Acceptable Use Policy

This Acceptable Use Policy ("AUP") sets out what you may not do with Yeap Cloud services, operated by ZoneCloud Network LLC. It is part of our Terms of Service and applies to every account, service and resource, and to the users and customers of our customers. You are responsible for all activity on your resources.

#1. Illegal and harmful content

You may not use the services to store, publish, transmit or link to:

• content that is illegal where it is hosted or where it is directed, including child sexual abuse material, which we report to the authorities;
• content that infringes copyright, trademarks or other intellectual property rights;
• phishing pages, fraudulent shops, fake banking or payment pages, or other content designed to deceive people or steal credentials or money;
• content that promotes terrorism or violent extremism, or incites violence against people;
• personal information of others published without a lawful basis, including doxxing.

#2. Spam and email abuse

You may not:

• send unsolicited bulk or commercial email, or email to lists that were purchased, rented, scraped or not collected with clear permission;
• forge or hide message headers or sender identity, or send from domains you are not authorized to use;
• send mail without a working unsubscribe method where the law requires one, or keep sending to people who have opted out;
• use our servers, mail services or IP addresses as open relays, open proxies or for "snowshoe" sending across many domains or addresses to avoid filters;
• host websites or services that are advertised through spam sent from anywhere.

We monitor bounce rates, complaint rates and message content signals to protect deliverability for all customers, and we may throttle or stop sending that harms our reputation.

#3. Malware and security abuse

You may not:

• distribute or host viruses, ransomware, trojans, spyware, botnet controllers or other malicious software;
• gain or attempt to gain unauthorized access to any system, account or data, including port scanning, vulnerability scanning or password guessing against systems you do not own or have permission to test;
• launch or take part in denial-of-service attacks;
• run unauthorized cryptocurrency mining, or mine on hourly-billed or shared resources in a way that degrades the service for others;
• operate open DNS resolvers, open proxies or other services that are easily abused for attacks;
• interfere with or try to bypass the security, isolation, metering or billing of our services.

Authorized security testing of your own resources is allowed, provided it does not affect other customers or our network.

#4. Network abuse

You may not:

• send traffic that degrades our network or other customers' services;
• use IP addresses, prefixes or ASNs that have not been assigned to you, or spoof source addresses;
• use the CDN or our network to hide the origin of abusive activity, or to proxy traffic for activities this policy prohibits;
• resell or share access to the services in a way that lets others break this policy.

#5. Domains, certificates and AI

• Domains may not be registered or used for phishing, fraud, malware distribution, spam or in bad faith against someone else's trademark.
• Certificates may not be requested for domains you do not control, and code signing certificates may not be used to sign malicious or deceptive software.
• The LLM API may not be used to generate content prohibited by this policy, to create malware, or in breach of the usage policies of the upstream model providers.

#6. Resource usage

Plans have stated limits for CPU, memory, storage, traffic, email volume and other resources. You must stay within the limits of your plan. Shared and overcommitted plans are designed for typical workloads; sustained use that significantly affects other customers may be throttled.

#7. Enforcement

If we become aware of a violation, we may, depending on its severity:

• contact you and ask you to fix it within a reasonable time;
• remove or disable access to the content concerned;
• throttle, block or suspend the affected service, IP address, domain or mailbox;
• terminate the service or your account without refund; and
• report illegal activity to law enforcement and cooperate with their investigations.

Where activity is causing ongoing harm, such as an active attack, spam run or phishing page, we may act immediately and tell you afterwards.

#8. Reporting abuse

To report abuse involving Yeap Cloud services, email support@yeap.cloud with "Abuse report" in the subject line. Include as much detail as you can: the IP addresses, domains or URLs involved, timestamps with time zone, and evidence such as full email headers or log excerpts. We review every report and aim to respond within 24 hours.

We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed.