Acceptable Use Policy

1. Acceptable Use Policy#

By using the Services, the Client agrees to comply with this Acceptable Use Policy. This policy constitutes a legally binding agreement between the Client and Senko Digital LLC, a company registered in Georgia.

2. General Principles#

2.1. Senko Digital is not a “bulletproof” hosting provider. We do not offer, advertise or authorise hosting that ignores substantiated abuse reports or evades binding, applicable legal orders. We investigate abuse reports and take action on substantiated violations and binding, applicable legal orders in accordance with this AUP, our Terms of Service and applicable law. Services must be used for lawful purposes only, without degrading performance, stability or security for others.

2.2. Use the services and hosted content lawfully, including compliance with applicable copyright, data-protection and security requirements. Georgian law and the law of the service location apply where relevant; EU and other laws apply to the extent they govern the activity concerned.

2.3. The Client is responsible for securing their systems, software, and access credentials. This includes maintaining appropriate security measures such as firewalls, updated software, and secure passwords.

2.4. The Client shall report any security incidents or suspicious activity promptly to the Company's support team.

3. Prohibited Content and Activities#

The following content and activities are prohibited on the Company's servers. Violations are categorized by severity:

Category A — Immediate suspension#

These serious violations trigger immediate suspension. Following review, deliberate or serious abuse may result in termination without a cure period, including before 100 points. Category A termination and permanent suspension at 100 or more points follow the same no-refund and forfeiture policy in Section 4.8 of the Terms for business and consumer accounts, subject to mandatory law and the exceptions stated there. Category A also covers comparably serious threats, assessed on evidence and explained to the customer.

• Child sexual abuse material (CSAM), including but not limited to the creation, distribution, storage, or facilitation of access to such content
• Content or services that facilitate human trafficking or sexual exploitation, including the advertising of escort or prostitution services
• Terrorist content, including incitement to, propaganda for, recruitment for, financing of, or glorification of terrorism or terrorist organizations
• Content that incites violence, or that incites hatred or discrimination against individuals or groups on the basis of protected characteristics such as race, ethnicity, nationality, religion, gender, sexual orientation, or disability
• Doxxing, swatting, or publishing private information with the intent to endanger, harass, or intimidate others, as well as stalkerware, covert surveillance tools, or OSINT tools used to track, profile, or de-anonymize individuals without their consent
• Malicious software designed to compromise systems or networks, including software for creating botnets or ransomware, as well as hosting or operating command and control (C2) infrastructure for malware, botnets, or other malicious networks
• Operating, selling, or advertising DDoS-for-hire services (booters or stressers), including their control panels and storefronts, as well as hosting or using tools for carrying out DDoS attacks
• Interfering with or bypassing usage limits, monitoring, or security controls, including attempts to escape the virtual machine, to access other clients' data or services, or to attack the hypervisor or the Company's network or infrastructure
• IP address spoofing, BGP hijacking, or announcing IP address space or AS numbers without authorization from the resource holder
• Sale, trading, distribution, or hosting of stolen, leaked, or fraudulently obtained accounts, credentials, or data, including game accounts and in-game items, combolists, stealer logs, payment card data, and breached databases containing personal data, as well as tools for bruteforcing, credential stuffing, or account and proxy checking
• Phishing, impersonation, or identity theft
• Using the Company's services to host, operate, or facilitate access to darknet markets, Tor exit nodes, or similar services used primarily for anonymous access to illegal content or services
• Sale or facilitation of the sale of illegal or regulated goods, including but not limited to drugs, weapons, and counterfeit documents or goods, as well as instructions for manufacturing weapons, explosives, or illegal drugs
• Operating cybercrime forums, including hacking communities and exploit development forums
• Network scanning, vulnerability scanning, penetration testing, or other security testing of third-party systems without explicit permission from the target. This restriction does not apply to security testing performed by the Client on their own Services, provided such testing does not impact shared infrastructure or other clients
• Content or activities that promote, support, or facilitate the actions of any government, military, or intelligence body subject to sanctions under the laws of Georgia, the European Union, the United Nations, or the United States, or other applicable jurisdictions
• Running services that facilitate tax evasion, money laundering, or other financial crimes, including cryptocurrency mixers, tumblers, or exchange services designed to conceal the origin of funds
• Scam or fraud operations, including but not limited to fake online shops, fraudulent investment schemes (such as HYIP, Ponzi, or pyramid schemes), and cryptocurrency drainers
• Paying for the Services with stolen, unauthorized, or fraudulently obtained payment cards, accounts, or other payment instruments
• Operating unlicensed financial services, including but not limited to payment processors, payment gateways, cryptocurrency exchanges, or other financial services
• Operating unlicensed gambling services, including but not limited to sports betting, casino games, or other gambling services
• Deliberately fabricated content presented as factual that poses a clear and demonstrable risk of harm
• Sending or facilitating unsolicited, deceptive or unlawful bulk email (spam). Software used for lawful campaigns is not prohibited merely because it can send bulk mail; Section 7 applies.
• Operating SEO spam networks, link farms, doorway pages, or similar schemes designed to manipulate search engine rankings
• Advertising, offering, or reselling the Company's services as 'bulletproof', abuse-resistant, or abuse-ignoring hosting
• Engaging in activities that fraudulently misrepresent an affiliation with or endorsement by the Company
• Failure to comply with a binding, applicable removal order. We act within the required deadline and notify the customer where permitted; immediate action applies where legally required or necessary to stop a serious threat.
• Sale, trading, rental, or distribution of cheats, hacks, bots, aimbots, or other software designed to circumvent the rules, licensing, or anti-cheat systems of a game or platform, in breach of that platform's terms of service (for example, the Steam Subscriber Agreement), including operating marketplaces, storefronts, or Telegram or Discord bots for that purpose
• Any cybercrime activity: committing, attempting, organising or knowingly facilitating criminal conduct through computer systems, networks or data. Authorised security research and testing are subject to the safeguards in this policy.

