Terms & Policies

These Terms of Service (together with the Privacy Policy and the billing and data terms below, the "Terms") form a binding agreement between you and Alpha Development SIA. By creating an account, placing an order, or otherwise accessing or using TAKGRID (the "Service"), you accept these Terms. If you do not agree, do not use the Service.

Eligibility

You must be at least 18 years old and legally capable of entering into a contract. If you use the Service on behalf of an organisation, you represent that you are authorised to bind that organisation, and "you" refers to both you and that organisation.

Service Description

TAKGRID provides cloud-hosted TAK server infrastructure and related tooling. Current offerings include:

• Dedicated servers — a TAK server provisioned for your account on a virtual private server, with administrative credentials and resources allocated to you.
• Pay-per-use servers — on-demand server access billed for a fixed period of activity, with no recurring subscription.
• Scout plan — TAK server access hosted on shared infrastructure. Each Scout seat is logically separated from other seats: credentials, groups, and mission data are not shared between seats.
• Included capabilities — VPN access, device management (MDM), video and streaming, and the other platform features described on our pricing page are part of the plans and are not sold separately. Availability and allowances — including device, seat, and storage limits — depend on your plan, and access to them depends on your plan being active and paid.
• Professional services — setup, migration, and support engagements purchased separately, on the scope agreed in writing for that engagement.

We may add, change, or discontinue features. If we discontinue a paid feature you rely on, we will give reasonable notice and you may cancel as described under Billing & Cancellation.

Third-Party and Open-Source Software

The Service deploys and operates third-party software, including TAK Server as released publicly by the TAK Product Center, and open-source projects such as CloudTAK, Mumble, Node-RED and MediaMTX. That software is licensed by its owners under their own terms — TAK Server under the GNU General Public License version 3, and the others under their respective open-source licences — and your use of it is subject to those terms, which prevail over these Terms in respect of that software. We provide hosting, deployment, and operations only; we do not author, warrant, or grant you any licence in third-party software beyond what its licensor grants. Some packages also contain third-party commercial components governed solely by their own licence terms.

We deploy only the publicly released, open-source TAK Server distribution. We do not obtain, host, or distribute restricted-distribution government builds, and you must not ask us to. Where we convey GPL-licensed software to a server we operate for you, you are entitled to the corresponding source code under that licence: it is published by the TAK Product Center at github.com/TAK-Product-Center/Server, and we will provide the corresponding source for any version we deploy, on request to support@takgrid.com, for as long as the licence requires.

Trademarks and No Affiliation

TAK, ATAK, WinTAK, iTAK, TAK Product Center and related names and logos are the property of their respective owners, including the United States Government. We claim no rights in them and use them only descriptively, to identify the software our service is compatible with. TAKGRID and Alpha Development SIA are independent commercial providers and are not affiliated with, sponsored by, endorsed by, certified by, or acting on behalf of the TAK Product Center, the United States Government, or any of its agencies or armed forces. Nothing we publish should be read as a government endorsement of our service.

You are solely responsible for confirming that you are eligible to obtain, use, and operate the software in your jurisdiction and for your intended use, and for holding any account, licence, or authorisation the software's publisher requires of you. Licence rights in that software are granted by its publisher, not by us, and may be changed or terminated by the publisher on terms we do not control; if that happens we may have to change or discontinue the affected feature.

Account Security

You are responsible for maintaining the confidentiality of your account credentials, server certificates, enrollment passwords, and any credentials you issue to your own users, and for all activity carried out under them. We strongly recommend enabling two-factor authentication. Notify us immediately at support@takgrid.com if you suspect unauthorised access.

Suspension and Termination

We may suspend or terminate your account or any server, with notice where practicable and without notice where necessary, if: you breach these Terms; payment fails or a chargeback is raised; your use threatens the security, stability, or lawful operation of our platform or a third party's; or we are required to do so by law, by a supplier, or by a competent authority. Where the cause is capable of remedy and the risk allows, we will give you a reasonable opportunity to remedy it. You may terminate at any time by cancelling as described under Billing & Cancellation.

Changes to These Terms

We may update these Terms. For material changes affecting active paid customers we will give at least 30 days' notice by email or in the dashboard before they take effect; other changes take effect when published. If you do not accept a material change, your remedy is to cancel before it takes effect. Continued use after the effective date constitutes acceptance.

