Acceptable Use Policy

Acceptable Use Policy v1.6, updated September 2026

1) Purpose and Scope

• This AUP governs use of Shared and Reseller hosting, Cloud or VPS and Dedicated Servers, domains, email, and streaming platforms (Shoutcast, Icecast, SonicPanel, CentovaCast, VdoPanel).
• It is incorporated by reference into the Terms of Service (TOS), Service Level Agreement (SLA), and Data Protection Notice.

2) Appropriate Use and Shared Environment

• Shared and Reseller hosting is designed for typical website workloads of small to mid sized organizations. Intensive or noisy workloads that adversely affect other tenants must move to VPS or Dedicated.
• Hosting space is for active website and application files only. Using Shared hosting primarily for backups, archives, or general storage is not permitted.
• Unmetered bandwidth means no fixed cap for normal operation. If usage risks platform stability or uptime, we may require an upgrade or apply reasonable restrictions.

3) Email and Messaging

• Shared Hosting: up to 100 outgoing emails per hour per cPanel account.
• Reseller end users: up to 25 outgoing emails per hour per cPanel account under the reseller.
• VPS and Cloud: up to 1,000 outgoing emails per hour per instance.
• Bulk or marketing mail must use a dedicated SMTP or third party sender with consent capture, bounce processing, and unsubscribe links.
• Reputation and authentication: maintain valid SPF and DKIM. DMARC is recommended where supported. rDNS or PTR must be correct for servers that send mail.
• Multiple IP addresses and automation: you may run several IP addresses and use software and automation to manage mail delivery. This includes giving each sending domain, customer or type of mail (for example transactional and marketing) its own IP address, using IP pools with a fixed assignment, warm-up schedules that raise volume gradually, per provider rate limits, automatic health checks, and automatic pausing or slowing of a stream when an address shows deferrals, listings, high bounces, or complaints. Keep a stable sending identity for each stream (domain, IP address, HELO name, and rDNS).
• Prohibited: unsolicited commercial email, purchased or harvested lists, header forgery, list washing, opt out only mail, or sending to role accounts without consent. Also prohibited is using IP addresses, domains, or automation to evade blocks, filters, complaint handling, or provider rate limits. This includes snowshoe sending (spreading one campaign or list over many addresses so that each shows little volume), moving a stream to other addresses to keep sending after a block, listing, or complaints instead of fixing the cause, and hiding the identity of the sender.
• Hygiene: we may pause or restrict sending for high bounces, complaints, or abuse desk reports. Compromised accounts may have outbound mail suspended until remediated.

4) Platform Resource Rules for Shared and Reseller

• Cron: allowed, but each job must run no more frequently than every 15 minutes. Unlimited jobs are permitted subject to this minimum interval and resource caps.
• Databases: do not run MySQL queries longer than 30 seconds. Long running analytics or background tasks must move to VPS or Dedicated.
• Resource burst ceiling: do not consume 25 percent or more of system resources for longer than 90 seconds at a time.
• CloudLinux LVE per account: up to 1 vCPU core, up to 1 GB RAM, EP 20, nPROC 100, Disk IO 10 MB per second, inodes 300,000.

5) Security and Access

• Keep credentials secret and rotate after staff changes or suspected compromise. Use strong passwords and MFA where available.
• Keep CMS, themes, plugins, frameworks, and libraries updated. Remove abandoned or vulnerable components.
• Security testing and scanning is prohibited on Shared services. It is allowed only on VPS or Dedicated Servers, including Kali Linux VPS, that you own or lease from Ucartz, and only for assets for which you have written authorization. You must comply with all applicable laws and be able to provide proof of authorization on request.

6) Streaming and Broadcasting

• You are responsible for rights to all content you broadcast. Unauthorized rebroadcasts, malicious streams, fake listeners or viewers, and relay abuse are prohibited.
• Restreaming to third party platforms must comply with those platforms’ terms. We may restrict high risk categories without proof of rights.

7) Network and System Abuse

• Prohibited: DDoS, mail bombing, flooding, packet spoofing, open proxies or VPN exit nodes, open mail relays, unauthorized scanning or probing, malware, phishing, botnets, and command and control infrastructure.

8) Enforcement and Notice

• We may filter, rate limit, quarantine, suspend, or terminate accounts to protect the platform and resolve abuse.
• For non urgent issues we attempt up to five follow ups before suspension. We may take immediate action for severe abuse or security threats.
• We may preserve and disclose logs when required by law. Cleanup or delisting work for IP blacklisting attributable to your use may be billed.
• Cross reference: periods of suspension or disablement under the TOS, including non payment, fraud or chargeback review, legal orders, or AUP violations, do not count as SLA downtime and are excluded from credit calculations. See SLA section 5.
• Dedicated servers: requests to change or cycle IPs to evade filters, blocks, or rate limits are not allowed. We do not provide IP rotation or post delivery IP swaps.

9) Reporting Abuse

• Report abuse: abuse@ucartz.com
• Urgent security issues: Please open a ticket with high priority selected
• Include headers, URLs, timestamps in UTC or IST, and a short description of impact.