Founded in 2025 by the team behind online grocer Rohlik, Duvo counts Morrisons, Holland & Barrett and Notino as customers and holds SOC 2 Type II and ISO 42001 certification.
Vercel terms now expire credits and give UK and EU users a cancel right
EditorialBy TrustList Editorial
The rewrite took effect the day it was posted: plan credits end with the term, bought credits after a year, and a company can take over an account on its email domain after notice.
About Vercel terms now expire credits and give UK and EU users a cancel right
Vercel terms now expire credits and give UK and EU users a cancel right
19 October 2026: Vercel has rewritten the Terms of Service for its Hobby and Pro plans, effective the same day it announced them, with new rules on when credits expire, who controls an account opened on a company email address, and a right for eligible UK and EU consumers to cancel free of charge when a service change hurts them. Enterprise contracts are not covered.
Not yet independently verified. We checked Vercel's changelog against the current Terms of Service, last updated 19 October 2026: the credit expiry rules, the withdrawal right and the 30-day cancellation for UK and EU consumers all match. We have not compared the new terms with the previous version, so which clauses are new rests on Vercel's changelog. We will update this when it can be confirmed, and remove this note.
Credits now have an expiry date
A new section sets out how credits work. Credits included with a plan expire at the end of the subscription term, and purchased credits expire one year after purchase unless the purchase terms say otherwise. Credits pay only Vercel fees, have no cash value and cannot be transferred. They are generally nonrefundable, with one exception: unused purchased credits are refunded if Vercel terminates the account without cause. The terms also confirm that credit purchases are billed in advance, that subscriptions renew automatically unless renewal is turned off, and that pass-through rates for third-party services may change when the provider's rates change. A team that bought a block of credits ahead of a launch should note the purchase date, because anything left after twelve months is lost.
Accounts on a company email domain
Accounts registered with a work email now have their own section. A company can manage only the projects a person creates inside the company's team. If the company wants to take over an account that uses its email domain, Vercel will now notify the person first and give them "a reasonable amount of time" to move personal content to an account under another address. Developers who keep side projects on a work-email account have a practical reason to move them now rather than on notice.
Rights for UK and EU consumers
Eligible consumers in the UK and the EU may cancel an affected subscription free of charge if a change has "more than a minor negative impact" on their access to or use of the service. They have 30 days from the notice or the change, whichever is later, and may get a prorated refund of prepaid amounts. The terms also spell out statutory withdrawal and refund rights. These rights apply to consumers, so a business account cannot rely on them.
Other changes
Service-specific provisions have moved to a separate Service Terms page, and the sanctions clause now states that the services must not be used in connection with or for the benefit of a sanctioned person. Vercel is in our DevOps software category, which lists 16 products, alongside Netlify, Heroku and Railway.
Sources
- Vercel changelog: Updates to Hobby and Pro Terms of Service, 19 October 2026
- Vercel: Terms of Service (read 2026-10-24), 19 October 2026
Categories & features
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
The Taiwan-founded platform says an attacker read 3.2 million stored environment variables and 321,810 account records in October; services pause from 1 December, and the data deletion date is not yet set.
Of 67 public startup programmes we list, 32 invest through or alongside private investors and 20 cannot be applied to directly. How the British Business Bank, EIC, SBIC, SSBCI, Israel and SVC match private money.
WebKit says Safari and WebKit on iOS, iPadOS, macOS and visionOS 27 cut off network access to identity resolution providers by domain, so marketers who rely on hashed-email IDs lose that signal from Apple users.
The alias and rewrite overflow affects every release since 0.1.29. The fix release also moves HTTP/2 to RFC 9218 prioritisation and adds MaxMind DB support to the GeoIP modules.
One flaw sits in image optimisation of SVG files and reaches back to Next.js 10; the other hits the use cache directive in 16.x and has no workaround. A third advisory fixes a Server Actions denial of service.
The Deno runtime gets a year of monthly bug and security releases, then development ends; JSR keeps running on Cloudflare, and paying Deploy customers get help moving to Workers.
Neither bulletin reports exploitation, but ColdFusion servers have been attacked soon after past patch days; AEM 6.5 customers must apply named hotfixes on top of their service pack.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More United StatesThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.