Terms of service

The services are provided by ERPFIT CO., LTD (tax code 0317567782, Ho Chi Minh City): authoritative DNS, a font and library CDN, an image-processing proxy and an email relay, managed through the dashboard at cdn.vapp.vn. By creating an account or using the services you agree to these terms and the Privacy policy.

The free plan is provided as is, with no availability commitment. Paid plans are provided under a separate agreement with ERPFIT; that agreement prevails where it differs from this page.

You are responsible for keeping your password and API keys safe, and for everything done with them. Only add domains, image origins and sending addresses you have the right to use.

You may not use the services to:

• store, distribute or point to unlawful content;
• send spam, or advertising to recipients who have not agreed to it;
• phish, impersonate other people or organisations, or distribute malware;
• proxy or distribute images, fonts or other material you have no right to use;
• attack, scan or overload our systems or anyone else's.

Transactional mail (confirmations, password resets, account notices) is what the email relay is for. If you send advertising mail you must: have the recipient's prior consent; put the advertising label at the start of the subject line as Decree 91/2020/ND-CP requires; identify the sender clearly; and give recipients a working way to opt out that is honoured promptly. We may suspend sending on complaints or on a high bounce or spam-report rate.

For mail you send or receive through the service, you are the controller of your recipients' and senders' personal data; ERPFIT is the processor and processes it only to deliver mail on your instructions. We do not read or analyse content for any other purpose, and we use recipient addresses only to deliver mail, handle bounces and stop further sends to addresses that refused.

Sub-processors and locations: OVH (OVHcloud), Sydney, Australia (the mail server) and Singapore (the delivery-record database); Hetzner, Falkenstein, Germany (encrypted backups). We tell you before we add or change a sub-processor for mail.

Retention: as in "How long we keep it" in the Privacy policy. On request, we delete all delivery records for your domains.

If an incident may affect your mail data (for example a leaked DKIM signing key or SMTP password), we tell you without undue delay and within 72 hours of finding it, with what we know, so that you can meet your duties as the controller.

Send reports of unlawful content, spam, phishing or intellectual-property infringement to abuse@vappcdn.com, with the URL, domain or message headers concerned. We acknowledge within 2 working days, review the report, and tell you what we did.

If these terms are breached, or a competent authority requires it, we may suspend the part of the service concerned. We give notice and time to fix the problem first, unless immediate action is needed to prevent harm (for example phishing, malware or spam in progress).

You can stop using the services and ask to close your account at any time.

You are responsible for the content and configuration you put into the services. To the extent the law allows, ERPFIT's liability to a customer is limited to the fees that customer paid for the services in the 3 months before the event.

These terms are governed by the law of Vietnam. Disputes are first negotiated; failing that, they go to the competent court in Ho Chi Minh City.

A new version is posted on this page with its date.