Acceptable use policy

This policy exists because our customers share infrastructure. Nearly all of it comes down to one idea: do not use our servers to harm other people, and do not use so much of a shared machine that your neighbours suffer.

You must not use our services for

• Anything illegal under the law of England and Wales.
• Child sexual abuse material. Accounts are terminated immediately and reported, with no notice and no refund.
• Sending unsolicited bulk email, or hosting a site advertised by spam sent from anywhere else.
• Phishing, malware distribution, or command-and-control infrastructure.
• Attacking other systems — port scanning, brute forcing, denial of service.
• Infringing someone else's copyright or trade marks.
• Harassment, incitement to violence, or content promoting terrorism.
• Open proxies, open mail relays, or anonymised traffic services.
• Cryptocurrency mining, or any other sustained consumption of CPU unrelated to serving a website.

Resource use on shared hosting

Shared hosting is shared. Plan limits on storage, databases and mailboxes are published, and bandwidth described as unmetered means we do not bill for it — not that a single account may saturate a node.

If a site consistently consumes resources that degrade the server for others, we will contact you first, tell you specifically what is doing it, and help you fix it or move to something more suitable. Immediate action without warning is reserved for cases where the server is actively failing.

Email sending

Shared hosting is for a business's ordinary correspondence and transactional mail. It is not a bulk mailing platform: sending a large newsletter through a shared server damages the IP reputation every other customer depends on. Use a dedicated provider for lists, and keep the shared server for the mail your business sends day to day.

Every list must be opt-in with a working unsubscribe. Purchased lists are not opt-in.

Security is a shared responsibility

We patch the operating system and the server software. You are responsible for what you install — WordPress, its plugins and themes, and your own code. An abandoned plugin with a known vulnerability is the single most common way a site here gets compromised.

If your site is compromised we will normally suspend it to stop it harming others, tell you immediately, and help you clean it up. That is not a punishment; a compromised site is usually being used to attack somebody else.

How we enforce this

Proportionately. Most issues are a conversation and a fix. Where we must act, we prefer suspending one site to terminating an account, and terminating an account is a last resort — except for the categories above where it is immediate.

To report abuse originating from our network, email support@vesopa.com with "Abuse" in the subject and include logs with timestamps and time zone.

---

Questions about this document? Email support@vesopa.com or write to VESOPA SOFTWARE LTD, Baglan, Port Talbot, Wales, SA12 7AX.