Apply your unique promo code in your account settings to receive a $100 credit.

Github Announcement Bar

Free credit active: Get started on DigitalOcean with a $100, 60-day credit for new users.

$100 60 day credit to new users

Community

Company

Contact

Products

Solutions

Introducing DigitalOcean Functions: A powerful, serverless compute solution

Connect, share and learn

Overview

DevOps and development guides

Tutorials

Development and systems Q&A

Questions and Answers

Community-built integrations

Tools

How to Deploy a PHP Application with Kubernetes on Ubuntu 16.04

How to Build a Node.js Application with Docker

Featured Articles

Get Involved

Scalable virtual machines

Droplets

Managed Kubernetes clusters

Kubernetes

Get apps to market faster

App Platform

Serverless compute solution

Functions

Worry-free setup & maintenance

Databases

Compute

Managed Databases

Developer Tools

Storage

Networking

Featured Products

Easily and reliably host a website

Website Hosting

Quickly build and reliably run your apps

Web & Mobile Apps

Create a highly available streaming service

Video Streaming Hosting

Scale your game as fast as you want

Gaming Development

Quickly set up a fast, reliable, and easy to use VPN

Cloud VPN

Run batch and streaming big data workloads

Big Data Computing

A cloud partnership to power your startup

Startups

Build your SaaS exactly how you want

SaaS Development

Create powerful websites and applications for your clients

Agency & Web Dev Shops

We make cloud hosting simple and cost-efficient

Managed Cloud Hosting Providers

Scalable, affordable compute for your blockchain

Cloud Hosting for Blockchain

Terms of Service Agreement

DigitalOcean, LLC ("Company") has adopted the following general policy toward copyright infringement in accordance with the Digital Millennium Copyright Act ([http://lcweb.loc.gov/copyright/legislation/dmca.pdf](http://lcweb.loc.gov/copyright/legislation/dmca.pdf)) ("DMCA"). The address of the Designated Agent to Receive Notification of Claimed Infringement ("Designated Agent") is listed below.

Procedure for Reporting Copyright Infringement
----------------------------------------------

The Company responds to copyright notifications submitted under the DMCA. Section 512 of the DMCA outlines the statutory requirements necessary for formally reporting copyright infringement, as well as providing instructions on how an affected party can appeal a removal by submitting a counter-notice.

If you believe that material or content residing on or accessible through Company’s websites or services infringes a copyright, please send a notice of copyright infringement containing the following information to the Designated Agent listed below:

1.  A physical or electronic signature of a person authorized to act on behalf of the owner of the copyright that has been allegedly infringed.
2.  Identification of works or materials being infringed; this includes, at a minimum and if applicable, the URL or IP address of the link shown on the site where such material may be found, as well as the reference or link to the material or activity that you claim to be infringing, that is to be removed or access to which is to be disabled, and information reasonably sufficient to permit us to locate that reference or link, including at a minimum, if applicable, the URL or IP address of the link shown on the site where such reference or link may be found.
3.  Contact information about the notifier including address, telephone number and, if available, e-mail address.
4.  A statement that the notifier has a good faith belief that the material is not authorized by the copyright owner, its agent, or the law; include this statement in the body of the notice:
    I hereby state that I have a good faith belief that the disputed use of the copyrighted material or reference or link to such material is not authorized by the copyright owner, its agent, or the law (e.g., as a fair use).
5.  A statement made under penalty of perjury that the information provided is accurate and the notifying party is authorized to make the complaint on behalf of the copyright owner; include this statement in the body of the notice:
    I hereby state that the information in this notice is accurate and, under penalty of perjury, that I am the owner, or authorized to act on behalf of the owner, of the copyright or of an exclusive right under the copyright that is allegedly infringed.

Please contact the Designated Agent at [dmca@digitalocean.com](mailto:dmca@digitalocean.com) or at:

DigitalOcean, LLC 
Attn: Legal
101 Avenue of the Americas, 10th Floor 
New York, NY 10013

Consequences of Sending A DMCA Notice
-------------------------------------

The Company will review your notice for accuracy, validity, and completeness. If we find that it satisfies these requirements, we will forward the notice to the customer or user associated with the allegedly infringing material. If the person who posted the material believes that the notice is incorrect or that they have the right to use the material at issue, they may send a counter-notice under Section 512(g)(3) of the DMCA.

Please be aware that under 17 U.S.C. § 512(f), you may be liable for any damages, including costs and attorneys’ fees incurred by us or our users, if you knowingly materially misrepresent that material or activity is infringing. So before you send a DMCA notice, make sure that you are the actual copyright holder (or are authorized to act on behalf of the owner), that you have a good-faith belief that the material you are identifying is actually infringing, and that you understand the repercussions of submitting a false claim.

Repeat Infringer Policy
-----------------------

Consistent with the requirements of the DMCA, the Company will terminate, in appropriate circumstances, the accounts of subscribers who repeatedly infringe the copyrights of others.

