Acceptable use policy

1.Who this policy applies to

It applies to you, to your staff, and to your own customers and users of anything you run on our services. You're responsible for their use as well as yours, so make sure your own terms with them are at least as strict as these.

2.Content

You must not host, store, publish or send anything listed in section 4 of our terms, which sets out the content Indian law forbids. In particular, you must not use our services for:

• pages that imitate another business or bank to collect passwords, card details or payments (phishing)
• distributing viruses, ransomware or other malicious software, or controlling infected computers
• selling or sharing stolen data, passwords or card details
• material that sexually exploits children, which we remove and report to the authorities
• copies of other people's work that you have no right to use. Our copyright policy explains how owners can ask us to act

3.Email

If mail from your service is reported as spam, or puts one of our IP addresses on a blocklist, we may hold outgoing mail until the cause is fixed.

• Send bulk or marketing email only to people who have agreed to receive it, and include a working way to unsubscribe.
• Don't use bought, rented or scraped address lists.
• Don't forge or hide where a message comes from.
• Don't run an open mail relay or a mail server that anyone can send through.
• Sending limits: set for each plan, and raised on request for legitimate newsletters. Spam isn't allowed on any plan.

4.Network and security

• Don't attack, scan or probe other networks or computers, or try to get into systems you aren't authorised to use.
• Don't take part in denial-of-service attacks, or send traffic with a false source address.
• Don't run open proxies, or services that let others hide what they're doing.
• You may test the security of your own servers. Tell us before you run a load test or a large scan, so our systems don't mistake it for an attack.

5.Fair use of shared resources

On VPS and cloud plans, the hardware underneath is shared, so you must not use it in a way that degrades service for other customers. If one server does, we'll contact you, and we may limit it until the cause is fixed. On dedicated servers the hardware is yours, but the network rules above still apply.

Cryptocurrency mining isn't allowed on VPS or cloud plans. On a dedicated or GPU server, ask us first.

6.Keeping your services secure

On managed plans we keep the operating system patched and monitored. On self-managed plans that's your job: keep software up to date, use strong passwords or keys, and close what you don't use.

If a server is broken into and starts attacking others or sending spam, we may disconnect it from the network until it's cleaned up. We tell you what we've seen and help you put it right.

7.Reporting abuse

Send reports to abuse@chandnas.com with the IP address or web address involved, what happened, when (with the time zone), and any evidence, such as email headers or log lines. We acknowledge reports within 24 hours.

Complaints about content on a service we host can also go to our Grievance Officer, as set out in section 12 of our terms.

8.What we do when this policy is broken

We restore a suspended service once the cause is fixed. Where the law requires it, we keep records and report offences to the authorities.

• Usually: we tell you what we've found and give you time to fix it.
• At once, without warning: when a service is attacking others, hosting phishing or malicious software, sending spam, or when the law or an order requires it.
• Repeated or serious breaches: we may end the service, under our terms.

9.Changes to this policy

When we change this policy we update the date at the top, and tell customers about significant changes in advance.