Your Responsibility

You are solely responsible for how you and your users configure and use the Service, for the content and communications you transmit through it, and for compliance with all laws applicable to you and to the people whose data you process. We do not monitor mission content and exercise no editorial control over it.

Prohibited Conduct

You must not use the Service to, or permit any person to:

• violate any applicable law or regulation, or infringe the rights of any person;
• conduct unlawful surveillance, tracking, interception, or location monitoring of any person, including tracking individuals without a lawful basis or the notice and consent the law requires;
• plan, support, coordinate, or carry out violence, terrorism, armed attacks, hostage-taking, trafficking, poaching, or any other criminal activity;
• control, target, guide, or coordinate weapons, munitions, or armed unmanned systems;
• attempt unauthorised access to, scan, probe, disrupt, overload, or test the security of TAKGRID systems or the systems of any other customer or third party without our prior written consent;
• reverse-engineer, resell, sublicense, or white-label the Service except under a separate written agreement with us;
• upload to our infrastructure, or ask us to deploy, any software or data that is subject to restricted distribution, military end-use restrictions, or an export licence requirement — including government-restricted builds of TAK — or any software you are not licensed to use;
• transmit malware, send unsolicited bulk messages, mine cryptocurrency, or run workloads unrelated to TAK operations on our infrastructure;
• exceed the device, seat, storage, or bandwidth limits of your plan, or circumvent any technical or billing control.

Export Control and Sanctions

The Service and the software it deploys are subject to export control and sanctions laws, including those of the European Union, the Republic of Latvia, and the United States. The publicly released civilian TAK software we deploy is classified EAR99 by the US Department of Commerce, which means it is not freely exportable to embargoed destinations, sanctioned or denied parties, or prohibited end uses. You represent and warrant that you are not located in, ordinarily resident in, or acting on behalf of any person in a jurisdiction subject to comprehensive sanctions, and that you are not listed on, or majority owned or controlled by a party listed on, any applicable restricted-party or sanctions list. You must not export, re-export, or make the Service available in breach of those laws. We may refuse, suspend, or terminate service to comply with them.

Government, Defence and Regulated Users

If you are a government, defence, law-enforcement, or emergency-services entity, or a contractor to one, you are responsible for confirming that a commercially hosted service meets your own accreditation, classification, data-residency, and procurement requirements before you use it. The Service is a commercial offering and is not accredited or authorised for classified, controlled unclassified, or otherwise restricted government information.

Alpha Development SIA is the data controller for personal data we process about you as our customer and about visitors to our website. This policy explains what we collect, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

Data We Collect

• Account data — email address, authentication method (Google sign-in or email link), name where you provide it, account settings, two-factor authentication data, and support correspondence.
• Billing data — plan, order history, invoices, and the billing details you give our payment provider. Card numbers are handled by the payment provider and never reach our systems.
• Service data — server names, regions, configuration, versions, resource and connection statistics, and operational logs needed to run and support your servers.
• Technical data — IP address, browser and device information, and pages visited, collected for security, abuse prevention, and analytics.
• Customer content — the data you and your users place on your server — certificates, users and groups, mission data, data packages, messages, files, and, where you use the device management or VPN features, device identifiers, device inventory, and device location history.

A complete, itemised list of everything our platform stores — including what is encrypted and how long each kind of record is kept — is set out under Data & Server Management, "Everything We Store About You".

Legal Bases

We process account, billing, and service data to perform our contract with you; technical and security data on our legitimate interest in operating a secure and reliable service and in understanding how our site is used; billing records to comply with legal obligations; and marketing or non-essential analytics and advertising measurement on the basis of your consent, where consent is required.

How We Use Your Data

To provide, secure, support, and improve the Service, to send transactional messages about your account and servers, to bill you and prevent fraud and abuse, to measure marketing performance in aggregate, and to meet legal obligations. We do not sell or rent your personal data, and we do not use customer content to train machine-learning models.

Service Providers

We share personal data only with providers who process it on our behalf, under contracts that require them to act on our instructions and to protect it. They fall into the following categories: cloud and hosting providers that run the servers in the region you select; network, DNS, and security providers; database and object storage providers; Polar (polar.sh), which processes payments and issues invoices as merchant of record; identity providers used for sign-in; an email provider for transactional email; a messaging provider for device notifications where you use those features; and website analytics and advertising-measurement providers.

