Acceptable Use Policy

Last Updated: 1 August 2026

Scope

This Policy protects users, Clients, Hoslift and its providers from unlawful, abusive or unsafe use. It applies to the Hoslift Website, hosted systems, infrastructure, accounts, APIs, communication channels and Products where it is incorporated by reference. It applies to a Client's personnel, contractors, end users and any person using credentials or access supplied through that Client.

Prohibited Use

Users must not:

• break applicable law or third-party rights;
• distribute malware, phishing, scams, abusive automation or harmful code;
• gain or attempt unauthorized access, evade controls or interfere with service;
• perform denial-of-service, destructive scanning or credential attacks;
• upload illegal, deceptive, infringing, exploitative or privacy-violating content;
• process regulated/sensitive data without written authorization and safeguards;
• send unsolicited communications or manipulate identity/attribution;
• use a Service to develop or deploy a high-impact system contrary to the agreed controls;
• resell, sublicense or represent Hoslift authority without written permission;
• consume resources in a manner that materially harms other users or providers.

Good-faith security research is governed by the Responsible Disclosure Policy, not treated as prohibited solely because it identifies a vulnerability.

Client Responsibility

The Client is responsible for its users, credentials, content, permissions, integrations and lawful instructions. It must maintain appropriate access controls, remove access that is no longer required and promptly notify Hoslift of suspected compromise, prohibited content or unauthorised activity. The Client must cooperate with a proportionate investigation, containment and remediation process.

Enforcement

Hoslift may preserve relevant records and investigate reported or detected misuse in a manner proportionate to the risk. Where reasonably necessary for security, legality or service integrity, Hoslift may limit traffic, remove or quarantine affected material, revoke credentials, restrict functionality, suspend access or terminate the affected Service.

Where safe and lawful, Hoslift will provide notice, explain the basis for action and allow a reasonable opportunity to remedy. Immediate action may be taken where delay could expose a person, system or provider to material harm. Enforcement decisions are documented and reviewed against the available evidence.

Reporting and Appeals

Suspected abuse should be reported to security@hoslift.com with the affected service, relevant time, observed behaviour and safe supporting evidence. Do not include passwords, private keys or unnecessary personal data.

An affected Client may request review by providing relevant evidence and the reason it considers the decision incorrect or disproportionate. Hoslift will review the request through a person not solely responsible for the initial action where reasonably practicable. This process does not limit legal rights, urgent protective action or provider obligations.