide feedback voluntarily; we may use it without restriction or payment.

8. Beta status and changes

Kepeink is pre-release software operated by a single-founder business. There is no service-level commitment unless an individual written order expressly provides one. Features, protocols, domains, interfaces, limits, locations, and providers may change; pre-release configuration may be reset; and backward compatibility is not promised.

We may make changes necessary for security, law, provider requirements, interoperability, or minor improvements without advance notice where the change does not negatively affect your access or use beyond what is reasonably necessary. We will give clear advance notice on a durable medium of other material adverse changes where practicable, explain the change, and tell consumers about any mandatory right to terminate. Emergency measures may take effect immediately.

9. Availability, maintenance, and support

The Service is provided on a best-effort beta basis. No specific uptime, latency, throughput, capacity, support-response, recovery-time, recovery-point, or geographic commitment applies unless expressly purchased. This does not exclude a consumer's mandatory statutory conformity rights.

Maintenance may be announced through the dashboard, email, or status page when practicable. Support is provided through support@kepeink.hu; there is no 24/7 human-support promise. Maintain an alternative method of reaching important systems.

10. Reports, orders, and moderation

Reports may be submitted at https://manage.kepeink.hu/report or abuse@kepeink.hu. A useful report identifies the exact hostname or URL, describes the issue, supplies supporting facts, identifies the reporter, and confirms a good-faith belief that the information is accurate.

Automated systems may authenticate, deduplicate, prioritise, correlate, or rate-limit reports. A report does not prove wrongdoing. Except where urgent risk or law requires immediate action, restrictions follow an objective assessment and human review. We may request more information.

We may restrict, suspend, preserve, disclose, or remove access where reasonably necessary to address suspected illegality, a security threat, fraud, a substantiated provider complaint, legal process, or material breach. When required and legally permitted, we provide a statement of reasons and a way to contest the decision. We may withhold information where disclosure would be unlawful, compromise security, prejudice an investigation, or facilitate abuse.

You may contest a decision by replying to the notice or writing to support@kepeink.hu. We will provide human review within a reasonable time. We may preserve bad-faith, fraudulent, or repeatedly manifestly unfounded reports as evidence.

11. Suspension, cancellation, and termination

You may stop using the Service, disable Tunnels, cancel a subscription through the method shown at purchase or in the Creem portal, and request Account deletion through the dashboard. Cancellation must be no more difficult than the purchase path under our control. Subscription cancellation stops future renewals; access already purchased normally remains available until its displayed end unless refunded or suspended lawfully.

We may immediately suspend the narrowest appropriate credential, Tunnel, Workspace, feature, or Account where reasonably necessary for security, abuse containment, non-payment, sanctions, provider requirements, legal compliance, material breach, risk to another person, or protection of the Service. Where the issue can be cured and urgency permits, we will first provide a reasonable opportunity to cure.

You may terminate at any time. We may terminate an individual contract on 30 days' notice, or sooner for an uncured material breach or an urgent legal or security reason. We may discontinue the beta Service on 30 days' notice where practicable, or immediately if continued operation becomes unlawful or technically impossible. Consumers retain any mandatory refund and remedy rights.

On termination, credentials may be revoked. Export your configuration before deletion. Data is deleted or anonymised under the Privacy Notice and DPA, subject to accounting, security, evidence, and legal-hold retention. Provisions concerning ownership, accrued payment, liability, disputes, and lawful retention survive where their nature requires it.

12. Prices, Creem, credit, and subscriptions

The total price, currency, taxes, quantity, entitlement period, renewal interval, payment method, and material restrictions are displayed before an order. The checkout must clearly identify any recurring obligation and use an unambiguous payment-obligation button. Do not purchase unless the displayed order is correct.

Creem operates the hosted checkout as merchant of record and may be the contractual reseller for the purchase transaction under the buyer terms displayed at checkout. Creem collects payment, issues payment documents, handles applicable indirect tax, and administers its customer portal. These Terms govern use and technical delivery of Kepeink. The checkout must clearly identify the seller for the transaction and the applicable payment terms.