DMCA Copyright Policy

Data Processing Agreement

This Acceptable Use Policy (this “AUP”) describes material and activities that are not allowed in connection with the Services offered by DigitalOcean. This AUP is not exhaustive, and DigitalOcean reserves the right to take remedial action in connection with content or uses that are not specifically described below.

You are responsible for violations of this AUP by anyone using your account with your permission or on an unauthorized basis. You are also responsible for violations of this AUP by Your Users. Your use of the Services to assist another person in an activity that would violate this AUP if performed by you is a violation of the AUP. We may modify this AUP at any time by posting a revised version on the DigitalOcean Websites and/or Services.

All capitalized and formally defined terms in this AUP have the same meaning as in the Terms of Service.

Illegal or Abusive Activity or Content
--------------------------------------

You may not use the Services for any unlawful or abusive purpose. Prohibited activities include:

*   **Illegal Activities.** Any use of the Services to engage in, further, promote, or encourage illegal conduct or activities, including the dissemination of content that has been determined by a court of competent jurisdiction to be unlawful.
*   **Fraudulent or Harmful Activities.** Engaging in activities that is deceptive or harmful to others, or that would harm DigitalOcean’s operations or reputation, including offering or disseminating fraudulent goods, services, schemes, or promotions (e.g., make-money-fast schemes, Ponzi and pyramid schemes, phishing, or pharming), deceptively impersonating another person or entity, or engaging in other fraudulent or misleading practices.
*   **Violation of Intellectual Property Rights.** Using the Services in a manner that violates, infringes on or misappropriates the intellectual property or proprietary rights of any third party, including without limitation any rights in or to copyright, patent, trademark, trade secret, privacy or publicity, and publishing content intended to assist others in unlawfully circumventing technical measures intended to protect any such rights. For more information, please see DigitalOcean’s [Copyright Policy](/legal/dmca-copyright-policy/) and [Trademark Policy](/legal/trademark-notification-policy/).
*   **Unlawful Pornography.** Disseminating child pornography or depictions of nudity or sexual activity obtained or disseminated without the consent of those depicted (e.g., “revenge pornography”).
*   **Violent, Harassing, or Abusive Content.** Content that incites or threatens violence against any person, promotes terrorism, is intended to harass, abuse or invade the privacy of any individual, creates a risk to the physical safety or health of any individual or to public safety or health, or that threatens or encourages harm on the basis of race, ethnicity, national origin, religion, caste, sexual orientation, sex, gender, gender identity, serious disease or disability, or immigration status.
*   **Controlled Substances**. Unlawfully selling or distributing controlled substances, including but not limited to any illegal or prescription drugs.

Security Violations
-------------------

You may not use the Services to violate the security or integrity of any network, computer or communications system, software application, or network or computing device (each, a “System”). Prohibited activities include:

*   **Harmful Software.** Content, software, or any other technology that may damage, interfere with, surreptitiously intercept, or expropriate any computer system, program, or data, including any viruses, malware, spyware, adware, Trojan horses, worms, or time bombs.
*   **Unauthorized Access.** Accessing or using any System without permission, including attempting to probe, scan, or test the vulnerability of a System or to breach any security or authentication measures used by a System.
*   **Interception.** Monitoring of data or traffic on a System without permission.
*   **Falsification of Origin.** Using fake or misleading TCP-IP packet headers, e-mail headers, or any part of a message describing its origin or route. This prohibition does not include the use of aliases or anonymous remailers.

Network Abuse
-------------

You may not make network connections to any users, hosts, or networks unless you have permission to communicate with them. Prohibited activities include:

*   **Monitoring or Crawling.** Monitoring or crawling of a System that impairs or disrupts the System being monitored or crawled, or other harvesting or scraping of any content of the Services.
*   **Deceitful Actions.** Introducing intentionally, knowingly or recklessly, any virus or other contaminating code into the Service, or collecting, transmitting, or using information, including email addresses, screen names or other identifiers, by deceit or covert means (such as phishing, Internet scamming, password robbery, spidering, and harvesting).
*   **Intentional Interference.** Interfering with the proper functioning of any System, including any deliberate attempt to overload a system by mail bombing, news bombing, broadcast attacks, flooding techniques, or conducting a denial of service (“DoS”) attack.
*   **Operation of Certain Network Services.** Operating open proxies, open mail relays, open recursive domain name servers, Tor exit nodes, or other similar network services.
*   **Avoiding System Restrictions.** Using manual or electronic means to avoid any use limitations placed on a System, such as access limits and storage restrictions.
*   **Retaliation Against DigitalOcean.** Any conduct that is likely to result in retaliation against DigitalOcean, including the Services, or DigitalOcean’s employees, officers or other agents, including engaging in behavior that results in any DigitalOcean server being the target of a DoS attack.
*   **Withholding Identity.** Any activity intended to withhold or cloak identity or contact information, including the omission, deletion, forgery or misreporting of any transmission or identification information, such as return mailing and IP addresses.
*   **Mining of Cryptocurrencies**. Mining any cryptocurrency, including but not limited to BitCoin or any similar currency, without explicit written permission.

