Acceptable Use Policy (AUP)

1. Purpose of the document

This Acceptable Use Policy (hereinafter — the Policy, the AUP) defines the actions that are prohibited when using the UnderVPN Service. The Policy is an integral part of the Terms of Service.

The purpose of the Policy is to ensure the safe operation of the Service for all Users and to reduce legal, technical and reputational risks.

2. Prohibited uses

The User is not entitled to use the Service for:

2.1. Prohibited content

• Distribution of materials of an extremist nature, calls to violence, terrorism, incitement of ethnic, religious or social hatred
• Distribution, storage or transmission of child sexual abuse material (CSAM) in any form
• Distribution of information containing the promotion of drugs, weapons, sectarianism or suicide
• Distribution of defamation, insults, or knowingly false information about third parties
• Bullying, persecution, threats against third parties (harassment, stalking, cyberbullying)
• Non-consensual publication of personal data of third parties (doxing)

2.2. Infringement of intellectual property rights

• Unlawful distribution of copyrighted materials (films, music, software, literature) via P2P networks, torrents, file-sharing services
• Circumvention of technical copyright protection measures (DRM)
• Use of the Service to infringe trade secrets, patent or trademark rights of third parties

2.3. Cyberattacks and abuse

• Network attacks: DDoS, DoS, SYN flood, other actions aimed at disrupting the operation of third-party resources
• Unauthorised port scanning, hacking attempts, exploitation of vulnerabilities
• Use of the Service as an intermediary link in cyberattacks
• Distribution of malicious software (viruses, trojans, botnets, ransomware)

2.4. Spam, phishing, fraud

• Mass unsolicited messaging (spam) through any communication channels
• Creation and distribution of phishing websites or pages
• Financial fraud, deception of users of third-party services
• Manipulation in online advertising systems, statistics inflation
• Theft of personal data of third parties, impersonation of another person (identity theft)
• Use of automated systems for mass account creation, activity inflation, or coordinated manipulation on social networks and messengers

2.5. Financial crimes

• Money laundering, legalisation of proceeds of crime
• Financing of terrorism
• Circumvention of international and national sanctions regimes
• Activity aimed at evading currency and tax controls
• Other financial operations expressly prohibited by applicable law

2.6. Commercial violations

• Resale of access to the Service to third parties without explicit written permission
• Joint use of one account by an unlimited number of persons
• Use of the Service for commercial activity in volumes exceeding the reasonable limits of the User's plan
• Use of the Service as an intermediary channel (proxy) to provide Service access to third parties who are not Users

2.7. Technical violations

• Attempts to violate or circumvent the technical limitations of the Service
• Use of the Service for cryptocurrency mining without explicit permission
• Use of the Service for load testing without prior agreement

2.8. Violation of applicable law

• Any actions violating the law of the User's jurisdiction, of the country where the Service's server is located, or of the country where the target resource is located
• Actions violating international legal norms

3. Actions requiring caution

The Service is entitled to apply temporary restrictions or other technical measures to a User's account if the nature of use of the Service:

• creates a threat to the stability of the Service's infrastructure
• harms the interests of other Users of the Service (in the form of a significant degradation of service quality or exhaustion of shared infrastructure resources)
• indicates the use of the Service beyond the reasonable User scenario contemplated by the chosen plan
• exhibits signs of automated activity inconsistent with the purpose of the Service as a service for end Users

Measures taken are proportionate to the nature of the identified threat and aimed at restoring the Service's normal operation. The said measures are applied regardless of whether the relevant actions of the User violate the provisions of section 2 of this Policy.

4. Consequences of a violation

Upon detection of a violation of this Policy, the Service is entitled to:

4.1. Immediate measures

• Suspend the User's account without prior notice
• Cease the provision of services under the current and any prepaid future Subscriptions
• A refund of the cost of the unused portion of the paid Subscription period upon suspension for a violation of this Policy that does not fall under particularly grave violations (section 4.3 of this Policy) may be provided by the Service at its own discretion in accordance with section 1 of the Refund Policy. The making of such a decision by the Service in respect of one User does not create an obligation to provide a similar compensation to other Users in similar circumstances. Upon suspension for particularly grave violations (section 4.3 of this Policy) no refund is provided

4.2. Additional measures

• Transfer information about the violation to the infrastructure provider (the server's hosting provider) within the framework of their own abuse policy
• Consider mandatory requests from competent state authorities submitted in accordance with the applicable procedural rules. The Service is entitled to challenge requests that do not comply with the law or that infringe the rights of Users

4.3. Particularly grave violations

Upon detection of use of the Service for:

• distribution of child sexual abuse material (CSAM) in any form
• distribution of materials promoting, justifying, or containing calls to terrorism
• activity related to human trafficking and exploitation of a person's dependent position

or for the commission of other acts classified by applicable criminal law as particularly grave crimes against the person, public safety or public morality,

the Service shall immediately:

• Suspend the User's account
• Preserve the available information about the violation for possible transfer to the competent authorities upon receipt of an appropriate mandatory request

Upon establishment of such a violation, no refund is provided in full.

5. Reporting a violation

If you have discovered a violation of this Policy by another User or improper use of the Service, please send a report to the email address abuse@undervpn.org.

All reports are reviewed confidentially.

6. Changes to the Policy

The Service is entitled to amend this Policy. The current version is published on the AUP page. The date of the latest revision is indicated at the start of the document.

Continued use of the Service after the publication of a new version constitutes consent to the changes.

7. Contacts

• Report a violation: abuse@undervpn.org
• General questions: support@undervpn.org

Change history

Version	Date	Changes
1.0	2026-05-19	First version