Acceptable Usage Policy

This Acceptable Use Policy (“Policy” or “AUP”) is designed to protect the quality, integrity, and security of LumaDock services and infrastructure. Our objective is to provide reliable, high-performance hosting and cloud solutions to all customers. LumaDock is a trading name of LumaDock Ltd. To achieve a stable and secure platform, every customer and user must use our services responsibly and in accordance with this Policy.

This Policy is an integral part of the LumaDock Terms of Service, Privacy Policy, Cookie Policy, Data Processing Agreement, and any other service-specific terms applicable to you (collectively, the “Agreements”). In case of conflict, the Terms of Service and statutory law prevail.

1. Scope and Applicability

This Policy applies to all use of LumaDock services, including but not limited to VPS servers, GPU servers, storage, networking, app hosting, managed services, customer portals, APIs, and any related tools or platforms (collectively, the “Services”). It applies to:

• All LumaDock customers, account holders, and administrators;
• End users, employees, contractors, or third parties accessing the Services via your account;
• Any application, website, system, or process that runs on or interacts with our infrastructure.

You are responsible for all use of the Services under your account, whether or not such use was explicitly authorized by you. If you allow third parties to use the Services, you must ensure they comply with this Policy.

2. General Principles and Responsibilities

By using the Services, you agree that:

• You will comply with all applicable local, national, and international laws and regulations.
• You will not use the Services in any way that is unlawful, fraudulent, deceptive, abusive, or that has an unlawful or fraudulent purpose or effect.
• You will not use the Services in a manner that interferes with the normal operation of our infrastructure or negatively affects other customers.
• You will maintain your systems in a reasonably secure, updated, and patched state, including promptly addressing known vulnerabilities.
• You will promptly act on any abuse, security, or legal notice that LumaDock sends to your registered contact details.

3. Permitted Technical Use

LumaDock provides full root/administrator access on supported services and generally allows customers to run legitimate workloads, including but not limited to:

• Background processes, daemons, schedulers, and automation tools;
• Web servers, application servers, APIs, microservices, and containers (including Docker);
• Game servers, development and staging environments, CI/CD pipelines;
• VPN endpoints, reverse proxies, load balancers, and tunneling solutions, when properly secured and used for lawful purposes;
• Databases, caching layers, messaging queues, and other infrastructure components.

These uses remain subject to all other sections of this Policy, including resource usage, security, and abuse provisions.

4. Resource Usage and Platform Stability

Your use of CPU, RAM, disk I/O, and network bandwidth must be reasonable and proportionate to your service plan, and must not degrade the stability of the platform or adversely affect other customers.

4.1 General Usage Restrictions

LumaDock allows a wide range of workloads but prohibits abusive or uncontrolled consumption of shared infrastructure resources. In particular, you may not:

• Run programs or processes intended to consume excessive CPU, RAM, disk I/O, or network throughput without legitimate operational purpose (e.g., uncontrolled crypto-mining, fork bombs, infinite loops, or misconfigured services creating runaway load).
• Configure automated scripts, bots, or cron jobs in a way that generates excessive load or disrupts service stability; tasks scheduled more frequently than once per minute may be reviewed or rate-limited if they impact performance.
• Run outdated, vulnerable, or insecure software (including legacy CGI scripts) that poses an undue security risk, such as abandoned panels, old FormMail scripts, or frameworks with known exploits.
• Use shared or networked storage as a bulk archival/backup dump without appropriate controls and in a way that threatens performance or capacity for others.

We may contact you to request optimization, impose temporary limits, or in serious cases suspend services to protect overall platform stability.

5. Prohibited Content and Activities

The following activities and categories of content are strictly prohibited on LumaDock infrastructure. The examples below are illustrative, not exhaustive. If you are uncertain whether something is allowed, you should assume it is not allowed until we confirm otherwise in writing.