E-Mail and Other Message Abuse; Spamming
----------------------------------------

You will not distribute, publish, send, or facilitate the sending of unsolicited mass e-mail or other messages, promotions, advertising, or solicitations (like “spam”), including commercial advertising and informational announcements. You will not alter or obscure mail headers or assume a sender’s identity without the sender’s explicit permission. You will not collect replies to messages sent from another internet service provider if those messages violate this AUP or the acceptable use policy of that provider. You must use reasonable efforts to secure any device or network within your control against being used in breach of the applicable laws against spam and unsolicited email, including where appropriate by the installation of antivirus software, firewall software and operating system and application software patches and updates. You will not take any action which directly or indirectly results in any of our IP addresses being listed on any abuse database (e.g., Spamhaus).

You must comply with the laws and regulations applicable to bulk or commercial email in your jurisdiction. In addition, your bulk or commercial email must meet the following requirements:

*   You must have a privacy policy or similar disclosure posted for each domain associated with the mailing;
*   You must have the means to track anonymous complaints;
*   You must not obscure the source of your e-mail in any manner;
*   You must post an email address for complaints (such as abuse@yourdomain.com) in a conspicuous place on any website associated with the email, and you must promptly respond to messages sent to that address;
*   Your intended recipients have given their consent to receive e-mail via some affirmative means, such as an opt-in procedure, and you can produce the evidence of such consent within 72 hours of receipt of a request by the recipient or DigitalOcean;
*   You must use reasonable means to ensure that the person giving consent is the owner of the e-mail address for which the consent is given;
*   You must include the recipient’s e-mail address in the body of the message or in the “TO” line of the e-mail; and
*   You must honor revocations of consent and notify recipients of the same.

These mail policies apply to messages sent using the Services, or to messages sent from any System by you or any person on your behalf that directly or indirectly refer the recipient to a site hosted via the Services. In addition, you may not use a third-party e-mail service that does not practice similar procedures for all of its customers. These requirements apply to distribution lists created by third parties to the same extent as if you created the list.

Vulnerability Testing
---------------------

You may not attempt to probe, scan, penetrate, or test the vulnerability of a DigitalOcean system or network, or to breach the DigitalOcean security or authentication measures, whether by passive or intrusive techniques, or conduct any security or malware research on or using the Services, without DigitalOcean’s prior written consent.

Excessive Use of Shared System Resources
----------------------------------------

You may not use any shared System provided by DigitalOcean in a way that unnecessarily interferes with the normal operation of the shared System, or that consumes a disproportionate share of the resources of the System. For example, we may require you to repair coding abnormalities in your cloud-hosted code if it unnecessarily conflicts with other customers’ use of the Services. You agree that we may quarantine or delete any data stored on a shared System if the data is infected with a virus, or is otherwise corrupted, and has the potential to infect or corrupt the System or other customers’ data that is stored on the same system.

Other
-----

You must have valid and current information on file with your domain name registrar for any domain hosted on the DigitalOcean network. You may only use IP addresses assigned to you by DigitalOcean in connection with your DigitalOcean Service. You agree that if you register a DNS record or zone on DigitalOcean-managed or operated DNS servers or services for a domain of which you are not the registrant or administrative contact according to the registrars’ WHOIS system, that, upon request from the registrant or administrative contact according to the registrars WHOIS system, DigitalOcean may modify, transfer, or delete such records or zones.

Our Monitoring and Enforcement
------------------------------

We reserve the right, but have no obligation, to investigate any suspected violation of this AUP or misuse of the Services about which we have actual knowledge. In connection with such investigations, we may report any activity that we suspect violates any law or regulation to appropriate law enforcement officials, regulators, or other appropriate third parties. Such reporting may include disclosing, reviewing and preserving appropriate customer information consistent with applicable law. We also may cooperate with appropriate law enforcement agencies, regulators, or other appropriate third parties to help with the investigation and prosecution of illegal conduct by providing network and systems information related to alleged violations of this AUP.

Consequences of Violation of AUP
--------------------------------

If we determine, in our discretion, that you have violated this AUP, we may remove, disable access to, or modify any content or resource and/or to suspend or terminate your use of the Services. We also may intercept or block any content or traffic belonging to you or to users where the Services are being used unlawfully or not in accordance with this AUP. Our right to suspend or terminate your use of the Services applies even if a violation is committed unintentionally or without your authorization. Such right is not an obligation on us to act at any given time or with respect to any given Subscriber, and we may exercise such right at any time within our sole discretion.

Reporting of Violations of this AUP
-----------------------------------

If you become aware of any suspected violation of this AUP, please notify us by providing a full explanation of the bases for the violation. We may request your assistance to help stop or remedy the violation. To report any violation of this AUP or make related inquiries, please contact us [here](https://www.digitalocean.com/company/contact/#abuse).

Acceptable Use Policy

### What services does DigitalOcean offer?

DigitalOcean is a cloud computing platform that provides a cloud platform to deploy, manage, and scale applications of any size. Its infrastructure and platform-as-a-service solutions provide a no DevOps required experience, allowing developers to focus their energy on creating innovative software. By combining the power of simplicity, love for the developer community, an obsession for customer service, and the advantages of open source, DigitalOcean brings software development within the technical and economic reach of anyone around the world.

