Terms of service

1.Who we are, definitions and contract documents

pik.li is a service of InCloud S.r.l., a company incorporated under Italian law whose details are given in the “Contacts” section. In these terms, “we” means InCloud S.r.l.; “you” or “customer” means the person or organisation that creates an account and uses the Service.

The “Service” includes the pik.li website, the short-link domains we operate (for example lnkz.li), the custom domains connected by customers, the user area, the APIs, webhooks, QR codes, the registration of domain names and every related feature. The “visitor” is whoever opens a short link; the “destination” is the address the link leads to.

In addition to these terms, the agreement includes the Privacy policy, the Cookie policy, the Cooperation with authorities page, the pricing page in force at the time of purchase and, if you use the APIs, their documentation.

These terms are published in nine languages. The Italian version is authoritative: the others are translations provided for convenience and, in the event of any discrepancy, the Italian version prevails.

2.What the Service does

You give us a destination and we create a short link that redirects whoever opens it to that destination. Every link has a preview page (opened by adding a “+” sign at the end of the link), a QR code and click statistics; paid plans add features such as custom slugs, passwords, expiry dates, UTM parameters, bulk creation, custom domains, APIs and webhooks.

A short link is a redirect. We do not host the destination pages, we do not write them, we do not choose them and we do not control their content, which may change at any time without our knowledge.

Features and limits depend on the plan and are described on the pricing page and in the billing area. We may improve, add or replace features as explained in the “Availability, changes and warranties” section.

3.Our role: intermediary service provider

For the links you create, InCloud acts as an information society service provider and, in particular, as a provider of a service consisting of the storage of information provided by the recipients of the service (hosting), within the meaning of Regulation (EU) 2022/2065 on a Single Market for Digital Services (Digital Services Act, “DSA”) and, to the extent still applicable, of Italian Legislative Decree No. 70 of 9 April 2003.

We are neither the authors nor the publishers of the destinations and we have no general obligation to monitor them or to actively seek facts or circumstances indicating illegal activity (Article 8 DSA). The automated and human checks described in these terms are voluntary measures we take to protect visitors and our domains: they do not shift responsibility for the destinations onto us and do not cause us to lose the exemptions provided for by law (Article 7 DSA).

When we obtain actual knowledge of an illegal destination, or receive an order from an authority, we act without delay to disable the link and, in the cases provided for by law, we inform the competent authorities.

4.Who may use the Service

To create an account you must be at least 18 years old and have the capacity to enter into contracts; by registering, you declare that you do. pik.li is not intended for minors: if we discover that an account belongs to a minor, we close it.

If you open an account for a company, a body or another organisation, you declare that you have the authority to bind it to these terms. In that case “you” also means the organisation, which is liable together with you for the use of the account.

You are a “consumer” when you use pik.li for purposes outside your trade, business, craft or profession; in all other cases you are a “business customer”. Some clauses apply only to one category or the other, and they say so expressly.

You may not use the Service if you are subject to restrictive measures (sanctions) of the European Union, the United Nations or Italy, or if you act on behalf of someone who is.

5.Account and security

Registration requires an e-mail address and a password. We send you a confirmation e-mail: until you confirm, the account remains pending and the links you requested are created only after confirmation.

The information you give us must be true, complete and up to date. Name, address, country and, for businesses, company name, VAT number and tax code are needed for invoicing, and we ask you for them when you make a purchase.

Keep your password, two-step verification codes, recovery codes and API keys safe. Everything that happens with your credentials is deemed to have been done by you until you notify us that they have been compromised. If you suspect unauthorised access, change your password immediately, close the open sessions from Settings → Security and notify support. We recommend that you turn on two-step verification.

The account is personal: do not transfer it and do not create multiple accounts to get around the limits of a plan or a measure we have taken against you.

For support, for security purposes or to investigate abuse, authorised InCloud staff may access your account and, when necessary, see it as you see it. Every access of this kind is justified and logged.

