Acceptable Use Policy

Who this binds, plus a note for resellers

Anyone holding a credential against the account is bound by what follows. On a reseller plan that reaches every end customer you sell to, and the consequence deserves stating bluntly: our contract is with you, never with them. Should one of your customers breach this policy, the action falls on your account, and the explaining that follows is your work rather than ours to do.

A sensible reseller writes these rules straight into their own terms. The terms of service remain the operative contract. Clause 4 is the part this document expands upon, and nothing written here widens it.

1. Barred without exception

• child sexual abuse material, whatever its form or quantity;
• material that incites terrorism or violence against people;
• phishing kits, cloned login pages, counterfeit checkout forms;
• malware, ransomware, exploit toolkits, sets of breached credentials, stolen card data;
• botnet controllers, plus proxies knowingly serving abuse;
• work published without the rights required for it, once substantiated through the copyright and takedown policy;
• pharmacy, weapons or gambling operations pointed at jurisdictions which have issued them no licence.

Adult content that is legal may stay. It needs an age gate and must not touch outbound mail.

2. Load on shared hardware

What a shared or reseller plan buys is a generous share of a machine, never the whole of it. Saturate the processor, the memory, the disk throughput or the process count for long and every neighbour suffers for it. On a reseller plan those neighbours include your own other customers, so the account that takes the node is usually punishing its own portfolio before anyone else's.

Certain workloads belong on a VPS or on dedicated hardware: media transcoding, crawling, mining, public download mirrors, offsite backup targets for systems hosted elsewhere, and databases grinding through continuous bulk jobs. None of these is forbidden; they are simply the wrong product, and you will hear from us before anything is stopped.

Unlimited storage means unlimited for the websites sitting on the plan, rather than general-purpose capacity.

3. The maintenance line

Operating system, web server and control panel are patched by us. Everything sitting above that line belongs to whoever installed it. The single most common route to a compromised account here is an extension left out of date, and whatever spam or defacement follows is attributed to the account it came from.

• update applications, themes and extensions promptly;
• clear installers, database dumps and .env files out of web roots;
• issue individual logins, and revoke each one when someone leaves;
• report a suspected compromise at once, rather than waiting until it is confirmed.

Written permission is required before you scan or load-test anything you do not own. Even where the sites are your own, warn us in advance, because the automated defences cannot tell a genuine test apart from an attack.

4. Mail

Sending carries its own document. Read the anti-spam policy ahead of any campaign, then forward it to each customer transmitting from an address you originally provisioned.

5. Enforcement

• We ask. This remains the ordinary path, since the ordinary cause is a compromised extension or a workload that has outgrown its plan.
• We isolate. Where the harm is live, meaning an outbound run, an active phishing page, or a process eating a node, that item or that account stops while we talk it through with you. On a reseller plan we aim at the offending site rather than the whole plan, wherever the platform allows us to do so.
• We terminate. Section 1 material, breaches that repeat, and accounts that go unreachable while the damage continues.

Unlawful material comes down without notice, and is reported wherever the law requires that.

6. Disputing an action

Answer the notice, or take it further through the complaints procedure. Where a suspension was made in error, it is reversed and the lost time credited.

7. Reporting

Use report abuse. Whatever is said reaches the account holder. Your contact details do not, unless you request it or a court demands otherwise.

8. Contracting entity

Hosting Seller is a trading name of IGI Security Services Ltd, a company registered in England and Wales under Company No. 15881180. Registered office: 60 Tottenham Court Road, Suite 4944a, Fitzrovia, London, United Kingdom, W1T 2EW. Questions to info@hosting-seller.com.