### How does DigitalOcean deliver its services?

DigitalOcean delivers its services via the Internet. Customers log into DigitalOcean’s services through a website using unique usernames and passwords. DigitalOcean’s services allow for various additional authentication methods that may be activated by customers, as appropriate to their needs, such as two-factor authentication. We also serve our customers through what is known in the industry as cloud-based services architecture, which is designed for security, efficiency, availability, scalability, and rapid innovation.

### Where does DigitalOcean host Customer Data?

DigitalOcean’s services are hosted in various locations depending on customer instructions and each specific service provided. Please refer to DigitalOcean’s Trust Platform available at [https://www.digitalocean.com/trust/](https://www.digitalocean.com/trust/) for more information on our data center locations and our use of public cloud infrastructure. If you have questions, please contact [privacy@digitalocean.com](mailto:privacy@digitalocean.com)

### Does DigitalOcean comply with PIPEDA?

Yes. DigitalOcean complies with Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”) as it applies to DigitalOcean in provisioning and operating our services.

### Does PIPEDA permit the cross-border transfer of personal information?

Yes. The Office of the Privacy Commissioner of Canada’s Processing Personal Data Across Borders Guidelines (the “Guidelines”), available at [https://www.priv.gc.ca/en/privacy-topics/airports-and-borders/gl\_dab\_090127/](https://www.priv.gc.ca/en/privacy-topics/airports-and-borders/gl_dab_090127/), state that “PIPEDA does not prohibit organizations in Canada from transferring personal information to an organization in another jurisdiction for processing. However under PIPEDA, organizations are held accountable for the protection of personal information transfers under each individual outsourcing arrangement.” The Guidelines further clarify that organizations responsible for personal information must use contractual or other means to ensure a comparable level of protection for personal information after it is transferred. 

The Guidelines state that a “transfer” of personal information to another organization for processing purposes is a “use” rather than a “disclosure” of the information assuming that the transferred information is processed only for purposes consistent with the purposes for which it was originally collected. The distinction between “uses” and “disclosures” of personal information is important because disclosures of personal information require additional consent from the individual to whom the personal information relates. 

Uses of personal information by DigitalOcean are referred to throughout this FAQ as “processing.”

### Does submission of personal information to DigitalOcean’s services require the consent of the individual to whom personal information relates?

No. Submission of Canadian personal information to DigitalOcean’s services is a use, rather than a disclosure, of such information under PIPEDA. DigitalOcean’s customers solely determine what personal information is submitted to and processed by our services. In providing our services, we process personal information only in accordance with the instructions of our customers and as otherwise consistent with our Terms of Service ([https://www.digitalocean.com/legal/terms-of-service-agreement/](https://www.digitalocean.com/legal/terms-of-service-agreement/)).

### How does DigitalOcean help customers ensure compliance with PIPEDA in their use of DigitalOcean’s services?

DigitalOcean educates and empowers individuals and customers to take a proactive role in the management of their data. The DigitalOcean privacy landing page at [https://www.digitalocean.com/legal/privacy-policy/](https://www.digitalocean.com/legal/privacy-policy/) includes links to a variety of resources describing how we protect personal data, such as our customer data processing addendum ([https://www.digitalocean.com/legal/data-processing-agreement/](https://www.digitalocean.com/legal/data-processing-agreement/)), which contains (i) an obligation for DigitalOcean to use and disclose personal information in accordance with agreed processing terms; (ii) a commitment to assist customers in responding to the exercise of rights by individuals whose personal information is processed by customers on DigitalOcean services; (iii) measures related to confidentiality obligations of DigitalOcean’s personnel; (iv) obligations regarding DigitalOcean’s use of subcontractors engaged in the processing of personal data; (v) information about DigitalOcean’s security controls; (vi) security breach notification commitments; (vii) provisions governing the cross-border transfer of personal data; and (viii) details regarding DigitalOcean’s compliance with customer data deletion requests.

We incorporate privacy and data protection concepts into our product lifecycle from the design phase to the marketing of new services and features. Additionally, when a service or feature is released, it is described in product documentation and release notes so that customers can perform their own evaluations.

### How does DigitalOcean help protect Customer Data?

DigitalOcean has a robust and comprehensive privacy and security program addressing the use, disclosure, and protection of Customer Data. DigitalOcean has implemented an array of technical measures to help secure its services. A third party regularly certifies, validates, and audits DigitalOcean’s information technology and controls. For further details on DigitalOcean’s privacy and security program, please see the Trust Platform, available at [https://www.digitalocean.com/trust/](https://www.digitalocean.com/trust/).

PIPEDA FAQ

This Privacy Policy describes how DigitalOcean, LLC and its affiliates ("DigitalOcean," "we," "our" or "us") collect, use, and share information in connection with your use of our websites (including www.digitalocean.com), services, and applications (collectively, the "Services"). This Privacy Policy (the "Privacy Policy") does not apply to information our customers may process when using our Services.

