Acceptable Use Policy

Effective date: 2026-01-01

This Acceptable Use Policy (“AUP”) sets out the rules for using services provided by ITLDC LLC (“ITLDC”, “we”, “us”, or “our”). It applies to all ITLDC services and must be read together with the Master Service Agreement. Violations may result in service suspension or termination.

---

1. Purpose and Scope

ITLDC services are intended for lawful and responsible use. This policy protects our infrastructure and network, other customers, and upstream providers. It also sets out prohibited activities and the measures we may take to comply with applicable laws and address misuse.

Customers are responsible for all activity originating from their services.

---

2. General Use Requirements

Customers must comply with applicable laws and regulations and must not use our services in ways that harm ITLDC, other customers, or third parties. They must also follow appropriate security, access control, and system administration practices.

Customers are responsible for all activity through their accounts, including unauthorized activity.

---

3. Security and System Responsibilities

Customers must keep their systems secure at their own expense. This includes maintaining secure configurations, installing operating system and software updates promptly, protecting credentials and access methods, and preventing unauthorized access, abuse, or compromise.

Failure to maintain basic security standards may be treated as a violation of this policy.

---

4. Prohibited Activities

The activities below are prohibited on ITLDC infrastructure. This list is not exhaustive.

---

4.1 Illegal Activities

Services must not be used for unlawful purposes, including hosting or distributing illegal content, facilitating illegal goods or services, or any activity that violates applicable U.S., EU, or local laws. Content involving the exploitation, abuse, or harm of minors is prohibited.

---

4.2 Fraud, Deception, and Misrepresentation

Services must not be used for phishing, scams, fraud, or impersonation of individuals or organizations. Customers must not circumvent licensing, copyright, or intellectual property protections, or misrepresent their identity, ownership, or intended use of the services.

---

4.3 Malware and Security Violations

Customers must not use our services to:

• create or distribute malware, ransomware, trojans, spyware, or similar code;
• access or intrude into systems without authorization;
• conduct scanning, probing, or penetration testing without prior written authorization; or
• operate botnets or command-and-control infrastructure.

---

4.4 Network Abuse and Service Disruption

Customers must not disrupt services or degrade network performance. Prohibited activities include denial-of-service (DoS or DDoS) attacks, traffic flooding, resource exhaustion, spoofing or manipulating IP, packet, or email headers, and bypassing technical limits, rate limits, or safeguards.

---

4.5 Open Proxies and Anonymization Services

Open proxies, open mail relays, anonymization gateways, Tor exit nodes, and similar services require ITLDC’s express written approval before operation.

---

4.6 Unsolicited Communications (Spam)

Services must not be used to send or facilitate unsolicited bulk email, SMS, or other messages, or communications without verifiable opt-in consent. The use of purchased or scraped contact lists is also prohibited.

Spam violations may result in immediate suspension and liquidated damages as provided in the Master Service Agreement.

---

4.7 Cryptocurrency Mining

Cryptocurrency mining and other proof-of-work operations require ITLDC’s express written approval. Unauthorized mining is a material breach of this policy.

---

5. Sanctions and Restricted Jurisdictions

ITLDC complies with applicable sanctions, export controls, and trade restrictions, including those administered by U.S., EU, UK, and UN authorities. Services must not be used in violation of applicable sanctions or export control laws.

---

5.1 Restricted Jurisdictions

Individuals or entities located in, organized under the laws of, or ordinarily resident in the following jurisdictions may not order, access, or use ITLDC services. Services must not be made available to them, directly or indirectly. The same restrictions apply to any other jurisdiction subject to comprehensive sanctions.

• Cuba
• Iran
• North Korea (Democratic People’s Republic of Korea)
• Syria
• Sudan (where applicable under current sanctions regimes)
• Crimea region of Ukraine
• Donetsk People’s Republic (DNR) region of Ukraine
• Luhansk People’s Republic (LNR) region of Ukraine

This list may be updated to reflect changes in applicable sanctions regulations.

---

5.2 Sanctioned Persons and Entities

Services must not be used if the customer, any beneficial owner or controller, or any user of the services appears on an applicable sanctions or restricted persons list. These lists include:

• OFAC Specially Designated Nationals (SDN) List;
• OFAC Sectoral Sanctions Identifications (SSI) List;
• EU Consolidated Sanctions List;
• UK OFSI Consolidated List; and
• BIS Entity List or Denied Persons List.

The same prohibition applies if any such person or entity is owned or controlled, directly or indirectly, by a sanctioned person or entity, or acts on behalf of or for the benefit of a sanctioned person, entity, or jurisdiction.

---

5.3 Prohibited Transfers and Re-Exports

Customers must not export, re-export, resell, sublicense, or otherwise make services available to restricted jurisdictions or sanctioned persons. This includes providing credentials, technical access, or control of services to prohibited parties.

Customers must not route traffic or operations to conceal users’ true location or identity. They are responsible for implementing internal controls to prevent unauthorized access or re-export.

---

5.4 Circumvention Prohibited

Customers must not evade sanctions or geographic restrictions by masking their location through VPNs, proxies, anonymization services, or routing changes; falsifying account, billing, or identity information; or using intermediaries or third parties to obtain access.

Any attempt to evade sanctions controls is a material breach of this policy.

---

5.5 Enforcement and No-Refund Policy

If ITLDC identifies or reasonably suspects a sanctions or export control risk, we may, at our sole discretion and without prior notice, suspend or terminate services, restrict account functionality, refuse new orders or renewals, or permanently delete services and associated data.

No refunds, credits, or service restoration will be provided for actions taken to comply with sanctions or export control obligations.

---

6. Abuse Handling and Enforcement

To address abuse or protect our services, ITLDC may filter or block traffic, apply rate limits or blackhole routing, suspend or terminate services, or permanently delete services and data.

We may act without prior notice where necessary to protect our infrastructure or customers, or to comply with legal obligations.

---

7. Cooperation Obligations

Customers must cooperate with abuse investigations, respond to requests for information, provide logs or technical details when requested, and take corrective action promptly. Failure to cooperate may result in service suspension or termination.

---

8. Relationship to Other Policies

The following policies address related matters:

• Abuse Reports Processing Policy: abuse complaints.
• DMCA Procedures: copyright claims.
• Law Enforcement Requests: requests from law enforcement authorities.
• Privacy & Data Security: data handling.

This policy does not override binding court orders or regulatory obligations.

---

9. Updates to This Policy

We may update this policy to reflect changes in laws, regulations, operational requirements, security, or infrastructure. The effective date at the top of this page identifies the latest revision. Continued use of ITLDC services constitutes acceptance of the updated policy.

---

10. Contact Information

Questions about acceptable use or potential violations must be submitted through the official contact methods published on itldc.com. Informal inquiries or messages sent through unrelated channels may not be processed.

---