We do not publish the individual provider names, as our infrastructure composition is itself security-relevant. Customers with a due diligence, procurement, or data processing agreement requirement may request the current list at support@takgrid.com, and individuals may ask us who holds their personal data. We may also disclose data where required by law or to protect our rights.

International Transfers

Some of these providers, and some of the server regions you can choose, are located outside the European Economic Area — most often in the United States. When personal data leaves the EEA, EU law requires a legal safeguard for that transfer. We rely on either a European Commission adequacy decision covering the destination country, or the Commission's Standard Contractual Clauses in our contract with the provider. You choose the region your server runs in, so if you have your own data-residency rules, choose a region that satisfies them.

Cookies and Analytics

We use essential cookies required for authentication and security. We also use privacy-focused website analytics and, for visitors arriving from our advertising, advertising-measurement tags (including Google Ads conversion tracking) that store click identifiers to attribute a sign-up or purchase to an ad click. These are used for measurement only — we do not build advertising profiles, retarget you, or share your data with advertisers for their own purposes. You can block or delete these cookies at any time through your browser settings without losing access to the Service.

Data Retention

Account data is retained while your account is active and for a reasonable period afterwards to handle disputes and legal claims. Server data is deleted when the server is deleted, as described under Data & Server Management. Dashboard activity logs, server lifecycle logs, provisioning output, device logs, and device location history are deleted automatically 30 days after they are recorded; administrative audit records after 90 days. Accounting and invoicing records are retained for as long as Latvian and EU law requires, currently at least five years.

Security

We apply appropriate technical and organisational measures, including encryption in transit, AES-256-GCM encryption at rest for stored credentials, administrative keys, VPN profiles, two-factor secrets, and device location history, one-way hashing of two-factor backup codes, automatic expiry of logs and location data, access logging, and least-privilege access. No system is completely secure, and we cannot guarantee absolute security. If a personal data breach affecting you occurs, we will notify the competent authority and, where required, you, in accordance with the GDPR.

Your Rights

You have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting processing already carried out. Email support@takgrid.com to exercise any of them.

This includes deletion: you can ask us at support@takgrid.com for a copy of the personal data we hold about you, or to delete your profile and account data entirely. We will confirm your identity, then act on the request without undue delay and within one month at the latest, and tell you when it is done. Deleting your account also deletes any servers still running under it and everything on them, so cancel and export anything you need first. We may keep the minimum required for legal reasons — principally invoicing and accounting records, which Latvian and EU law requires us to retain — and we will tell you if that applies to you. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or with the supervisory authority where you live or work.

Prices, Taxes and Payment Processing

Prices are stated on our pricing page in US dollars. Payments are processed by our payment provider, which acts as merchant of record for the transaction and issues your invoice; their terms and privacy policy apply to the payment itself. Applicable VAT or sales tax is determined and shown at checkout based on your billing location. Business customers are responsible for supplying a valid VAT number where they wish to be invoiced accordingly.

Subscriptions and Renewal

Subscription plans are billed in advance on a recurring monthly basis and renew automatically on the same day each month until cancelled. It is your responsibility to keep a valid payment method on file. If a payment fails we may retry it, and we may suspend or delete the server and its data if the failure is not resolved.

Pay-Per-Use

Pay-per-use servers are paid for up front for a fixed period. They are not subscriptions and do not renew. When the paid period ends, the server and all data on it are permanently deleted. Unused time is not refundable or transferable.

No Free Trials

We do not offer free trials, free demo periods, or free tiers. All plans, including Scout and pay-per-use servers, are paid from the moment of purchase, and provisioning begins immediately after payment is confirmed.

Cancellation

You may cancel a subscription at any time from your dashboard. Cancellation stops future renewals; it does not refund the current period. Your server and access remain available until the end of the period you have already paid for, after which the server and all associated data are permanently deleted.

Refunds

Charges are non-refundable, including for partial billing periods, unused time, servers you stop using, and accidental renewals you did not cancel in time. If you experience a material outage caused by us, contact support@takgrid.com and we will consider a service credit at our discretion. Nothing in this section limits rights you have under mandatory consumer law.

Consumers: Right of Withdrawal

If you are a consumer in the European Union, you normally have 14 days to withdraw from a distance contract. Because our service is supplied immediately, when you place an order you expressly request that we begin performance at once and acknowledge that you lose the right of withdrawal once the service has been fully performed, and that for partial performance you may be charged for the value of what has been supplied. Where the right still applies, you may withdraw by emailing support@takgrid.com within 14 days of purchase.