5.1 Illegal and Harmful Content

You may not use the Services to host, process, transmit, or link to any content or activity that is illegal under applicable law or that LumaDock reasonably considers harmful, including:

• Child sexual abuse material (CSAM), exploitation of minors, grooming, or any content involving the sexualization of minors.
• Human trafficking, prostitution, or other forms of exploitation.
• Terrorism, extremist propaganda, or content that directly incites violence against individuals or groups.
• Content that is defamatory, knowingly false, or unlawfully infringes the rights or safety of others.
• Unlawful distribution of copyrighted works, pirated software, or other content that infringes intellectual property rights (including warez, keygens, cracks, or illegal streaming/DDL portals).
• Operating unlicensed or illegal online pharmacies, distributing controlled substances without proper authorization, or facilitating other regulated activities without required licenses.
• Operating fraudulent financial schemes, such as HYIPs, Ponzi schemes, fake investment programs, or deceptive “make money fast” systems.
• Any content that violates applicable privacy, consumer protection, financial, or other regulatory laws.

5.2 Malware, Security Abuse, and Network Attacks

You may not use the Services to engage in, support, or facilitate:

• Creation, hosting, or distribution of malicious software such as viruses, worms, Trojans, ransomware, botnets, rootkits, or exploit kits.
• Participating in or enabling denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks, traffic flooding, mail bombing, or brute-force attacks.
• Unauthorized access attempts, scanning, probing, sniffing, spoofing, credential harvesting, penetration testing, or vulnerability testing of any system without explicit, documented permission from the system owner.
• Interference with the operation of other customers’ services or third-party systems through resource overloading, abusive scripts, or other disruptive behavior.
• Forging or manipulating TCP/IP packets, including spoofing IP headers or masking traffic origins to bypass security mechanisms or misrepresent source identity.
• Uploading or distributing corrupted files or any executables designed to damage or compromise other systems.

Note: Legitimate security research or penetration testing is only permitted with prior written authorization from the relevant system owner and must not target LumaDock infrastructure or other customers without our explicit written consent.

5.3 Proxies, VPNs, and Anonymization Services

To maintain our network reputation and comply with abuse regulations:

• Operating open proxies, open relays, public anonymization gateways, or similar services that allow uncontrolled third-party traffic is prohibited.
• Operating unsecured or unauthenticated reverse proxies or VPN gateways designed primarily to conceal malicious activity or evade law enforcement is prohibited.
• Allowed with conditions: properly secured private VPNs, authenticated proxies, HAProxy/NGINX reverse proxies, and enterprise tunneling solutions, where:
  • Access is authenticated and restricted to known users or systems;
  • Usage is lawful and does not generate abuse complaints or reputation issues;
  • You promptly address any abuse notices or incidents related to such services.

5.4 IRC, P2P, and Abuse-Prone Services

Due to their high abuse potential, the following are restricted:

• Running public IRC servers, IRC networks, public chat bouncers, or large public chat relays used for malware distribution or DDoS coordination.
• Operating public torrent trackers, public P2P indexers, or services primarily used to infringe copyright.

Allowed with conditions: Private communication tools, legitimate game servers, and private torrent usage for legal content are generally allowed, provided they are secured and not used for unlawful distribution or abuse.

5.5 Data Collection, Privacy, and Misuse of Personal Data

You may not use the Services to:

• Collect or process personal data in violation of applicable data protection laws (including GDPR and similar regulations).
• Operate unsolicited email harvesting systems or large-scale scraping targeting protected content, login-protected areas, or systems that forbid such activity.
• Engage in phishing, impersonation, or fraudulent collection of credentials, payment details, or other sensitive data.

6. Email and Messaging Use

To maintain the reputation, stability, and deliverability of our email systems (including outbound SMTP from servers), customers must comply with the following:

6.1 SMTP Port 25 Policy

SMTP port 25 traffic (both inbound and outbound) is filtered by default on LumaDock services to protect network reputation and reduce abuse. Customers should use authenticated SMTP submission on ports 587 or 465, or an approved third-party SMTP relay (for example, a transactional email provider).

Port 25 can be unblocked only upon explicit request and written approval by the LumaDock team. Port 25 access is a privileged exception, not a standard service feature or entitlement.

Any approved exception may be subject to restrictions and may be revoked at any time if abuse is detected, if network reputation is impacted, or if required to protect the platform, upstream relationships, or other customers.

You can submit a request here: SMTP port 25 unblock request form.

