Vultr

Vultr

Basic information
Founded	2014
Legal Structure	Private
Industry	Cloud computing
Also known as
Official website	https://vultr.com/

Vultr, founded in 2014, is an American cloud service company. Among those cloud services are storage, servers, and databases.

Privacy: Vultr collects industry-standard information necessary to provide the service, including registration and billing information, as well as IP addresses. It also collects usage data when interacting with their services (this does not include the user's data stored on their servers). Vultr's privacy policy states that the information is used to improve their services and shared with third parties for marketing purposes, including targeted advertisements.^[1]

Transparency: Vultr has had major issues regarding its transparency in the past.^{[citation needed]} Their compliance with information security best practices, verified routinely by external audits, has earned the company multiple industry-recognized certifications and attestations such as SOC 2 Type II and ISO 27001.^[2][3] As explained below, Vultr is quite suspicious due to the rights it claimed in the past over user content and the license it granted itself to manage that data, which users store on Vultr's servers. Right now, the wording of those policies is unclear.

Initially, Vultr's terms of service (TOS) declared the following content policy for users in clause 5.1:^[4]

“As between You and Vultr, Vultr acknowledges that it claims no proprietary rights in or to the content (including, without limitation, text, software, music, sound, audio visual works, motion pictures, photographs, animation, video, and graphics) supplied by You for use on Your website ("Your Content"). You hereby grant to Vultr a non-exclusive, worldwide and royalty-free license to copy, make derivative works, display, perform, use, broadcast, and transmit on and via the Internet Your Content, solely for the benefit of You and to enable Vultr to perform its obligations hereunder.”

In June 2021, Vultr rewrote large portions of its TOS, moving clause 5.1 to 15(c), and adding the following content policy under clause 12.1(a)^[5], which would become highly controversial:

“You hereby grant to Vultr a non-exclusive, perpetual, irrevocable, royalty-free, fully paid-up, worldwide license (including the right to sublicense through multiple tiers) to use, reproduce, process, adapt, publicly perform, publicly display, modify, prepare derivative works, publish, transmit and distribute each of your User Content, or any portion thereof, in any form, medium or distribution method now known or hereafter existing, known or developed, and otherwise use and commercialize the User Content in any way that Vultr deems appropriate, without any further consent, notice and/or compensation to you or to any third parties, for purposes of providing the Services to you.”

In addition to this, a new statement appeared in the Terms of Service Highlights which strongly implies that users implicitly "agree" to any existing or new terms every time they use Vultr's services:^[5]

“Each time you access and/or use the Services, you agree to be bound by these Terms and any Additional Terms that apply to you.”

Despite this remark, Vultr occasionally asks users to reaffirm their acceptance of those terms.

In March 2024, Vultr asked users to accept its new terms, including clause 12.1(a) mentioned above.^[6] This sparked outrage among users, who hadn't noticed the 12.1(a) policy until 2024, three years after its debut (as is typical for hidden EULA language). The most notable complaint came from a Reddit post claiming that Vultr has the right to use user data for training artificial intelligence.^[7] In response to the criticism, Vultr's legal team altered clause 12.1(a) the next day (after the post) to delete the offending paragraph.^[8]

The user backlash also provoked an official response from Vultr in which the company wrote:^[6]

“We value the feedback we receive from our customers, and we want to assure you that Vultr claims no rights to your content. Vultr has never claimed any rights to, used, accessed, nor allowed access to or shared your content, other than as may be required by law or for security purposes.”

Despite Vultr's vow that access to users' content is for security purposes only, the wording of its TOS did not reflect this. It was widely criticized as a gross failure in transparency or, more cynically, as a stealthy attempt to seize the rights to users' personal data for any purpose, without consent.

As of February 2026, the older 15(c) clause remains in force:^[9]

“As between You and Vultr, Vultr acknowledges that it claims no proprietary rights in or to Your Content. You hereby grant to Vultr a non-exclusive, worldwide and royalty-free license to copy, make derivative works, display, perform, use, broadcast, and transmit on and via the Internet Your Content, solely for the benefit of You and to enable Vultr to perform its obligations under these Terms.”

Note that the wording of this statement closely mimics Vultr's original 5.1 clause predating 2021. Despite the reassuring tone of this license, it remains unclear what "solely for the benefit of You" means in this context, as that phrase does not appear elsewhere in the TOS.