Acceptable Use Policy

Hostwover provides domains, hosting, servers, email, productivity services, infrastructure, APIs, artificial intelligence functionality, and other online services for legitimate personal, professional, development, and business purposes.

This Policy exists to protect:

• Hostwover Customers.
• End Users.
• Hostwover infrastructure.
• upstream providers.
• third-party networks.
• internet users.
• email reputation.
• domain infrastructure.
• service availability; and
• the security and integrity of Hostwover Services.

You must use Hostwover Services responsibly, securely, and lawfully.

This Policy applies to all current and future Hostwover Services, including where applicable:

• domain registration.
• domain transfer.
• domain renewal.
• DNS services.
• web hosting.
• shared hosting.
• VPS.
• VDS.
• virtual servers.
• cloud infrastructure.
• professional email.
• business email.
• Google Workspace.
• SSL-related services.
• APIs.
• artificial intelligence services.
• control panels.
• account-management systems.
• storage.
• databases.
• backups.
• snapshots.
• networking services.
• automation tools; and
• related support and management services.

You are responsible for the use of Services associated with your Hostwover account.

This responsibility includes activity performed by:

• employees.
• administrators.
• developers.
• contractors.
• customers.
• End Users.
• scripts.
• applications.
• APIs.
• automated systems; and
• anyone else you authorize to access your Services.

You must take reasonable steps to ensure that authorized users comply with this Policy.

You may not use Hostwover Services in violation of applicable laws or regulations.

You are responsible for determining whether your use of a Service is lawful in jurisdictions relevant to your activities.

Hostwover's provision of a Service does not constitute legal approval of your activities.

Hostwover Services must not be used to conduct, facilitate, promote, conceal, or knowingly support unlawful activity.

This includes using Hostwover infrastructure primarily to provide technical support for illegal operations.

You may not use Hostwover Services to conduct or facilitate fraud.

Prohibited activities include:

• payment fraud.
• credit card fraud.
• financial fraud.
• fake online stores.
• advance-fee scams.
• investment scams.
• fraudulent fundraising.
• deceptive subscription schemes.
• fraudulent payment pages.
• identity-based fraud; and
• other schemes designed to unlawfully obtain money, property, credentials, or information.

Phishing is prohibited.

You must not create, host, send, distribute, redirect to, or otherwise facilitate content designed to deceptively obtain:

• passwords.
• authentication credentials.
• banking details.
• card information.
• personal information.
• verification codes.
• session tokens.
• private keys.
• API credentials; or
• other confidential information.

You may not deceptively impersonate:

• individuals.
• businesses.
• financial institutions.
• government bodies.
• brands.
• online services; or
• other organizations

for fraud, phishing, unlawful deception, or similar harmful activity.

Legitimate parody, authorized testing, demonstrations, and commentary are not prohibited solely because they reference another person or brand.

Hostwover Services must not be used to steal, misuse, trade, or unlawfully distribute information for identity theft.

You may not knowingly use Hostwover Services to host, create, distribute, deploy, operate, or control malicious software.

This includes:

• viruses.
• trojans.
• worms.
• spyware.
• ransomware.
• credential stealers.
• malicious browser extensions.
• rootkits.
• destructive payloads.
• unauthorized backdoors; and
• similar malicious programs.

Use of Hostwover Services to develop, distribute, control, deploy, monetize, or facilitate ransomware is prohibited.

You may not knowingly operate unauthorized botnet command-and-control infrastructure using Hostwover Services.

You may not use Hostwover Services to manage devices, servers, accounts, or systems compromised without authorization.

Hostwover Services must not be used to gain or attempt to gain unauthorized access to:

• servers.
• computers.
• networks.
• websites.
• applications.
• databases.
• accounts.
• APIs.
• cloud services.
• devices; or
• other systems.

Unauthorized credential attacks are prohibited.

This includes:

• brute-force attacks.
• credential stuffing.
• password spraying.
• password cracking.
• authentication bypass.
• session theft.
• token theft; and
• similar unauthorized access attempts.

You may not exploit vulnerabilities in systems you do not own or have authorization to test.

