Terms and Conditions

Last Updated: May 22, 2026

This website is operated by SOFTWARE ENGINEERING S.R.L. - VAT ID: IT13223470967 - based in via Tommaseo 4, Cesano Boscone (MI) - Italy - support@sftpgo.com ("us", "we" or "our"), the company behind the SFTPGo file transfer platform.

These Terms of Service ("Terms") apply to you when you (a) subscribe to the SFTPGo Managed File Transfer Service ("SaaS Services"); or (b) purchase an SFTPGo Enterprise software license (whether on a subscription basis or as a perpetual one-time purchase) through this website. By signing up for the SaaS Services, by completing the purchase of an SFTPGo Enterprise license through this website, or by using the SaaS Services or the licensed software, you confirm that you have read and agree to these Terms. If you do not agree, do not sign up for, purchase, or use the SaaS Services or any SFTPGo Enterprise license obtained through this website.

Simply browsing this website is not subject to these Terms. How we process personal data of website visitors is described in our Privacy Policy and Cookie Policy.

Use of the SFTPGo Enterprise software itself is governed by the separate SFTPGo Enterprise End User License Agreement (EULA), which prevails over these Terms with respect to the use of the software. Payments are processed by Paddle as our merchant of record, subject to the Paddle Checkout Buyer Terms.

SFTPGo as Managed File Transfer (SaaS) service

SFTPGo hosted as a service in the cloud ("SaaS Services") is available on a subscription basis ("Subscription(s)"). Each customer is provisioned with one or more SaaS instances ("instance(s)") on which the SaaS Services are made available. Unless the context otherwise requires, references in these Terms to "Services" or "Service" mean the SaaS Services.

Plan limits and overage

Each Subscription plan has clearly defined limits for storage space and monthly bandwidth. "Storage space" refers to the total amount of space used by files stored on the Services at any given time, including files in the Recycle Bin. "Monthly bandwidth" refers to the total volume of outbound network transfers from your instance(s), including any data transferred between the storage backend and your instance(s).

If you exceed your storage or bandwidth limits for more than one consecutive month, or by 50% or more in a single month, we will notify you by email of the excess usage. You will then have ten (10) days from receipt of the notice to either (i) upgrade your plan or (ii) bring your usage back within the applicable limits.

If you fail to do so within that period, we may suspend your instance(s); during suspension the Services will be inaccessible but your data will be preserved and you will have a reasonable opportunity to export it. If the suspension continues for more than ten (10) days without resolution, we may permanently delete the affected instance(s) and the associated data. Fees already paid for the then-current Billing Cycle (i.e. the monthly or annual period for which fees are billed in advance under your Subscription, as further described in the "Subscriptions" section below) are non-refundable in this scenario, except where mandatory consumer protection law provides otherwise.

Service availability

We aim to make the Services available on a continuous basis but do not guarantee uninterrupted availability. We may temporarily suspend access for planned maintenance, security reasons, or events beyond our reasonable control. Where reasonably possible, we will give you advance notice of planned maintenance. Specific availability commitments and service credits applicable to the SaaS Services are set out in the Service Level Agreement (SLA), which forms part of these Terms. In the event of a conflict between these Terms and the SLA, these Terms prevail except where the SLA expressly provides otherwise on a specific topic.

Your account and Authorized Users

You are responsible for safeguarding the administrator credentials used to access your SaaS instance(s) and for all activity that occurs under them. You must promptly notify us at support@sftpgo.com of any unauthorised access or use, or any other suspected security breach. You may permit your employees and contractors ("Authorized Users") to access the Services on your behalf in connection with your business; you remain responsible for their compliance with these Terms.

User content

"User Content" means any files, data, documents, text, images, videos, or other materials that are uploaded, posted, shared, stored, or otherwise transmitted by you or your Authorized Users through the Services, regardless of format or type.