Chargebacks

Please contact support before disputing a charge with your bank. We may suspend or terminate an account and delete its servers when a chargeback is raised, and we may recover reasonable costs incurred in handling a dispute we successfully defend.

Everything We Store About You

This is the complete inventory of what our platform holds in its own systems, what protects it, and how long it lives. Anything not listed here we do not keep.

We store all of it for one reason: it is what running your service requires. Some of it identifies you and proves a login is really yours; some records what you have paid for, so the right server exists for as long as you are entitled to it; some describes the machines and the users, groups, certificates, and devices you asked us to create, so we can keep operating and managing them for you; and some is the record of what happened — logs we need to fix failures, answer your questions about your own server, and detect abuse. We do not collect data speculatively, we do not sell or rent it, and we do not use your content to train machine-learning models. Where something is sensitive we encrypt it, and where it stops being useful we delete it on the schedules set out below.

• Your account — email address; your name and profile picture if you sign in with Google; whether two-factor authentication is enabled, its secret (encrypted) and your backup codes (stored only as hashes, so they cannot be read back); the time you were last active; and your support correspondence with us. We never hold a password — sign-in is by Google or by an emailed link.
• Billing — your plan, subscription and order status, renewal dates, and the identifiers our payment provider uses for your account. Card numbers, bank details, and billing addresses are held by the payment provider and never reach our systems.
• Your servers — server name, region, IP address, deployed versions, plan, provisioning and upgrade state, and resource and connection statistics. Alongside these we hold the credentials needed to operate the machine — the SSH key, TAK administrator password, and the passwords for bundled services such as Mumble and Node-RED — each encrypted at rest with AES-256-GCM.
• Users and teams on your servers — the TAK usernames, groups, and certificates you create; XMPP room names and membership; Scout seat assignments; and the email addresses of anyone you invite to your team, together with the access level you gave them.
• Files you distribute through device management — where you use device management, the applications, files, and wallpapers you upload for distribution to your devices are held in our object storage so they can be delivered. These are the only customer uploads we store. Mission data, data packages, and CloudTAK content are not uploaded to us — they live on your own server.
• Activity and security logs — a record of actions taken in the dashboard and against your servers — the event, the account and email that performed it, the IP address, and the time — plus the output of provisioning and upgrade runs, and records of blocked or suspicious requests. Dashboard activity, server lifecycle events, and provisioning output are deleted after 30 days; administrative audit records after 90 days.
• Enrolled devices, if you use device management — per device: its name, model, IMEI and serial number, battery level, installed application inventory, Wi-Fi network names it is configured for, device logs, its VPN profile (encrypted), and its location history. Device logs and location history are deleted automatically after 30 days. Coordinates are encrypted at rest with AES-256-GCM and are not readable from a database copy — a stolen dump would show that a device reported at a given time, not where it was. The names and configuration of the device groups you create are stored alongside these.
• Website visits — IP address, browser and device information, pages visited, and, for visitors arriving from our advertising, the ad-click identifier used to attribute a sign-up.

What we do not store: your card details, and the contents of your TAK server. Missions, chat, CoT traffic, imagery, and mission files live on the machine we run for you and are never copied into our own database. We hold administrative access to that machine, as described below, but we do not mirror what is on it.

Ownership of Customer Content

You retain all rights in the data you and your users store on or transmit through your TAKGRID server. You grant us only the limited licence needed to host, transmit, back up where applicable, and operate the Service for you. We do not access, analyse, sell, or share your mission content except as strictly necessary to operate or support the Service, to respond to a support request you raise, or where required by law.

Roles Under the GDPR

For customer content, you are the data controller and we act as processor on your documented instructions. You are responsible for having a lawful basis for the personal data you process — including the data of your team members and, where you use device management or location features, the location and device data of the people carrying those devices — and for giving them the notices and obtaining the consents the law requires. We process such data only to provide the Service, apply appropriate security measures, assist you with data subject requests as reasonably practicable, and delete or return the data on termination. Business customers who require a separate data processing agreement should contact support@takgrid.com.