Legitimate penetration testing and security research are permitted only where you:

• own the target system; or
• have explicit authorization from the system owner.

Security testing must not cause unreasonable disruption to Hostwover, its providers, or unrelated third parties.

Unauthorized scanning or probing of third-party networks is prohibited.

This includes systematic scanning of external:

• IP addresses.
• networks.
• ports.
• devices; or
• services

without authorization.

Port scanning is permitted only against systems that you own or are expressly authorized to test.

Mass or abusive scanning of third-party internet infrastructure is prohibited.

You may not use Hostwover Services to conduct or facilitate:

• denial-of-service attacks.
• distributed denial-of-service attacks.
• reflection attacks.
• amplification attacks.
• application-layer attacks; or
• other deliberate attempts to disrupt services.

You may not use Hostwover Services to operate or facilitate unauthorized:

• booters.
• stressers.
• DDoS-for-hire platforms; or
• similar attack services.

Legitimate stress testing of infrastructure you own or are authorized to test must comply with applicable infrastructure-provider rules.

You must not intentionally interfere with the operation of:

• Hostwover infrastructure.
• upstream networks.
• DNS systems.
• email infrastructure.
• third-party servers.
• APIs.
• websites; or
• other online services.

Using forged or unauthorized source IP addresses for abusive, deceptive, or attack-related purposes is prohibited.

VPN, proxy, relay, gateway, or tunneling services may be permitted depending on the applicable Hostwover product and upstream-provider restrictions.

If you operate such a service, you remain responsible for abuse originating through it.

Hostwover may restrict or suspend a proxy, relay, VPN, or tunneling service where it generates significant abuse or violates provider requirements.

Hostwover has zero tolerance for abusive spam.

Hostwover Services must not be used to send unsolicited bulk messages or operate infrastructure primarily intended for spam distribution.

You may not intentionally send bulk commercial messages to recipients where you do not have the consent or other lawful basis required for such communications.

Customers operating mailing lists must use reasonable mailing practices.

These should include:

• legitimate subscriber acquisition.
• identifiable senders.
• functional unsubscribe methods.
• suppression of unsubscribed recipients.
• bounce handling.
• complaint handling; and
• compliance with applicable messaging laws.

Purchased, harvested, scraped, stolen, or otherwise improperly obtained contact lists must not be used for spam or unsolicited bulk messaging.

Hostwover Services may not be used to harvest email addresses for:

• spam.
• phishing.
• fraudulent messaging.
• unlawful marketing; or
• abusive campaigns.

You may not intentionally falsify email sender identity for:

• phishing.
• fraud.
• harmful impersonation.
• credential theft; or
• similar abuse.

Sending excessive volumes of email or other messages to intentionally overwhelm, harass, disrupt, or exhaust resources is prohibited.

If your email account becomes compromised, you must take reasonable steps to secure it promptly.

Hostwover may temporarily restrict email sending from a compromised account to prevent continuing abuse.

Hostwover may restrict email activity where Customer usage materially threatens:

• IP reputation.
• domain reputation.
• shared mail infrastructure.
• provider relationships; or
• email deliverability for other Customers.

Customers should use appropriate email-authentication technologies where supported, including:

• SPF.
• DKIM; and
• DMARC.

Hostwover may require additional configuration where recurring abuse or deliverability problems occur.

You may not knowingly operate websites primarily designed to:

• distribute malware.
• steal credentials.
• conduct phishing.
• defraud visitors.
• compromise devices.
• deliver malicious software; or
• facilitate cyberattacks.

Using domains, hosting, applications, or links to knowingly redirect visitors to:

• phishing pages.
• malware.
• fraudulent services; or
• other prohibited content

is not permitted.

You must respect the intellectual property rights of others.

Hostwover Services must not knowingly be used primarily to distribute copyrighted material or other protected content without authorization where such distribution infringes applicable law.

Prohibited infringing distribution may include unauthorized copies of:

• software.
• games.
• movies.
• television content.
• music.
• books.
• images.
• applications; or
• other protected works.

Hostwover may investigate properly submitted infringement complaints.

