Acceptable Use Policy

1. Prohibited content & activity

• Anything illegal where you are, where your users are, or in the United States or the European Union.
• Child sexual abuse material — removed and reported to the authorities without exception.
• Content that infringes copyright, trademarks or other rights, including unlicensed distribution of copyrighted works and counterfeit goods.
• Malware, phishing, fraud, scams, or content designed to deceive, impersonate or harm.
• Pornographic or sexually explicit material, and obscene content.
• Threats, harassment, incitement to violence, terrorist content, and sharing private or intimate information about people without their consent.
• Content that incites hatred or violence against people because of race, ethnicity, nationality, religion, disability, sex, sexual orientation or similar characteristics.
• Breaking data-protection, consumer-protection or child-protection laws.

2. Network & security abuse

• Accessing, scanning or testing systems you don't own or have permission to test — including ours and other customers'.
• Denial-of-service attacks, botnets or their command-and-control, and amplification or reflection attacks.
• Open mail relays, open proxies, open DNS resolvers, or other misconfigurations that others can abuse.
• IRC servers (IRCd), and Tor exit nodes.
• Spoofing IP addresses or using addresses that were not assigned to you.
• Sending abusive traffic through the VPN or any other Service.

3. Fair use of shared resources

Don't run workloads that disrupt the platform, overload shared systems, or cause excessive wear on hardware or network capacity, and don't try to get around resource limits. Cryptocurrency mining and comparable sustained-load workloads are not allowed on hosting, VPS or cloud servers, and on dedicated servers only with our prior written approval. Our DNS, edge protection and delivery network may not be used mainly to serve video or large files without a product built for it.

4. Email & messaging

• Send only to people who asked to hear from you. No purchased, rented, scraped or third-party lists.
• Every marketing message must identify you truthfully, contain no misleading headers or subject lines, show your valid postal address, and include a working unsubscribe that you honour promptly (within 10 days at the latest).
• Text messages: send marketing texts only with the recipient's prior express written consent (or the consent your local law requires), identify yourself, and honour STOP and similar replies at once.
• Never spoof senders, forge headers, or send from a domain you have not verified with us.
• Keep bounces and complaints low. Sending through our Email API or marketing tools is paused automatically when, over the last 7 days, your hard-bounce rate reaches 5% (once you have at least 10 bounces), your complaint rate reaches 0.3% (once you have at least 3 complaints), or you receive 10 complaints. Only our staff can resume it, after your list is cleaned.
• Mailboxes are for normal business mail; bulk or marketing mail must go through the Email API or marketing tools.
• Messages may be scanned automatically and blocked when they look like spam, phishing or malware.

5. Domain abuse

Domains may not be used for phishing, malware, botnets, pharming, spam or fraud, or registered with false details. We act on these reports as our registrar obligations require, which can include suspending the domain.

6. AI features

Don't use AI features to create anything this AUP forbids, to impersonate real people or organizations deceptively, to generate malware or attack material, or to produce content that sexualises minors. Don't try to get around the safety limits built into them.

7. Accounts & access

Keep credentials secure and don't share accounts outside your team. Don't resell or give others access to Services except as your plan allows, and never to anyone in a sanctioned country or region (see the Terms of Service).

8. How we enforce this policy

We may investigate suspected breaches and cooperate with law enforcement. We will usually forward a complaint to you and expect a response or a fix within 48 hours; if there is serious or ongoing harm we may act straight away. Depending on severity, we may remove content, block a server or address, throttle or pause sending, suspend the domain or account, or end Services — with notice where we reasonably can. Fees continue while Services are suspended for a breach.

When we restrict content or a Service, we tell you what we did and why — the facts, the rule or law involved, and whether automated tools were used to detect or decide it — and how you can contest it. You can contest any such decision by replying to our message; a person reviews it and tells you the outcome. Some automated checks (for example spam and malware scanning of outgoing email) run without human review, and their results can be contested the same way.

If we become aware of information suggesting a criminal offence that threatens someone's life or safety, we inform the relevant authorities.

9. Reporting abuse

Report abuse or illegal content to [email protected] with the details: URLs, IP addresses, timestamps, message headers and evidence. A notice about illegal content should explain why you consider it illegal, say exactly where it is (such as the full URL), give your name and email (not needed for reports of child sexual abuse material), and confirm that you believe in good faith that the notice is accurate and complete. Copyright complaints should follow the Copyright Policy.

We confirm receipt, review every report promptly, and tell you what we decided and how to contest it. This address is our single point of contact for customers, the public and authorities, including under the EU Digital Services Act; we correspond in English.