If you are looking for CCPA-specific information, check out our [CCPA Privacy Notice](https://www.digitalocean.com/legal/ccpa-privacy-notice/) as well, which is incorporated into this Privacy Policy.

We may collect and receive information about users of our Services ("users," "you," or "your") from various sources, including: (i) information you provide through your user account on the Services (your "Account") if you register for the Services; (ii) your use of the Services; and (iii) from third-party websites, services, and partners.

We recommend that you read this Privacy Policy in full, including the Additional Disclosures referenced at the bottom of this document, to ensure you are fully informed. If you have any questions about this Privacy Policy or DigitalOcean's data collection, use, and disclosure practices, please contact us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com).

1\. Information We Collect
--------------------------

1.  **Information You Provide**

    I. **Account Registration.** When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number. If you choose to refer a friend to our Services, we may also collect your friend’s email address so that we may send them a referral or promotional code to sign up for our Services.\\

    II. **Payment Information.** When you add your financial account information to your Account, that information is directed to our third-party payment processor. We do not store your financial account information on our systems; however, we have access to, and may retain, subscriber information through our third-party payment processor.

    III. **User Content.** Our "Community" feature allows you to publicly post content on our Services. By registering for our Community, you agree that your profile information and the content you post may be viewed and used by other users and third parties we do not control.

    IV. **Communications.** If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide. We may also receive a confirmation when you open an email from us.

    The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

2.  **Information We Collect When You Use Our Services.**

    I. **Cookies and Other Tracking Technologies.** As is true of most websites, we gather certain information automatically and store it in log files. In addition, when you use our Services, we may collect certain information automatically from your device. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, clickstream data, landing page, and referring URL. To collect this information, a cookie may be set on your computer or device when you visit our Services. Cookies contain a small amount of information that allows our web servers to recognize you. We store information that we collect through cookies, log files, and/or clear gifs to record your preferences. We may also automatically collect information about your use of features of our Services, about the functionality of our Services, frequency of visits, and other information related to your interactions with the Services. We may track your use across different websites and services. In some countries, including countries in the European Economic Area ("EEA"), the information referenced above in this paragraph may be considered personal information under applicable data protection laws.

    II. **Usage of our Services.** When you use our Services, we may collect information about your engagement with and utilization of our Services, such as processor and memory usage, storage capacity, navigation of our Services, and system-level metrics. We use this data to operate the Services, maintain and improve the performance and utilization of the Services, develop new features, protect the security and safety of our Services and our customers, and provide customer support. We also use this data to develop aggregate analysis and business intelligence that enable us to operate, protect, make informed decisions, and report on the performance of our business.

3.  **Information We Receive from Third Parties.**

    I. **Third-Party Accounts.** If you choose to link our Services to a third-party account, we will receive information about that account, such as your authentication token from the third-party account, to authorize linking. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.

2\. How We Use Information
--------------------------

We use the information we collect in various ways, including to:

*   Provide, operate, and maintain our Services;
*   Improve, personalize, and expand our Services;
*   Understand and analyze how you use our Services;
*   Develop new products, services, features, and functionality;
*   Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes;
*   Process your transactions;
*   Send you text messages and push notifications;
*   Find and prevent fraud; and
*   For compliance purposes, including enforcing our Terms of Service, or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.

3\. How We Share Information
----------------------------

We may share the information we collect in various ways, including the following:

1.  **Vendors and Service Providers.** We may share information with third-party vendors and service providers that provide services on our behalf, such as helping to provide our Services, for promotional and/or marketing purposes, and to provide you with information relevant to you such as product announcements, software updates, special offers, or other information.
2.  **Aggregate Information.** Where legally permissible, we may use and share information about users with our partners in aggregated or de-identified form that can’t reasonably be used to identify you.
3.  **Advertising.** We work with third-party advertising partners to show you ads that we think may interest you. These advertising partners may set and access their own cookies, pixel tags, and similar technologies on our Services, and they may otherwise collect or have access to information about you which they may collect over time and across different online services. Some of our advertising partners are members of the Network Advertising Initiative or the Digital Advertising Alliance. To learn more about these programs, or opt-out of personalized ads, visit the Digital Advertising Alliance’s Self-Regulatory program for Online Behavioral Advertising at [www.aboutads.info](http://www.aboutads.info/), or the Network Advertising Initiative at [www.networkadvertising.org](http://www.networkadvertising.org/).
4.  **Third-Party Partners.** We also share information about users with third-party partners in order to receive additional publicly available information about you.
5.  **Information We Share When You Sign Up Through a Referral.** If you sign up for our Services through a referral from a friend, we may share information with your referrer to let them know that you used their referral to sign up for our Services.
6.  **Analytics.** We use analytics providers such as Google Analytics. Google Analytics uses cookies to collect non-identifying information. Google provides some additional privacy options regarding its Analytics cookies at [http://www.google.com/policies/privacy/partners/](http://www.google.com/policies/privacy/partners/).
7.  **Business Transfers.** Information may be disclosed and otherwise transferred to any potential acquirer, successor, or assignee as part of any proposed merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
8.  **As Required By Law and Similar Disclosures.** We may also share information to (i) satisfy any applicable law, regulation, legal process, or governmental request; (ii) enforce this Privacy Policy and our Terms of Service, including investigation of potential violations hereof; (iii) detect, prevent, or otherwise address fraud, security, or technical issues; (iv) respond to your requests; or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
9.  **With Your Consent.** We may share information with your consent.

