Legal

Acceptable Use Policy

Effective date: March 23, 2026. This policy applies to all users, customers, and authorized parties accessing Monal Cloud services, infrastructure, APIs, and support systems.

1. Purpose

This policy protects platform availability, security, and lawful use. Violations may result in immediate mitigation, suspension, or account termination.

2. Prohibited Activities

• Illegal activity, fraud, or infringement of third-party rights.
• Malware hosting, phishing, credential theft, ransomware operations, or command-and-control infrastructure.
• Denial-of-service attacks, traffic amplification, or intentional service degradation.
• Unauthorized access attempts, privilege escalation, or exploitation of vulnerabilities.
• Unsolicited bulk messaging, spam campaigns, or abusive marketing automation.
• Hosting or transmitting content that is unlawful under applicable law.

3. Network and Platform Abuse Rules

• Port scanning, vulnerability scanning, or penetration testing is not allowed without prior written authorization.
• Users may not interfere with shared network infrastructure, monitoring, or service control planes.
• Users may not bypass quotas, metering, or account limits through automation or misconfiguration.

4. Security Requirements

• Keep internet-facing systems patched and protected with appropriate firewall controls.
• Use least-privilege access, strong authentication, and periodic credential rotation.
• Promptly contain compromised systems and notify Monal Cloud when abuse or intrusion is suspected.

5. Content and Data Responsibilities

Customers are solely responsible for their content, applications, and data processing activities. Customers must ensure lawful basis for data processing and comply with privacy, export, and sanctions laws.

6. Reporting Abuse

Report suspected abuse to abuse@monal.cloud with source IP, destination, timestamp, and relevant evidence. For urgent security incidents, contact security@monal.cloud.

7. Enforcement Actions

Monal Cloud may take actions including traffic filtering, resource isolation, rate limiting, temporary suspension, permanent termination, and removal of prohibited content. We may act without advance notice where needed to protect platform security or comply with law.

8. Cooperation and Remediation

Users must cooperate with incident response, provide remediation plans on request, and complete corrective actions within required timelines. Repeated or severe violations may result in permanent account closure.

9. Law Enforcement and Legal Requests

Monal Cloud may preserve or disclose information when required by law, court order, or valid legal process, and when necessary to protect rights, safety, and infrastructure integrity.

10. Policy Updates

We may revise this policy to address new threats, legal requirements, and operational needs. Updated versions are effective upon publication unless otherwise stated.