Proposed launch terms, not yet effective. Company details and service-specific commitments must be confirmed before live orders. The sections below describe the proposed policy in full.
On this page
1. Use the service responsibly
This policy applies to cloud servers, public addresses, storage and other resources provided with a Starcloud order. It covers your own activity and activity you authorise through accounts, applications or services you operate. Use resources lawfully and in a way that respects the security, privacy and rights of others.
Legitimate hosting, development, administration and authorised security research are permitted within the resources and conditions of your plan. If a workload has unusual network or resource requirements, describe those requirements before ordering.
2. Illegal content and infringement
Do not store, publish, distribute or facilitate content or activity that is unlawful under applicable law. This includes child sexual abuse material, credible threats of violence, fraud and material that infringes intellectual-property or privacy rights.
You must have permission to use the content and software you distribute. Do not impersonate another person or organisation to deceive users, collect credentials or obtain money. A service may not be used to publish unlawfully obtained personal information or to facilitate targeted harassment.
3. Attacks and unauthorised access
Do not attempt to access systems, accounts or data without authorisation. Prohibited activity includes credential theft, phishing infrastructure, malware distribution, command-and-control systems for compromised devices and denial-of-service attacks.
Security testing must be limited to systems you own or have explicit permission to assess. That permission does not authorise interference with shared infrastructure or third-party services. Do not scan, exploit or disrupt unrelated systems, conceal attack traffic or assist others in bypassing access controls.
4. Spam and deceptive communications
Do not send unsolicited bulk messages, run credential-harvesting campaigns or distribute misleading communications. Mailing activity must have a lawful basis, accurate sender information and an effective way to stop further messages where required.
Do not operate open relays, abuse contact forms or rotate addresses to evade filtering, blocklists or complaints. You are responsible for securing applications that can send messages through your server.
5. Network and resource integrity
Use only addresses and resources assigned to your service. Do not spoof source addresses, hijack routes, interfere with network controls or attempt to access another customer’s storage or management interface.
Stay within the CPU, memory, disk, network and other limits expressly associated with your order. Sustained consumption within a stated allocation is not, by itself, abuse. Activity that destabilises shared systems, evades limits or causes disproportionate harm may require restriction while it is investigated.
Do not resell access in a way that conceals the person responsible for abuse or prevents enforcement of this policy. Any users you serve must comply with the same restrictions.
6. Compromised servers and prevention
Maintain supported software, install security updates and use appropriate authentication and firewall rules. An exposed database, insecure remote desktop or compromised application may put other users at risk even when you did not intend the resulting activity.
If you discover a compromise, contain it promptly, preserve relevant records and contact support. Before a restricted service is restored, Starcloud may request evidence of remediation, such as patched software, rotated credentials or removal of malicious processes. Do not send secret keys or passwords as evidence.
7. Reporting suspected abuse
Use the contact options shown on the Contact page or, if you have an account, open a support ticket. Identify the affected public IP address or URL, the date and time with time zone, the nature of the activity and a concise explanation of the harm.
Include relevant log excerpts or other evidence that you are authorised to share. Redact unrelated personal information and credentials. Do not download or redistribute illegal material to prove a report; describe where it was observed and use the appropriate official reporting channel when necessary.
8. Investigation and protective action
Reports should be assessed in context using the available evidence. Depending on severity, an action may include a request for clarification, a remediation notice, a traffic restriction, suspension of an affected resource or termination for a serious or repeated breach.
Immediate restrictions may be necessary for active attacks, unlawful material, imminent harm or a binding legal requirement. Where lawful and practical, the account holder should receive the reason for the restriction and the steps needed to seek restoration. Reporting an issue does not guarantee disclosure of another customer’s information.
9. Review and cooperation
If you believe an action was mistaken, reply through the account ticket channel with the affected service, notice reference and supporting explanation. Provide evidence of authorisation or remediation where relevant. A review considers the facts and does not guarantee reinstatement while a material risk remains.
Cooperate with reasonable requests needed to resolve abuse affecting your service. Starcloud may preserve relevant records or disclose information when legally required, subject to the Privacy Policy and applicable law. This policy is not a promise to monitor every activity or inspect every file.
Questions about this policy?
If you have an account, open a support ticket with the relevant service or invoice reference. Otherwise, check the contact page for available ways to reach us.