You may not unlawfully misuse another party's trademark in a manner intended to deceive users regarding:

• identity.
• affiliation.
• sponsorship.
• ownership; or
• endorsement.

Hostwover Services must not knowingly be used primarily for the unlawful sale or distribution of counterfeit goods.

Hostwover has zero tolerance for child sexual abuse material ("CSAM") and unlawful sexual exploitation of minors.

Hostwover Services must never be used to:

• host.
• store.
• distribute.
• solicit.
• advertise.
• trade.
• facilitate access to; or
• otherwise support

child sexual abuse material.

Hostwover may take immediate action and make reports to appropriate authorities or service providers where legally required or permitted.

Hostwover Services must not be used to facilitate:

• unlawful sexual exploitation.
• sexual trafficking.
• sexual coercion.
• exploitation of minors; or
• non-consensual sexual activity.

You may not use Hostwover Services to distribute intimate material in violation of applicable law or without legally required consent.

Hostwover Services must not be used to facilitate human trafficking, forced labor, or unlawful exploitation.

Hostwover Services must not be knowingly used to provide unlawful operational infrastructure, financing, recruitment, material support, or other prohibited assistance for organizations or activities legally designated as terrorist.

You may not use Hostwover Services to communicate credible unlawful threats of physical violence against identifiable persons or groups.

Hostwover Services must not primarily be used for unlawful:

• harassment.
• stalking.
• intimidation.
• threatening behavior; or
• targeted abuse.

Publishing another person's sensitive information with unlawful intent to threaten, facilitate physical harm, enable crime, or conduct serious harassment is prohibited.

Customers operating online stores or commercial applications must not intentionally:

• offer nonexistent products.
• accept payment without intending to provide goods or services.
• create fraudulent checkout interfaces.
• misrepresent identity for fraudulent purposes.
• conduct deceptive refund schemes; or
• operate similar commercial scams.

Customers processing payment-card information are responsible for securing those systems and complying with applicable security and legal requirements.

Hostwover hosting or infrastructure does not automatically make a Customer compliant with any particular payment-card or financial-security standard.

Customers engaged in regulated activities are responsible for obtaining all licenses, registrations, permissions, or authorizations legally required for those activities.

This may include certain:

• financial services.
• payment services.
• healthcare services.
• telecommunications services.
• gambling services.
• investment services; or
• other regulated activities.

Gambling, betting, lottery, or similar regulated services may only be operated where lawful and where permitted by the applicable Hostwover product and upstream provider.

Hostwover may restrict such activities where required by law or provider policy.

Legitimate blockchain development and cryptocurrency-related applications are not automatically prohibited.

However, the following remain prohibited:

• cryptocurrency fraud.
• wallet theft.
• wallet-draining operations.
• phishing.
• malware.
• unauthorized cryptojacking.
• fraudulent investment schemes; and
• other activity prohibited by this Policy.

Cryptocurrency mining is prohibited on Hostwover infrastructure where the applicable product or upstream infrastructure provider prohibits mining.

This includes attempts to circumvent restrictions through:

• containers.
• virtual machines.
• hidden processes.
• third-party mining agents; or
• similar methods.

Shared hosting is intended for normal website and application workloads compatible with a shared environment.

Customers must not consume resources in a manner that materially degrades service for other Customers.

Hostwover may restrict activity causing abnormal or harmful consumption of:

• CPU.
• memory.
• storage.
• disk I/O.
• database resources.
• processes.
• network traffic.
• file operations.
• email capacity; or
• other shared resources.

Customers must comply with technical limits, quotas, allocations, and usage restrictions applicable to their Service.

You may not deliberately bypass or defeat:

• CPU limits.
• memory limits.
• storage limits.
• bandwidth restrictions.
• API rate limits.
• mail limits.
• license limits.
• account restrictions.
• security controls; or
• other technical limitations.

Customers with root, administrator, or equivalent access are responsible for reasonable security and administration of their server environments.

This includes:

• operating-system security.
• software updates.
• access credentials.
• firewall configuration.
• exposed services.
• user permissions.
• application security; and
• monitoring for compromise.