  1. Ownership and License:
    You retain ownership of all rights, title, and interest in your User Content. You grant us a worldwide, non-exclusive, royalty-free license to host, store, transmit, display, and process the User Content only as necessary to provide and maintain the Services for you, and only for the duration of your Subscription (including any limited period during which your data is preserved under the "Failed payments" or "Plan limits and overage" sections, or as required by law). We will not access your User Content for any other purpose without your prior consent, except where required by applicable law.
  2. Content and Usage Restrictions:
    You agree not to use the Services to upload, transfer, store, distribute, or otherwise process any content, or to engage in any conduct, that:
    1. violates any applicable law or regulation, or any third-party right (including intellectual property, privacy, or publicity rights);
    2. contains malware, viruses, or other code intended to disrupt, damage, or gain unauthorised access to any system or data;
    3. constitutes child sexual abuse material, content promoting terrorism, or other content unlawful in your jurisdiction or in Italy;
    4. distributes personal data of others in violation of applicable data protection law;
    5. attempts to gain unauthorised access to other users' accounts, instances, or to any other part of the Services or our infrastructure;
    6. circumvents, disables, or attempts to circumvent any technical limitation, security feature, or usage restriction of the Services (including plan limits);
    7. reverse-engineers, decompiles, or disassembles the proprietary components of the Services, except to the extent permitted by mandatory applicable law;
    8. engages in activity that, in our reasonable assessment, materially degrades Service performance for other users or imposes a disproportionate load on our infrastructure (such as denial-of-service traffic, automated abuse, or systematic attempts to circumvent rate limits or plan quotas).
  3. Data Protection Compliance:
    You are responsible for ensuring that any personal data you process through the Services complies with applicable data protection laws, including, where relevant, the GDPR. The respective roles and obligations of the parties as data controller and data processor are addressed in the "Data protection" section below.
  4. Content Moderation:
    We have no obligation to monitor User Content. However, where we reasonably believe that content or conduct violates these Terms or applicable law, or threatens the security, integrity, or availability of the Services, we may (i) remove or restrict access to the relevant content; (ii) suspend the affected instance; or (iii) take other action necessary to comply with valid legal orders. Where reasonably possible and not prohibited by law, we will notify you of the action taken and the reason for it.
  5. Responsibility for Content:
    You are solely responsible for the User Content that you and your Authorized Users upload, transfer, or otherwise process through the Services. Your obligation to indemnify us in respect of such User Content is set out in the "Indemnification" section below.
  6. Data Retention and Deletion:
    We retain User Content for as long as your Subscription is active. Upon voluntary termination of your Subscription, your User Content will be permanently deleted at the end of the then-current Billing Cycle, unless we are required by law to retain it for a longer period. You are responsible for exporting any User Content you need before that date. Where your Services are suspended for unresolved overage (as set out in the "Plan limits and overage" section above) or for non-payment (as set out in the "Failed payments" section below), your User Content is preserved during the relevant suspension period and permanently deleted thereafter. We do not guarantee the long-term availability of your User Content, and you should not rely solely on the Services for permanent storage.

SFTPGo Enterprise software licenses (self-hosted)

This section applies if you obtain a license to install and run the SFTPGo Enterprise software on infrastructure you control (whether as a subscription license or as a perpetual license). It does not apply to the SaaS Services described above, which are governed solely by these Terms.

SFTPGo Enterprise is distributed under a proprietary license. Your use of the SFTPGo Enterprise software is governed by the SFTPGo Enterprise End User License Agreement (EULA), which sets out the license scope, permitted use, maintenance, updates, support and renewal terms.

These Terms govern the purchase and billing of those licenses through this website. In the event of any conflict between these Terms and the EULA, the EULA prevails with respect to the use of the software.

Subscriptions

SaaS Services and Licenses can be purchased on a subscription basis ("Subscription(s)"). You will be billed in advance on a recurring and periodic basis ("Billing Cycle"). Billing cycles are set to either monthly or annually depending on your preference.

