URSA6

Terms of Service

“Starter” Hosting Subscription Terms

Applies to: Starter hosting subscriptions for non-custom (template-based) WordPress websites integrated with Commerce7
Last updated: February 2, 2026

These Hosting Subscription Terms (the “Terms”) form a legally binding agreement between URSA6 (“Agency”, “we”, “us”, “5forests”) and the subscribing winery or business entity (“Client”, “you”). By paying for, activating, or continuing to use the Starter Hosting service, you accept these Terms.

If you do not accept these Terms, do not subscribe to or continue using the service.

  1. Service Overview

Starter Hosting is a managed WordPress hosting service intended for Commerce7 migrations and non-custom template websites. It is designed to provide a stable, well-maintained hosting environment with baseline security and operational controls appropriate for a low-cost plan.

Starter Hosting typically includes:

  • Deployment of your WordPress site to a managed VPS server (Vultr, unless otherwise agreed).
  • Hosting stack and server management via GridPane.
  • DNS and edge security configuration in your Cloudflare account (Cloudflare is required).
  • Daily offsite backups with defined retention.
  • Basic uptime monitoring.
  • Baseline security scanning and maintenance.
  • Standard hosting-related support.

Starter Hosting does not include enhanced security controls such as Fortress, File Integrity Monitoring (FIM), or premium security services unless explicitly added in writing.

  1. Third-Party Providers and Shared Responsibility

Starter Hosting relies on third-party providers, including but not limited to:

  • Vultr
  • GridPane
  • Cloudflare
  • Commerce7
  • Payment processors (e.g., Stripe, Fullsteam)

You acknowledge that:

  • We do not own or operate these providers.
  • Outages, limitations, or policy changes by these providers may affect service.
  • Some remedies are outside our control.
  1. Responsibilities

We manage:

  • Hosting environment provisioning and maintenance.
  • Routine OS and middleware updates through GridPane.
  • Baseline security hardening.
  • Backup configuration and restoration assistance.
  • Basic monitoring and incident response.

You manage:

  • Commerce7 configuration and ecommerce settings.
  • Payment processor relationships.
  • PCI validation and compliance obligations.
  • Staff access and credential management.
  • Website content and editorial updates.
  1. Access and Acceptable Use
  • You may retain an Administrator login for ownership purposes.
  • Changes to plugins, themes, or settings by Client administrators may void support coverage for resulting issues.
  • New plugins/themes require Agency approval.
  • No SSH or root access is provided.
  • You are responsible for securing credentials and enabling 2FA where available.

We may restrict access or suspend service if usage creates security or stability risks.

  1. Security Controls in Starter Hosting

Included baseline controls:

  • Cloudflare firewall and network protections.
  • Server-level protections via GridPane.
  • Routine patching of hosting stack.
  • WordPress updates per plan terms.
  • Baseline malware detection.

Not included:

  • File Integrity Monitoring (FIM)
  • Fortress or equivalent lockdown tools
  • SOC monitoring
  • Guaranteed remediation timelines
  • PCI certification or audit services

Enhanced controls are available in higher tiers.

  1. PCI, Payments, and Compliance
  2. We do not store, process, or transmit cardholder data.
  3. Payment capture is handled by Commerce7 and your payment processor.
  4. You are responsible for PCI scope, validation, and compliance.

We may provide operational documentation but do not guarantee PCI compliance or scan approval.

  1. Backups and Restoration

Typical retention:

  • Daily: 7 days
  • Weekly: 4 weeks
  • Monthly: 12 months

Backups are for disaster recovery, not content archiving.

Restoration may overwrite recent changes. Backup availability is not guaranteed for every point in time.

  1. Maintenance Windows

We perform routine and emergency maintenance as needed.
Some updates may cause brief service interruptions.
Emergency work may occur without prior notice.

  1. Security Incidents

If compromise is suspected, we may:

  • Restrict access
  • Disable components
  • Restore backups
  • Block traffic

Baseline malware cleanup is included. Advanced forensic work may require upgrades or additional fees.

  1. Support Scope

Included:

  • Hosting stability
  • Basic WordPress availability
  • DNS/Cloudflare setup we manage
  • Backup restores

Excluded:

  • Custom development
  • Third-party vendor support
  • PCI consulting
  • Advanced performance tuning
  • Repairs caused by unapproved changes

Support is provided during business hours unless otherwise stated.

  1. Fees and Billing
  • Fees are billed monthly in advance.
  • Non-payment may result in suspension.
  • Reactivation may incur fees.

Pricing and inclusions may change with notice.

  1. Termination and Handover

You may cancel with written notice.

Upon termination:

  • We will provide a reasonable site handover package.
  • Third-party services are your responsibility.
  • Performance and compatibility after migration are not guaranteed.
  1. Disclaimer of Warranties

Services are provided “as is” and “as available.”
We disclaim all implied warranties to the extent permitted by law.