Category B - Warning and Cure Period#

These violations normally receive written notice and at least 24 hours to remedy. Unresolved violations may lead to suspension or termination; urgent security or legal requirements may require immediate action. Category B points decrease over time and may accumulate only below 100; they cannot alone trigger the 100-point ban. Category B termination below 100 points permits settlement for full unused service billing months under Sections 4.5 and 7.2 of the Terms. Category B does not mean conduct is necessarily lawful.

• Content or activities that infringe copyright under the laws of the EU, Georgia, or other applicable jurisdictions, including torrenting or other peer-to-peer file sharing of copyrighted material, as well as content subject to valid DMCA or equivalent copyright takedown reports
• Mining cryptocurrency, or running other resource-intensive cryptocurrency workloads such as Chia plotting, blockchain full nodes, or validators, without explicit permission from the Company. Permission, if granted, will be documented in writing and subject to specific resource allocation limits and additional fees as determined by the Company
• CPU usage in excess of the fair use limits set out in Section 4
• Running automated scraping operations that violate third-party terms of service
• Using third-party domains, websites or services as camouflage or fallback destinations for VPN, proxy or tunnelling services without the owner's explicit authorization
• Hosting deepfakes or other AI-generated content that violates the rights of others
• Running passive income services, such as bandwidth sharing or disk rental
• Pornographic content, including but not limited to links to such materials
• Ad fraud, click fraud, or other deceptive schemes designed to artificially inflate advertising metrics or generate fraudulent revenue
• Running open DNS resolvers, open SMTP relays, or other misconfigured services that can be exploited for amplification attacks or abuse
• Activities that harm the reputation of IP addresses assigned to the Client or used by the Company's network, including operating open or misconfigured mail relays or proxy services that are used for abuse, using third-party websites or services in breach of their applicable usage policies where this causes substantiated abuse complaints or IP-address restrictions, failing to secure a compromised service within the notified cure period, or repeatedly causing substantiated abuse-related blocklisting. A pre-existing or erroneous listing alone does not establish a violation. Conduct otherwise classified as Category A remains subject to Category A rules
• Sale, trading, rental, or distribution of game accounts, accounts on other online platforms (such as AI services), license keys, or in-game items or currency, in breach of a third-party platform's terms of service (for example, the Steam Subscriber Agreement), including operating marketplaces, storefronts, or Telegram or Discord bots for that purpose
• Counterfeit brand websites, typosquatting domains, or other trademark infringement

A Category B incident may require Category A action where evidence establishes a comparably serious threat or deliberate harmful conduct. We explain the reasons for escalation.

We consider severity, intent, impact, recurrence and whether a compromised service was promptly secured. Proportionate lesser action is possible, but the permanent-suspension threshold is 100 points. Customers may challenge findings and incorrect point calculations through support.

4. Fair Use of Server Resources#

4.1. The Company's infrastructure utilizes shared CPU resources across VPS instances on the same hypervisor node, as most virtual servers typically operate below full capacity. This allows for efficient resource allocation.

4.2. Short-term bursts and sustained workloads are allowed, but continuously running all allocated vCPU cores at or near 100% for prolonged periods is not permitted.

4.3. For purposes of this section, 'prolonged periods' means sustained usage exceeding 90% of allocated vCPU capacity for more than 12 consecutive hours, or more than 72 cumulative hours within a 7-day period.

4.4. If usage threatens platform stability or materially degrades service for others, the Company may temporarily limit resources, request workload changes, propose an upgrade, or take reasonable actions to restore normal operation.

4.5. The Client shall cooperate with reasonable optimization requests related to CPU, memory, disk I/O, and network usage.

4.6. The Client shall maintain reasonable I/O operations within the allocated resources and implement appropriate caching and optimization strategies for high-traffic applications.

4.7. While the Company has fair use guidelines in place, temporary exceedance of these limits is permitted for brief periods without penalty, as the Company maintains flexibility in enforcement to support the Client's workload needs.

4.8. For purposes of the preceding subsection, 'brief periods' typically means occasional bursts not exceeding 4 hours in a 24-hour period.

5. Network and Traffic Policy#

5.1. Network Performance

The Company provides network connectivity to virtual servers at speeds of 10 Gbps (shared), unless otherwise specified in the plan's specifications. Network speeds are not guaranteed and may vary depending on network conditions, infrastructure load, geographic routing, and other factors beyond the Company's control.

5.2. Fair Use Traffic Policy

Each plan includes a monthly traffic allowance. This allowance is granted per calendar month and does not carry over between months. The traffic allowance is individually determined by the plan tier selected by the Client, the plan's price, and the server's geographic location, and is always mentioned on the Company's website in the plan's specifications. Higher-tier plans include larger traffic allowances. Both inbound and outbound traffic are counted by the Company toward the allowance. The applicable traffic allowances by product line are as follows:

• (a) Budget VPS: from 4 TB (for the cheapest plan in the lineup) to 16 TB (for the most expensive plan in the lineup) per month.
• (b) Virtual Servers: from 10 TB (for the cheapest plan) to 102 TB (for the most expensive plan) per month, depending on the plan and location chosen.
• (c) Dedicated Servers: unlimited traffic allowance; network speed is capped at the speed specified in the plan, except for individual server orders where terms may differ.
• (d) Storage VPS: 20 TB per month for every plan in the lineup.

5.3. Network Speed Limitation Upon Exceeding the Allocated Traffic Volume

If a virtual server's combined inbound and outbound traffic exceeds its full-speed traffic allocation during a given calendar month, the Company will apply the following measures:

• (a) Notification. The Client will be notified via a support ticket in the Client Area that the server has reached or is approaching its traffic allocation threshold. Where possible, this notification will be issued prior to the application of any speed limitation.
• (b) Reduction of Network Speed. The server's network speed will be reduced to 25 Mbit/s until the 1st of the following month. The reduced speed will be communicated to the Client in the notification issued under subsection (a). During the speed limitation period, no restriction is placed on traffic volume; only the inbound and outbound speed of the affected virtual server is reduced. No overage fees are charged automatically - the speed limitation is applied instead of additional charges.
• (c) Automatic Network Speed Restoration. On the first day of the following calendar month, the speed limitation is automatically removed without any action required from the Client.

