Vultr: Difference between revisions
Added page and information |
Minor grammar edits to improve tone |
||
| (14 intermediate revisions by 12 users not shown) | |||
| Line 1: | Line 1: | ||
{{ToneWarning|Needs to be written in a more neutral tone of voice.}} | |||
{{ | {{CompanyCargo | ||
| | |Founded=2014 | ||
| | |Industry=Cloud computing | ||
| | |Logo=Vultr.png | ||
| | |ParentCompany= | ||
| | |Type=Private | ||
| | |Website=https://vultr.com/ | ||
|Description= | |||
}} | }} | ||
'''{{Wplink|Vultr}}''', founded in 2014, is an American cloud service company. Among those cloud services are storage, servers, and databases. | |||
==Consumer impact summary== | |||
{{Ph-C-CIS}} | |||
'''Privacy:''' Vultr collects industry-standard information necessary to provide the service, including registration and billing information, as well as IP addresses. It also collects usage data when interacting with their services (this does not include the user's data stored on their servers). Vultr's privacy policy states that the information is used to improve their services and shared with third parties for marketing purposes, including targeted advertisements.<ref>{{Cite web |author= |title=Legal: Privacy |url=https://www.vultr.com/legal/privacy/ |website=Vultr |date=10 Dec 2025 |access-date=22 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20260115003714/https://www.vultr.com/legal/privacy/ |archive-date=15 Jan 2026}}</ref> | |||
'''Transparency:''' Vultr has had major issues regarding its transparency in the past.{{Citation needed}} Their compliance with information security best practices, verified routinely by external audits, has earned the company multiple industry-recognized certifications and attestations such as [https://secureframe.com/hub/soc-2/what-is-soc-2 SOC 2 Type II] and [https://www.iso.org/standard/27001 ISO 27001].<ref>{{Cite web |author= |title=Security and Compliance |url=https://www.vultr.com/legal/compliance/ |website=Vultr |date= |access-date=15 Mar 2025 |url-status=live |archive-url=https://web.archive.org/web/20250328093828/https://www.vultr.com/legal/compliance/ |archive-date=28 Mar 2025}}</ref><ref>{{Cite web |author= |title=Announcing Vultr's New ISO Certifications |url=https://blogs.vultr.com/Announcing-Vultrs-New-ISO-Certifications |website=Vultr |date= |access-date=15 Mar 2025 |url-status=live |archive-url=https://web.archive.org/web/20241213132458/https://blogs.vultr.com/Announcing-Vultrs-New-ISO-Certifications |archive-date=13 Dec 2024}}</ref> As explained below, Vultr is quite suspicious due to the rights it claimed in the past over user content and the license it granted itself to manage that data, which users store on Vultr's servers. Right now, the wording of those policies is unclear. | |||
Vultr | ==Incidents== | ||
===Vultr amends its terms of service (''2024'')=== | |||
<!-- This likely should be changed to a summary and the majority moved to an incident article. -Sojourna --> | |||
Initially, Vultr's [[terms of service]] (TOS) declared the following content policy for users in clause 5.1:<ref name="tos_2016">{{Cite web |author= |title=Legal |url=https://www.vultr.com/legal/tos/ |website=Vultr |date= |access-date= |url-status=dead |archive-url=https://web.archive.org/web/20160419054251/https://www.vultr.com/legal/tos/ |archive-date=19 Apr 2016}}</ref> | |||
<blockquote>“As between You and Vultr, Vultr acknowledges that it claims no proprietary rights in or to the content (including, without limitation, text, software, music, sound, audio visual works, motion pictures, photographs, animation, video, and graphics) supplied by You for use on Your website ("Your Content"). You hereby grant to Vultr a non-exclusive, worldwide and royalty-free license to copy, make derivative works, display, perform, use, broadcast, and transmit on and via the Internet Your Content, solely for the benefit of You and to enable Vultr to perform its obligations hereunder.”</blockquote> | |||
In June 2021, Vultr rewrote large portions of its TOS, moving clause 5.1 to 15(c), and adding the following content policy under clause ''12.1(a)''<ref name="tos_2021">{{Cite web |author= | |||
|title=Legal Section 12: User Content |url=https://www.vultr.com/legal/tos/#tos_12 |website=Vultr |date= |access-date= |url-status=dead |archive-url=https://web.archive.org/web/20210729200233/https://www.vultr.com/legal/tos/#tos_12 |archive-date=29 Jul 2021}}</ref>, which would become highly controversial: | |||