6.Link destinations: you are responsible

You choose the destinations of your links and you are fully responsible for them. In particular:

• you are solely responsible for the destination of every link you create, for its content, for its lawfulness and for your right to link to it, even when the page belongs to third parties or changes after the link was created;
• you are responsible for how and where you distribute links and QR codes (messages, e-mails, advertising, print, social networks), for compliance with the rules on commercial communications, recipients' consent, commercial practices, consumer protection and data protection, and for the campaigns you run with links and UTM parameters;
• you are responsible for the titles, descriptions, tags, slugs and custom domains you choose: they must not infringe third-party rights (trademarks, names, copyright, image rights) or mislead anyone about who is behind the link;
• if you use the statistics of your links for your own purposes, for example to profile your customers or to combine them with other data, it is up to you to comply with the applicable rules, including those on data protection;
• you undertake to check periodically that the destinations of your links are still lawful and safe, and to disable or correct at once any link that no longer is.

You retain all rights in the destinations and texts you enter. You grant us a free, non-exclusive licence, for the duration of the agreement and for as long as we keep the data under the Privacy policy, to store them, to redirect visitors to them, to show them on the preview page and in the QR code, to analyse them for security purposes and to disclose them to the authorities in the cases described in the “Cooperation with authorities” section.

Links on the Base plan expire after the period shown in the plans table; an expired or deleted link stops redirecting immediately. Keep a copy of the links you care about: the user area lets you export them.

7.Prohibited uses

You may not use pik.li, its links, its APIs or its domains for any of the following activities. The list gives examples: anything else that is unlawful or harmful in the same way is also prohibited.

• Phishing and credential theft: pages that imitate banks, public bodies, e-mail providers, couriers, brands or people in order to obtain passwords, card numbers or personal data.
• Malware and unwanted software: viruses, ransomware, spyware, trojans, exploit kits, fake updates, files that install programs without clear consent.
• Spam: distributing links through unsolicited bulk messages (e-mail, SMS, messaging apps, comments, forums) or creating links for such campaigns.
• Scams and fraud: fake shops, investment or cryptocurrency scams, advance-fee fraud, fake prizes and surveys, fake technical support.
• Illegal content: child sexual abuse material, terrorist content, incitement to hatred or violence, sale of drugs, weapons or counterfeit goods, intimate images shared without consent, and any content whose publication is a criminal offence.
• Infringement of third-party rights: unauthorised copies of software, films, music or books, links whose main purpose is to distribute them, unauthorised use of trademarks and distinctive signs.
• Violation of other people's privacy: disclosing third parties' personal data without a legal basis, publishing information to expose or harass someone, unlawful collection of data.
• Circumventing checks: using pik.li to hide a destination already blocked by us or by others, chaining several shorteners, showing our checks a page different from the one shown to visitors (cloaking), or changing the destination to harmful content after the link has been approved.
• Deceptive practices: links that pretend to come from a person or organisation that has not authorised them, or that mislead visitors about the destination.
• Attacks on the Service: guessing or harvesting short links in bulk, brute-forcing link passwords, creating accounts automatically, bypassing rate limits or quotas, probing the APIs, disrupting the infrastructure.
• Any other activity that breaks the law applicable to you or to us, or that damages the reputation of our domains and, with it, the links of all other customers.

8.Indemnity

You shall indemnify and hold us harmless against any damage, loss, penalty, cost and expense, including reasonable legal fees, arising from third-party claims or from measures taken by authorities that are caused by your links, their destinations, the way you distribute them, or your breach of these terms or of the law.

We will notify you of the claim promptly, allow you to take part in the defence and not enter into any settlement at your expense without your consent.

If you are a consumer, the indemnity applies within the limits permitted by law and only for damage caused by a culpable breach on your part.

9.Advertising and link integrity

The pik.li website and the user area may carry advertising, including third-party advertising: we do not guarantee that they will remain free of ads. If we introduce advertising that uses cookies or other tracking tools, we will update the Cookie policy and ask for your consent where the law requires it.