  1. Limitation of Liability

To the maximum extent permitted by law:

  • We are not liable for indirect or consequential damages.
  • Total liability is limited to fees paid in the three (3) months preceding the claim.
  1. Indemnity

You agree to indemnify us for claims arising from:

  • Your content and business activities
  • Breach of these Terms
  • PCI and payment obligations
  • Actions of your users or contractors
  1. Changes to Terms

We may update these Terms with notice.
Continued use constitutes acceptance.

  1. Governing Law

These Terms are governed by the laws of Alberta, Canada, and applicable federal laws.

  1. Contact

Questions should be directed to:
[email protected]

“Premium” Hosting Subscription Terms

Applies to: Premium hosting subscriptions for Commerce7-integrated WordPress websites
Last updated: February 2, 2026

These Hosting Subscription Terms (the “Terms”) form a legally binding agreement between URSA6 (“Agency”, “we”, “us”, “5forests”) and the subscribing winery or business entity (“Client”, “you”). By subscribing to or using Premium Hosting, you accept these Terms.

  1. Service Overview

Premium Hosting is a managed WordPress hosting and maintenance service designed for wineries that require higher reliability, performance optimization, and proactive technical management than Starter Hosting.

Premium Hosting is hosted on managed VPS infrastructure (typically Vultr) and includes ongoing WordPress maintenance services.

Premium Hosting typically includes:

  • Managed VPS hosting via GridPane.
  • DNS and security configuration through Cloudflare.
  • WordPress core, plugin, and theme updates.
  • Manual update testing and validation.
  • Object caching and performance optimization.
  • Daily offsite backups.
  • Malware scanning and remediation.
  • Enhanced support and reporting.

Premium Hosting does not include Enhanced Commerce7 for WordPress, full platform governance, or enterprise-grade compliance tooling.

  1. Third-Party Providers

Premium Hosting relies on:

  • Vultr (infrastructure)
  • GridPane (hosting platform)
  • Cloudflare (DNS and WAF)
  • Commerce7 (ecommerce platform)
  • Payment processors (e.g., Stripe, Fullsteam)

We do not control these providers and are not responsible for their independent service interruptions or policy changes.

  1. Responsibilities

We manage:

  • Server provisioning and maintenance.
  • Routine patching of the hosting stack.
  • WordPress updates and compatibility testing.
  • Backup configuration and recovery support.
  • Performance tuning and caching.
  • Baseline security monitoring.

You manage:

  • Commerce7 configuration.
  • Payment processor relationships.
  • PCI validation and merchant compliance.
  • Internal access control.
  • Website content and editorial management.
  1. Access and Governance
  • Client retains limited Administrator access.
  • Plugin and theme changes require Agency approval.
  • High-risk plugins may be restricted.
  • No SSH or root access is provided.
  • Credential security is Client’s responsibility.

Unauthorized administrative changes may void support coverage.

  1. Security Controls

Premium Hosting includes:

  • Cloudflare firewall configuration.
  • Server-level protections via GridPane.
  • Routine patching.
  • Malware detection and cleanup.
  • Restricted admin behavior.

Premium Hosting does not include:

  • File Integrity Monitoring (FIM).
  • Fortress lockdown modules.
  • Payment-page monitoring.
  • Dedicated security operations services.

Enhanced security features are available only in Business tier or via add-ons.

  1. PCI and Compliance
  2. Agency does not store, process, or transmit cardholder data.
  3. Payment handling is performed by Commerce7 and payment processors.
  4. Client remains responsible for PCI scope determination and validation.

Agency provides security controls that support compliance but does not guarantee PCI certification or audit outcomes.

  1. Backups and Restoration

Typical retention:

  • Daily: 7 days
  • Weekly: 4 weeks
  • Monthly: 12 months

Backups are for disaster recovery only. Restoration may overwrite recent changes.

  1. Maintenance and Updates

We perform:

  • Biweekly or scheduled updates.
  • Staging and validation for major releases.
  • Emergency updates when required.

Maintenance windows may involve brief service interruptions.

  1. Incident Response

If compromise is suspected, we may:

  • Restrict access
  • Disable components
  • Restore backups
  • Block traffic

Advanced forensic or legal response is outside scope.

  1. Support Scope

Included:

  • Hosting and WordPress stability
  • Update management
  • Backup restores
  • Performance tuning

Excluded:

  • Custom development
  • PCI consulting
  • Third-party vendor support
  • Major rebuilds

Support is provided during standard business hours.

  1. Fees and Billing
  • Fees are billed monthly in advance.
  • Non-payment may result in suspension.
  • Reactivation may incur fees.

Pricing may change with notice.

  1. Termination and Handover

Upon termination:

  • Site export and database backup will be provided.
  • Platform configurations may be removed.
  • Post-migration performance is not guaranteed.
  1. Disclaimer of Warranties

Services are provided “as is” and “as available.”

