Acceptable Use Policy

Version 1.0 · Effective 1 November 2026

---

This policy sets out what you may and may not do with the services we provide. It forms part of our Terms of Service.

It applies to you, to your staff, and to anyone else you allow to use the services. You are responsible for their use as if it were your own.

We have kept this short and specific. The point is not to list every conceivable misuse — it is to be clear about the things that cause real harm, so that if we ever have to act, you know why.

---

1. The basics

You must not use our services:

• to break the law, or to help anyone else break it;
• to harm other people, including harassment, threats, stalking or incitement to violence;
• to harm our systems or anyone else’s, including unauthorised access, scanning, denial of service, or distributing malware;
• to infringe someone’s rights, including copyright, trademarks and confidential information.

---

2. Content

You must not store, publish or transmit content that is:

• unlawful, or which facilitates unlawful activity;
• indecent images of children, or any material that sexually exploits a child;
• terrorist material, or material inciting terrorism;
• defamatory, or which breaches a court order;
• designed to deceive — including phishing pages, fake login screens, counterfeit goods listings, and content impersonating another organisation.

We do not routinely monitor what you store. Where something is reported to us, or our security systems flag it, we will look.

---

3. Email and messaging

You must not:

• send unsolicited bulk email, or allow your systems to be used to send it;
• forge headers, or otherwise disguise where a message came from;
• harvest addresses, or buy lists of them for marketing;
• send marketing that does not comply with the Privacy and Electronic Communications Regulations.

If you run legitimate email marketing, keep your lists clean and your authentication records (SPF, DKIM, DMARC) correct. Most deliverability problems we are asked to fix come from one of those two things.

Compromised accounts. If an account on our platform starts sending spam because it has been compromised, we will suspend it immediately to protect our mail reputation and other customers, and tell you straight away. That is not a penalty — it is the only way to stop the damage.

---

4. Network and resource use

You must not:

• attempt to gain unauthorised access to any system, account or data, whether ours or anyone else’s;
• probe, scan or test the security of systems you do not own without written permission;
• interfere with service to any user, host or network;
• use a shared hosting service in a way that materially degrades it for other customers.

Where your use outgrows your plan, we will talk to you about moving to something more suitable before we take any action.

---

5. Keeping your end secure

You must:

• keep credentials confidential, and not share accounts between people;
• use multi-factor authentication where the service offers it;
• tell us promptly if you think an account or device has been compromised;
• keep software we are not responsible for maintaining reasonably up to date;
• not disable or circumvent security controls we have put in place.

---

6. If something goes wrong

6.1 What we will do

Where we believe this policy has been breached, our normal approach is to contact you, explain the problem and give you a reasonable opportunity to fix it.

We will act without contacting you first only where the harm is serious and immediate — for example active malware distribution, a compromised account sending spam, indecent images of children, or an attack originating from your service. In those cases we will suspend first and tell you immediately afterwards.

6.2 What we may do

Depending on severity, we may:

• ask you to remove content or change a configuration;
• suspend the affected service;
• terminate the service under our Terms of Service;
• report the matter to the relevant authorities, where we are required to or where the content is of a kind that must be reported.

We will always act proportionately, and we will tell you what we have done and why.

6.3 Your costs

Where a breach of this policy causes us to incur costs — cleaning up a compromised site, dealing with a blacklisting, or responding to a complaint caused by your use — we may charge for the time involved at our standard rates.

---

7. Reporting abuse

If you believe something hosted or transmitted by us breaches this policy, tell us at [email protected]. Include as much detail as you can — URLs, message headers, IP addresses and timestamps all help.

We investigate every report. We will not always be able to tell you the outcome, because the other party’s information is confidential, but we will acknowledge your report.

---

8. Changes

We may update this policy. Where a change materially affects what you are permitted to do, we will give you 30 days’ notice. Changes needed to comply with law or to address an immediate security risk take effect immediately.

---