Links, on the other hand, remain yours. For the entire duration of the agreement, we undertake as follows:

• whoever opens one of your links is redirected to the destination you chose, with only the UTM parameters you set;
• we do not insert advertising pages, countdowns or ads between the click and the destination, and we never redirect your visitors to pages of our own or of third parties instead of your destination;
• we do not alter the destination, we do not add our own affiliate or tracking codes to it, and we do not sell or rent your links to third parties;
• the pages we show when someone opens a short link (the preview, the password prompt, the warning for a link under review, the page for an expired, disabled or non-existent link, the page for a link that has reached its daily limit) contain no advertising.

The only pages that may appear instead of the redirect are those service pages: they serve the safety of visitors or functions you have chosen, such as the password. If we disable a link because of abuse, the visitor sees a page explaining this, never another destination.

10.Automated checks, moderation and appeals

Every destination is checked, both before and after the link is published. The process is largely automated and works as follows.

• At creation: fast, deterministic checks on the address, such as lists of allowed and blocked addresses, IP addresses used instead of names, unusual characters, chained shorteners, executable files and brand names combined with words such as “login” or “verify”.
• Within about ten minutes: a comparison with external threat lists (Google Safe Browsing and URLhaus by abuse.ch) and an assessment by an artificial intelligence system that InCloud runs on its own servers. The system receives the destination address, the link title and the technical signals collected up to that point, and returns a risk score, a category and a short explanation. It does not receive your account data.
• Subsequently: links are rechecked periodically (for example one day after approval and every hour while they are under review) and whenever someone reports them.

There are three possible outcomes. Allowed: the link works normally. Under review: the link works, but visitors first see a warning page and a member of our staff examines it. Disabled: the link stops redirecting, visitors see a page explaining that the link has been disabled, and you see the reason in your user area.

A link may be disabled automatically, without human intervention, when a threat list flags it or when the risk score exceeds our threshold with high confidence. The threshold and the rules that turn a score into a decision are set by us, not by the artificial intelligence model. A person examines every link under review and every appeal.

Appeal. From the link's page in your user area, choose “Submit an appeal” and explain why the link is legitimate (at least 20 characters). A member of our staff replies within 2 working days. If the appeal is upheld, the link is reactivated; if it is rejected, you are given the reason. You can also write to support. Whatever our answer, you retain the right to go to court or to the bodies indicated in the “Dispute resolution” section.

Anyone can report a link using the “Report a link” form. We examine reports within 24 hours; clearly abusive ones are dismissed.

No system is perfect: a legitimate link may be blocked by mistake. We correct mistakes quickly and, on request, we tell you what triggered the block.

11.Suspension and closure by us

We may restrict, suspend or close your account, and disable all or some of your links, when you breach these terms (in particular the sections on destinations and on prohibited uses), when several of your links are disabled for abuse, when you do not pay, when a court or an authority orders it, or when the account endangers the security of the Service, of visitors or of our domains.

Measures are proportionate to the seriousness of the case: a warning, a temporary block, the disabling of individual links, the suspension or the permanent closure of the account. Closure disables all your links and revokes your API keys. Where there is a risk to visitors, we may act immediately, without notice.

We inform you of the measure and of the reason for it, unless the law or an authority prohibits this or informing you would jeopardise an investigation. You can challenge it by writing to support within 14 days: a person will review it and reply to you.

What happens to your data and to any paid plan is described in the “Account closure and data deletion” section.

12.Cooperation with authorities

We cooperate with judicial authorities, police forces and other competent authorities. If a competent authority addresses a valid request or order to us, we promptly provide it with the data we hold at that time on the users, links, campaigns, clicks, payments and abuse to which the request relates, within the limits and in the forms provided for by law.

We may retain the data specified by an authority for as long as it requires, even beyond the ordinary retention periods. We inform the competent authorities on our own initiative when we become aware of alleged unlawful activities carried out through the Service (Article 17 of Legislative Decree 70/2003) or of information giving rise to a suspicion of a criminal offence involving a threat to the life or safety of persons (Article 18 DSA).

