Last Updated: November 2026

This Acceptable Use Policy (“AUP”) applies to all hosting, managed WordPress, professional email, domain-related, server, storage and associated services provided by RackState (“RackState”, “we”, “us”, “our”).

By purchasing, accessing or using RackState services, the customer agrees to comply with this AUP in addition to RackState’s Terms of Service, Privacy Policy and any applicable service-specific terms.

1. Lawful Use of Services

RackState services may only be used for lawful purposes.

Customers are solely responsible for all websites, applications, files, databases, email accounts, scripts, user accounts, content and other material hosted, transmitted, stored or processed through their RackState services.

Customers must ensure that their use of the services complies with all applicable laws and regulations.

RackState does not knowingly permit its infrastructure to be used for illegal, fraudulent, abusive or malicious activity.

2. Prohibited Activities

Customers must not use RackState services to engage in, facilitate, promote, distribute or knowingly enable activities including, but not limited to:

• phishing, credential theft or impersonation;
• malware, ransomware, viruses, trojans, spyware or malicious code;
• hacking, unauthorised access or attempted access to third-party systems;
• denial-of-service attacks, botnets, network scanning or exploitation;
• fraud, financial scams, deceptive schemes or identity theft;
• spam, unsolicited bulk email or abusive email practices;
• hosting or distributing stolen credentials or confidential information;
• child sexual abuse material or other unlawful sexual content;
• content prohibited by applicable Indian law;
• illegal gambling or wagering services;
• unlawful sale or distribution of controlled or prohibited goods;
• copyright, trademark or intellectual-property infringement;
• distribution of pirated software, media or copyrighted material without authorisation;
• content designed to deceive users into providing financial, login or personal information;
• cryptocurrency mining or resource-intensive activities that materially affect shared infrastructure, unless expressly approved;
• attempts to bypass security, usage limits, account restrictions or monitoring systems;
• using compromised websites, accounts or servers to attack third-party systems;
• any activity that exposes RackState, its upstream infrastructure providers or other customers to legal, regulatory, security or reputational risk.

3. Customer Security Responsibility

Customers are responsible for maintaining reasonable security of their websites and accounts.

This includes, where applicable:

• keeping WordPress, plugins, themes and applications updated;
• using strong passwords;
• enabling multi-factor authentication where available;
• protecting administrator credentials;
• avoiding nulled, pirated or untrusted software;
• restricting unnecessary administrator accounts;
• maintaining appropriate backups;
• monitoring websites and applications for compromise;
• promptly informing RackState if suspicious activity is detected.

RackState may assist with security where technically possible, but such assistance does not transfer responsibility for the security of customer applications or content to RackState.

4. Compromised or Hacked Accounts

A customer will not automatically be treated as having intentionally violated this AUP merely because their website, application or email account has been compromised.

However, where RackState detects malware, phishing, spam, malicious scripts or other abusive activity originating from a compromised account, RackState may immediately restrict, isolate or suspend the affected service to protect users, systems and networks.

RackState may require the customer to:

• reset passwords;
• remove malware;
• update vulnerable software;
• remove compromised administrator accounts;
• restore a clean backup;
• implement security recommendations;
• provide additional information regarding the incident.

Service may remain suspended until RackState reasonably believes the security issue has been resolved.

5. Immediate Suspension

RackState reserves the right to immediately suspend or restrict a service without prior notice where RackState reasonably believes that:

• illegal activity is occurring;
• phishing or malware is being distributed;
• the service is attacking third-party systems;
• email spam or abusive sending is occurring;
• continued operation presents an immediate security risk;
• RackState has received a valid legal or regulatory direction;
• the activity threatens RackState infrastructure or other customers;
• RackState’s upstream hosting provider requires immediate action.

Where reasonably possible, RackState will notify the customer following suspension and provide information regarding the issue.

Immediate suspension does not necessarily mean permanent termination.

6. Abuse Reports

Abuse reports concerning RackState-hosted services should be sent to:

report@rackstate.com

Reports should include, where possible:

• affected domain or IP address;
• description of the alleged abuse;
• relevant URLs;
• timestamps;
• supporting screenshots or logs;
• contact information of the reporting party.

