Acceptable Use Policy

01Purpose and scope

This Acceptable Use Policy (“AUP”) sets the rules for using websites, software, infrastructure and services provided by Chunk Technologies LLC (“Chunk Technologies”, “we”), including chunktechnologies.com, project and consulting deliverables we host or operate, and any cloud, hosting, automation or SaaS product we make available. It applies to customers, their personnel and anyone else who uses them (“you”), and forms part of our Terms of Service.

You are responsible for use of the Services under your control, including by your users, contractors and anyone who gains access through your credentials or systems. You must not help or allow others to break this AUP.

02Unlawful activity

You may not use the Services in violation of the law of the United States, the State of Wyoming, the European Union and its Member States, or the place where you or your users are located, or to do anything that helps others commit an unlawful act. This includes:

• fraud, money laundering or financing of crime, and trafficking in illegal goods or services;
• content or activity that sexually exploits or endangers children, or that incites violence or terrorism;
• unlawful collection or processing of personal data, including breaching privacy and data protection law;
• harassment, stalking, unlawful discrimination, or threats against any person;
• defamation, or impersonation of a person or organization to mislead.

03Unauthorized access and security violations

You may not, and may not attempt to:

• access, probe, scan or test any system, network, account or data without the owner’s explicit authorization;
• bypass or break authentication, rate limits, usage quotas, or other protection measures;
• exploit vulnerabilities, or use stolen, leaked or guessed credentials, tokens, keys or session data;
• intercept or monitor data that is not intended for you, including by spoofing, man-in-the-middle activity or packet capture on networks you do not own or administer;
• circumvent or disable security, isolation or tenancy controls that separate customers from each other;
• forge headers, IP addresses or other identifiers to hide the origin of traffic or activity.

Computer misuse laws such as the US Computer Fraud and Abuse Act and EU and Polish equivalents criminalize unauthorized access. We will cooperate with law enforcement where appropriate.

04Malware, ransomware and malicious software

You may not create, upload, host, distribute, deploy or operate viruses, worms, trojans, ransomware, spyware, rootkits, cryptominers that run without informed consent, botnets or command-and-control servers, credential stealers, keyloggers, or any code designed to damage, disrupt, take control of or covertly collect data from systems or users.

Legitimate security work, such as malware analysis performed in isolated environments or defensive tooling, is allowed where it is authorized, contained and not used to harm third parties, and where we are told in advance if it could trigger our monitoring (see section 8).

05Phishing, fraud and deceptive practices

• You may not host or send phishing pages or messages, or any content that pretends to be another organization to obtain credentials, payment details or personal data.
• You may not run scams, fake stores, fake reviews, pyramid schemes or services meant to mislead users about who they are dealing with.
• You may not use the Services to generate or distribute deceptive material that violates consumer protection law, including the FTC Act and the EU Unfair Commercial Practices Directive.
• You may not mislead others about your identity or authority when dealing with us, including when applying for access to Services.

06Spam and unsolicited communications

You may not use the Services to send unsolicited bulk or commercial messages or to harvest addresses or other contact data for that purpose. Marketing communications must comply with laws that apply to you and your recipients, including the CAN-SPAM Act, the Telephone Consumer Protection Act where relevant, Article 13 of the ePrivacy Directive and Article 398 of the Polish Electronic Communications Law, and must identify the sender, include a working way to opt out, and honour opt-outs. You may not operate open relays or send from lists you bought or rented without proof of valid consent.

07DDoS attacks and network abuse

• No denial-of-service or distributed denial-of-service attacks, “booter” or “stresser” services, traffic amplification or reflection, or anything intended to overload a network, service or device.
• No port scanning, mass scanning or fuzzing of systems you do not own or have not been authorized to test.
• No open proxies, anonymizers or relays that are used to hide abuse, and no operation of Tor exit nodes or similar services without our written consent.
• No hijacking of IP address space, DNS records or routing, and no activity that gets our IP addresses or those of other customers blocklisted.

08Security testing and vulnerability research

Testing our systems. Penetration testing, vulnerability scanning, red-team exercises or load testing of Chunk Technologies’ systems and Services require our prior written authorization that defines scope, timing and rules of engagement. Without it, such testing is prohibited. We do not currently operate a formal vulnerability disclosure or bug bounty programme.

Testing your own environment. You may test systems and applications that you own or are authorised to test, provided the testing does not affect shared infrastructure or other customers. Tell us in advance about testing against hosted environments we operate for you, so that it is not mistaken for an attack.

Reporting a vulnerability. If you find a weakness in our Website or Services, please report it to daniel@chunktechnologies.com, give us reasonable time to fix it before disclosure, do not access or keep other people’s data, and do not degrade the service while investigating.

09Copyright and intellectual property infringement

You may not store, share or distribute material that infringes copyrights, trademarks, patents, trade secrets or other rights, including pirated software or media, cracks, key generators and tools primarily designed to bypass copyright protection. You must comply with the licences of the software you use or deploy, including open-source licences.

