Acceptable Use

1. Purpose

This Acceptable Use Policy protects Rocket Domains, its customers, upstream providers, registries, networks, recipients and the public. It applies to all services, including domains, DNS, hosting, CDN, email, workspace, websites, booking portals, backups, security services, SEO tools, APIs, registry services and third-party services.

2. Prohibited uses

You must not use, allow, facilitate, promote, resell, configure or support the services for any of the following:

• Illegal activity, unlawful goods or services, criminal conduct, fraud, deception, scams, impersonation, forged identity, forged headers, misrepresentation or evasion of law.
• Spam, unsolicited bulk email, unlawful marketing, mailing lists without valid consent, harvested addresses, bought lists without lawful basis, open relays, snowshoe spam, mail bombing, list bombing, fake unsubscribe processes, evasion of sending limits or abuse of free tiers.
• Phishing, pharming, credential theft, brand impersonation, fake login pages, payment-card theft, business email compromise, social engineering, malware distribution, ransomware, spyware, stalkerware, trojans, worms, botnets, command-and-control, exploit kits or malicious redirects.
• Denial-of-service attacks, bandwidth saturation, port scanning without authority, vulnerability scanning without authority, intrusion, cracking, unauthorised access, credential stuffing, scraping in breach of law/terms, proxy abuse, crypto mining, cryptojacking, or excessive load.
• Operating insecure, compromised or negligently maintained websites, applications, cloud resources, mailboxes, scripts, plugins, themes, databases, storage buckets, APIs, redirects, web forms or admin panels that are used or likely to be used for abuse, malware, spam, phishing, data leakage, unauthorised access, excessive load or network harm.
• Child sexual abuse material, sexual exploitation, non-consensual intimate imagery, human trafficking, terrorist or violent extremist content, credible threats, incitement to violence, hate content where unlawful, harassment, doxxing or unlawful privacy invasion.
• Infringement, misappropriation or misuse of intellectual property or similar rights, including trademarks, service marks, trade names, passing off, copyright, database rights, moral rights, designs, patents, trade secrets, publicity rights, counterfeit goods, piracy, illegal streaming, illegal downloads, circumvention devices, unlawful licence keys, infringing fonts/images/templates/code, or content/services that enable or promote infringement.
• Uploading, hosting, linking to or allowing user-generated content, files, products, downloads, media, forms, comments, forums, marketplaces or customer areas without reasonable rights-clearance, moderation, reporting, takedown, security and repeat-infringer procedures appropriate to the risk.
• Regulated, restricted, harmful, deceptive or unlawful goods and services where unlawful or unauthorised, including controlled substances, unlawful pharmaceuticals, weapons, gambling, financial scams, investment fraud, pyramid schemes, sanctions evasion, money laundering, terrorist financing, stolen goods, counterfeit goods, counterfeit credentials, fake documents, fraudulent support services, unlawful surveillance tools or illegal circumvention services.
• Defamatory, deceptive, misleading, abusive or harmful content; false advertising; unlawful comparisons; fake reviews; or content that suggests Rocket endorsement where none exists.
• Collection, processing or disclosure of personal data without required notices, consents, lawful basis, contracts, safeguards or data-subject rights. This includes unlawful profiling, scraping, surveillance, employee monitoring, sensitive data processing or children’s data processing.
• Sanctions, export-control or restricted-territory violations, including dealing with sanctioned persons, sanctions evasion, prohibited exports, restricted end uses, military end uses, weapons of mass destruction end uses, terrorism financing, or use involving controlled goods, software, technology, technical assistance or services without required licences or permissions.
• Uploading, hosting, storing, transmitting or processing regulated, restricted or unusually sensitive data unless Rocket Domains has expressly agreed in writing and the customer has implemented all required legal, technical and contractual controls. This includes payment card data, protected health or medical data, clinical records, insurance records, biometric identifiers, genetic data, criminal offence data, children’s data at scale, government identifiers, classified information, export-controlled technical data, trade-controlled data, and information subject to professional secrecy, financial-services regulation or sector-specific breach rules.
• Operating a service or customer website, forum, marketplace, app, booking portal, form, storage area, file-sharing area, comment function or user-to-user feature in a way that is likely to bring Rocket Domains into scope of new or enhanced platform, online safety, digital services, child protection, consumer, marketplace, content moderation or regulated-data obligations without first notifying Rocket Domains and receiving written approval.
• Emergency, medical, life-safety, hazardous, public-warning, critical-infrastructure, legally mandated notice, high-risk or safety-critical uses prohibited by the Master Terms.
• Use that interferes with other users, networks, registries, DNS systems, mail systems, websites, reputation, IP ranges, blocklists, security tools, upstream providers or public safety.
• Domain abuse, DNS abuse, typosquatting, cybersquatting, registry policy evasion, false registrant data, failure to verify, misuse of privacy/proxy/trustee services, unlawful domain parking, fast-flux hosting, malicious nameservers, abusive subdomains or misleading redirects.
• Attempting to bypass storage, bandwidth, CPU, memory, mailbox, sending, user, licence, plan, trial, API, security, anti-abuse, payment, verification or geographic restrictions.
• Reselling, sublicensing, benchmarking, reverse engineering, scraping, copying, modifying, competing with, or using services beyond the licence granted, unless expressly authorised in writing.

3. Enforcement powers

We may investigate suspected violations and may remove content, disable links, block ports, suspend mailboxes, quarantine mail, disable sending, restrict DNS, suspend hosting, lock or cancel domains, disable accounts, require identity verification, require remediation, notify affected providers or authorities, preserve evidence, terminate services, and charge reasonable remediation and investigation costs.

We may act without prior notice where delay could harm users, networks, Rocket Protected Parties, upstream providers, registries, third parties or the public, or where required by law, law enforcement, registry/registrar rule, trusted notifier report, payment network, court order or supplier demand.

We are not liable for good-faith enforcement actions taken to protect the platform, comply with law, respond to reports, avoid liability, preserve evidence, protect security, protect upstream providers, protect registries/registrars, protect recipients or enforce this policy. No refund or service credit is due for suspension, restriction, takedown, deletion, domain lock, termination, non-renewal, data inaccessibility or provider action caused by prohibited use, suspected prohibited use, nonpayment, chargeback, false details, security risk or third-party/upstream enforcement.

4. Abuse reports

Abuse, infringement, phishing, malware, spam, law enforcement, registry and urgent legal reports should be sent to legal@rocket.domains with enough detail for investigation, including URLs, domain names, timestamps, screenshots, headers, logs, evidence of rights, description of harm, contact details and legal authority where applicable.

We may disregard anonymous, incomplete, bad-faith, abusive or unsupported reports, but may act immediately on reports from trusted notifiers, registries, registrars, law enforcement, courts, upstream providers, payment networks or security researchers where warranted.