At the end of each Billing Cycle, your Subscription will automatically renew under the exact same conditions unless you cancel it or we cancel it. You may cancel your Subscription renewal either through the billing portal, or by contacting our support team. The billing portal is managed by Paddle, a third party payment processor, and has separate terms of the service: paddle.com/legal/checkout-buyer-terms.

We may change the Subscription fees from time to time. Any change will become effective at the start of the next Billing Cycle following at least thirty (30) days' prior notice to you by email or through the Services.

You may terminate your Subscription before the change takes effect; if you do not, the modified Subscription fee will apply from the next renewal.

SUBSCRIPTION licenses for SFTPGo Enterprise are subject to the terms of the SFTPGo Enterprise END USER LICENSE AGREEMENT. Please review the EULA for details regarding license scope, Maintenance, updates, support, and renewal terms.

One-time purchases

PERPETUAL licenses for SFTPGo Enterprise may be acquired through a one-time payment. These licenses are subject to the terms of the SFTPGo Enterprise END USER LICENSE AGREEMENT. Please review the EULA for details regarding license scope, Maintenance, updates, support, and renewal terms.

Free trial

We may, in our sole discretion, offer a Subscription with a free trial for a limited period of time ("Free Trial").

You may be required to enter your billing information in order to sign up for the Free Trial.

Your Free Trial lasts for ten (10) days. Prior to the end of the Free Trial period, you will receive a notification email reminding you of the upcoming transition to a paid subscription. Unless you cancel your Subscription before the trial expires, the applicable Subscription fees for your selected plan will be automatically charged to your payment method upon the conclusion of the 10-day period.

We reserve the right, at any time and without notice, to (i) modify the terms and conditions of the Free Trial offer, or (ii) discontinue the Free Trial offer for new sign-ups. Any such change will not affect Free Trials already in progress.

Payments

Payments for your Subscription and one-time purchases are processed by Paddle, our merchant of record (Paddle.com Market Limited or its affiliates). Through the Paddle checkout you will provide a valid payment method and the billing information required to complete your purchase. Paddle is responsible for the collection, processing, and recurring billing of fees, in accordance with the Paddle Checkout Buyer Terms. We do not directly process or store your payment instruments. You must provide accurate and complete billing information.

Failed payments

If a scheduled payment for your Subscription fails (for example, because your payment method has expired or been declined), we (or our payment provider) will notify you and provide a reasonable opportunity to update your payment information. If payment remains unresolved, we may suspend your instance(s); during suspension the Services will be inaccessible but your data will be preserved and you will have a reasonable opportunity to resolve the issue, reactivate your Subscription, or export your data. If the suspension continues for more than twenty-one (21) days from its start without resolution, we may permanently delete the affected instance(s) and the associated data. This procedure applies in addition to, and does not limit, our right of termination for material breach set out below.

Taxes

Applicable taxes (such as European VAT or US Sales Tax) may be added to the price at checkout. These taxes are calculated, collected, and remitted by Paddle as our merchant of record, based on the location information you provide. You must provide accurate location information for tax residency purposes. If you have a tax identification number (such as a VAT number), please provide it at checkout.

Refunds

If you are not satisfied with our Services, you may request a refund by contacting us at support@sftpgo.com or by contacting Paddle, our merchant of record, directly through their buyer support channels. We will honour refund requests made within thirty (30) days of the initial purchase or renewal payment. Refunds are processed through Paddle and issued to the original payment method.

Some payment methods restrict the ability to process refunds on older transactions, so please contact us promptly.

Nothing in this policy affects any mandatory rights you may have under applicable law that cannot be excluded or limited by contract.

Warranties and disclaimers

THE SAAS SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE DISCLAIM ALL WARRANTIES, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR UNINTERRUPTED OR ERROR-FREE OPERATION.

We do not warrant that the Services will meet your specific requirements, that the Services will be uninterrupted, timely, secure, or error-free, or that any data loss will not occur. You are responsible for maintaining your own backups of any data you submit to or generate through the Services.