Infringement notices

If you believe something we host infringes your copyright, send a notice to daniel@chunktechnologies.com. The notice must identify the work and the material, give your contact details, include a statement of good-faith belief and a statement under penalty of perjury that you are authorized to act, and have your physical or electronic signature. We may remove or disable access to the material, tell the person who posted it, and process a counter-notice. We may terminate repeat infringers.

10Misuse of infrastructure and resources

• Do not use more compute, storage, bandwidth, connections or API capacity than your plan or order allows, or in a way that threatens other customers’ service.
• Do not use infrastructure for cryptocurrency mining, proof-of-work or similar workloads unless the order expressly allows it.
• Do not resell or share access except as the order permits, and do not use automated means to create accounts or evade limits and fees.
• Do not use free, trial or evaluation resources for production or commercial workloads except as agreed.
• Do not store illegal content or use the Services as an unmonitored dump for content that exposes us to abuse complaints.

11Interference with other users and services

You may not disrupt, degrade or damage the Services or the experience of other customers, or any third party’s services, including by misconfiguration that exposes shared resources, by actions that cause our IP ranges or domains to be blocked, or by creating sustained noise that burdens support or monitoring. Where an issue on your side threatens others, we may act quickly under section 14.

12Sanctions and export controls

We are a US company and must comply with US sanctions and export control laws, including those administered by the Office of Foreign Assets Control (OFAC) and the Export Administration Regulations, and with applicable EU sanctions. We also comply with the laws of the EU Member States where we operate. You represent that you, and anyone you permit to use the Services, are not:

• listed on, or owned or controlled by someone on, a sanctions or restricted-party list that prohibits dealing with them;
• located in, ordinarily resident in or organized under the laws of a country or region subject to comprehensive US or EU sanctions; or
• using the Services for military, nuclear, missile, chemical or biological end uses, or for any purpose prohibited by export controls.

We may refuse, suspend or end service, and delay or block transactions, where this is needed to comply. You must not export, re-export or transfer software or technical data obtained from us in violation of these laws.

13Reporting violations

To report abuse, illegal content, security incidents or other violations, contact daniel@chunktechnologies.com (security issues: daniel@chunktechnologies.com). To help us act quickly, please include:

• a clear description of the problem and why you believe it is unlawful or breaks this AUP;
• the exact location, such as a URL, IP address or hostname, and the date and time;
• supporting evidence such as logs, headers or screenshots;
• your name and email address, unless you are reporting anonymously where that is allowed and you do not need a reply.

If a report concerns content that we host for customers and is made under EU law, we will handle it as a notice under Article 16 of the Digital Services Act where that Regulation applies to the relevant service. We will confirm receipt and tell you of our decision, where we have your contact details.

14Suspension and termination procedures

We may investigate suspected violations, and review account data, logs and content only to the extent needed and permitted by law and our Privacy Policy. We will respond in proportion to the breach, taking account of its severity, urgency, intent, history and the risk to others.

• Notice and fix. For minor or curable issues we will notify you by email and ask you to correct them within a stated reasonable time.
• Immediate action. Where there is a serious or ongoing threat, such as an active attack, malware, illegal content or a legal order, we may suspend or restrict the affected resources, remove content, or block traffic without prior notice, limited to what is needed to stop the harm. We will tell you as soon as is practicable and lawful, and restore service when the issue is resolved.
• Termination. We may terminate the Services for serious, repeated or uncorrected violations as set out in the Terms of Service. Fees for the period of a termination caused by your violation are not refunded except as the law requires; fees paid for Services we withhold for reasons not caused by you will be refunded.
• Statement of reasons. When we restrict or remove content or terminate a service, we will tell you what we did, the reason, the facts relied on, whether the decision was made by automated means, and how to appeal. We may withhold details only where the law prohibits us or doing so would put others at risk.
• Data. After termination we handle Customer Content as the Terms of Service and the order provide, and may preserve and disclose data when required by law, or where an authority has asked us to.
• Cooperation. We may report suspected unlawful activity to law enforcement and to affected third parties.

15Appeals

If you believe we acted in error, you may appeal by emailing daniel@chunktechnologies.com within 14 days of our notice, with your account or order details, the decision you dispute and your reasons and evidence. A person who was not involved in the original decision will review the appeal, and we will tell you the outcome and our reasons in writing within a reasonable time. We may keep a restriction in place during the review if it is needed to protect the security of our systems or other customers or to comply with the law. If the appeal succeeds, we will lift the measure and, where appropriate, restore access and content or credit fees for the period of the unjustified suspension.

This process does not limit your statutory rights, including the right to bring a claim before a court, to complain to a consumer or data protection authority or, where it applies, to use an out-of-court dispute settlement body.

16Changes and contact

We may update this AUP to address new threats, services or legal requirements. We will post the updated version with a new “Last updated” date and, for material changes affecting customers with an order, notify them by email. This AUP does not create a duty for us to monitor everything customers do, and our failure to act on a violation is not a waiver. Nothing in it limits any mandatory right you have under applicable law.

Contact: daniel@chunktechnologies.com · Chunk Technologies LLC, 30 N Gould St Ste Nm, Sheridan, Wyoming 82801, USA.