Acceptable Use Policy

Tier 1 — Immediate-action prohibitions

The following activities are prohibited and may result in immediate traffic blocking, content removal, suspension, restriction, or termination without prior notice or a correction period, without a refund, to the maximum extent permitted by law:

• Child Sexual Abuse Material (“CSAM”) or the sexual exploitation of minors. Where required or appropriate, suspected CSAM may be reported to NCMEC or another appropriate authority.
• Specific and credible threats of violence against an identifiable person or group, including threats involving personal addresses, swatting, or imminent unlawful violence.
• Phishing, credential theft, or impersonation services targeting Mynymbox customers, financial institutions, cryptocurrency exchanges, wallets, or other third parties.
• Malware, ransomware, trojans, spyware, botnets, exploit kits, malicious payloads, or related command-and-control infrastructure.
• Direct, reflected, or amplified denial-of-service attacks against non-consenting systems or networks.
• Activity that creates an immediate or substantial risk to persons, systems, networks, data, or the security of Mynymbox, our customers, or third parties.
• Illegal marketplaces or services involving serious criminal activity, including the sale, distribution, brokering, promotion, or facilitation of illegal drugs, weapons, stolen data, malware, counterfeit documents, trafficked persons, or services intended to facilitate fraud, extortion, trafficking, exploitation, or other serious criminal conduct.
• Any other activity that we reasonably believe requires immediate action under applicable law, a provider requirement, a court or governmental request, or to prevent serious harm.

You may not use the Services to operate, host, promote, advertise, administer, provide payment or technical support for, or knowingly facilitate an illegal marketplace or service involving serious criminal activity. This prohibition applies whether the unlawful activity is carried out directly by you or through another person, organization, website, application, account, or service that you knowingly support.

Where we reasonably believe that a Service is being used for prohibited criminal activity, or that continued operation presents an immediate or substantial risk, we may act without prior notice. Our actions may include suspending or terminating the affected Service or account, blocking traffic, disabling content, restricting access, preserving relevant information, and cooperating with lawful requests from competent authorities.

We are not required to wait for a criminal conviction, judicial determination, or admission by the customer before taking action under this section. No refund is issued for accounts or Services terminated for violation of this AUP.

Tier 2 — Prohibited with a 48-hour correction period

For the following violations, we will generally provide written notice and 48 hours to correct the issue. Failure to correct the violation may result in traffic blocking, suspension, termination, or other appropriate action:

• Unsolicited bulk email, spam, or infrastructure primarily intended to enable spam.
• Open SMTP relays or open proxies used to send spam.
• Email harvesting, purchased mailing lists, or messaging without appropriate consent.
• Deceptive headers, misleading subject lines, spoofed sender information, or forged routing information.
• Messages containing malicious links, malware, phishing content, or other deceptive material.
• Unauthorised port scanning, vulnerability scanning, credential brute-forcing, exploitation, intrusion, or attempts to bypass access controls.
• Open recursive DNS resolvers abused for amplification attacks.
• Compromised Services distributing malware to visitors, where the issue can reasonably be corrected.
• Excessive or abusive use of CPU, memory, disk I/O, network capacity, processes, connections, or other resources that materially affects shared infrastructure or other customers.
• Unlawful content or activity, copyright or trademark infringement, doxxing, unauthorised disclosure of personal information, or other violations of applicable law or third-party rights.

We may take immediate action instead of providing a correction period where the activity presents a significant risk, causes ongoing harm, compromises an investigation, affects third parties, or conflicts with a legal, regulatory, registrar, upstream-provider, payment processor, or other service-provider requirement.

Tier 3 — Prohibited account or Service use

We may refuse, restrict, suspend, or terminate an account or Service used to:

• evade a previous suspension or termination by Mynymbox;
• commit fraud against Mynymbox, our providers, customers, or another person;
• bypass quotas, access controls, security measures, technical restrictions, or rate limits;
• disrupt, degrade, or interfere with Mynymbox systems, customer systems, networks, or third-party systems;
• facilitate trafficking, exploitation, abuse, or harm to minors;
• sell, distribute, advertise, manufacture, or facilitate unlawful controlled substances, prescription drugs, research chemicals, precursors, or related paraphernalia;
• knowingly provide infrastructure or other support for activity prohibited by this AUP; or
• violate the requirements of a registrar, upstream provider, payment processor, network operator, or other service provider.

Generally permitted uses

Subject to applicable law, this AUP, service-specific restrictions, and provider requirements, the following activities are generally permitted:

• lawful political speech and controversial or unpopular opinions;
• lawful journalism and research;
• lawful adult content involving consenting adults;
• cryptocurrency nodes and related software;
• VPN and privacy services;
• Tor relays, exit nodes, and related infrastructure; and
• other lawful content and services that do not violate this AUP.

Permission for an activity does not permit fraud, spam, attacks against third parties, copyright infringement, unlawful conduct, or activity prohibited by our providers or applicable law.

Customer security responsibilities

You must take reasonable steps to secure your account and Services. This includes using strong credentials, protecting authentication tokens, applying available security updates, restricting unnecessary access, monitoring activity, and promptly investigating suspected compromise.

If you discover that your Service has been compromised, is being used for abuse, or is exposing third-party systems to risk, you must promptly notify Mynymbox and take reasonable steps to contain and correct the issue.

Abuse and infringement reports

Abuse or infringement reports may be sent to the abuse email address published by Mynymbox or through another reporting method we make available. Reports should include sufficient information for us to identify the affected Service, investigate the allegation, and determine whether corrective action is required.

We may forward abuse or infringement reports to the email address associated with your account and request that you investigate and correct the reported issue.

Unless immediate action is required, you should respond within 48 hours and describe the corrective action taken. Failure to respond, failure to take reasonable corrective action, repeated violations, or the seriousness of the reported activity may result in content removal, traffic blocking, throttling, suspension, or termination.

Investigation and cooperation

We may investigate suspected violations of this AUP, including by reviewing relevant account, network, security, traffic, abuse, and billing information. We may request information reasonably necessary to investigate or correct an issue.

You must not interfere with an investigation, destroy or alter relevant evidence, conceal the identity of an account or operator, or knowingly provide false or misleading information in response to an abuse or security inquiry.

Enforcement

Depending on the circumstances, we may:

• request information or corrective action;
• remove or disable access to content;
• rate-limit or block traffic;
• restrict, suspend, or terminate a Service or account;
• preserve relevant information;
• notify affected parties or service providers; or
• report suspected criminal activity to appropriate authorities.

The action we take may depend on the nature, severity, duration, scope, credibility, and apparent intent of the activity, as well as its impact on Mynymbox, our customers, our providers, and third parties.

We are not required to provide advance notice or a correction period where immediate action is reasonably necessary to protect Mynymbox, our customers, our network, or a third party, or where required by law, a provider, or a competent authority. No refund is issued for accounts or Services terminated for violation of this AUP.