If a server becomes compromised and generates abusive or harmful activity, Hostwover may temporarily:

• isolate the server.
• restrict network access.
• block affected ports.
• suspend specific services; or
• suspend the server

to prevent continuing harm.

Customers should maintain software reasonably protected against known security vulnerabilities.

Hostwover may require corrective action where a critically vulnerable system creates a material security or abuse risk.

Domains registered, transferred, renewed, or managed through Hostwover must not knowingly be used primarily for:

• phishing.
• malware.
• fraud.
• spam.
• botnet control.
• credential theft.
• deceptive impersonation; or
• other prohibited activity.

Customers must provide accurate domain-related information where required by:

• the applicable registrar.
• registry.
• ICANN requirements.
• provider requirements; or
• applicable law.

A domain may be suspended, locked, redirected, restricted, or otherwise affected where required by:

• the registrar.
• registry.
• upstream provider.
• applicable dispute-resolution process.
• legally binding order.
• applicable law; or
• abuse-mitigation requirements.

Hostwover may not be able to reverse actions taken directly by a registrar or registry.

Hostwover DNS Services must not knowingly be used for:

• phishing infrastructure.
• malware distribution.
• botnet infrastructure.
• fraudulent redirection.
• attack infrastructure; or
• other activity prohibited by this Policy.

Some Hostwover Services are supplied in whole or in part through third-party providers.

Customers must comply with applicable mandatory acceptable-use and service rules imposed by those providers.

Customers using Google Workspace through Hostwover must comply with Google's then-current acceptable use requirements and applicable Google terms.

Hostwover cannot authorize conduct prohibited by Google.

Hostwover infrastructure services may rely on upstream data-center, cloud, network, software, registrar, email, or platform providers.

Those providers may impose additional technical or acceptable-use restrictions.

Where such requirements apply to a Hostwover Service, you must comply with them.

Hostwover APIs must be used in accordance with applicable:

• documentation.
• authorization rules.
• authentication requirements.
• rate limits.
• product limits; and
• security requirements.

You may not intentionally:

• overload Hostwover APIs.
• bypass API rate limits.
• exploit API vulnerabilities.
• enumerate accounts without authorization.
• obtain restricted information.
• interfere with API availability; or
• compromise API credentials.

Automated requests, integrations, bots, scripts, and applications are permitted where supported.

Hostwover may restrict automated activity that:

• creates unreasonable load.
• causes abuse.
• violates rate limits.
• interferes with other Customers.
• attempts to circumvent restrictions; or
• violates this Policy.

Where Hostwover provides artificial intelligence functionality, AI Services must not be used to facilitate activities otherwise prohibited under this Policy.

Applicable AI-provider policies and product-specific restrictions may also apply.

You must not use Hostwover Services to unlawfully obtain, process, store, sell, disclose, or distribute personal information.

Customers remain responsible for their own compliance with applicable privacy and data-protection requirements.

Hostwover Services must not be used for unlawful:

• interception.
• surveillance.
• tracking.
• monitoring; or
• collection of communications or personal information.

Hostwover Services must not knowingly be used to distribute, sell, exchange, or monetize information obtained through unauthorized system access or theft.

Where Hostwover permits a Customer to provide services to its own End Users, the Customer remains responsible for responding reasonably to abuse originating from those End Users.

A Customer's own acceptable-use rules must not authorize conduct prohibited by this Policy.

Hostwover may investigate credible reports of suspected abuse involving Hostwover Services.

Reports may originate from:

• Customers.
• internet users.
• security researchers.
• rights holders.
• registrars.
• registries.
• upstream providers.
• network operators.
• email providers.
• government authorities.
• law-enforcement authorities.
• anti-abuse organizations; or
• automated security systems.

When investigating abuse, Hostwover may consider reasonably relevant information such as:

• domains.
• URLs.
• IP addresses.
• timestamps.
• email headers.
• system logs.
• network information.
• screenshots.
• malware indicators.
• threat intelligence.
• upstream-provider notices.
• account activity; and
• Customer responses.

Customers may be required to reasonably assist with abuse investigations.