RackState may investigate abuse reports and request additional supporting information before taking action.

7. Preservation of Evidence

Where RackState identifies or receives notice of serious suspected illegal, fraudulent or malicious activity, RackState may preserve relevant records before suspending, deleting or modifying the service.

Such records may include, where available:

• account registration information;
• billing information;
• domain information;
• IP addresses;
• login history;
• web access logs;
• server logs;
• email logs;
• security logs;
• malware scan results;
• file timestamps;
• support tickets;
• abuse correspondence;
• backups or snapshots.

RackState may retain such records where reasonably necessary for security, investigation, dispute resolution or compliance with applicable law.

8. Law-Enforcement and Government Requests

RackState may cooperate with authorised law-enforcement agencies, courts, CERT-In and other competent government authorities where required by applicable law.

Where legally required, RackState may provide information under its possession or control in response to a valid legal request.

RackState may also preserve relevant customer information after receiving a lawful preservation request.

RackState will not voluntarily disclose customer information to unrelated third parties merely because they request it.

Requests from government or law-enforcement authorities should be sent through RackState’s designated legal or abuse contact channel.

9. Customer Information and Verification

RackState may collect and maintain information reasonably necessary to identify customers and administer services, including:

• customer name;
• organisation name;
• billing address;
• email address;
• telephone number;
• service order information;
• payment information;
• registration IP address;
• relevant account access information.

RackState may request additional verification for orders that appear suspicious, fraudulent, high-risk or inconsistent with normal usage.

Failure to complete reasonable verification may result in rejection, suspension or cancellation of an order.

10. Email Services

RackState professional email services must not be used for:

• unsolicited bulk messaging;
• purchased mailing lists;
• phishing;
• impersonation;
• fraudulent promotions;
• malware distribution;
• email bombing;
• abusive automation;
• attempts to evade spam filters;
• sending from compromised accounts.

If an email account becomes compromised, RackState may temporarily block outgoing mail until the account is secured.

11. Shared Hosting Resource Abuse

Shared hosting services operate on shared infrastructure.

Customers must not use excessive resources in a manner that materially affects other customers.

RackState may restrict or suspend applications causing abnormal:

• CPU usage;
• memory consumption;
• disk I/O;
• email volume;
• database load;
• network usage;
• automated background processing.

Where possible, RackState may recommend migration to a more suitable hosting plan.

12. Upstream Infrastructure Providers

Certain RackState services may operate on infrastructure supplied by third-party data-centre, hosting, network or software providers.

Customers acknowledge that RackState may be required to take action where an upstream infrastructure provider reports abuse or requires suspension under its own security or legal obligations.

RackState may therefore suspend, restrict or terminate a service where necessary to comply with such upstream requirements.

13. Repeated Violations

RackState may terminate services where a customer repeatedly violates this AUP or repeatedly fails to secure compromised accounts.

Repeated serious abuse may result in permanent refusal of future service.

14. No Obligation to Monitor All Customer Content

RackState does not undertake to continuously review or monitor all customer websites, files, communications or content.

However, RackState may use automated security, spam, malware, network and resource monitoring tools for the purposes of maintaining service security, preventing abuse and protecting infrastructure.

15. Reporting Security Incidents

Customers should immediately notify RackState if they discover:

• account compromise;
• malware infection;
• phishing pages;
• unauthorised administrator access;
• suspicious email activity;
• data breach;
• malicious code;
• unauthorised server activity.

Reports may be sent to:

support@rackstate.com
or
report@rackstate.com

16. Limitation of Responsibility for Customer Content

RackState provides infrastructure and related technical services.

RackState does not create, approve or endorse customer content merely because such content is hosted using RackState services.

Customers remain responsible for their own content, business operations, applications, legal compliance and use of RackState services.

Nothing in this clause limits obligations that RackState may have under applicable law.

17. Changes to this Policy

RackState may update this Acceptable Use Policy to reflect changes in law, security practices, infrastructure or service offerings.

The latest version will be published on the RackState website.

Continued use of RackState services after an updated policy becomes effective constitutes acceptance of the updated policy.