This Acceptable Use Policy ("AUP") sets the rules for using the Bage Cloud LLC ("BAGEVM," "we," "us," or "our") website, client portal, virtual private servers (VPS), cloud servers, dedicated servers, server hosting, IP addresses, network connectivity, DDoS protection, and other internet infrastructure services (collectively, the "Services").
This AUP forms part of our Terms of Service. You are responsible for your account and Services and for end users, customers, visitors, applications, and devices that use your Services, whether authorized by you or not. You must not use the Services to help another person engage in conduct prohibited by this AUP.
1. Scope and Responsibility
You may use the Services only for lawful purposes and must comply with applicable law, the Terms of Service, product descriptions, and this AUP. If you resell, share, or allow a third party to use the Services, you must ensure that they comply with the same requirements. Third-party conduct does not remove your account responsibility.
No policy can list every form of misuse. We may take reasonably necessary protective action against conduct materially similar to the prohibited uses below or that threatens people or systems, disrupts network stability, infringes third-party rights, or creates risk for us, a data center, an upstream network, or another customer.
2. Illegal and Harmful Activities or Content
You must not use the Services to engage in, promote, facilitate, or assist:
- Illegal or fraudulent conduct. Violations of applicable law, fraud, phishing, pharming, impersonation, identity theft, Ponzi or pyramid schemes, fraudulent goods, or other deceptive practices.
- Child sexual exploitation. Creating, hosting, distributing, or obtaining child sexual abuse material (CSAM), grooming or exploiting a minor, or assisting related conduct.
- Non-consensual sexual content. Distributing intimate images, sexual content, or other privacy-invasive material created or disclosed without the depicted person's consent.
- Infringement of rights. Infringing or misappropriating copyright, trademark, patent, trade secret, privacy, publicity, or other legal rights.
- Violence and harassment. Credible threats of violence, promotion of terrorism, hateful conduct, stalking, sustained harassment, doxxing, or disclosure of information intended to cause real-world harm.
- Illegal goods or services. Unlawfully selling, distributing, or facilitating controlled substances, weapons, stolen credentials, malware, unlawfully obtained data, or other prohibited goods and services.
3. Security and Network Abuse
Unless you have express authorization for the target system, you must not:
- Access, probe, scan, penetrate, or test any account, device, system, port, network, or authentication control;
- Deploy or distribute viruses, Trojan horses, worms, ransomware, spyware, backdoors, botnets, credential stealers, or other malicious code;
- Conduct brute-force attacks, credential stuffing, automated account takeover, collection of sensitive information, or other unauthorized data harvesting;
- Listen to, intercept, or monitor data, communications, or network traffic that you are not authorized to access;
- Launch, facilitate, or control denial-of-service attacks (DoS/DDoS), traffic floods, reflection or amplification attacks, mail bombing, or other availability attacks;
- Falsify source IP addresses, TCP/IP packets, email headers, routing information, or other transmission identity;
- Operate an open proxy, open mail relay, open recursive DNS server, Tor exit node, or a similar public relay service; or
- Operate automated purchasing, inventory-holding, bulk-ordering, or similar bots that violate a third party's terms of service or cause our IP addresses, IP ranges, or autonomous system number (ASN) to be blocked, restricted, or reputationally impaired; or
- Operate TikTok or other third-party platform automation for account control, bulk interaction, artificial traffic, or evasion in violation of third-party rules, in a manner that generates abuse complaints, or that causes our IP addresses, IP ranges, or autonomous system number (ASN) to be blocked, restricted, or reputationally impaired; or
- Control or participate in a botnet, host command-and-control (C2) infrastructure, or use the Services for attacks, intrusion, or evasion of security controls.
4. Email and Message Abuse
You must not use the Services to send or facilitate unsolicited bulk email, advertising, promotions, or other spam. This rule also applies to messages sent from another network that direct recipients to a website or resource hosted on the Services.
Lawful transactional or consent-based commercial email must meet all of the following requirements:
- Recipients gave affirmative consent, and you can provide appropriate records;
- The source, sender, subject, and routing information are accurate and not misleading;
- A clear, effective, and promptly honored unsubscribe method is provided;
- No purchased, stolen, automatically harvested, or unverifiable address lists are used;
- A working abuse-contact address is prominently posted on the associated website, and complaints and opt-outs are handled promptly; and
- The messages comply with email, privacy, and marketing laws applicable to senders and recipients.
You must secure servers and accounts against spam caused by weak credentials, malware, misconfiguration, or open relays. Conduct that directly or indirectly causes our IP addresses or networks to be listed on a major abuse or email-reputation blocklist may result in enforcement.
5. Resource and Shared-System Use
You must use the Services within resources stated in the order, product description, and applicable fair-use rules. You must not evade quotas, rate limits, billing, access controls, or other technical limits, or continuously consume excessive CPU, memory, disk I/O, connections, packet rates, or other resources in a way that materially affects a shared node, network, or another customer.