  1. Limitation of Liability

Total liability is limited to fees paid in the three (3) months preceding the claim.

  1. Indemnity

Client indemnifies Agency for claims arising from business operations, compliance failures, or user actions.

  1. Governing Law

Governed by Alberta, Canada law.

  1. Contact

Support inquiries:
[email protected]

“Business” Hosting Subscription Terms

Applies to: Business hosting subscriptions for Commerce7-integrated WordPress websites
Last updated: February 2, 2026

These Hosting Subscription Terms (the “Terms”) form a legally binding agreement between URSA6 (“Agency”, “we”, “us”, “5forests”) and the subscribing winery or business entity (“Client”, “you”). By subscribing to or using Business Hosting, you accept these Terms.

  1. Service Overview

Business Hosting is a premium, enterprise-grade hosting and platform management service designed for high-volume, compliance-sensitive, and mission-critical winery websites.

Business Hosting includes access to the Enhanced Commerce7 for WordPress platform (only for custom website builds by 5forests), and is governed by the Service Level Agreement (SLA) provided in Schedule A2 of your Master Services Agreement.

Business Hosting typically includes:

  • High-performance infrastructure (typically high performance OVH bare metal servers).
  • Enterprise hosting stack via GridPane.
  • Enhanced Commerce7 for WordPress platform.
  • Platform governance and access controls.
  • Advanced monitoring and reporting.
  • Priority support and incident response.
  • Compliance-support documentation.
  1. Infrastructure and Providers

Business Hosting relies on:

  • OVHcloud (primary infrastructure)
  • GridPane (hosting platform)
  • Cloudflare (DNS and WAF)
  • Commerce7
  • Payment processors

Service availability is subject to third-party provider performance.

  1. Governance and Responsibilities

We manage:

  • Dedicated or semi-dedicated infrastructure.
  • Server hardening and optimization.
  • Enhanced platform governance.
  • Priority patching and maintenance.
  • Incident response coordination.
  • Backup and disaster recovery systems.

You manage:

  • Internal access policies.
  • Payment and merchant relationships.
  • PCI validation and regulatory filings.
  • Staff training and credential governance.
  1. Access Controls and Platform Restrictions
  • Enhanced Commerce7 platform is optional and only offered to custom builds completed by 5forests.
  • Administrative privileges are restricted (no access to plugins and themes).
  • Client access is limited to approved roles.
  • Plugin and theme changes require approval.
  • No SSH/root access for Client users.

Unauthorized actions may void SLA protections.

  1. Enhanced Security and Integrity Controls

Business Hosting may include:

  • Hardened admin environment.
  • Mandatory two-factor authentication.
  • File and change integrity monitoring on critical components.
  • Payment-page and script integrity monitoring (when applicable).
  • Third-party vulnerability monitoring.
  • Advanced malware detection.

Controls are applied based on risk profile and regulatory requirements.

  1. PCI Compliance Support
  2. Agency does not handle cardholder data.
  3. Payment processing is handled by Commerce7 and processors.
  4. Business Hosting provides controls intended to support PCI DSS requirements.
  5. Client retains responsibility for PCI validation and attestation.

Agency does not guarantee compliance certification or scan approval.

  1. Logging and Audit Support

Business Hosting includes:

  • Extended log retention.
  • Security event reporting.
  • Access audit trails.
  • Evidence support for assessments upon request.
  1. Backups and Recovery

Includes:

  • Multi-region backups.
  • Extended retention.
  • Restore testing.
  • Priority recovery assistance.
  1. Change Management

Includes:

  • Staging environments.
  • Controlled deployments.
  • Compatibility testing.
  • Coordinated maintenance windows.
  1. Incident Response

Agency may:

  • Isolate systems
  • Restrict access
  • Roll back deployments
  • Engage remediation partners
  • Notify Client of material incidents

Forensic investigations may require separate agreements.

  1. Support and SLA

Business Hosting is governed by the Service Level Agreement (Schedule A2).

Includes:

  • Priority response
  • Performance remediation
  • Security incident handling
  • Platform issues
  1. Fees and Tier Management
  • Billed monthly in advance.
  • Downgrades remove Enhanced C7 and security controls.
  • Reconfiguration fees may apply.
  1. Termination and Transition

Upon termination:

  • Platform components may be removed.
  • Data exports will be provided.
  • Migration assistance may be billed separately.
  1. Disclaimer of Warranties

Services provided “as is” and “as available.”

  1. Limitation of Liability

Total liability is limited to fees paid in the three (3) months preceding the claim.

  1. Indemnification

Client indemnifies Agency for claims related to compliance, content, and user actions.

  1. Governing Law

Governed by Alberta, Canada law.

  1. Contact

Support inquiries:
[email protected]