1. Purpose
This Acceptable Use Policy ("AUP") governs the use of all services provided by Galaxy Cloud Solutions LLC ("Company", "we", "us"). Violations may result in immediate suspension or termination without refund. We reserve the right to modify this AUP at any time by posting a revised version on our website. Continued use of our services after any modification constitutes acceptance of the updated AUP.
2. Account Responsibility
You are solely responsible for all activity that occurs on your account, regardless of whether the activities are undertaken by you, your employees, contractors, agents, or any third party. You are responsible for ensuring that anyone who uses your account is aware of and complies with this AUP. Use of our services to assist another person in an activity that would violate this AUP is itself a violation.
3. Prohibited Activities
3.1 Illegal Activities
- Any activity that violates local, state, federal, or international laws or regulations
- Hosting, distributing, or transmitting illegal content
- Copyright infringement or piracy
- Fraud, phishing, or identity theft
- Drug trafficking or illegal goods/services
- Gambling sites or services where prohibited by applicable law
- Activities that violate US trade or economic sanctions, including services to sanctioned countries or entities (Iran, North Korea, Cuba, Syria, Russia, Belarus, or any other OFAC-sanctioned jurisdiction)
3.2 Network Abuse
- Distributed Denial of Service (DDoS) attacks or any flood-based attacks
- Port scanning or network reconnaissance without authorization
- Unauthorized access to third-party systems
- Attempting to probe, scan, penetrate, or test the security or vulnerability of Galaxy Cloud Solutions infrastructure — including the hypervisor host, management network, billing portal, or any system outside your own VPS — and any attempt to escape, break out of, or gain access beyond the boundaries of your assigned VPS environment, except with our prior written consent
- Operating open mail relays or sending spam or unsolicited bulk email
- Operating open recursive DNS resolvers, open DNS servers, or any service that can be abused to amplify or reflect attack traffic against third parties
- IP spoofing or falsifying TCP/IP packet headers, email headers, or any part of a message describing its origin or route
- Intentionally consuming excessive bandwidth to degrade shared infrastructure
- Monitoring or intercepting data or traffic on any network without permission
- Mail bombing, news bombing, broadcast attacks, or other intentional interference with systems
- Harvesting or scraping email addresses, screen names, or other identifiers by deceit or covert means
3.3 Malicious Software
- Hosting, distributing, or executing malware, viruses, ransomware, spyware, or adware
- Operating botnets or command and control servers
- Cryptocurrency mining without explicit written approval from Galaxy Cloud Solutions LLC
- Hosting exploit kits, hacking tools, or attack infrastructure
- Introducing any contaminating code or technology that may damage or interfere with any computer system
3.4 Harmful Content
- Child sexual abuse material (CSAM) or any content that sexually exploits minors — zero tolerance. We report apparent CSAM to the National Center for Missing & Exploited Children (NCMEC) CyberTipline as required by US federal law (18 U.S.C. § 2258A) and cooperate fully with law enforcement.
- Content that promotes violence, terrorism, or hate speech
- Non-consensual intimate imagery
- Harassment or targeted abuse of individuals
- Adult or pornographic content without explicit written approval
3.5 Resource Abuse and Usage Limits
Each plan includes a monthly outbound bandwidth allocation as follows:
- Nebula 1 (1 vCPU / 1GB RAM / 20GB): 500GB/month
- Nebula 2 (2 vCPU / 2GB RAM / 40GB): 1TB/month
- Galaxy 1 (4 vCPU / 4GB RAM / 80GB): 2TB/month
- Galaxy 2 (4 vCPU / 8GB RAM / 160GB): 3TB/month
- Supernova (8 vCPU / 16GB RAM / 320GB): 5TB/month
Bandwidth resets on the 1st of each calendar month. Customers approaching their limit will receive email warnings at 80% and 90% usage. Upon reaching 100%, the VPS will be automatically suspended until the reset date or until an overage invoice is paid ($0.01/GB). Customers may also upgrade their plan at any time to avoid suspension.