6.2 Anti-Spam Requirements

You may not use the Services to send unsolicited bulk or commercial email (“spam”). In particular:

• All recipients must have given explicit and verifiable consent (opt-in) to receive your communications.
• Mailing lists or newsletters must include clear opt-in and opt-out mechanisms; we strongly recommend double opt-in to prevent abuse.
• Every commercial email must include:
  • Correct sender identification;
  • A clear and functional unsubscribe link or method;
  • Required legal notices, where applicable.
• You must honor unsubscribe requests promptly.
• You may not use purchased, rented, or scraped email lists.
• Cold email campaigns, lead generation, or unsolicited marketing outreach are prohibited.
• Operating open mail relays, open SMTP proxies, or improperly secured SMTP servers is prohibited.
• Forged headers, spoofed sender domains, or deceptive routing intended to conceal origin is prohibited.

6.3 Email Delivery Disclaimer

LumaDock strives to provide reliable email delivery but cannot guarantee successful delivery in all cases. Delivery can be affected by factors outside our control, including:

• Inactive, full, or misconfigured recipient mailboxes.
• IP addresses or ranges being listed on third-party blacklists.
• Failures or configuration errors of sender or recipient mail systems.
• Internal or external network issues.
• Aggressive spam/content filters at the recipient end.
• Attachments exceeding recipient server limits.
• Temporary rejections such as greylisting or rate limits at the recipient side.

Network reputation protection: Activity that results in IP address, subnet, or ASN reputation damage (including listings on third-party abuse or reputation databases) may result in immediate restrictions, including blocking SMTP, withdrawing IP addresses, or suspension or termination of Services.

7. Security Obligations

You are responsible for maintaining a reasonable level of security on all systems under your control. At a minimum, you should:

• Use strong, unique passwords and enable multi-factor authentication where available.
• Regularly apply security patches and updates to your OS, control panels, applications, and dependencies.
• Remove or disable unused software, plugins, and scripts, especially those with known vulnerabilities.
• Maintain regular off-server backups of critical data (in addition to any backups we may provide as a courtesy).
• Promptly investigate unusual activity, compromise indicators, or abuse notifications.

If your server or application is compromised and used for abuse (e.g., malware hosting, phishing, spam, attacks), we may:

• Temporarily disable affected services or network access to contain the incident;
• Notify you via your registered contact channels;
• Require you to clean and secure the system before re-enabling full access;
• In severe or repeated cases, suspend or terminate your account.

8. Enforcement and Remedies

LumaDock reserves the right, at its sole reasonable discretion, to take any action it deems necessary to protect its infrastructure, reputation, and other customers, including but not limited to:

• Issuing warnings or requiring you to take corrective actions within a specified time frame.
• Temporarily rate-limiting, isolating, or filtering traffic from affected systems or IPs.
• Disabling specific services, ports, or protocols.
• Suspending or terminating one or more Services or your entire account, with or without prior notice in severe cases.
• Blocking or removing content, data, or configurations that violate this Policy or applicable law.
• Cooperating with law enforcement, regulatory bodies, or relevant third parties where legally required or reasonably justified.

Immediate suspension: We may suspend services without prior notice if your use:

• Causes or is likely to cause serious disruption or harm to our network, infrastructure, or other customers;
• Appears to involve illegal content or activities (e.g., CSAM, serious fraud, or large-scale attacks);
• Triggers urgent abuse or security escalations from upstream providers or partners.

Violation of this Policy may also lead to legal action and claims for damages, where applicable.

9. Reporting Abuse

If you believe this Policy is being violated, or if you receive abuse reports relating to systems hosted on LumaDock, please contact us as soon as possible.

Abuse and security contact:

LumaDock Ltd (trading as LumaDock)
13 Hanover Square, Mayfair, London W1S 1HN, United Kingdom
Email: abuse [at] lumadock.com
Phone: +44 20 4578 1002

10. Changes to This Policy

LumaDock may update or modify this Acceptable Use Policy from time to time, for example to reflect legal, technical, or operational changes. The updated version will be published on our website and will become effective upon posting, unless a later date is specified.

Your continued use of the Services after any change to this Policy constitutes your acceptance of the updated version. If you do not agree to the updated Policy, you must stop using the Services.