Hostwover may request that a Customer:

• investigate suspicious activity.
• secure an account.
• remove malicious content.
• patch vulnerable software.
• stop abusive traffic.
• provide evidence of authorization.
• correct a configuration.
• explain suspicious activity; or
• take other reasonable remedial action.

Depending on the severity of a violation, Hostwover may:

• issue a warning.
• request corrective action.
• restrict outbound email.
• block a port.
• block traffic.
• isolate a server.
• disable a website.
• restrict network connectivity.
• suspend a Service.
• suspend an account.
• terminate a Service.
• terminate an account.
• refuse renewal; or
• take other reasonable technical action.

Where reasonably practicable, Hostwover will consider factors such as:

• severity.
• urgency.
• recurrence.
• security risk.
• potential harm.
• Customer cooperation.
• technical feasibility.
• provider requirements; and
• applicable law

when determining the appropriate response.

Hostwover may take immediate action without prior notice where reasonably necessary to address serious or urgent situations including:

• active phishing.
• malware distribution.
• ransomware.
• DDoS attacks.
• botnets.
• significant fraud.
• child sexual abuse material.
• serious server compromise.
• immediate threats to infrastructure.
• legally required action; or
• comparable serious abuse.

Repeated or deliberate violations may result in stronger enforcement, including permanent Service or account termination.

A compromised server or account does not automatically mean that the Customer intentionally violated this Policy.

However, repeated failure to secure an affected system after receiving reasonable notice may itself result in restrictions or suspension.

You may not create new accounts, servers, domains, or technical arrangements primarily to bypass a Hostwover abuse suspension, restriction, or termination.

Hostwover may take action where an upstream provider requires mitigation, restriction, suspension, or termination related to abuse.

Hostwover may not be able to override mandatory provider actions.

Hostwover may take action required to comply with valid and binding:

• court orders.
• regulatory requirements.
• law-enforcement requirements.
• governmental requirements; or
• other applicable legal processes.

Handling of Customer information will remain subject to applicable law and the Hostwover Privacy Policy.

Hostwover may take reasonable emergency measures necessary to protect:

• its infrastructure.
• Customer accounts.
• upstream providers.
• external networks.
• internet users; or
• availability of the Services.

Abuse reports should be submitted in good faith.

Knowingly submitting materially false complaints for the purpose of harming another Customer, disrupting a lawful Service, or abusing Hostwover's enforcement process is prohibited.

Suspension of a Service because of a violation of this Policy does not automatically:

• cancel outstanding charges.
• cancel an existing commitment.
• create a right to a refund; or
• eliminate payment obligations.

Refund eligibility is determined under the applicable Hostwover Refund Policy, product agreement, order terms, and applicable law.

Hostwover is not responsible for independent actions taken by third parties because of Customer activity.

Such actions may include:

• IP blacklisting.
• domain reputation blocking.
• mail rejection.
• account suspension.
• search-engine removal.
• browser warnings.
• provider blocking; or
• network filtering.

Hostwover may provide reasonable assistance but cannot guarantee that a third party will reverse its decision.

Customers are responsible for reasonable security of their accounts and Services.

Customers should protect:

• passwords.
• administrator credentials.
• API keys.
• private keys.
• authentication tokens.
• recovery information; and
• other sensitive credentials.

Customers are strongly encouraged to use multi-factor authentication where Hostwover or the relevant third-party service makes it available.

Customers managing servers, applications, or websites should apply appropriate security updates within a reasonable period based on the severity of known vulnerabilities.

Customers remain responsible for maintaining appropriate backups unless a Service specifically includes a defined backup obligation.

Having backups does not remove a Customer's security responsibilities.

Suspected abuse involving Hostwover Services should be reported with enough information to allow reasonable investigation.

Where possible, a report should include:

• affected domain.
• affected URL.
• relevant IP address.
• description of the activity.
• date and time.
• supporting evidence; and
• contact information.

Abuse reports may currently be submitted to:

Hostwover Support

Email: [email protected]

Website: hostwover.com

Hostwover may establish a dedicated abuse-reporting address or reporting system in the future.

Security vulnerabilities affecting Hostwover systems should be disclosed privately and responsibly.