Nothing in this section excludes or limits any warranty or remedy that cannot be excluded or limited under applicable law, including mandatory rights granted to consumers under the laws of their country of residence.

Limitation of liability

Short version: Our total liability to you is capped at what you have paid us in the twelve (12) months before the event, or €100, whichever is greater. We are not liable for indirect or consequential losses such as lost profits or lost data. These limits apply to the maximum extent permitted by law and do not cover liability that the law does not allow us to limit — for example, for fraud, gross negligence, or wilful misconduct. Please read this section carefully.

NO INDIRECT OR CONSEQUENTIAL DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL WE BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, BUSINESS, USE, OR DATA, HOWEVER CAUSED AND UNDER ANY THEORY OF LIABILITY (WHETHER IN CONTRACT, TORT INCLUDING NEGLIGENCE, STATUTE, OR OTHERWISE), ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

The exclusion above applies regardless of the cause and includes, by way of example:

  • the use, disclosure, or display of your data;
  • your use of, or inability to use, the Services;
  • any modification, price change, suspension, or discontinuance of the Services;
  • the Services generally, or the software or systems that make the Services available;
  • unauthorized access to, or alteration of, your transmissions or data;
  • statements or conduct of any third party on the Services;
  • any other matter relating to the Services.

CAP ON LIABILITY. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES — WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, OR OTHERWISE — WILL NOT EXCEED THE GREATER OF: (A) THE AMOUNT YOU ACTUALLY PAID US FOR THE SERVICES IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM; OR (B) ONE HUNDRED EUROS (€100).

These limitations apply whether or not we have been informed of the possibility of such damages, and even if a remedy set out in these Terms is found to have failed of its essential purpose. We will have no liability for any failure or delay due to matters beyond our reasonable control (including, without limitation, acts of God, war, terrorism, civil disturbance, pandemic, governmental action, and internet or telecommunications failure). For the avoidance of doubt, the cloud infrastructure that we select and operate to deliver the SaaS Services is within our reasonable control for the purposes of this paragraph, and a failure of that infrastructure is not, on its own, a matter beyond our reasonable control; failures of third-party services, equipment or networks that you select, configure or control (such as your own internet access, your own cloud storage backends configured under the “bring your own storage” option, or your own SFTP/FTP/WebDAV client software) remain outside our control.

What is not limited. Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited. In particular, the exclusions and cap above do not apply to:

  • death or personal injury caused by negligence;
  • fraud or fraudulent misrepresentation;
  • gross negligence or wilful misconduct;
  • any other liability that cannot be excluded under applicable law (including mandatory consumer protection rights).

Indemnification

By you. You agree to defend, indemnify and hold harmless SOFTWARE ENGINEERING S.R.L. and its affiliates, officers, directors, employees, and agents from and against any third-party claim, demand, loss, liability, damage, cost, or expense (including reasonable attorneys' fees) arising out of or related to:

  • your content or your use of the Services in breach of these Terms;
  • your violation of any applicable law or regulation;
  • your violation of any third-party right, including intellectual property or privacy rights.

By us (SaaS Services only). We will defend you against any third-party claim alleging that your authorised use of the SaaS Services, in accordance with these Terms, infringes a copyright, trademark, or registered patent enforceable in your country of use, and we will pay any damages finally awarded by a court of competent jurisdiction or agreed in settlement by us. This obligation does not apply to claims arising from:

  • your content, data, or instructions;
  • combination of the Services with products, services, or data not provided by us, where the claim would not have arisen but for such combination;
  • modifications of the Services not made by us or on our behalf;
  • use of the Services after we have notified you to discontinue such use or provided a non-infringing alternative.

If a covered claim is made or appears likely, we may, at our option: (i) procure for you the right to continue using the affected Services; (ii) modify or replace the affected Services so that they are non-infringing; or (iii) terminate the affected Services and refund any pre-paid fees for the unused portion of the Subscription term. This paragraph states our entire liability, and your exclusive remedy, for any third-party intellectual property claim relating to the Services.