4\. Legal Basis for Processing Personal Information
---------------------------------------------------

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only (i) where we need the personal information to perform a contract with you; (ii) where the processing is in our legitimate interests and not overridden by your rights; or (iii) where we have your consent to do so.  We have a legitimate interest in operating our Services and communicating with you as necessary to provide these Services, for example when responding to your queries, improving our platform, undertaking marketing, or for the purposes of detecting or preventing illegal activities.

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

5\. Third-party Services
------------------------

You may access other third-party services through the Services, for example by clicking on links to those third-party services from within the Services. We are not responsible for the privacy policies and/or practices of these third-party services, and we encourage you to carefully review their privacy policies.

6\. Security
------------

DigitalOcean is committed to protecting your information. To do so, we employ a variety of security technologies and measures designed to protect information from unauthorized access, use, or disclosure. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information. However, please bear in mind that the Internet cannot be guaranteed to be 100% secure.

7\. Data Retention
------------------

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8\. Access
----------

If you are a registered user, you may access certain information associated with your Account by logging into our Services or emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com). If you terminate your Account, any public activity on your Account prior to deletion may remain stored on our servers and may remain accessible to the public.

To protect your privacy and security, we may also take reasonable steps to verify your identity before updating or removing your information. The information you provide us may be archived or stored periodically by us according to backup processes conducted in the ordinary course of business for disaster recovery purposes. Your ability to access and correct your information may be temporarily limited where access and correction could: inhibit DigitalOcean's ability to comply with a legal obligation; inhibit DigitalOcean's ability to investigate, make or defend legal claims; result in disclosure of personal information about a third party; or result in breach of a contract or disclosure of trade secrets or other proprietary business information belonging to DigitalOcean or a third party.

9\. Your Data Protection Rights Under the General Data Protection Regulation (GDPR)
-----------------------------------------------------------------------------------

If you are a resident of the EEA, you have the following data protection rights:

*   If you wish to **access, correct, update, or request deletion** of your personal information, you can do so at any time by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
*   In addition, you can **object to the processing** of your personal information, ask us to **restrict the processing** of your personal information, or **request portability** of your personal information. Again, you can exercise these rights by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
*   You have the right to **opt-out of marketing communications** we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you. To opt-out of other forms of marketing, please contact us by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
*   Similarly, if we have collected and process your personal information with your consent, then you can **withdraw your consent** at any time.  Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
*   You have the **right to complain to a data protection authority** about our collection and use of your personal information. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

10\. Your Choices
-----------------

You can use some of the features of the Services without registering, thereby limiting the type of information that we collect.

You may unsubscribe from receiving certain promotional emails from us. If you wish to do so, simply follow the instructions found at the end of the email. Even if you unsubscribe, we may still contact you for informational, transactional, account-related, or similar purposes.

Many browsers have an option for disabling cookies, which may prevent your browser from accepting new cookies or enable selective use of cookies. Please note that, if you choose not to accept cookies, some features and the personalization of our Services may no longer work for you. You will continue to receive advertising material but it will not be tailored to your interests.

11\. Children's Privacy
-----------------------

DigitalOcean does not knowingly collect information from children under the age of 13, and children under 13 are prohibited from using our Services. If you learn that a child has provided us with personal information in violation of this Privacy Policy, you can alert us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com).

12\. Changes to this Privacy Policy
-----------------------------------

This Privacy Policy may be modified from time to time, so please review it frequently. Changes to this Privacy Policy will be posted on our websites. If we materially change the ways in which we use or share personal information previously collected from you through our Services, we will notify you through our Services, by email, or other communication.

13\. International Data Transfers
---------------------------------

DigitalOcean is a global business. We may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.

**EU-U.S. and Swiss-U.S. Privacy Shield.** For personal data we receive from the EEA and Switzerland, DigitalOcean has certified its compliance to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from such countries. To access the Privacy Shield List and to find details of our certification, please visit: [https://www.privacyshield.gov/](https://www.privacyshield.gov/).

DigitalOcean currently utilizes [Standard Contractual Clauses](https://www-static.cdn.prismic.io/www-static/4578633e-ba6b-4c45-845c-1e69848c6e3b_DigitalOcean+SCC+Template.pdf) in connection with transfers of data from the EEA to the US insofar as the EU-US Privacy Shield is deemed invalidated and other means are not yet in place. Please also refer to our [GDPR FAQ](https://www.digitalocean.com/legal/gdpr-faq/) and [Data Processing Agreement](https://www.digitalocean.com/legal/data-processing-agreement/) for more information about data transfers.

Contact Us
----------

If you have any questions or concerns about this Privacy Policy, please feel free to email us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com).

The data controller of your personal information is DigitalOcean, LLC.

