Acceptable Use Policy
Last updated: 14 October 2026
This Acceptable Use Policy (AUP) applies to everything Raff provides: Virtual Machines (Linux and Windows), Volumes, Snapshots and Backups, Object Storage, VPC, Public IPs, Firewalls, Kubernetes, Managed Databases, Raff Apps, Functions, Raff Keep, Raff Guardian, the Marketplace, and the Raff API, CLI, Terraform provider and MCP server (the "Products"). It also applies to the apps and functions you deploy, the automations you run and the AI assistants you connect. It protects our customers, the wider internet and Raff from abuse and illegal activity.
The Products are provided by Raff Technologies LLC and Dynamis Teknoloji Anonim Şirketi. If you break this AUP we may suspend or close your account, and in serious cases we may be required to report you to the authorities.
1. Fair Use
We expect you to use the Products in line with normal business operations.
- CPU. Standard servers are burstable: they can use all of their vCPUs whenever needed, and use above the sustained level (40% of the vCPUs) is paced by CPU credit, as described in CPU and bursting. Premium and Windows servers work as described in Plans and sizing.
- Bandwidth. Server traffic is not metered. Object Storage transfer above the amount included in its subscription is billed.
- Anything else. If your use affects other customers or shared infrastructure in another way, we contact you to discuss capacity, fees or limits before changing anything, unless we must act at once to protect the platform.
We are opposed to all forms of abuse, discrimination and rights infringement, and to anything that harms any group, person or resource. We expect you, and anyone you let use the Products ("end users"), to act the same way.
2. Your Responsibilities
2.1 Copyright infringement and unauthorised material
The Products must not be used to transmit, distribute or store material in breach of the law, including:
- material protected by copyright, trademark, trade secret or other intellectual property rights without permission;
- material that is obscene, defamatory, an illegal threat, or in breach of export control laws.
You are responsible for everything you upload, transmit or publish through the Products, and must have permission for any works you include.
2.2 Copyright takedown procedure
We respond to valid takedown notices under the Digital Millennium Copyright Act (DMCA) and equivalent laws in other countries.
To report copyright infringement, send a written notice to [email protected] that includes:
- the copyrighted work you say is infringed;
- the material you say is infringing and where it is on our services;
- your name, address, email address and phone number;
- a statement that you believe in good faith that the use is not authorised by the copyright owner;
- a statement, under penalty of perjury, that the notice is accurate and that you are the owner or authorised to act for the owner;
- your physical or electronic signature.
When we receive a valid notice we investigate promptly and, where justified, remove or disable access to the material. We may tell the customer and give them the chance to send a counter-notice. We may close the accounts of repeat infringers.
2.3 Spam and unauthorised messaging
The Products must not be used to send unsolicited bulk or commercial messages in breach of the law. This includes:
- sending spam, or collecting replies to spam sent by others;
- running mailing or phone lists without explicit opt-in permission;
- using third-party lists for spam or unconfirmed messaging;
- sending bulk email without verifiable opt-in consent from each recipient;
- sending commercial email without a clear, working unsubscribe link;
- sending email with false or misleading sender details, including spoofed From headers, reply-to addresses or domain names;
- breaking anti-spam laws, including the CAN-SPAM Act (US), CASL (Canada) and the EU ePrivacy Directive.
This applies to messages sent through the Products and to messages sent through any network that points recipients to sites we host.
2.4 Unethical, exploitative and malicious activity
The Products must not be used to:
- advertise or transmit software designed to break this AUP or others' policies, including DDoS tools and malware;
- access accounts or systems without authorisation (hacking);
- introduce viruses or malicious code into our systems;
- harass others, including through denial-of-service attacks, hate speech or discrimination;
- avoid paying for services;
- interfere with other customers' use of our network, including by overloading shared resources;
- publish content that incites violence, depicts child sexual abuse or threatens anyone's safety;
- break consumer protection laws or privacy rights;
- take part in illegal gambling, terrorism, narcotics or arms trafficking, or weapons of mass destruction.