5.4. Remedies Available to the Client

A Client whose server is subject to a speed limitation under Section 5.3 may pursue any of the following options:

• (a) Await the Network Speed Limitation Reset. The speed limitation is lifted automatically on the first day of the next calendar month.
• (b) Upgrade to a Higher Plan. The Client may upgrade to a plan with a larger traffic allocation through the Client Area. If the upgraded plan's allocation covers the server's traffic consumption for the current calendar month, the speed limitation will be removed automatically within 30–60 minutes of the plan change taking effect. Available plans and pricing are listed on the Company's website and in the Client Area.
• (c) Purchase Additional Traffic. The Client may purchase additional traffic volume at a rate of 1 € per 1 TB per month. The additional traffic increases the plan's allowance, and the speed limitation is lifted once the new allowance covers the server's current monthly usage. Additional traffic can be purchased by the Client at any time - during ordering the service or by upgrading an existing service - both in the Client Area. The Client's existing plan and server files remain unchanged; only the existing traffic limitation is removed and the full network speed is restored.

All available options will be outlined in the notification ticket issued under Section 5.3(a).

5.5. Traffic Monitoring

We read aggregate incoming and outgoing byte counters from each VM's network interface to calculate its allowance and apply or remove speed limits. We do not inspect traffic contents for this measurement. Usage figures are linked to the service and treated as personal data where they identify an individual.

5.6. Abuse or Bad-Faith Usage

Exceeding the monthly allowance is permitted at the reduced speed in Section 5.3 and is not itself abuse. We may restrict traffic for independently established attacks, unlawful activity or attempts to evade technical limits, following the enforcement rules below.

Except in cases of immediate security threats - including but not limited to DDoS attacks or network-level abuse - the Company will endeavor to provide advance notice before applying measures under this section.

6. Software Licensing#

6.1. The Company does not sell or provide software licenses. Clients must independently procure and maintain valid licenses for all software installed on their Services.

7. Email, Anti-Spam, and Port Policies#

7.1. To enforce anti-spam measures, inbound and outbound port 25 (SMTP) is closed on all plans by default.

7.2. For BUDGET-1, BUDGET-2, BUDGET-3, BUDGET-4 plans in all locations: port 25 cannot be opened. Reverse DNS (rDNS, PTR) management is unavailable, default records will be used instead.

7.3. All other plans: the Client may request opening of port 25 by creating a support request in the Client Area. Approval is discretionary and may incur additional fees of up to 20 EUR, as well as require additional verification and compliance with anti-abuse conditions. The opening of the port is not guaranteed, and a refusal to open the port does not constitute grounds for a refund of the service.

7.4. The Client must comply with applicable anti-spam laws (e.g., consent, opt-out, identification). The Company may require proof of consent and acceptable complaint rates.

7.5. The Client must maintain SPF, DKIM, and DMARC records for email authentication.

7.6. The Client must regularly monitor email sending patterns for abuse prevention and compliance with anti-spam laws.

7.7. In certain cases, bulk email campaigns may be allowed after prior written agreement with the Company; however, approval is not guaranteed. The Client must provide full details of the campaign, including the nature of the content, the intended recipient list, and evidence of recipient consent.

8. Contact Information and Account Integrity#

8.1. The Client shall ensure all contact information provided to the Company is accurate and up-to-date, including during signup and in the service management interface.

8.2. For continuity of communications, the use of Disposable Email Addresses (DEA) as contact email addresses is not permitted. A DEA is any temporary or unmonitored email address used to bypass the Company's registration requirements.

8.3. The Company will notify the Client before suspending an account due to a suspected disposable email address and provide an opportunity to update their contact information within forty-eight (48) hours. Privacy-focused email services (e.g., ProtonMail) with permanent mailboxes are not considered DEAs.

8.4. The Client must maintain alternative contact methods that remain continuously accessible for emergency notifications.

8.5. Any changes to contact information must be promptly updated in the Client's account within 7 days of the change occurring.

