Acceptable Use Policy

01Lawful and authorized use

This policy applies to Rajshahi Colo services and to users or downstream customers operating through your account. Use infrastructure only for lawful activities and with the required rights, licences and permissions. Customers are responsible for enforcing appropriate rules for their own users.

02Prohibited activity

Do not use our services to carry out, facilitate or knowingly host the following activities:

• Malware distribution, phishing, credential theft, fraud or impersonation.
• Unauthorized access, exploitation, interception, destructive testing or attacks on systems.
• Denial-of-service attacks, botnet control or deliberate disruption of another service.
• Unlawful exploitation, threats, prohibited abusive material or infringement of intellectual-property rights.
• Unsolicited bulk email or SMS, forged sender information, harvested recipient lists or evasion of opt-out requests.
• Evading a lawful restriction, concealing ongoing abuse or bypassing an account suspension.

03Security testing and vulnerable systems

Security testing requires authorization from the system owner and coordination with us where the testing could affect shared infrastructure or other customers. Public exposure of a system is not permission to attack it.

Maintain patches and credentials appropriate to your service. Address compromised accounts, open relays, exposed management interfaces and other reported risks promptly. We may isolate an affected service to contain immediate harm.

04Resource and network use

Use the CPU, memory, storage, bandwidth, power and IP resources allocated in your order. Do not bypass quotas or deliberately exhaust shared systems. Persistent activity that materially degrades other customers may require remediation, a different plan or a restriction.

Special workloads, high sustained load, scanning, mail relays and unusual traffic patterns should be discussed before deployment when they require additional capacity or safeguards. Address routing and address-use instructions from the network team.

05Email and SMS responsibilities

Send messages only when lawful and with the required recipient permission. Identify the sender accurately, provide required opt-out mechanisms and maintain evidence of authorization where needed. Protect API keys and prevent account misuse.

Carriers and destination providers may apply sender approval, filtering and rate limits. Do not rotate identities or services to bypass a block imposed for abuse. Delivery problems should be investigated through support.

06Physical equipment and facility access

Colocation and remote-hands instructions must follow agreed power limits, installation requirements and access controls. Do not bring unsafe equipment, alter shared cabling or access another customer’s hardware without authorization.

Provide accurate equipment ownership and authorized-contact information. Physical maintenance, removal and disposal require approved instructions and the applicable facility process.

07Reporting abuse or a security issue

Send reports to [email protected]. Include the affected IP address or domain, timestamps with timezone, a description and relevant headers or log excerpts. Redact unrelated personal information. Do not send malicious attachments or perform further intrusive testing to gather evidence.

For urgent infrastructure incidents, contact [email protected] or open an authenticated support ticket. For a vulnerability in our own systems, provide reproducible details privately and allow investigation before publishing sensitive information.

08Investigation and enforcement

We assess reports and may request clarification, require corrective action, restrict traffic or suspend an affected service. Where practical, we notify the account contact and allow a reasonable opportunity to resolve the issue. Immediate threats or lawful orders may require action without advance notice.

Repeated or serious breaches may lead to termination under the service agreement. If you believe a restriction is mistaken, request a review through the client portal with supporting evidence. Refund treatment follows the applicable agreement and law, rather than an automatic penalty under this policy.