Skip to content
intoclouds.io
Back to siteLog in

Legal

Acceptable Use Policy

Last updated: 9 July 2026

1. Scope

This Acceptable Use Policy (AUP) applies to everyone who uses IntoClouds — servers, domains, DNS and email — and to all traffic and content that passes through our infrastructure. It is part of our Terms of Service. We may update it as new forms of abuse appear; the "Last updated" date reflects the current version.

2. Prohibited uses

You must not use the service to host, transmit, distribute, or facilitate any of the following:

  • Phishing and fraud — pages or messages designed to steal credentials, payment details or identities, or otherwise deceive people.
  • Malware — creating, hosting, or distributing viruses, worms, trojans, ransomware, or running malware command-and-control (C2) infrastructure.
  • Child sexual abuse material (CSAM) — this results in immediate termination and a report to law enforcement. There is no warning and no appeal window for CSAM.
  • Infringing content — distributing copyrighted material you have no right to share, including torrents of infringing material.
  • Cryptocurrency mining on our shared or standard VPS plans. Mining degrades shared infrastructure and is not permitted unless separately agreed in writing.
  • Anonymising abuse infrastructure — running open proxies, VPN or Tor exit services, or similar relays whose purpose is to anonymise abusive or illegal traffic.
  • Anything illegal under the laws that apply to you, to us in Moldova, or to our infrastructure provider in the European Union.

3. Email & messaging

With the email and messaging features you must not:

  • send spam or unsolicited commercial email (UCE), or any bulk mail to recipients who have not opted in;
  • send mass unsolicited outbound mail, run mailing lists without verifiable consent, or forge headers or sender addresses;
  • use the service to support a phishing, scam, or malware campaign by email.

4. Network abuse

You must not use the service to attack or interfere with other networks or hosts. In particular, no:

  • Denial-of-service activity — originating or participating in DoS/DDoS attacks, including running or leaving open the reflectors used for amplification attacks (open DNS resolvers, and misconfigured NTP or memcached services);
  • Port scanning or probing of third-party systems you do not own or have permission to test;
  • Intrusion attempts, credential-stuffing, or any unauthorised access to systems, accounts or data.

5. Upstream provider rules

IntoClouds is itself a customer of Hetzner Cloud, and your servers physically run on Hetzner's infrastructure. Hetzner's own acceptable-use and abuse rules therefore flow down to you: anything that would breach Hetzner's terms is also a breach of this AUP, even if it is not listed above. This lets us act quickly when our upstream provider requires it.

6. How we enforce this policy

Our normal enforcement ladder is proportionate and escalating:

  1. Notice — we contact you, describe the problem, and give you a chance to fix it;
  2. Suspension — if it is not resolved, we power off and suspend the affected resource while keeping your data;
  3. Termination — for serious or repeated breaches we terminate the resource or the account.

Immediate suspension without notice. Where a resource is actively causing harm — for example sending an attack, serving CSAM or malware, or emitting a denial-of-service flood — we operate an abuse kill-switch that powers the server off and suspends it straight away, before any notice, and regardless of billing status. We then follow up with you. This reflects a control that actually exists in the platform, not an empty threat.

7. Reporting abuse

If you believe a server, domain, or mailbox on IntoClouds is being used abusively, please tell us at abuse@intoclouds.io. To help us act quickly, include:

  • the IP address, domain, or URL involved;
  • the type of abuse (spam, phishing, malware, DoS, and so on);
  • timestamps with the time zone, and any relevant logs or message headers.

We aim to acknowledge abuse reports within 24 hours on business days. This is a target we work towards, not a contractual guarantee, and complex cases can take longer to investigate.