We inform you of any request concerning you, unless the law or the authority prohibits this or informing you could jeopardise an investigation or put someone in danger. We are under no obligation towards you to oppose a lawful request.

Authorities send their requests to [email protected]. The procedures and the data we can provide are described on the Cooperation with authorities page; how data is processed in these cases is explained in the Privacy policy.

13.Plans, prices and payments

The Base plan is free. Paid plans (Premium and Business) add higher limits and extra features. The current limits are as follows:

The figures are read from the current plan configuration; the pricing page always shows those in force. Pricing

Prices are in euro and include VAT where it is due. The tax depends on the country and on the status you state at the time of purchase (private individual, or business with a verified VAT number) and is shown before payment. The tax document is issued automatically and remains available in the billing area.

We currently accept PayPal and, when enabled, cryptocurrencies through NOWPayments; the available methods are those shown at the time of payment. The plan is activated when the provider confirms to us that the payment has been received. Some providers charge a fee: it is borne by you, it is shown next to the provider before you pay and it appears on a separate line of the invoice.

Each period, whether one month or one year, is paid in advance. Plans do not renew automatically and we charge nothing without your fresh approval: with PayPal and with cryptocurrencies, each payment is a single order that you approve. If you do not pay for the next period by the expiry date, the account reverts to the Base plan. If in the future we introduce a method with automatic renewal, we will say so before the purchase and you will be able to turn it off at any time.

Cancellation. You can cancel at any time from the billing area. Cancellation takes effect at the end of the period already paid for: until that day the plan remains active, after which the account moves to the Base plan. Except for consumers' right of withdrawal and the other cases provided for by law or by these terms, the remainder of the period is not refunded.

Changing plan. Upgrading to a higher plan takes effect immediately and the new period is paid in full: the previous plan ends at that moment and the unused portion is neither refunded nor deducted. Downgrading to a lower plan takes effect at the end of the paid period; if the lower plan is a paid one, you have one week to pay for it before the account reverts to the Base plan.

When you move to a plan with lower limits, the limits and retention of the new plan apply from that moment: statistics older than the new retention period are deleted and features that are not included stop working. Export what you need beforehand.

Limits protect the Service for everyone: when a limit is reached, the corresponding action (for example creating a new link) is refused until the next period. Repeated attempts to get around them breach the “Prohibited uses” section.

Each plan includes a maximum number of redirects per day, shown in the table above: for an account it applies to all its links together, for a link created without an account it applies to that link. The day is the Italian calendar day and the count starts again at midnight; link previews generated by apps and search engines are not counted. Once the limit is exceeded, whoever opens the link sees a service page asking them to come back the next day and showing when the link opens again: it is not an advertising page placed in between, and it shows neither the destination nor any other content of yours; the link simply does not open until midnight. When your links reach 80% and 100% of the limit, we let you know in the user area and by e-mail.

14.Domain names purchased through pik.li

From the user area you can purchase the registration of a domain name. Registration is carried out by InCloud through the registrar Internet.bs Corp., under the terms and conditions of the registrar and of the registry of the top-level domain (for example .com or .it), which you accept by purchasing. The price is the one shown before payment and includes registration for the stated period, the DNS zone managed by us and the records needed to use the domain with pik.li.

The domain is registered with private WHOIS and with InCloud's contact details; InCloud is recorded as its registrant with the registrar and manages it on your behalf; the right to use it is yours for the period paid for. At your written request, we will assist you in transferring it to a registrar and a registrant of your choice, in accordance with the registry's technical rules.

Registration does not renew automatically. If you have not renewed it by the expiry date, the domain may be lost and registered by others, and the links that use it stop working.

You are responsible for choosing the name: it must not infringe trademarks, names or other third-party rights. If a third party challenges the name, including through a reassignment procedure such as the UDRP, we may suspend the domain or transfer it in accordance with the registry's rules or the order received.