Security researchers must not intentionally:

• access unrelated Customer information.
• destroy data.
• disrupt production Services.
• retain unnecessary personal data; or
• exploit a vulnerability beyond what is reasonably necessary to demonstrate its existence.

Certain Hostwover Services are governed by additional agreements or restrictions.

These may include:

• Domain Registration Agreement.
• Domain Transfer Agreement.
• Domain Renewal & Expiration Agreement.
• Web Hosting Agreement.
• VPS Agreement.
• VDS Agreement.
• Professional Email Agreement.
• Google Workspace Agreement.
• Acceptable Use Agreement; and
• other applicable product terms.

If a product-specific rule imposes a more specific or stricter requirement for a particular Service, the product-specific requirement will apply to that Service to the extent of the conflict.

Where an upstream provider imposes mandatory restrictions on a Service supplied through Hostwover, those restrictions apply to the relevant Service.

Hostwover cannot grant permission to violate mandatory provider rules.

Nothing in this Policy is intended to prohibit legitimate activities such as:

• ordinary websites.
• online stores.
• development environments.
• APIs.
• databases.
• authorized penetration testing.
• cybersecurity research with authorization.
• private networks.
• remote administration.
• business email.
• lawful content hosting.
• game servers where supported.
• VPN use where permitted.
• software development.
• CI/CD systems; or
• ordinary business applications.

All such activities remain subject to applicable technical limits and provider requirements.

The absence of a specific activity from the prohibited-use examples does not automatically mean that the activity is permitted.

Hostwover may restrict materially equivalent abusive conduct that creates comparable legal, security, infrastructure, or operational risks.

Hostwover may interpret this Policy reasonably and in good faith to protect its infrastructure, Customers, providers, and internet users.

This Policy establishes Hostwover's operational acceptable-use standards.

The separate Hostwover Acceptable Use Agreement provides more detailed contractual provisions relating to acceptable use, investigation, enforcement, Customer responsibility, and related matters.

Both documents apply where referenced by the applicable Hostwover Terms of Service or product agreement.

This Policy forms part of the Hostwover Terms of Service.

Violation of this Policy may therefore constitute a violation of the Hostwover Terms of Service.

Hostwover may update this Policy from time to time to reflect:

• new Services.
• new forms of abuse.
• security threats.
• technology changes.
• upstream-provider requirements.
• legal requirements.
• operational requirements; or
• abuse-prevention practices.

The "Last Updated" date indicates the latest revision.

Where required by applicable law, Hostwover will provide appropriate notice of material changes to this Policy.

Continued use of Hostwover Services after an updated version of this Policy becomes effective constitutes acceptance of the updated Policy to the extent permitted by applicable law.

Failure by Hostwover to enforce a provision of this Policy in one situation does not waive its right to enforce that provision in another situation.

If any part of this Policy is found to be invalid or unenforceable, the remaining provisions will continue to apply to the maximum extent permitted by law.

Hostwover may provide translated versions of this Policy.

Where permitted by applicable law and unless Hostwover expressly states otherwise, the English version will control if there is a material inconsistency between translations.

Questions concerning this Acceptable Use Policy may be directed to:

Hostwover Support

Email: [email protected]

Website: hostwover.com

This Acceptable Use Policy becomes applicable when a Customer accesses, purchases, activates, renews, manages, or uses a Hostwover Service subject to this Policy.

By using Hostwover Services, you acknowledge that:

1. Hostwover Services may only be used for lawful purposes.
2. phishing and fraud are prohibited.
3. malware and ransomware are prohibited.
4. unauthorized system access is prohibited.
5. abusive network scanning is prohibited.
6. DDoS attacks are prohibited.
7. spam is prohibited.
8. domain and DNS abuse are prohibited.
9. you are responsible for users you authorize.
10. applicable upstream-provider restrictions may apply.
11. Hostwover may investigate credible abuse reports.
12. serious violations may result in immediate restriction or suspension.
13. repeat violations may result in termination.
14. suspension does not automatically create a right to a refund; and
15. use of Hostwover Services constitutes acceptance of this Policy.

END OF ACCEPTABLE USE POLICY