1. Scope and Application

This Policy applies to all customers and users who access or use services provided by MonaCloud, including VPS hosting plans, virtual machines, assigned IP addresses, network resources, server management features, and associated infrastructure.

By ordering, accessing, or using a MonaCloud service, you agree to comply with this Policy, our Terms of Service, and other applicable policies published on our website. If you permit another person to access your server or account, you remain responsible for activity conducted through your services to the extent permitted by applicable law.

This Policy applies regardless of the operating system, software, application, hosting location, or method used to access the service.

2. General Responsibilities

Customers must use MonaCloud services responsibly and take reasonable steps to protect their accounts, servers, applications, and credentials.

• Comply with applicable laws and regulations relevant to your use of the service.
• Respect the rights, security, privacy, and legitimate interests of other individuals and organizations.
• Maintain appropriate security controls for your operating system, applications, access credentials, and exposed services.
• Use assigned CPU, memory, storage, bandwidth, and network resources within the limits of your purchased plan.
• Respond appropriately to credible abuse reports and reasonable requests concerning activity originating from your service.
• Ensure that hosted content and applications are authorized, properly licensed where required, and not used to facilitate prohibited activity.

3. Illegal Activities

MonaCloud services must not be used to engage in, facilitate, promote, or materially support unlawful activities. Prohibited conduct includes, but is not limited to:

• Distributing content or services that violate applicable law.
• Fraud, identity theft, payment fraud, phishing, impersonation, or deceptive schemes.
• Unauthorized access to accounts, systems, networks, databases, or online services.
• Distributing malicious software, credential-stealing tools, ransomware, or other harmful code.
• Operating illegal marketplaces or facilitating the sale of unlawful goods or services.
• Violating applicable intellectual property, privacy, consumer protection, or data protection laws.
• Threats, extortion, stalking, or other unlawful harassment carried out through hosted services.

Customers are responsible for determining whether their intended use is lawful in the jurisdictions relevant to their activities.

4. Network Abuse and Unauthorized Access

Customers must not use MonaCloud infrastructure to interfere with, compromise, or gain unauthorized access to other systems or networks. Prohibited activities include:

• Launching or participating in denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks.
• Scanning, probing, exploiting, or attempting to compromise systems without appropriate authorization.
• Brute-force attacks, credential stuffing, password spraying, or unauthorized account takeover attempts.
• Operating botnets, command-and-control infrastructure for malicious purposes, or unauthorized remote access campaigns.
• Spoofing network identities, forging headers, or manipulating traffic to conceal harmful or unauthorized activity.
• Interfering with network routing, service availability, or the operation of MonaCloud's or a third party's infrastructure.
• Using a VPS as a relay, proxy, or intermediary to facilitate attacks or evade abuse controls.

Authorized security testing, research, and network diagnostics must remain within the scope of documented permission and must not disrupt systems or affect unrelated users.

5. Spam, Email Abuse, and Messaging

MonaCloud services must not be used to send unsolicited bulk communications or to facilitate abusive messaging campaigns. Prohibited activities include:

• Sending spam or unsolicited bulk email in violation of applicable law or recipient requirements.
• Operating phishing campaigns or sending deceptive messages designed to steal credentials or personal information.
• Using forged sender identities, unauthorized email relays, or compromised mail servers.
• Continuing abusive email campaigns after receiving credible complaints or evidence of unauthorized sending.
• Operating messaging infrastructure intended to evade reputation systems, abuse detection, or legitimate provider restrictions.

Customers operating legitimate mail services must configure them responsibly, protect authentication credentials, monitor abuse, and maintain appropriate sending practices.

6. Malware, Phishing, and Harmful Content

Customers must not host, distribute, or knowingly facilitate malware, phishing pages, credential theft, malicious downloads, or infrastructure used primarily for cyber abuse.

This restriction includes malicious scripts, ransomware distribution, unauthorized data collection, fraudulent login pages, drive-by downloads, and files designed to compromise devices or accounts without valid authorization.

Security research, malware analysis, and educational testing may be acceptable only where lawful, appropriately controlled, and not used to cause harm, compromise third-party systems, or violate other provisions of this Policy.

7. Copyright and Intellectual Property

Customers must respect copyright, trademarks, patents, trade secrets, and other applicable intellectual property rights. You may not use MonaCloud services to distribute or facilitate access to infringing material without the required rights or authorization.

Reports of alleged copyright infringement may be reviewed under MonaCloud's DMCA Policy and applicable law. MonaCloud may request additional information, restrict access to reported material, or take other appropriate action where warranted.

8. Resource Abuse and Service Interference

Each VPS plan includes specified resources and service limits. Customers must not use their services in a way that creates unreasonable or unauthorized interference with the shared infrastructure, network, or other customers.

Prohibited conduct includes:

• Intentionally circumventing resource limits, technical restrictions, or service controls.
• Running workloads that materially degrade infrastructure performance or network stability beyond the service's permitted use.
• Attempting to access another customer's data, virtual machine, storage, or management environment.
• Abusing network capacity, storage systems, or other infrastructure in a manner that threatens service stability.
• Reselling, redistributing, or sharing service access where prohibited by the applicable plan or agreement.
• Interfering with monitoring, security controls, abuse prevention systems, or infrastructure operations.

Resource usage must remain consistent with the purchased plan and any additional service-specific limits disclosed to the customer.

9. Proxies, VPNs, and Similar Services

VPNs, proxies, privacy tools, remote access services, and similar applications may be used only for lawful purposes and in accordance with the applicable service terms.

These technologies must not be used to conceal or facilitate fraud, unauthorized access, abusive traffic, spam, attacks, or other prohibited activities. Customers remain responsible for traffic routed through their VPS, including traffic generated by users or systems they authorize.

Additional restrictions may apply where required to protect network integrity, comply with law, or address a credible abuse concern.

10. Cryptocurrency and High-Intensity Workloads

Customers must ensure that compute-intensive workloads, automated tasks, cryptocurrency-related applications, and other demanding processes are compatible with their purchased VPS plan and any applicable service-specific restrictions.

Workloads must not involve unauthorized use of computing resources, malware, deceptive activity, unlawful financial schemes, or interference with infrastructure. Where a particular workload is subject to additional restrictions, customers must comply with the terms communicated for that service.

11. Content and User Privacy

Customers are responsible for the content they store, process, publish, or transmit through their VPS. You must have the rights, permissions, and legal basis necessary for your activities, including where personal data is involved.

Customers must not use MonaCloud services to unlawfully expose private information, distribute stolen data, conduct unauthorized surveillance, or violate another person's privacy rights.

MonaCloud's handling of personal information is described in the Privacy Policy. Customers who process personal data through their own applications are responsible for their own legal and security obligations.

12. Open Ports, Applications, and Server Security

Customers are responsible for configuring and maintaining the software and services installed on their VPS, except to the extent a specific management service expressly provides otherwise.

• Use strong authentication and secure credentials.
• Apply relevant security updates and patches in a timely manner.
• Disable unnecessary services and restrict administrative access where appropriate.
• Configure firewalls and access controls suitable for the hosted workload.
• Investigate signs of compromise, unusual outbound traffic, or unauthorized activity.
• Maintain independent backups of important data and configurations.

A customer whose server is compromised may still be responsible for activity originating from that server. MonaCloud may take proportionate action to contain a credible security threat or protect its infrastructure and other customers.

13. Abuse Reports and Investigations

MonaCloud may review reports concerning suspected violations of this Policy. Reports may relate to network abuse, spam, phishing, malware, copyright complaints, security incidents, unlawful content, or other activity that may threaten service integrity or third parties.

Where reasonably necessary, MonaCloud may request relevant information from the customer, review available technical evidence, or take temporary protective measures while assessing a report. Customers are expected to cooperate in good faith and take reasonable corrective action when a legitimate issue is identified.

MonaCloud may prioritize urgent matters involving active attacks, ongoing compromise, material service disruption, or credible risks to people, systems, or data.

14. Enforcement and Suspension

If MonaCloud reasonably determines that a service is being used in violation of this Policy, it may take appropriate action based on the nature, severity, urgency, and recurrence of the activity.

Possible actions include:

• Requesting an explanation or corrective action from the customer.
• Requiring the removal or disabling of reported content or services, where appropriate.
• Restricting affected traffic, ports, applications, or service functionality.
• Temporarily suspending or, where warranted, terminating an affected service or account.
• Preserving or disclosing information where required or permitted by applicable law.
• Referring suspected unlawful conduct to relevant authorities where appropriate.

MonaCloud may act without advance notice where immediate action is reasonably necessary to prevent ongoing harm, protect infrastructure, comply with law, or respond to a serious security incident. Where appropriate and practical, notice may be provided before or after action is taken.

Any cancellation, refund, or termination-related matter remains subject to the Terms of Service and Refund Policy, as applicable.

15. Customer Responsibility and Data Backups

Customers are responsible for managing their hosted applications, maintaining appropriate backups, and protecting data stored on their VPS. Unless a separate written service agreement expressly states otherwise, customers should not assume that MonaCloud maintains a recoverable backup of all server data.

Before making significant changes, responding to an incident, or terminating a service, customers should secure any data they need to retain. Suspension or termination may affect access to hosted content, subject to applicable law and the relevant service terms.

16. Third-Party Services and Customer End Users

Customers who provide hosting, applications, websites, APIs, or other services to their own users must establish suitable rules and controls for those users.

You must take reasonable steps to prevent your customers, visitors, agents, or other authorized users from using your VPS to engage in prohibited activity. Delegating access does not remove your responsibility to comply with this Policy.

Third-party software, providers, networks, and platforms may have additional terms. Customers are responsible for reviewing and complying with the requirements applicable to their chosen services.

17. Reporting a Violation

Suspected violations may be reported through MonaCloud's contact page. To help us assess a report, include relevant details such as the affected IP address or service, timestamps with time zone, the nature of the alleged abuse, supporting evidence, and any relevant logs or reference numbers.

Please provide accurate information and avoid including unnecessary sensitive personal data. Submitting a report does not guarantee a particular outcome or response time. MonaCloud may request additional information where reasonably necessary to evaluate the matter.

18. No Guarantee of Immediate Action

MonaCloud reviews abuse and security reports according to the information available, the seriousness of the reported activity, operational considerations, and applicable legal requirements. We do not guarantee that every report will result in enforcement action or that a particular review will be completed within a specific timeframe.

Nothing in this section limits any rights or obligations that cannot be excluded under applicable law.

19. Changes to This Policy

MonaCloud may update this Acceptable Use Policy from time to time to reflect changes in its services, security practices, operational requirements, or applicable legal obligations.

The updated version will be published on this page with a revised update date where appropriate. Continued use of MonaCloud services after an update becomes effective constitutes acceptance of the revised Policy to the extent permitted by applicable law.

20. Relationship to Other Policies

This Policy should be read together with MonaCloud's other applicable service policies:

• Terms of Service — general terms governing access to and use of MonaCloud services.
• Privacy Policy — information about the handling of personal information.
• Refund Policy — applicable refund and cancellation terms.
• Delivery Policy — information about digital service provisioning and delivery.
• DMCA Policy — information concerning copyright infringement reports.

If provisions appear to conflict, the applicable terms will be interpreted in accordance with the relevant service agreement and applicable law.