Using 1uphost responsibly.

1. Who this policy applies to

It applies to you as the account holder and to everyone you allow to use your services: your team members, developers, agencies, and your own customers and website visitors. You are responsible for what they do on our services as if you had done it yourself.

If you resell or give others access to space or services on your account, you must bind them to terms at least as strict as this policy and act on our requests about their use.

2. Unlawful and harmful content

You must not host, store, publish, transmit or link to material that: sexually exploits or abuses children in any form (Protection of Children from Sexual Offences Act, 2012; section 67B of the IT Act); is obscene or sexually explicit in breach of sections 67 and 67A of the IT Act; is intimate imagery of a person shared without their consent; or invades anyone's bodily privacy.

Equally prohibited: content that threatens the unity, integrity, defence, security or sovereignty of India, friendly relations with other countries or public order; that incites or promotes terrorism, violence or any cognisable offence; that is defamatory, harassing, or insults or promotes hatred on the basis of religion, caste, race, gender, ethnicity or language; that impersonates another person; that is patently false or misleading information presented as fact with intent to harm; and anything else unlawful under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 or any other law in force.

Child sexual abuse material is reported to the authorities and removed immediately, without notice to you, and the account is closed.

3. Fraud, phishing and financial crime

No phishing pages, fake login or payment pages, look-alike websites of banks, government bodies, couriers or brands, fake KYC or customer-care pages, or any page meant to collect passwords, OTPs, card or bank details under false pretences (sections 66C and 66D of the IT Act; Bharatiya Nyaya Sanhita, 2023).

No investment, lottery, job, loan or prize scams; no Ponzi or multi-level money schemes; no sale of counterfeit goods, controlled drugs, weapons, explosives or wildlife products; no unlicensed financial services such as lending, deposit-taking, payment collection or foreign exchange that require a licence from the RBI, SEBI or another regulator; and no online money games, betting or gambling prohibited under Indian law, including the Promotion and Regulation of Online Gaming Act, 2025.

No money laundering or attempts to evade sanctions, and no help to anyone else doing these things.

4. Security and network abuse

You must not use our services to break into, probe, scan or test the security of any system or network — ours, another customer's or anyone else's — without written permission from its owner (sections 43 and 66 of the IT Act). This includes port and vulnerability scanning, brute-force and credential-stuffing attacks, denial-of-service attacks, packet floods and traffic amplification.

No malware, ransomware, viruses, trojans, botnet controllers, exploit kits, keyloggers or stalkerware; no open proxies, open relays or anonymising services run for others; no forged packet or email headers; and no attempt to get around limits, metering, suspension, authentication or our security controls.

No cryptocurrency mining, proof-of-space farming or similar workloads on any shared service.

5. Email, SMS and messaging

Send email only to people who asked to hear from you. Every bulk or marketing message must say who it is from, contain a working unsubscribe link, and opt-outs must be honoured within 10 days. Purchased, rented, scraped or harvested address lists are not allowed, and neither is sending through other people's servers or hiding where mail comes from.

Commercial SMS and voice messages sent to Indian numbers must follow the TRAI Telecom Commercial Communications Customer Preference Regulations, 2018, including registered headers and templates (DLT) and the do-not-disturb preferences of recipients.

If your sending causes spam complaints, blocklisting of our servers or bounces above normal levels, we may limit or pause sending from your account until it is fixed. Shared hosting plans are for normal business mail, not bulk campaigns — use a dedicated bulk-mail service for those.

6. Intellectual property

Host only content, software, fonts, images, music and video you own or are licensed to use. No pirated software, cracked licences, licence-key generators, unauthorised streaming or download sites, or trade-mark infringement (Copyright Act, 1957; Trade Marks Act, 1999).

When we receive a valid written notice from a rights owner, we may disable access to the content as the law requires (including section 52(1)(c) of the Copyright Act and section 79 of the IT Act) and tell you so you can respond. Repeat infringers lose their accounts.

7. Personal data and privacy

For the personal data in the websites, databases, email and files you host with us, you are the Data Fiduciary under the Digital Personal Data Protection Act, 2023: you must have a lawful basis to process it, give the notices the Act requires, honour people's rights, and keep it secure. We process it only to provide the service, as your processor.