8.6. All information provided for the account must be truthful, accurate, and belong solely to the Client registering in the Client Area; it must not be fraudulent, false, stolen, or otherwise misappropriated, nor belong to or impersonate any other person. Where the Client is a legal entity, an authorized representative of the company (such as a director or secretary) must register using their own personal information together with the company's details. The use of fraudulent, false, stolen, or third-party information will result in suspension of the account until the Client's identity has been verified. Completing identity verification does not by itself reverse forfeiture or remove an independent ground for suspension; Sections 5.2 and 7 of the Terms govern those consequences and review.

9. Security and Incident Response#

9.1. If the Client's service is compromised or participates in abuse, the Company will notify the Client when practicable and may take enforcement actions as described in the Enforcement section of this policy.

9.2. The Client must promptly remediate vulnerabilities, remove malware, re-install the operating system, and rotate credentials as requested.

9.3. The Client agrees to cooperate in good faith with investigations and provide relevant logs or details as legally permitted.

9.4. The Company may comply with lawful requests from regulatory, law enforcement, or judicial authorities in applicable jurisdictions.

10. Enforcement#

10.1. The Company may warn, throttle, filter, temporarily suspend, or terminate Services for policy violations, depending on severity and impact.

10.2. The Company may act immediately without notice where necessary to protect the network, other Clients, or third parties, or to comply with legal obligations.

10.3. If the Client believes enforcement was made in error, the Client may contact support with relevant evidence for review.

10.4. At 100 or more abuse points, the account is permanently suspended and its services end, with the same financial treatment as Category A termination under Section 4.8 of the Terms. Category B violations alone cannot reach this threshold. Serious Category A violations may justify termination before it.

10.5. Abuse points and recorded violations are visible to the customer. Category B points decrease over time and their combined total remains below 100; Category A points do not decrease over time. A confirmed Category A finding is required for a 100-point ban. We explain the violation, points applied and resulting action. Incorrect or successfully challenged findings and points are corrected, and measures without a remaining valid basis are reversed. Requests for review may be sent to [email protected] even if account access is blocked. Review does not guarantee reinstatement if 100 or more points remain correctly recorded. Refunds and data retrieval follow Sections 4 and 7 of the Terms.

11. Abuse Handling & Reporting#

11.1. Report abuse to [email protected] with details including timestamps, logs, and affected IPs/domains. Abuse can also be reported via the support ticket system in the Client Area if the email channel is unavailable.

11.2. The Company will acknowledge and begin investigating abuse reports within 24 hours for standard cases, or within 48 hours for cases requiring advanced technical analysis.

11.3. If the reported Client fails to respond or remedy the issue within the investigation timeframe, the affected service - or, in cases of severe violations, the entire account with all associated services - may be suspended until the matter is resolved.

11.4. Malicious abuse reports are prohibited and may result in account suspension.

11.5. The Client must assist with abuse investigations involving their services and implement requested remediation measures.

11.6. This subsection applies to abuse reports that are not notices under Section 11.7, such as automated or bulk reports and reports that give no contact details. The Company reviews all such reports and acts on them where warranted, but may not reply to each one individually. For every report, including notices under Section 11.7, the Company does not disclose the identity of the Client concerned or the details of its internal investigation beyond the decision and reasons required by Section 11.8, in order to protect the privacy and security of the parties involved. Requests for further disclosure will be considered if submitted as a formal legal request through the appropriate legal channel at [email protected].

11.8. Handling of notices. The Company confirms receipt of every notice submitted under Section 11.7 without undue delay, and processes all notices in a timely, diligent, non-arbitrary, and objective manner. It notifies the submitter of its decision in respect of the content without undue delay, together with the reasons for that decision and information on the redress available against it. Where the Company acts against Client Content or a Client's account as a result of a notice, it also gives the affected Client a statement of reasons and information on how to appeal, as described in the Terms of Service. The Company does not use automated means to decide notices; should that change, it will say so in the confirmation of receipt and in the decision. A notice that meets the requirements of Section 11.7, and that allows the Company to identify the illegality of the content without a detailed legal examination, gives the Company actual knowledge of that content.

12. Changes to this policy#

Amendments to this AUP require the express checkbox acceptance described in Section 2.1 of the Terms. Continued use alone is not acceptance. Financial settlement on ending services follows Section 4; mandatory legal requirements remain applicable.