Draft — not yet in force Every highlighted value below must be filled in, and this document reviewed by a lawyer, before CloudRelay accepts a paying customer. Delete this banner at that point.

Acceptable Use Policy

Last updated: [DATE]

The short version. Run your own apps and websites. Don't use our servers to harm anyone, break the law, mine cryptocurrency, or send spam. If you do, we will switch your server off — sometimes without warning, because sometimes waiting causes more harm.

This policy is part of the Terms of Service between you and [LEGAL ENTITY NAME] ("CloudRelay", "we", "us"). It applies to everything you run on our infrastructure, including during a free trial.

1. What you must not host or transmit

You may not use CloudRelay to store, publish, transmit, or link to:

Material that is illegal where you are, where we operate, or where your server is located.
Child sexual abuse material. We report this to the relevant authorities and preserve evidence. There is no warning, no appeal, and no refund.
Malware, ransomware, exploit kits, or software whose purpose is to gain unauthorised access to systems.
Phishing pages, fake login screens, or anything designed to deceive people into handing over credentials, money, or personal data.
Content that infringes someone else's copyright, trademark, or other intellectual property.
Material that harasses, threatens, or incites violence against a person or group.

2. What you must not do with the server

Cryptocurrency mining, in any form, including in the background of an otherwise legitimate app, and including during a trial. This is the single most common abuse of free trials and we treat it as grounds for immediate termination.
Sending unsolicited bulk email, or any email to addresses that did not opt in. If you send marketing email, you must be able to show consent.
Port scanning, vulnerability scanning, or penetration testing against systems you do not own or have written authorisation to test.
Participating in or launching denial-of-service attacks.
Running botnet command-and-control, anonymising proxies used to conceal abuse, or open relays.
Deliberately evading suspension, for example by signing up again under a different name or card after we have terminated an account.

3. Fair use of resources

Your server is yours, and we don't police normal spikes. But your plan buys a server of a stated size, not unlimited capacity. We may contact you, and if necessary throttle or suspend, if your usage:

saturates CPU or disk continuously in a way that suggests the workload belongs on a larger plan;
uses the server principally as bulk file storage or a download mirror rather than to run an application;
generates outbound traffic that threatens our provider relationships or the IP reputation of neighbouring infrastructure.

In almost every case this is a conversation about moving you to a bigger plan, not an enforcement action.

4. Your security responsibilities

We give you your own isolated server. What runs on it is your responsibility:

Keep your application and its dependencies reasonably up to date. On managed WordPress plans we handle core, theme, and plugin updates.
Don't commit credentials, API keys, or tokens into public repositories.
Tell us promptly at [abuse@cloudrelay.ai] if you believe your server has been compromised. A compromised server that is attacking others will be suspended whether or not you meant it to.

5. What happens when this policy is broken

Situation	What we do
Active harm to others — outbound attacks, spam floods, phishing, a compromised box	Immediate suspension, without prior notice. We tell you as soon as the server is off, and explain what we saw.
Illegal content, or cryptocurrency mining	Immediate suspension and, in most cases, termination of the account. No refund.
Resource use beyond your plan	We contact you first and give you a reasonable period to move to a suitable plan or reduce usage.
Anything else in this policy	We contact you, explain the problem, and give you [7] days to put it right before suspending.

Suspension means your server is powered off and your sites go offline. Your data is retained for [30] days from suspension so that a genuine mistake can be undone, unless the law requires otherwise. After that it is deleted.

6. Reporting abuse

If something hosted on CloudRelay is harming you, email [abuse@cloudrelay.ai] with the domain or IP address and whatever evidence you have — headers, logs, timestamps, a URL. A person reads that inbox. We aim to acknowledge reports within one business day and act faster where there is active harm.

7. Changes

We may update this policy as new kinds of abuse appear. We'll email account holders about material changes at least [30] days before they take effect. Continuing to use CloudRelay after that means you accept the updated policy.

8. Contact

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Abuse: [abuse@cloudrelay.ai] · General: support@cloudrelay.ai