The following resource abuse violations may result in immediate automated suspension:
- Intentionally consuming CPU, RAM, or bandwidth beyond your plan allocation
- Sustained outbound network traffic exceeding 800 Mbps (a warning alert is issued at 500 Mbps of sustained outbound traffic before any suspension occurs)
- Sustained disk write activity exceeding 100 MB/s
- Outbound connections to more than 1,000 unique IP addresses per monitoring interval (indicative of port scanning, botnet activity, or spam)
- Running resource-intensive processes that negatively impact other customers on shared infrastructure
- Circumventing resource limits or monitoring systems
- Removing, disabling, or interfering with infrastructure software installed by Galaxy Cloud Solutions LLC, including but not limited to the QEMU guest agent
3.6 Proxies, VPNs, and Bandwidth Sharing
You may run your own VPN or proxy software on your VPS for your own use — for example, personal privacy, or giving yourself and a small number of people you authorize secure access to services you host. This is a permitted and common use of our service. What is not permitted is turning your VPS into a relay that carries other people's general internet traffic. The distinction is whether the traffic passing through is your own — not whether you describe the setup as personal or commercial, and not whether the people using it are ones you know. The following are prohibited:
- Operating an open or public proxy or VPN. Any proxy or VPN you run must require authentication and be limited to users you control or have authorized; services left open to the general public or to unauthenticated third parties are not permitted.
- Running TOR exit or relay nodes, or any public exit node that routes anonymous third-party traffic through your IP address.
- Using your VPS as a point-of-presence node for a commercial proxy or residential-IP network.
- Using your VPS to relay, route, or carry the internet traffic of multiple people — for example a team, workforce, or customer base — whether or not money changes hands, and whether or not you describe it as personal. This includes relaying live-streaming, social-media, or similar traffic so that a group of people's activity exits through your IP address. Requiring a password or limiting access to people you know does not make this permitted; what matters is that traffic other than your own is leaving through your address.
- Bandwidth reselling or sharing applications that resell or share your connection with unknown third parties (including but not limited to Honeygain, EarnApp, EarnFM, Pawns, ProxyRack, Traffmonetizer, IPRoyal, Peer2Profit, Repocket, Mysterium, Grass, PacketStream, Bitping, or similar services).
- Using a proxy or VPN to relay activity that is prohibited elsewhere in this policy, such as spam, scanning, brute-force attempts, or fraud. A proxy does not exempt the traffic passing through it from this AUP.
You are responsible for all traffic originating from your VPS, including traffic relayed through any proxy or VPN you operate. On shared-IP plans (Nebula), your traffic shares a public IP address with other customers, and activity that harms the reputation of that shared address may result in suspension. A dedicated IP (Galaxy) gives you an address whose reputation is yours alone — but our addresses come from a small range, so relay or multi-user proxy traffic that harms the standing of that range, or of our relationship with our upstream network, is not permitted on dedicated IPs either.
3.7 Torrents and Peer-to-Peer Traffic
Peer-to-peer (P2P) file-sharing and BitTorrent traffic is prohibited on our network and is blocked at the network level. This restriction applies to all such traffic regardless of the legality of the content being transferred, as our network-level controls cannot distinguish lawful from unlawful use. Prohibited activity includes:
- Running torrent clients, trackers, seedboxes, or download servers of any kind
- Operating torrent seed or download servers for copyrighted material
- Hosting or distributing pirated software, media, or other copyrighted content
- Operating file-sharing services that primarily facilitate copyright infringement
- Using BitTorrent or other P2P protocols for any purpose, including for lawful content
Customers with a legitimate business need for P2P or torrent traffic may request a per-server exception through support. Exceptions are evaluated case-by-case and granted at our discretion.
3.8 Automated Monitoring and Enforcement
Galaxy Cloud Solutions LLC operates automated monitoring systems that run continuously on all customer VMs. By using our services, you acknowledge and consent to the following automated monitoring activities:
- Process monitoring: We scan running processes inside your VM to detect prohibited software as listed in Sections 3.3 and 3.6. This scan runs hourly and may result in automatic suspension upon detection.
- Network traffic monitoring: We monitor outbound bandwidth usage, connection rates, and traffic patterns on your VM's network interface.
- Resource monitoring: We monitor CPU, RAM, disk I/O, and bandwidth consumption to enforce plan limits.
- Security monitoring: We monitor for signs of compromise, malware, or unauthorized access that could affect our infrastructure or other customers.
- IP reputation monitoring: We periodically check your VM's IP address against third-party abuse databases.
- QEMU guest agent: All VMs include the QEMU guest agent, which is required infrastructure. It allows us to perform security checks, respond to incidents, reset credentials, and in some cases recover your VM without a full reinstall. You may not remove, disable, or interfere with its operation. If we detect the guest agent is not running on your VM, we will contact you directly to resolve it.
Automated suspensions triggered by our monitoring systems are enforced immediately without prior notice when a violation is detected. You will receive an email notification explaining the reason for suspension and steps to resolve it.