You must not use a VPS, cloud server, or other virtualized Service for commercial nested virtualization, including creating and selling, leasing, or otherwise providing virtual machines, virtual private servers, or similar compute instances to third parties from within the Service.
Normal, intermittent use of bandwidth or traffic included in your plan is not by itself abuse. You must not continuously occupy substantial bandwidth for extended periods or use unofficial, unmaintained, or improperly configured kernels, congestion-control algorithms, network-acceleration modules, or similar tools to evade technical limits, generate abnormal traffic, obtain an unfair share of common resources, or impair the stability of a node, network, or another customer. Official network-optimization features configured normally and without those effects are not prohibited by this provision.
If use exceeds purchased allowances, destabilizes the platform, or is materially inconsistent with the product's intended use, we may require remediation, rate-limit, migrate, upgrade, or suspend the affected Service. Cryptocurrency mining is prohibited without our prior express written permission.
If a system is compromised, infected, or misconfigured in a way that affects others, you must promptly isolate, repair, or reinstall it. We may temporarily isolate the Service or block relevant traffic to contain an active risk.
6. Vulnerability Testing and Security Research
You may test systems that you own or are expressly authorized to test where lawful, but testing must not target BAGEVM, a data center, an upstream network, another customer, or third-party infrastructure; bypass platform controls; or affect shared-service stability.
You must obtain our prior written permission before scanning, penetration testing, security research, or disclosure involving a BAGEVM website, client portal, API, control panel, network, or other asset. Coordinate with us in advance if testing may generate substantial traffic, security alerts, or resource impact.
7. IP, DNS, and Network Identity
- Use only IP addresses assigned or expressly authorized by us with the corresponding Service. Do not impersonate, hijack, or announce another party's address or route without authorization;
- Do not falsify, remove, or conceal information necessary to identify a transmission's origin or route;
- You must have authority over domains, DNS zones, and reverse-DNS records configured through the Services and keep registration and contact information accurate;
- Hostnames, PTR records, DNS records, and route announcements must not facilitate fraud, spam, malware, or complaint evasion; and
- You must promptly address IP-reputation, blocklist, and abuse issues caused by your use and cooperate with necessary investigation and remediation.
8. Monitoring and Investigation
We are not obligated to proactively monitor all customer content, and routine inspection of customer-server content is not our ordinary business practice. To maintain platform and network security, we may process resource usage, network and connection metadata, security alerts, IP reputation, and complaints received from third parties.
When we reasonably suspect a violation, security incident, or unlawful conduct, we may investigate within the limits of our Privacy Policy and applicable law, request relevant information from you, preserve necessary records, and disclose information required by law or reasonably necessary to stop a risk to data centers, upstream networks, affected parties, regulators, or law enforcement.
9. Enforcement and Remediation
Where risk permits, we will notify you and provide a reasonable opportunity to remedy a violation. You must respond within the period stated in the notice; unless the notice states otherwise, that period is 24 hours. You must also stop the violation, preserve necessary evidence, and take steps to prevent recurrence. In selecting an action, we may consider severity, impact, recurrence, and your willingness and ability to remediate.
For active attacks, child sexual abuse material, serious unlawful conduct, urgent security threats, likely network disruption, or material risk to us or an upstream provider, we may act without prior notice. Reasonable measures may include rate limiting, filtering, null routing, isolation, removing or disabling access to specific content, or suspending or terminating Services.
You remain responsible for securing the account and cooperating with remediation when a violation results from an unauthorized third party or compromised system, but we may consider prompt reporting and effective remediation when deciding what action to take. A failure to enforce this AUP immediately is not a waiver of our right to enforce it later.
10. Reporting Violations
External complaints must be sent to abuse#bage.dev (replace # with @ when sending). Third-party reports concerning network abuse, spam, copyright infringement, security incidents, unlawful content, or other external complaints must use this address rather than the general support address.
Use “Abuse Report” as the email subject. Where possible, include the relevant IP address or hostname, exact timestamps and time zone, a description of the event, complete email headers or relevant logs, and links or evidence supporting the report.
Do not send unrelated passwords, private keys, complete payment credentials, or large amounts of unlawful content. We may request more information and will assess a report based on risk, completeness, and applicable obligations. Submitting a report does not guarantee a particular action or disclosure of the investigation's outcome.
11. Policy Updates and Contact
We may update this AUP as products, networks, threats, or legal requirements change. The latest revision date appears at the top of this page. We will provide additional notice of material changes through the website, client portal, email, or another appropriate channel.
For questions about this AUP, contact:
Bage Cloud LLC
30 N Gould St Ste R, Sheridan, WY 82801, United States
Email: support#bage.dev (replace # with @ when sending)