Additional Disclosures
----------------------

[CCPA Privacy Notice](https://www.digitalocean.com/legal/ccpa-privacy-notice/)

Privacy Policy

If you are a trademark owner who believes that material being hosted by a DigitalOcean customer violates your trademark rights, you can send a notification of alleged infringement. To do so, please send a notice to the Designated Agent listed below that includes all of the following information:

1.  A physical or electronic signature of a person authorized to act on behalf of the owner of the trademark that has been allegedly infringed.
2.  Identification of the trademark that is being infringed. If this is a registered trademark, you should include the registration information; if it is not a registered trademark, please provide a description or a copy of the trademark at issue.
3.  Identification of the material you believe is infringing your trademark. This should include the URL where such material may be found (if one exists), and any other information (including IP address) that will enable us to locate that material.
4.  Your contact information, including address, telephone number, and e-mail address.
5.  A statement that you have a good faith belief that the material is not authorized by the trademark owner, its agent, or the law.
6.  A statement made under penalty of perjury that the information provided is accurate and that the notifying party is authorized to make the complaint on behalf of the trademark owner.

DigitalOcean will review your notice for accuracy, validity, and completeness. If we find that it satisfies these requirements, we will forward the notice to the customer or user associated with the allegedly infringing material.

Please contact the Designated Agent at [dmca@digitalocean.com](mailto:dmca@digitalocean.com) or at:

DigitalOcean, LLC 
Attn: Legal
101 Avenue of the Americas, 10th Floor 
New York, NY 10013

Trademark Notification Policy

Overview
--------

The [General Data Protection Regulation](http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG&toc=OJ:L:2016:119:TOC) (GDPR) is the most significant legislative change in European data protection laws since the EU Data Protection Directive ([Directive 95/46/EC](https://en.wikipedia.org/wiki/Data_Protection_Directive)), introduced in 1995. The GDPR became enforceable on May 25, 2018, strengthens the security and protection of personal data in the EU and serves as a single piece of legislation for all of the EU. It replaced the EU Data Protection Directive and all the local laws relating to it.

DigitalOcean supports the GDPR and all DigitalOcean services comply with its provisions. Not only is the GDPR an important step in protecting the fundamental right of privacy for European citizens, it has raised the bar for data protection, security and compliance in the industry.

*   [FAQ](https://www.digitalocean.com/legal/gdpr-faq/)
*   [Data Processing Agreement](https://www.digitalocean.com/legal/data-processing-agreement/)
*   [Data Portability](https://www.digitalocean.com/legal/data-portability/)

GDPR

These guidelines are intended for those seeking information about a DigitalOcean account, or looking to take action against a resource hosted on our network.

Requesting DigitalOcean User Information
----------------------------------------

Safeguarding our users' data is vital to the trust our users place in our service to keep their data secure. For the most part, DigitalOcean's ability to disclose user information is governed by the Electronic Communications Privacy Act, 18 U.S.C. §2701, et seq. ("ECPA"). ECPA mandates that DigitalOcean disclose certain user information to law enforcement only in response to specific types of legal process, including subpoenas, court orders, and search warrants.

To request information for a site hosted on DigitalOcean, the site's IP address and a date range must be specifically included in the request. We can't process overly broad or vague requests. If your inquiry alerts us to a violation of our policies or Terms of Service, we will handle it via our usual abuse procedures which may include contacting the user regarding their misconduct or suspending the site entirely.

What Information Is Available?
------------------------------

Our [Privacy Policy](https://www.digitalocean.com/legal/privacy-policy/) describes the information that we collect in more detail. In general, we have:

*   The email address currently assigned to the account.
*   The IP address from which a site was created.
*   The date and time at which a site was created.
*   First name, last name, and phone number (if a user elects to provide this information).
*   The PayPal or Stripe transaction information for purchases (this does not include credit card or bank account information, but may include country code or postal code).
*   Physical address (if a user elects to provide this information).
*   The contents of the Droplet itself (if the Droplet has not been deleted by the user).

We cannot guarantee that we will have any given set of information for any particular user.

The length of time data is retained varies based on the type of information and actions of the user. Generally, Droplet contents are purged immediately upon deletion by the customer. Additionally, customers can control the format of their content (e.g. plain text, masked, or encrypted) and can delete or destroy server content whenever they choose. DigitalOcean accounts can contain various information, which is unverified and is provided at the user's discretion.

Before revealing information to anyone who is not the account owner, we require a valid subpoena, warrant, or court order that specifically requests it, unless we have a good faith belief that there is an emergency involving death or serious physical injury. See below for more details.

What Information Is Unavailable?
--------------------------------

Here are some examples of data which we are unable to provide:

*   Connection Logs.
*   Credit Card information.
*   Local and long distance telephone connection records.
*   Records of session times and durations.
*   MAC addresses.
*   Telephone or instrument numbers.