Procedure. Each party's indemnification obligation is conditional on the indemnified party (i) promptly notifying the indemnifying party in writing of the claim; (ii) giving the indemnifying party sole control of the defence and settlement of the claim, provided that no settlement may impose any obligation or liability on the indemnified party without its prior written consent (not to be unreasonably withheld); and (iii) providing reasonable cooperation in the defence. The indemnified party may participate in the defence with counsel of its own choice at its own expense.

Intellectual property indemnification relating to the SFTPGo Enterprise software (whether obtained as a subscription or as a perpetual license) is governed by the SFTPGo Enterprise EULA, which prevails over this section with respect to the software.

Termination

These Terms remain in effect for as long as you use the Services or hold an active Subscription.

Termination by you. You may terminate these Terms at any time by cancelling your active Subscription through the billing portal or by contacting our support team. Termination becomes effective at the end of the then-current Billing Cycle, and you will continue to have access to the Services until that date.

Termination for breach. Either party may terminate these Terms with immediate effect by written notice if the other party materially breaches these Terms and fails to cure the breach within thirty (30) days of receiving written notice describing it. For non-payment specifically, the suspension and deletion procedure set out in the "Failed payments" section above governs the timing of suspension and data deletion.

Immediate suspension or termination. Notwithstanding the cure period set out in "Termination for breach" above, we may suspend or terminate the Services with immediate effect, without prior notice, where:

  • your use of the Services threatens the security, integrity, or availability of the Services or other users;
  • you use the Services for an unlawful purpose or in a way that exposes us to legal liability;
  • you become insolvent, file for bankruptcy, or cease to do business;
  • we are required to do so by applicable law or by order of a competent authority.

Discontinuation of the Services. We may terminate these Terms or any Subscription if we discontinue the Services or your Subscription plan. In that case, we will give you at least sixty (60) days' prior written notice and a pro-rata refund of any pre-paid fees covering the period after termination.

Effect of termination. On termination, your right to access the Services ends. Your User Content will be permanently deleted in accordance with the "Data Retention and Deletion" provision above. You should export any User Content you need before termination becomes effective. Provisions which by their nature should survive termination — including provisions on fees due, intellectual property, warranties and disclaimers, limitation of liability, indemnification, data protection, governing law, and dispute resolution — will survive.

Data protection

Where we process personal data on your behalf in connection with the SaaS Services, you act as the data controller and SOFTWARE ENGINEERING S.R.L. acts as the data processor within the meaning of Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

A Data Processing Agreement reflecting the requirements of Article 28 GDPR — including, where applicable, the Standard Contractual Clauses for international data transfers outside the European Economic Area — is available and will be executed by us on request by contacting support@sftpgo.com. Where you and we sign a Data Processing Agreement, it forms an integral part of these Terms in relation to the processing of personal data covered by it.

For information on how we process personal data as a controller (for example, when you sign up, make a purchase, or browse this site), please see our Privacy Policy.

Security incidents. If we become aware of a personal data breach affecting personal data we process on your behalf, we will notify you without undue delay, and in any event within seventy-two (72) hours of becoming aware, and provide you with the information reasonably required to meet your own notification obligations under applicable data protection laws (including, where relevant, Articles 33 and 34 GDPR and equivalent obligations under US state privacy laws). The specific procedure and content of such notifications are set out in the Data Processing Agreement.

Reporting illegal content (EU Digital Services Act)

In compliance with Regulation (EU) 2022/2065 (the "Digital Services Act" or "DSA"), this section describes how to report content stored or transmitted through the SaaS Services that you believe to be illegal under EU law or the law of an EU Member State, and how we will respond.

