Legal Documentation
Acceptable Use Policy
Lawful use, prohibited activity, customer security duties, reporting and enforcement.
This Acceptable Use Policy (“AUP”) applies to all SiteHeros websites, Hosting+, managed services, accounts, systems, domains, DNS, forms, support, files, communications, integrations, and Customer content. Customer is responsible for its users and anyone acting through its accounts.
1. Core rule
Use the Services only for lawful, authorized, secure purposes consistent with the Agreement, rights of others, technical limits, and applicable upstream-provider requirements.
2. Prohibited unlawful and harmful activity
Customer must not use the Services to:
- violate law, court order, sanctions, export controls, licensing rules, or another person’s rights;
- facilitate fraud, theft, deception, impersonation, money laundering, evasion, bribery, trafficking, exploitation, violence, extortion, harassment, stalking, doxxing, or credible threats;
- distribute child sexual abuse material, nonconsensual intimate imagery, sexual exploitation, or content that unlawfully sexualizes or endangers minors;
- sell or facilitate illegal drugs, weapons, stolen goods, forged documents, illicit financial products, prohibited gambling, or other unlawful goods/services;
- infringe copyright, trademark, patent, trade secret, privacy, publicity, database, or contractual rights;
- publish unlawful defamatory content or confidential information without authority; or
- help another person evade an enforcement action.
3. Security abuse
Prohibited conduct includes:
- malware, ransomware, spyware, credential theft, phishing, pharming, malicious redirects, botnets, command-and-control, cryptojacking, exploit delivery, or unauthorized tracking;
- unauthorized access, scanning, enumeration, interception, exfiltration, password attacks, social engineering, denial-of-service, traffic amplification, or vulnerability exploitation;
- concealment of origin, forged headers, deceptive domains, DNS abuse, or bypass of authentication, rate, access, license, or technical controls;
- storing or sharing stolen credentials, access tokens, secrets, exploit kits, unlawfully obtained data, or weaponized payloads; and
- security testing without prior written authorization.
4. Spam and communications
Customer must not send or facilitate unsolicited bulk messages, unlawful telemarketing/texting, deceptive sender identity, harvested or purchased-list abuse, list bombing, mail bombing, spamvertising, phishing, or communications that violate CAN-SPAM, TCPA, Do Not Call rules, consent/opt-out duties, provider policies, or recipient rights.
Customer must use accurate headers, lawful consent or other authority, a working unsubscribe method, suppression controls, complaint/bounce handling, and authenticated domains where appropriate. Hosting+ does not include bulk email or customer mailbox service unless ordered.
5. Deceptive and abusive commercial practices
Customer must not use the Services for fake reviews, undisclosed endorsements, dark patterns, deceptive negative options, hidden charges, counterfeit goods, pyramid/Ponzi schemes, misleading health/financial/legal claims, manipulated scarcity, fabricated credentials, or material omissions.
6. Intellectual-property abuse
Customer must possess required rights and licenses. Repeat or egregious infringement may result in termination. Copyright and other intellectual-property reports should be sent to legal@siteheros.com and identify the right, location, evidence, reporter authority and requested action.
7. Privacy and regulated data
Customer must not collect, use, disclose, sell, share, track, combine, infer, or retain personal data unlawfully. Prohibited without express written approval and required safeguards: full card data; protected health information; government identifiers; precise location; biometrics; highly sensitive credentials; children’s data; special-category data; criminal records; or other regulated data.
Customer must provide required notices, consent/opt-out, contracts, security, minimization, retention, deletion, rights handling, and international-transfer measures.
8. Resource and network abuse
Customer must not materially impair platform stability, evade plan limits, operate open proxies/relays, public file mirrors, unauthorized streaming, high-load mining, abusive crawlers, traffic exchanges, scraping that violates law/rights, or workloads reasonably likely to degrade other systems. Load testing requires written approval.
9. Unsupported/high-risk services
Without written approval, do not operate critical emergency, life-safety, medical, financial custody, payment-card processing, high-risk AI decision, public-sector classified, controlled-defense, or other workload where failure could cause serious harm or requires uncontracted certification.
10. Domains and DNS
Customer must not register, point, redirect, park, or use domains for typosquatting, impersonation, phishing, malware, deceptive affiliation, unlawful infringement, evasion, or reputation abuse. Customer must keep registration data accurate and comply with ICANN, registry, registrar, dispute, verification, transfer, and abuse rules.
11. Customer security duties
Customer must use unique accounts, MFA where supported, secure endpoints, least privilege, current contacts, lawful software, supported versions, and prompt reporting. Customer must not share administrator credentials through unapproved channels or disable required controls.
12. Reports
Reports may be sent to legal@siteheros.com. Include the URL/domain, date/time/time zone, conduct, evidence, reporter contact, authority, urgency, requested action and any law-enforcement or court reference. Do not send contraband, exploit code, credentials or excessive personal data unless requested through a secure channel.
13. Investigation and evidence
SiteHeros may review relevant account, content, log, network, configuration, support, billing, and provider information proportionately; request information; preserve evidence; and consult providers, counsel, authorities, or affected parties as permitted. A report is not proof, and SiteHeros may decline duplicative, bad-faith, unsupported, or out-of-scope requests.
14. Enforcement
Depending on severity, SiteHeros may warn; require cure; block traffic; remove or disable content; rotate/revoke credentials; quarantine files; limit resources; disable mail, DNS, integrations, users, or a site; suspend/terminate Service; preserve/disclose records; or refer a matter.
SiteHeros may act without prior notice for urgent safety, security, network, provider, legal, evidence-preservation, or harm-prevention needs. Where feasible, action will be scoped and Customer will receive the reason, required cure, review path, and billing/offboarding consequence.
15. Emergency and lawful process
Immediate threats should go to emergency services. Send law-enforcement and legal-process inquiries to legal@siteheros.com. SiteHeros may require proper jurisdiction, authority, specificity and service, and may notify Customer unless prohibited.
16. Appeals
Customer may seek review by emailing legal@siteheros.com. The request must explain the disputed action, corrective steps, supporting evidence and requested outcome. An appeal does not automatically restore service or stay a lawful or provider-required action.
17. No monitoring obligation
SiteHeros may use proportionate security and abuse controls but does not undertake to monitor all content or prevent every violation. Customer remains responsible for content and users.
18. Changes and upstream requirements
SiteHeros may update this AUP for law, provider, security, or abuse developments. Material adverse changes receive notice as required. An upstream restriction may be enforced when incorporated, required to protect the platform, or necessary for SiteHeros to continue the Service.