Acceptable Use Policy

This Acceptable Use Policy (AUP) forms part of the Terms of Service and applies to all miHosting services: shared hosting, reseller hosting, VPS/Cloud, email, domains and any other service provided. Breach of this AUP may result in service suspension or termination.

1. Lawful use and regulatory compliance

Services may only be used for lawful purposes. Customers must comply with applicable regulations: Spanish LSSI (E-Commerce Act), GDPR/LOPDGDD, ICANN policies, intellectual property legislation and criminal law.

miHosting acts with due diligence and may proportionally restrict access upon "actual knowledge" of unlawful content, without prior notice, preserving evidence and notifying authorities as appropriate. miHosting does not actively monitor content but reserves the right to assess abuse incidents and take urgent measures in the event of security risks or serious harm.

2. Prohibited conduct

• Distributing malware, phishing, pharming, social engineering or spoofing, or compromising third-party accounts or systems.
• Attacking networks or systems: DDoS, port scanning, brute-force attacks, vulnerability exploitation or lateral movement.
• Using services as proxies, VPNs or TOR exit nodes for unlawful activities.
• Interfering with other Customers' services: excessive CPU/RAM/IO consumption, blocking MySQL tables, email or DNS flooding, mass scraping, or crawling on shared hosting.
• Hosting game servers, P2P/BitTorrent seeders or cryptocurrency mining software.
• Impersonating identities or forging headers, senders, routes or IP addresses.
• Exploiting vulnerabilities in third-party software.

3. Prohibited content

• Content infringing intellectual or industrial property rights (piracy, cracks, serials, warez), trademarks or rights of publicity.
• Child Sexual Abuse Material (CSAM): zero tolerance — immediate blocking and report to authorities.
• Content promoting unlawful activities, financial fraud (Ponzi schemes, HYIPs), fake sites, content promoted via spam, or intrusion tools.
• On shared hosting: IRC/IRCD, AutoSurf/PTC/PTS/PPC, TopSites, mass banner rotation, mirrors, file or ISO repositories, sustained IPTV/streaming, anonymous or mass SMS gateways.
• Explicit adult content: prohibited by default on all plans.

4. Resource limits on shared hosting

• Do not exceed 25% of server resources continuously or repeatedly over 90-second windows.
• Maximum 25 simultaneous processes per account.
• Cron jobs: minimum interval of 15 minutes.
• MySQL queries: maximum execution time of 15 seconds.
• Autonomous or headless software, crawlers/indexers and IRC interactions are not permitted.
• Each file or folder consumes 1 inode; plans have inode limits defined in their documentation.
• Uploading, hosting or distributing large files (1 GB or more) for speed tests or mass downloads requires explicit prior authorisation.

5. Email and anti-spam policy

Zero tolerance for spam, commercial or non-commercial. Sending unsolicited email, using lists without verifiable consent, acquiring third-party databases and operating open relays are prohibited.

Safe launch period

During the first 24 hours after signup: maximum 25 emails/hour per account.

Minimum sending requirements

• Valid SPF and DKIM records (mandatory).
• DMARC record (recommended).
• Clear unsubscribe link in all commercial messages.
• Correct bounce and complaint handling.
• Regular list maintenance and hygiene.

Inclusion on RBL blacklists may result in email suspension, corrective measures and charge-back of delisting costs.

6. Defamation, disputes and notice-and-takedown

miHosting respects freedom of expression and the safe harbour principles under the Spanish LSSI. We do not arbitrate private disputes but may block or remove content upon court order, authority demand or documented notification of illegality.

Notifications must include: exact URL, description of the facts, legal basis invoked and verifiable contact details.

7. Enforcement measures and sanctions

Depending on severity, miHosting may:

1. Temporarily limit resources.
2. Suspend the service partially or entirely.
3. Block email transmission.
4. Remove or block unlawful material.
5. Terminate the service agreement.
6. Charge mitigation and remediation costs (e.g., RBL delisting fees).
7. Notify the competent authorities.

Critical security incidents may trigger measures without prior notice. Where feasible, the account holder will be notified and offered a channel to appeal.

8. Resellers

Resellers are responsible for their customers' compliance with this AUP. Violations result in suspension of the affected service and notification to the reseller. Repeat violations may result in termination of the reseller account.

9. Evidence preservation and privacy

miHosting may retain logs and technical evidence for abuse investigations and legal compliance, applying data minimisation and proportionality in accordance with the Privacy Policy.

10. AUP updates

Material changes will be communicated with reasonable advance notice via the client portal and/or email.

11. Abuse contact and emergencies

Reports must include: affected URL or domain, date and time, incident description, evidence and the informant's contact details.