How to submit a report. Any individual or entity may submit a notice of allegedly illegal content by emailing us at support@sftpgo.com with the subject "DSA — Illegal Content Notice". Your notice should include, where reasonably possible:

  • a sufficiently substantiated explanation of the reasons why you allege that the content is illegal;
  • a clear indication of the exact electronic location (URL, identifier, or other locator) of the relevant content;
  • your name and email address (except in the case of content allegedly involving offences referred to in Articles 3 to 7 of Directive 2011/93/EU, where contact details are not required); and
  • a statement, made in good faith, that the information and allegations contained in the notice are accurate and complete.

Our response. We will review notices in a timely, diligent, non-arbitrary, and objective manner. Where we decide to act on a notice (for example, by removing content or suspending the relevant instance), we will provide a clear and specific statement of reasons to the affected user, including the legal or contractual basis for our action and information about the means of redress available to challenge it, unless we are legally prohibited from doing so.

Single point of contact. The single electronic point of contact under Articles 11 and 12 of the DSA — both for authorities of the Union and Member States and for recipients of the Services — is support@sftpgo.com. Communications addressed to this point of contact may be made in English or Italian.

Misuse. We may suspend, for a reasonable period of time and after issuing a prior warning, the processing of notices and complaints from individuals or entities that frequently submit manifestly unfounded notices or complaints.

Notices

Routine communications relating to your account (such as billing notices, service announcements, and updates to these Terms) will be sent to the email address associated with your account, or made available through the Services or the billing portal. It is your responsibility to keep that email address current.

Legal notices to us (including notices of breach, claims for indemnification, requests under the data protection laws referenced in these Terms, and any other communication required to be in writing under these Terms) must be sent in writing to SOFTWARE ENGINEERING S.R.L., Via Tommaseo 4, 20090 Cesano Boscone (MI), Italy, with a copy by email to support@sftpgo.com. Notices sent by registered mail are deemed received on the date of delivery shown by the postal service; notices sent only by email are deemed received on the next business day in Italy, subject to no bounce or non-delivery message.

Legal notices to you will be sent to the email address associated with your account and, where you have provided one, the postal address on file. We may also use any contact details you have provided through the billing portal.

Severability

If any provision of these Terms is held by a court of competent jurisdiction to be invalid or unenforceable, that provision will be enforced to the maximum extent permitted by law so as to give effect to the parties' intent, and the remaining provisions will continue in full force and effect.

Assignment

You may not assign or otherwise transfer these Terms, in whole or in part, without our prior written consent (not to be unreasonably withheld or delayed); any attempt to do so will be null and void. We may assign these Terms, in whole or in part, to an affiliate or to a successor in connection with a merger, acquisition, corporate reorganisation, or sale of all or substantially all of our assets, on written notice to you.

Governing law and disputes

These Terms shall be governed by and construed in accordance with the laws of Ireland, without regard to its conflict of law provisions.

The Court of Milano (Italy) shall have exclusive jurisdiction to settle any dispute arising out of or in connection with these Terms, with the express exclusion of any other court that may have territorial jurisdiction.

These Terms apply unless you and we have entered into a separately signed written agreement (such as a Master Services Agreement or Order Form), in which case that agreement governs to the extent of any conflict with these Terms.

Use of the SFTPGo Enterprise software remains subject to the separate SFTPGo Enterprise EULA, which prevails over these Terms with respect to the use of the software.

Changes

We may update these Terms from time to time. For changes that are materially adverse to subscribers, we will provide at least thirty (30) days' prior notice by email or through the Services before the changes take effect. For other changes (such as clarifications, formatting, or updates that do not adversely affect subscribers in any material respect), the updated Terms will take effect when posted on this page.

If you do not agree with a materially adverse change, you may cancel your Subscription before it takes effect; in that case, we will refund the unused portion of your then-current Billing Cycle. Continued use of the Services after the effective date constitutes acceptance of the updated Terms.

The date at the top of this page indicates when these Terms were last updated.

Privacy Policy

Please refer to our Privacy Policy. You agree that it constitutes part of these terms. You must read our Privacy Policy before you use the Services.

Contact us

If you have any questions about these Terms, please contact us.