A Workspace may use prepaid byte credit together with an entitlement period. Traffic may stop when usable credit or entitlement expires. Metering can include both traffic directions and disclosed protocol overhead.

  • A subscription renews at the interval and price displayed before purchase until cancelled.
  • We will not impose an undisclosed recurring charge or materially change a renewal price without legally sufficient advance notice and any required fresh agreement.
  • Promotional and trial credit may have shorter limits and may be withdrawn for fraud or duplicate activation.
  • A chargeback does not remove an amount validly due, but exercising a legal refund or complaint right is not itself a breach.
  • Refund exclusions apply only to the extent permitted by mandatory law and the checkout seller's terms.

Contact support@kepeink.hu and the checkout seller promptly about a billing error. Never send payment-card credentials to support.

13. Consumer withdrawal right

If you are an EEA consumer entering a distance contract, you normally have 14 days to withdraw without giving a reason, starting when the relevant service contract is concluded. To withdraw, send a clear statement to support@kepeink.hu or the postal address in the Legal Notice. You may use the model form below, but it is not mandatory. A message sent before the deadline is sufficient.

If you separately and expressly request paid service to begin during the withdrawal period and then withdraw, you may owe only the proportionate amount for service supplied before withdrawal where applicable law permits. You lose the withdrawal right for a service only after it has been fully performed where all mandatory conditions—including prior express consent and acknowledgement—are satisfied. Merely activating an Account or Tunnel does not by itself waive the right.

Where a transaction is legally digital content not supplied on a tangible medium, loss of the withdrawal right requires the distinct prior express consent and acknowledgement required by law and contract confirmation on a durable medium. We do not infer that consent from acceptance of these Terms.

Refunds due after valid withdrawal will be made without undue delay and normally within 14 days after we receive the withdrawal statement, using the original payment method unless otherwise agreed and without a fee, subject to the checkout seller's lawful processing role.

Model withdrawal form: To [Operator identity and postal/email address], I hereby give notice that I withdraw from my contract for [service/order], ordered on [date]. Consumer name: [name]. Consumer address: [address]. Date: [date]. Signature: [only for paper form].

This section does not limit a more favourable mandatory right in the country where you habitually reside.

14. Consumer conformity and remedies

Consumers have mandatory rights for digital services, including conformity with the contract and legally required updates during the applicable period. If the Service is not in conformity, a consumer may be entitled to have it brought into conformity, receive a proportionate price reduction, terminate, or obtain another remedy under applicable law. Statutory conditions and exceptions apply.

Report a conformity problem to support@kepeink.hu with the Account, affected Tunnel, time, expected behaviour, and safe diagnostic information. Do not include credentials or unnecessary payload. We may ask for reasonable cooperation that uses the least intrusive means available. Beta descriptions and disclosed compatibility limitations form part of the contract only where law permits and they were clearly presented before purchase.

Commercial refunds, service credits, or troubleshooting do not reduce mandatory remedies.

15. Third-party services

Kepeink depends on hosting, DNS, certificate, email, payment, network, and security providers and on your networks. Third-party terms and outages may affect operation. We select and manage our suppliers with reasonable care but do not control them. A link or interoperability does not make us the provider of an unrelated third-party product. The DPA governs subprocessors used for Customer personal data.

16. Warranties and statutory guarantees

Nothing in these Terms excludes a statutory guarantee, conformity duty, remedy, or other right that cannot lawfully be excluded for a consumer. Statements that the Service is beta, best-effort, or dependent on third parties describe the product and risk but do not override mandatory law.

For business Customers only and to the maximum extent permitted by law, the Service is supplied as available with the beta limitations disclosed in these Terms, and implied commercial warranties are excluded except where a signed order states otherwise.