Requests from Government Agencies/Law Enforcement
-------------------------------------------------

*   Except in emergencies (see more below), DigitalOcean turns over protected user information only upon receipt of a valid subpoena, ECPA US court order, or search warrant. Additionally, we will notify affected users about any requests for their account information, unless prohibited from doing so by law or court order (see more below).
*   Upon receipt of a valid **subpoena**, if these pieces of information are available, we can provide user registration information such as the first and last names, phone number, email address, the date/time stamped IP address from which a site was created, the physical address, and the PayPal / Stripe transaction information.
*   Upon receipt of a valid **ECPA court order**, if these pieces of information are available, we can provide access logs which might reveal a user's movements over a period of time, account or private repository settings (for example, which users use certain services, etc.), security access logs other than account creation or for a specific time and date.
*   Upon receipt of a valid **search warrant**, if these pieces of information are available, we can disclose content of customer virtual machines, the content of user communications with customer support, or other forms of content data.
*   For legal requests from government agencies/law enforcement outside of the United States, we require that the request be served via (1) a United States court, (2) an enforcement agency under the procedures of an applicable mutual legal assistance treaty (MLAT), or (3) an order from a foreign government that is subject to an executive agreement that the Attorney General of the United States has determined and certified to Congress satisfies the requirements of 18 U.S.C. 2523.

Emergency Requests
------------------

As US law permits, we may disclose user information to law enforcement without a subpoena or warrant when we believe that doing so without delay is necessary to prevent death or serious physical harm to an identifiable victim. We require emergency requests to be made in writing via email and include all the information available so that we may evaluate the urgency of the request. Please see the example imminent harm request below for emergency process details.

Notification to DigitalOcean Users
----------------------------------

We notify users and provide them with a copy of any legal process regarding their account unless we are prohibited by law or court order from doing so (e.g., an order under 18 U.S.C. § 2705(b)). In those cases, we will notify users and provide them with a copy of the legal process when the non-disclosure order expires.

If a request for information is valid, we will preserve the necessary information, and then make a reasonable effort to notify any affected account owner(s) by sending a message to their verified email address. In most cases, upon notification to the user, that user will be provided with 7 calendar days to file an objection with the court or otherwise legally challenge the request. If, prior to the deadline, we receive notice from the user that he or she has filed an objection to challenge a request, no information will be delivered until that process concludes.

Preservation Requests for DigitalOcean Sites
--------------------------------------------

DigitalOcean honors requests from law enforcement to preserve information in accordance with 18 U.S.C. § 2703(f). Upon receiving a valid preservation request, DigitalOcean will preserve available account information associated with the username listed in the request in an offline file for up to 90 days and will extend the preservation for one additional 90-day period on a renewed request.

Preservation of data is restricted to what is specifically and explicitly requested. You must specify the type of data that is subject to the preservation request, including whether the request relates to subscriber/account information or server content data.

Serving Process on DigitalOcean and Making Inquires
---------------------------------------------------

Any request for user information must include a valid email address for us to return the information or contact with questions. DigitalOcean communicates only via email with a confirmed receipt.

Where permitted, DigitalOcean prefers to receive service via email to [legal@digitalocean.com](mailto:legal@digitalocean.com). Legal process can also be served by mail to:

DigitalOcean, LLC
Attn: Legal Department
101 Avenue of the Americas, 10th Floor
New York, NY 10013

Please make your requests as specific and narrow as possible, including the following information:

*   Full information about authority issuing the request for information
*   The name and badge/ID of the responsible agent
*   An official email address and contact phone number
*   The IP address, date range, domain name(s) of interest
*   The description of the types of records you need

Please allow at least two weeks for us to be able to look into your request. DigitalOcean reserves the right to make changes to any of the foregoing practices in its sole discretion.

Example form for an imminent harm request
-----------------------------------------

_(Must be on the investigating agency or department letterhead and sent from an official governmental email address. Use the email subject "Emergency Disclosure Request". Please note that DigitalOcean's policy is to notify a customer when we receive emergency law enforcement requests 90 days after the request is received.)_

I request release of records for the DigitalOcean account associated with \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ \[IP address, time range\] on an emergency basis pursuant to 18 U.S.C. § 2702(b)(8) and § 2702(c)(4).

I have provided below answers to the following questions in enough detail as I am able in order to provide a good-faith basis for releasing records on an emergency basis:

*   What is the nature of the emergency involving a danger of death or serious physical injury?
*   Whose death or serious physical injury is threatened?
*   What specific information in DigitalOcean's possession related to the emergency are you requesting?

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Signature of Sworn Officer
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Printed Name of Sworn Officer
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Agency Date

Example form for a Preservation Request
---------------------------------------

_(Must be on law enforcement department letterhead and sent from an official governmental email address)_

Dear DigitalOcean Legal Team:

The below listed account is the subject of an ongoing criminal investigation at this agency, and it is requested pursuant to 18 U.S.C. § 2703(f) that the subscriber information associated with said account be preserved pending the issuance of a search warrant or other legal process seeking disclosure of such information:

*   \[Specify IP address and date of account to be preserved\]

I understand that DigitalOcean reserves the right to delete any account that violates its Terms of Use.

If you have any questions concerning this request please contact me at \[insert e-mail address and phone contact\].

Thank you for your assistance in this matter.

Law Enforcement Guidelines

Marketplace Terms and Conditions