Acceptable Use Policy

Effective 28 August 2026.

This policy forms part of the phas Terms of Service. It applies to every service phas provides and to everyone who uses your services — employees, contractors, clients, or anyone else, with or without your consent. You are responsible for their use as if it were your own.

1. The short version

Use your services lawfully, don't harm other people or the platform, and don't send email people didn't ask for. Almost everything below is one of those three, written down.

2. Unacceptable content

You must not host, store, link to, or transmit material that:

• is illegal under New Zealand or Australian law, or under the law that applies to you — including material that is objectionable under the Films, Videos, and Publications Classification Act 1993 (NZ);
• sexually exploits or endangers children in any form — this is reported to authorities immediately and terminated without notice;
• is non-consensual intimate imagery, or promotes it;
• advocates or instructs terrorism or violence against people;
• incites hatred against people on protected grounds;
• is malware, phishing kits, stolen credentials, or tooling whose purpose is unauthorised access to systems or data;
• infringes copyright, trademark, or other IP rights — including warez, cracks, keygens, and unlicensed distribution of others' work;
• constitutes fraud, scams, pyramid schemes, or the unlicensed sale of pharmaceuticals or gambling services into jurisdictions where that is unlawful.

We judge edge cases case-by-case, and we're the ones who decide whether content crosses the line for our platform.

3. Prohibited use of hosting

Shared hosting is for serving websites and their applications. You must not use it as:

• a generic file store, backup target, or media archive unrelated to a website we host (that's what object storage products are for);
• an open proxy, VPN endpoint, Tor exit, IRC bouncer, or game server;
• a mining rig, distributed-compute node, or anything whose job is to consume CPU rather than serve your site;
• a launchpad for scraping, vulnerability scanning, brute-forcing, or denial-of-service against anyone (including "testing" third parties without written authority).

4. Security

You must not attempt unauthorised access to any system or data, ours or anyone's; probe or scan networks you don't own without authority; introduce malware; or intercept traffic not meant for you. You must keep your own credentials, CMS, plugins and dependencies patched and secure — a compromised site that starts attacking others gets suspended under clause 8 of the Terms, and we'll help you clean it up when you're ready.

5. Resource usage

5.1. Plan limits (disk, websites, databases) are published on the pricing page and enforced by the hosting platform.

5.2. Shared CPU, memory, processes and I/O are governed per-account by the platform. Accounts that persistently monopolise shared resources — long- running scripts, cron jobs tighter than 15-minute intervals, runaway queues — may be throttled, and we'll contact you about a plan that actually fits the workload.

5.3. We may suspend, without prior notice if necessary, any service whose resource use is materially degrading the platform for others, even if otherwise lawful.

6. Email and spam

6.1. You must comply with the Unsolicited Electronic Messages Act 2007 (NZ) and the Spam Act 2003 (Cth) for every message sent via phas infrastructure: consent (express or genuinely inferable) before commercial messages, accurate identification of the sender, and a functional unsubscribe that stays valid for at least 30 days and is honoured within 5 working days.

6.2. You must not use address-harvesting software or send to harvested or purchased lists.

6.3. Mailbox-style bulk sending from shared hosting is limited to 1,000 outbound messages per domain per hour. The transactional email add-on has its own plan-based sending limits (see its product page) and is for application email — receipts, resets, alerts — not marketing broadcasts; it also passes through our email provider's (Postmark's) own acceptable-use rules.

6.4. Appearing on major spam blocklists because of your sending is grounds for immediate suspension of the sending service while it's sorted out.

7. Backups

Keep your own current off-site backups of your content at all times (Terms clause 9). The paid Managed Backups add-on is the exception the Terms describe. This clause exists in both documents on purpose.

8. Abusive conduct

We're a small team and we'll work hard for you. Abuse, threats, or harassment of our people — in tickets, email, or anywhere else — is a breach of this policy and can end the relationship after warning (or immediately, if severe).

9. Enforcement

9.1. For minor breaches we email you first: what's wrong, what to fix, and a deadline of at least 2 working days.

9.2. For severe breaches — illegal content, active attacks, spam runs in progress, anything endangering others — we suspend first and notify you immediately after.

9.3. Repeated breaches after warnings may lead to termination under the Terms. Where suspension was our doing under 9.2 and turns out to have been our error, we restore service immediately and the time suspended doesn't count against you.

9.4. We cooperate with law enforcement as the law requires, and we report content where the law requires reporting.

10. Changes

This policy changes the way the Terms change (Terms clause 12): minor changes on publication, material changes with 30 days' email notice.