We do not promise that Kepeink will make an insecure endpoint secure, prevent every unauthorised access, preserve the only copy of data, or satisfy a specialised legal, insurance, or regulatory requirement you did not disclose and purchase in writing.

17. Liability

We do not exclude or limit liability where doing so is prohibited, including liability that cannot be excluded for harm to life, physical integrity, or health, or for intentional conduct. Consumer rights and remedies under mandatory law remain intact.

You remain legally responsible for endpoints you expose, content you choose to make available, permissions you grant, and unlawful use you intentionally enable. This does not make you responsible for loss caused by the Operator or for circumstances for which mandatory law assigns responsibility elsewhere.

For business Customers only, and subject to the non-excludable liabilities above, neither party is liable for indirect or consequential commercial loss, and the Operator's aggregate liability arising from the Service is limited to the greater of EUR 500 or fees paid for the affected Service during the 12 months before the event. The cap does not apply where a signed order expressly provides a different cap. This business limitation does not apply to a consumer.

18. Business-customer indemnity

This section applies only to a Customer acting in the course of business. That Customer will indemnify the Operator against a third-party claim to the extent caused by the Customer's unlawful Customer Content, lack of authority over an exposed endpoint, or intentional use of Kepeink as a prohibited proxy, subject to prompt notice, reasonable control of the defence, and mitigation. The indemnity is reduced to the extent the Operator caused the loss. Consumers do not give this contractual indemnity.

19. Complaints and dispute resolution

Send complaints to support@kepeink.hu or the postal address in the Legal Notice. Include your Account email, order or Workspace reference, facts, requested remedy, and supporting material. We will handle written consumer complaints under applicable Hungarian deadlines, normally responding substantively in writing within 30 days, and retain the complaint record as required by law.

If we reject a Hungarian consumer complaint, our response will identify the competent consumer-protection authority and conciliation body (békéltető testület) based on the completed Operator details and the subject of the complaint, and state whether we participate in that procedure where required. The Legal Notice must contain the current body names and contact details before launch. The former EU Online Dispute Resolution platform has been discontinued and is not offered as a channel.

20. Governing law and courts

Hungarian law governs these Terms. If you are a consumer habitually resident in another country, this choice does not deprive you of mandatory protection provided by the law that would apply without the choice.

Mandatory consumer-jurisdiction rules apply. A consumer may use any court available under applicable law and is not required to litigate exclusively at the Operator's address. For business Customers only, Hungarian courts having jurisdiction at the Operator's registered address have exclusive jurisdiction to the extent a written jurisdiction agreement is valid.

Before filing a non-urgent claim, please send a written complaint and allow 30 days for resolution. This does not prevent urgent relief, preservation of evidence, reporting to an authority, exercising a consumer right within its deadline, or filing before a limitation period expires.

21. Changes to these Terms

The dated Terms accepted for an order remain reproducible. We may update Terms prospectively for new orders. For an ongoing service, we will provide clear advance notice on a durable medium of a material change, its reason, effective date, and any right to reject or terminate. We will request fresh clickwrap acceptance where the nature of the change requires agreement. Continuing silently is not treated as consent where mandatory law requires an affirmative act.

22. General

  • Notices. Contract notices may be sent to the verified Account email and displayed in the dashboard. Keep the address current.
  • Assignment. You may not transfer the Account or contract without consent. We may transfer the business or contract only with legally required notice and without reducing mandatory consumer rights.
  • Severability. If a provision is invalid, it is adjusted only to the minimum lawful extent and the remainder continues where legally possible.
  • No waiver. Delay in enforcing a right is not a waiver.
  • Language. Before targeting Hungarian consumers, a lawyer-reviewed Hungarian version must be presented. If versions conflict, mandatory law determines the result; an English-only clause must not disadvantage a consumer who contracted through a Hungarian presentation.
  • Entire agreement. These Terms, an applicable order, displayed product description, and incorporated DPA form the Service agreement. The Privacy Notice remains a statutory notice rather than contractual consent.

Operator identity and full contact information are in the Legal Notice.