3.9 Bulk Orders, Service Limits, and Identity Verification
Galaxy Cloud Solutions LLC reserves the right to limit the number of active services per customer account at our sole discretion. Customers requesting five (5) or more VPS instances are considered bulk orders and are subject to the following additional requirements:
- Identity verification: Before a bulk order is fulfilled, the customer must submit a valid government-issued photo ID (passport, driver's license, or national ID card) along with a selfie of themselves holding the ID. This is required to verify the identity of the person placing the order. Failure to provide verification within 48 hours of the order will result in cancellation and refund.
- Service agreement: Bulk orders of five (5) or more VPS instances require a signed service agreement with Galaxy Cloud Solutions LLC prior to provisioning. Contact [email protected] to request a service agreement.
- Prohibition on VPS reselling: Reselling, subletting, or otherwise transferring access to any VPS instance provided by Galaxy Cloud Solutions LLC to any third party is strictly prohibited without prior written approval. This includes offering VPS access as part of a paid or unpaid service to others. Violation of this policy will result in immediate termination of all services without refund.
- Right to refuse: We reserve the right to refuse, cancel, or limit bulk orders at our discretion, including but not limited to cases where we suspect fraud, abuse, or violation of this AUP.
3.10 Network Addresses and Domain Information
- Assigned IP addresses only: You may only use IP addresses that Galaxy Cloud Solutions LLC has assigned to you in connection with your service. Manually configuring, claiming, spoofing, or otherwise using any IP address that has not been assigned to your account — including IP addresses assigned to other customers or held in our available pool — is prohibited.
- Accurate domain records: You must maintain valid and current registrant and contact information with your domain name registrar for any domain you host on our network.
- Protecting our IP reputation: You must not take any action that directly or indirectly results in any Galaxy Cloud Solutions LLC IP address being listed on any abuse, spam, or block-list database (such as Spamhaus, SORBS, or Barracuda). Because IP addresses on shared plans are used by multiple customers, conduct that damages the reputation of an address affects every customer using it and will be treated accordingly.
4. Permitted Activities
- Web hosting for legitimate businesses and personal projects
- Development and testing environments
- Running legitimate web applications and APIs
- Email hosting for your own domain (see the note on port 25 below)
- Game servers for personal or small community use (within bandwidth limits)
- VPN for personal privacy use (not for reselling bandwidth, operating exit nodes, or relaying other people's traffic)
- Databases, CI/CD pipelines, and development infrastructure
A note on outbound email: Outbound port 25 (SMTP) is blocked by default on all plans. This is standard practice across the hosting industry — it keeps our IP space off spam blacklists, which protects every customer on the network. Sending mail through an authenticated relay on port 587 or 465 (Gmail, Amazon SES, Mailgun, or your own provider) works normally and is the right way to send email from a server anyway. If you run a full mail server and genuinely need direct port 25 access, email [email protected] and we'll review it case by case for accounts in good standing.
5. Reporting Violations
To report abuse: [email protected]
We take all abuse reports seriously and investigate promptly. If you become aware of any violation of this AUP please contact us immediately.
6. Enforcement
Galaxy Cloud Solutions LLC reserves the right to investigate suspected violations and take appropriate action including warning, throttling, suspension, or immediate termination without refund. Our right to suspend or terminate your service applies even where a violation is committed unintentionally, or by a third party using your account with or without your authorization.
Automated Enforcement: Our systems may automatically suspend your VPS without prior notice upon detection of the following:
- Prohibited processes detected (Sections 3.3 and 3.6) — immediate suspension
- Sustained outbound traffic exceeding 800 Mbps — immediate suspension
- Disk write activity exceeding 100 MB/s sustained — immediate suspension
- Outbound connections to more than 1,000 unique IPs per interval — immediate suspension
- Monthly bandwidth limit reached (100%) — suspension until reset or overage payment
- Overdue invoice after 7 days — suspension per billing terms
In all automated suspension cases, you will receive an email notification immediately after suspension explaining the cause and resolution steps. Manual review suspensions for policy violations other than the above may occur with or without prior notice depending on severity.
We cooperate fully with law enforcement and will disclose account information when required by valid legal process including subpoenas, court orders, or search warrants. We reserve the right to report illegal activity to the appropriate authorities.
7. Modifications
Galaxy Cloud Solutions LLC reserves the right to modify this AUP at any time. We will notify customers of material changes via email or a notice on our website. Continued use of our services after notification of changes constitutes acceptance of the updated policy.