Device Management and Location Data

Where you use the device management, VPN, or position-reporting features included in your plan, the Service may collect device identifiers, configuration state, and location data from devices you enroll. You are responsible for lawfully enrolling only devices you are entitled to manage, for informing their users, and for complying with employment, privacy, and surveillance law in the relevant jurisdictions. We provide the tooling; we do not decide who is tracked or why.

Deletion

When a server is deleted — on cancellation, at the end of a pay-per-use period, on non-payment, or on termination — its data is destroyed and cannot be recovered. Where a plan states a retention period for stored artefacts such as data packages, that period applies only while the plan is active. When a plan lapses, features that depend on it may become read-only, and data held for them — including device management records and uploaded files — is deleted after a limited grace period. Export what you need before your plan ends.

Administrative Access

We retain administrative (including SSH) access to hosted servers exclusively for provisioning, monitoring, patching, upgrades, support, abuse response, and other platform operations. Administrative keys are encrypted at rest and access is logged. We will not use this access to read your mission content except where necessary for the purposes above or where required by law.

Availability and Maintenance

We aim for high availability and target 99% monthly uptime, measured across the platform. This is a service target, not a contractual service level agreement, and does not entitle you to automatic credits or damages. We perform maintenance and upgrades as needed, announcing planned windows in advance where practicable, and depend on upstream infrastructure providers whose outages are outside our control.

Disclaimer

To the maximum extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, whether express, implied, or statutory, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non-infringement. We do not warrant that the Service will be uninterrupted, timely, secure, or error-free, that data will not be lost, or that any third-party or open-source software deployed by the Service will function as its authors describe.

High-Risk Use

The Service is a commercial communications platform. It is not designed, tested, or certified as a safety-critical, emergency-response, medical, aviation, or life-support system, and you must not rely on it as your sole means of communication where failure or delay could result in death, personal injury, or serious harm. You are responsible for assessing whether the Service is suitable for your operations and for maintaining independent fallback communications appropriate to them.

Exclusions

To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, or for loss of data, profits, revenue, goodwill, business, or anticipated savings, or for damages arising from mission outcomes, operational decisions, failed or delayed communications, inaccurate position data, or third-party conduct, however caused and on any theory of liability.

Cap

Our total aggregate liability arising out of or relating to the Service and these Terms is limited to the amounts you actually paid us for the Service in the twelve (12) months immediately preceding the event giving rise to the claim.

What Is Not Excluded

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, for gross negligence or wilful misconduct where applicable law so requires, or any mandatory statutory rights of consumers.

Indemnity

You will indemnify and hold harmless Alpha Development SIA, its officers, employees, and suppliers against any claim, liability, loss, damage, fine, and reasonable legal cost arising from your use of the Service, your customer content, your users' conduct, your breach of these Terms, or your breach of any applicable law, including data protection, surveillance, export control, and sanctions law. This does not apply to the extent the claim results from our own breach of these Terms.

Force Majeure

We are not liable for any failure or delay caused by events beyond our reasonable control, including upstream provider or network failure, denial-of-service attacks, power or connectivity loss, natural disaster, war, civil unrest, labour disputes, sanctions, embargoes, or acts of government.

Governing Law

These Terms and any dispute arising out of them are governed by the laws of the Republic of Latvia, without regard to conflict-of-law rules and excluding the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, you also keep the protection of the mandatory laws of your country of residence.

Jurisdiction

The courts of the Republic of Latvia have exclusive jurisdiction, except that a consumer may also bring proceedings in the courts of their country of residence and may only be sued there. EU consumers may also approach the consumer protection authority or an alternative dispute resolution body in their own country; in Latvia that is the Consumer Rights Protection Centre (Patērētāju tiesību aizsardzības centrs). We would rather resolve things directly, so please contact support@takgrid.com first.

General

If any provision of these Terms is held invalid or unenforceable, the remainder stays in force and the invalid provision is replaced by an enforceable one closest to its intent. Our failure to enforce a right is not a waiver of it. You may not assign these Terms without our written consent; we may assign them to an affiliate or in connection with a merger, acquisition, or sale of assets, on notice to you. These Terms are the entire agreement between us regarding the Service and supersede any prior understanding, unless you have signed a separate written agreement with us, which prevails to the extent of any conflict. These Terms are published in English; any translation is for convenience only.

For questions about these Terms, your account, privacy requests, or anything else, reach us at:

© 2026 Alpha Development SIA. All rights reserved.