You must not collect personal data covertly or by deception; scrape, sell or publish other people's personal data; publish anyone's private information to harass or expose them; or process the data of children without verifiable parental consent where the law requires it.

Keep payment card data off our shared services: use your payment gateway's hosted pages so card numbers never touch your site. Sensitive data such as health, financial or identity documents must be encrypted and access-controlled.

8. Fair use of shared resources

Shared hosting is shared: “unlimited” or “unmetered” features cover normal websites, email and storage for your own business. We may limit, move or ask you to upgrade any account that degrades the server for others.

9. DataVault and backups

DataVault is for your own files and files you are authorised to store. Shared and public links must not be used to distribute malware, pirated material, or content you have no right to share. Sharing a file with someone does not transfer ownership or responsibility — you remain responsible for what you share.

You must keep your own copies of anything critical. Backups we provide are a convenience, not a guarantee, as set out in our Terms and SLA.

10. Domains

Registrant details must be accurate and kept up to date, as required by ICANN, NIXI (for .in domains) and each registry. Domains registered to mislead — such as misspellings of well-known brands, government or bank look-alikes, or domains used for phishing, malware or spam — may be suspended or deleted under registry and registrar rules, and their fees are not refunded.

You must respond to registry and registrar verification requests within the time they give. Domain disputes follow the UDRP or INDRP, as applicable.

11. Your security responsibilities

Keep your software, plugins and themes up to date, use strong unique passwords and two-factor authentication, and protect every login and key you are given. Never share your account; add team members with their own logins instead.

If your account or website is compromised, we may isolate it — for example by blocking outgoing mail, restricting files or taking a site offline — to protect other customers and the public, and tell you what we found so you can clean it up. Restoring service may require you to remove the malicious code and close the hole it came through.

12. Verification, records and the law

Indian law requires us to verify every customer and keep records. Under the CERT-In Directions of 28 April 2022 we keep customer verification records, and keep system logs for 180 days, and report certain cyber security incidents to CERT-In within 6 hours. You must give accurate verification details and tell us when they change.

We cooperate with lawful orders and requests from courts, CERT-In, law enforcement and other authorised government agencies, including under sections 69, 69A and 79 of the IT Act and the Bharatiya Nagarik Suraksha Sanhita, 2023. Where the law requires it, we remove or disable access to content within the time it sets (for example within 36 hours of a court order or government notification, and within 24 hours for a complaint about non-consensual intimate imagery), and we may share information about you or your account without telling you first where the law requires or allows it.

13. How we enforce this policy

We investigate reports and what our own monitoring finds. Where it is safe and lawful, we contact you first and give you a reasonable time to fix the problem. Depending on how serious and urgent it is, we may remove or disable specific content, restrict features such as outgoing mail, suspend a service, or close the account.

We act immediately and without notice when there is child sexual abuse material, an active attack or phishing campaign, malware spreading from your account, a risk to our network, other customers or the public, or a court or government order. We may preserve data and logs as evidence and report illegal activity to the authorities.

We are not liable for any loss caused by action we take in good faith under this policy. Fees for the current period remain payable and are not refunded when a service is suspended or closed for a breach. We may charge reasonable costs of investigating and cleaning up abuse from your account (for example removing your servers from blocklists), and you agree to indemnify 1uphost against claims, fines and costs arising from your breach of this policy or the law.

If you think we acted in error, reply to our notice or raise a ticket; a person reviews it, usually within 30 minutes for a suspended live website.

14. Reporting abuse and grievances

Report abuse, phishing, malware, spam or infringement to abuse@1uphost.com with the address of the content, what is wrong and any evidence. We acknowledge every report within 24 hours.

Complaints under the IT Rules, 2021 and the DPDP Act go to our grievance officer through 1uphost.com/grievance/ or grievance@1uphost.com. We acknowledge them within 24 hours and resolve them within 15 days.

15. Changes to this policy

We may update this policy as the law and our services change. We will give you at least 30 days' notice of material changes by email and in your dashboard, except where a change is needed sooner to comply with the law or stop abuse. Continuing to use the services after a change takes effect means you accept it.