<blockquote>“You hereby grant to Vultr a non-exclusive, perpetual, irrevocable, royalty-free, fully paid-up, worldwide license (including the right to sublicense through multiple tiers) to use, reproduce, process, adapt, publicly perform, publicly display, modify, prepare derivative works, publish, transmit and distribute each of your User Content, or any portion thereof, in any form, medium or distribution method now known or hereafter existing, known or developed, and otherwise use and commercialize the User Content in any way that Vultr deems appropriate, without any further consent, notice and/or compensation to you or to any third parties, for purposes of providing the Services to you.”</blockquote> | |||
= | In addition to this, a new statement appeared in the ''Terms of Service Highlights'' which strongly implies that users implicitly "agree" to any existing or new terms every time they use Vultr's services:<ref name="tos_2021" /> | ||
<blockquote>“Each time you access and/or use the Services, you agree to be bound by these Terms and any Additional Terms that apply to you.”</blockquote> | |||
Despite this remark, Vultr occasionally asks users to reaffirm their acceptance of those terms. | |||
In March 2024, Vultr asked users to accept its new terms, including clause 12.1(a) mentioned above.<ref name="vultr_blog">{{Cite web |author= |title=A Note About Vultr's Terms of Service |url=https://blogs.vultr.com/a-note-about-vultrs-terms-of-service |website=Vultr |date=29 Mar 2024 |access-date=22 Feb 2026 |url-status=live |archive-url=http://web.archive.org/web/20250708192330/https://blogs.vultr.com/a-note-about-vultrs-terms-of-service |archive-date=8 Jul 2025}}</ref> This sparked outrage among users, who hadn't noticed the 12.1(a) policy until 2024, three years after its debut (as is typical for [[hidden EULA language]]). The most notable complaint came from a [[Reddit]] post claiming that Vultr has the right to use user data for training artificial intelligence.<ref>{{Cite web |author=WyvernCo |title=Warning: Vultr (a major cloud provider) is now claiming full perpetual commercial rights over all hosted content |url=https://old.reddit.com/r/selfhosted/comments/1bouuv7/warning_vultr_a_major_cloud_provider_is_now/ |website=[[Reddit]] |date=27 Mar 2024 |access-date=15 Mar 2025 |url-status=live |archive-url=https://web.archive.org/web/20250520082633/https://old.reddit.com/r/selfhosted/comments/1bouuv7/warning_vultr_a_major_cloud_provider_is_now/ |archive-date=20 May 2025}}</ref> In response to the criticism, Vultr's legal team altered clause 12.1(a) the next day (after the post) to delete the offending paragraph.<ref>{{Cite web |author= |title=Legal Section 12: User Content |url=https://www.vultr.com/legal/tos/#tos_12 |website=Vultr |date= |access-date=15 Mar 2025 |url-status=dead |archive-url=https://web.archive.org/web/20240328233729/https://www.vultr.com/legal/tos/#tos_12 |archive-date=28 Mar 2024}}</ref> | |||
= | The user backlash also provoked an official response from Vultr in which the company wrote:<ref name="vultr_blog" /> | ||
<blockquote>“We value the feedback we receive from our customers, and we want to assure you that Vultr claims no rights to your content. Vultr has never claimed any rights to, used, accessed, nor allowed access to or shared your content, other than as may be required by law or for security purposes.”</blockquote> | |||
Despite Vultr's vow that access to users' content is for security purposes only, the wording of its TOS did not reflect this. It was widely criticized as a gross failure in transparency or, more cynically, as a stealthy attempt to seize the rights to users' personal data for any purpose, without consent. | |||
== | As of February 2026, the older 15(c) clause remains in force:<ref>{{Cite web |author= |title=Legal Section 15: Intellectual Property Rights |url=https://www.vultr.com/legal/tos/#tos_15 |website=Vultr |date= |access-date=22 Feb 2026 |url-status=live |archive-url=https://web.archive.org/web/20250124095655/https://www.vultr.com/legal/tos/#tos_15 |archive-date=24 Jan 2025}}</ref> | ||
<blockquote>“As between You and Vultr, Vultr acknowledges that it claims no proprietary rights in or to Your Content. You hereby grant to Vultr a non-exclusive, worldwide and royalty-free license to copy, make derivative works, display, perform, use, broadcast, and transmit on and via the Internet Your Content, solely for the benefit of You and to enable Vultr to perform its obligations under these Terms.”</blockquote> | |||
Note that the wording of this statement closely mimics Vultr's original 5.1 clause predating 2021. Despite the reassuring tone of this license, it remains unclear what "solely for the benefit of You" means in this context, as that phrase does not appear elsewhere in the TOS. | |||
==Products== | |||
{{Ph-C-P}} | |||
==See also== | |||
{{Ph-C-SA}} | |||
==References== | |||
{{Reflist}} | |||
[[Category:Vultr]] | |||