If a paid-for domain cannot be registered, for example because someone else has registered it in the meantime or the registry refuses it, you can request a refund from your orders page: we refund the full amount paid, using the same means of payment, within 14 days of the request.

The registration of a domain is a service that is fully performed at the moment the registry accepts it. If you are a consumer and ask us to proceed immediately, you acknowledge that, once the domain has been registered, you lose the right of withdrawal (Article 59(1)(a) of the Italian Consumer Code, Codice del consumo).

15.Right of withdrawal for consumers

If you are a consumer, you may withdraw from the purchase of a paid plan within 14 days of the day of purchase, without giving any reason.

To withdraw, send an explicit statement to the support address before the deadline expires (for example, an e-mail saying that you wish to withdraw from the plan). You may use the form below, but it is not mandatory. We will confirm receipt by e-mail.

The plan starts as soon as payment is confirmed, because by purchasing it you ask us to begin immediately. If you withdraw after it has started, you pay only for the days already elapsed, in proportion to the price of the period, and we refund the rest within 14 days of the withdrawal, using the same means of payment unless otherwise agreed.

For the registration of a domain name, the rule in the “Domain names purchased through pik.li” section applies. Business customers have no right of withdrawal.

16.Account closure and data deletion

You can close your account at any time from Settings → Privacy & account; we ask for your password and username to make sure it is you.

From that moment, the account remains “pending deletion” for 6 months: it is deactivated, your links stop redirecting and any paid plan is cancelled without a refund for the remaining period, except for the right of withdrawal and the other cases provided for in these terms. The data remains stored and protected, but is no longer used to provide the Service: it serves to handle disputes, abuse discovered after closure and requests from authorities.

After the 6 months, the account and the associated data are permanently deleted. Only the tax documents and payment data, which the law requires us to keep for 10 years, and the data that an authority has asked us to preserve, for the time requested, are retained.

Before closing your account, download the data and links you need from the same page: after closure you will no longer be able to do so.

We may terminate the agreement with at least 30 days' notice, for example if we discontinue the Service, and with immediate effect in the cases set out in the “Suspension and closure by us” section. If we terminate it without any breach on your part, we refund the unused portion of the paid period.

17.Intellectual property

The pik.li name, the logo, the software, the design and the texts of the Service belong to InCloud S.r.l. or its licensors. You may use them only in order to use the Service: do not copy, modify, sell or decompile them, except where the law expressly permits it.

You retain all rights in your content. Trademarks and names appearing in the destinations belong to their respective owners.

If you send us suggestions, we may use them freely without owing you anything.

18.Availability, changes and warranties

We work to keep the Service available at all times and we publish its status on the status page, but we cannot promise that it will never stop: maintenance, failures, attacks and problems at our providers (network, domains, payment providers, threat lists) may interrupt it.

Short links depend on domain names. If a domain we operate is seized, expires or is blocked by browsers or security lists, the links on that domain may stop working. We will do our best to warn you and to offer you an alternative domain.

We may change, add or remove features. If a change substantially reduces a paid feature, we will notify you at least 30 days in advance and, if you cancel as a result, we will refund the unused portion of the period.

For business customers, the Service is provided as is, without warranties other than those written here. For consumers, the legal guarantee of conformity for digital services applies in full: if the Service does not work as described, you have the remedies provided by the law of your country (in Italy, Articles 135-octies et seq. of the Consumer Code).

19.Limitation of liability

We are not liable for the destinations of links, for third-party content, for what visitors do after the redirect, or for the use you make of links and statistics.

We are not liable for damage caused by interruptions or malfunctions attributable to third parties (networks, payment providers, registrars and registries, threat lists, browsers and systems that block a domain), nor for the disabling of a link in good faith to protect visitors, even if it later turns out to be a mistake that we correct.

For business customers, to the extent permitted by law, we are not liable for indirect or consequential damage, loss of profit, loss of business, goodwill or data, and our total liability for all claims arising in any one year is limited to the amount you paid us in the 12 months preceding the event that caused the damage, or to 100 euro if you use the Base plan.