2.5 Security and technical abuse
The Products must not be used for:
- cryptocurrency mining of any kind, whatever the consensus mechanism;
- running or taking part in botnets or command-and-control infrastructure;
- creating, hosting or distributing phishing sites, fake login pages or credential harvesting tools;
- scanning, vulnerability testing or penetration testing of systems you do not own or have permission to test;
- DNS hijacking, malicious DNS services or DNS-based attacks;
- forging IP packet headers or sending packets with spoofed source addresses;
- intercepting or capturing data in transit without authorisation;
- mail bombing, packet flooding or any deliberate attempt to overload a system or network.
2.6 Network abuse
The Products must not be used for:
- Tor exit nodes, open proxies or open mail relays;
- any service that gives anonymous access to third-party systems in a way that enables abuse or illegal activity;
- offering DDoS mitigation or protection services to third parties on Raff infrastructure;
- IP address hijacking, parking or squatting, announcing IP space you are not authorised to use, or manipulating routing tables;
- anything that gets our IP addresses or networks blocklisted or harms our network reputation.
2.7 Content and modern threats
The Products must not be used to:
- create, distribute or host AI-generated content made to deceive, such as deepfakes used for fraud or impersonation;
- publish someone's private information without consent (doxxing), such as home addresses, phone numbers, identity numbers or financial details;
- run coordinated inauthentic behaviour, such as fake accounts or manipulation campaigns;
- run bot farms: automated accounts, fake engagement, or captcha solving that breaks the terms of other platforms.
2.8 Financial crimes and regulatory compliance
The Products must not be used for:
- money laundering, financial fraud or illegal financial transactions;
- Ponzi schemes, pyramid schemes or other investment fraud;
- anything that breaks US sanctions, export controls or international trade restrictions.
2.9 Account abuse and circumventing limits
You must not:
- create several accounts to get around usage limits, free plans, first-month offers or billing requirements;
- use VPNs, proxies, device spoofing or similar means to create accounts for the same person or organisation;
- create accounts in a coordinated way to collect free plans or offers more than once;
- share account access or transfer accounts to get around limits;
- avoid payment through account manipulation or fraudulent billing.
Each person and organisation may have one account, and so one free database and one set of first-month offers. We check for related accounts and may suspend or close them without prior notice.
2.10 Automation, API keys and AI assistants
Scripts, Terraform, the CLI, API keys and AI assistants connected to your account act as you. They must respect our rate limits and this AUP, and you are responsible for what they do.
2.11 Impersonating Raff
You must not impersonate Raff Technologies LLC or Dynamis Teknoloji Anonim Şirketi, falsely claim a business relationship with us, or use our brand to make people believe they are dealing with us when they are not.
3. Monitoring
We monitor the health of our platform and patterns in network traffic, such as volume, ports and destinations, and we act on abuse reports. We do not look at the contents of your data, except when investigating a specific abuse report or when the law requires it, as described in our Privacy Policy. Report suspected breaches of this AUP to [email protected].
4. Enforcement
Breaking this AUP may lead to:
- a warning and a request to fix the problem;
- temporary suspension of the affected services;
- permanent closure of the services and your account;
- legal action where appropriate.
You can appeal by contacting support with the relevant information.
5. Changes to This Policy
We may change this AUP by publishing a new version on our website, and we tell you by email or on our website about significant changes. A new version applies from the earlier of the date you use the Products after it is published, or 30 days after publication.
6. Related Documents
This AUP is part of the legal documents that govern your use of Raff:
If this AUP and the Terms of Service conflict, the Terms of Service apply.
7. Contact
Raff Technologies LLC, 30 N Gould St #48506, Sheridan, Wyoming 82801, United States
Dynamis Teknoloji Anonim Şirketi, Beytepe Mah. 5399 Sk. No: 1 B İç Kapı No: 133, Çankaya/Ankara, Türkiye