Nothing in these terms limits our liability for wilful misconduct or gross negligence, for personal injury, or in the cases in which the law does not allow limitations (Article 1229 of the Italian Civil Code). If you are a consumer, the mandatory rules that protect you prevail, including those of the Consumer Code.

20.Force majeure

We are not liable for delays or failures to perform due to causes beyond our reasonable control: natural disasters, epidemics, wars, acts of terrorism, riots, measures taken by authorities, widespread outages of power, of networks or of the services of the providers on which we depend, large-scale cyber attacks that could not reasonably have been prevented, and strikes that do not concern only our own staff.

In such cases, our obligations are suspended for the duration of the event; we will notify you as soon as possible and do what is reasonable to limit its effects. If the event prevents the use of a paid plan for more than 30 consecutive days, either of us may terminate the agreement and we will refund the unused portion of the period.

21.Changes to these terms

We may change these terms when required by law, technology, security or the development of the Service. We publish the new version on this page with its date and notify registered users at least 30 days before it takes effect, by e-mail or with a notice in the user area.

If you do not accept the new terms, you may close your account before they take effect: if you have a paid plan and the change is to your disadvantage, we will refund the unused portion of the period. Continuing to use the Service after that date means accepting the new version. Changes required by law or by an authority may take effect sooner.

22.Governing law and jurisdiction

These terms and every relationship arising from them are governed by Italian law.

For business customers, the courts of Modena have exclusive jurisdiction over any dispute relating to these terms or to the Service.

If you are a consumer, you retain the protection of the mandatory rules of the country in which you reside and you may bring proceedings before the courts of that country; proceedings against you may be brought only before those courts. For consumers residing in Italy, jurisdiction lies with the court of the place of residence or domicile (Article 66-bis of the Consumer Code).

23.Dispute resolution

Write to us first: most problems are resolved within a few days by opening a request from the Support section of the user area or by writing to support.

Consumers may also turn to an out-of-court dispute resolution (ADR) body under Directive 2013/11/EU. In Italy, the list of recognised bodies is kept by the Ministry of Enterprises and Made in Italy; in other countries, by the national consumer authority. For us, participation in an ADR procedure is voluntary, unless the law makes it mandatory, and it never takes away your right to go to court.

The European online dispute resolution (ODR) platform was closed on 20 July 2025 under Regulation (EU) 2024/3228, so we no longer refer to it.

24.Specific approval of certain clauses

If you are a business customer, under Articles 1341 and 1342 of the Italian Civil Code you declare that you have read and specifically approve, by means of the separate declaration we ask you for at registration or purchase, the clauses contained in the following sections:

• 6. Link destinations: you are responsible
• 8. Indemnity
• 10. Automated checks, moderation and appeals
• 11. Suspension and closure by us
• 13. Plans, prices and payments
• 14. Domain names purchased through pik.li
• 16. Account closure and data deletion
• 18. Availability, changes and warranties
• 19. Limitation of liability
• 20. Force majeure
• 21. Changes to these terms
• 22. Governing law and jurisdiction
• 25. Other provisions

If you are a consumer, these clauses apply only within the limits permitted by the Consumer Code: no approval can reduce the rights that the law grants you.

25.Other provisions

These terms and the documents referred to in the first section constitute the entire agreement between us regarding the Service. If a clause is invalid, the others remain in force and the invalid clause is replaced by the valid clause that comes closest to it.

If we do not enforce a clause on one occasion, we may still do so later. We may assign the agreement to a company that takes over the Service, informing you in advance; you may not assign it without our consent.

We communicate with you at your account's e-mail address and through the user area: keep that address up to date. Communications sent to that address are deemed to have been received.

26.Contacts

For questions about these terms, your account, a payment or a decision about a link, open a request from the Support section of your user area or write to the support address below. To report a harmful link, use the report form or the abuse address. Authorities use the dedicated address below, as explained on the Cooperation with authorities page.