User Agreement

on the use of ON1X Cloud websites, Personal Account and resources

Websites: https://on1xcloud.com/ · https://on1x.kz/

Legal basis: the Civil Code of the Republic of Kazakhstan, the Law of the Republic of Kazakhstan “On Consumer Rights Protection” (to the extent applicable), the Law of the Republic of Kazakhstan “On Personal Data and Their Protection”, the Digital Code of the Republic of Kazakhstan, and other applicable regulatory legal acts of the Republic of Kazakhstan.
Purpose of the document: to establish rules for access to the website and Personal Account, acceptable-use requirements for VPS services, and procedures for responding to violations.

1. Status and Acceptance of the Agreement

1.1. This Agreement governs the use of the websites on1xcloud.com and on1x.kz, the Personal Account at my.on1x.cloud, and the technical resources of ON1X Cloud.

1.2. Registration, login, placing an Order, or using the resources constitutes acceptance of this Agreement. Commercial terms are governed by the Public Offer; data processing is governed by the Privacy Policy; and refunds are governed by the Refund Policy.

1.3. In the event of a conflict between documents, the following order of precedence applies: an individual agreement/Order, the Public Offer, this Agreement, the Refund Policy, and the Privacy Policy, subject to mandatory provisions of law.

2. Eligibility for Use

2.1. The User confirms that they have legal capacity or authority to represent an organisation. Persons lacking the required legal capacity may use the service only with the participation of a legal representative.

2.2. A User must not create multiple Accounts to circumvent tariffs, checks, restrictions, sanctions, or the 7-day guarantee.

2.3. It is prohibited to provide false information, impersonate another person, use another person’s payment instruments, or use stolen accounts.

3. Account and Access

3.1. The User is responsible for maintaining the confidentiality of passwords, API keys, tokens, SSH keys, and other access credentials. Access may be granted to employees and contractors under the User’s responsibility and only with the minimum permissions necessary.

3.2. The Provider may require verification of an e-mail address, telephone number, identity, payment, and authority. Failure to complete verification may result in refusal of registration, limitation of functionality, or cancellation of a suspicious Order with a refund to the extent permitted.

3.3. Automated access to interfaces is permitted only through a published API and within applicable limits. Scraping, bypassing protection, and load testing the website without consent are prohibited.

4. Acceptable Use of VPS

4.1. Resources may be used for lawful web projects, development, testing, the User’s own lawful needs, data storage, corporate applications, mail services, and other purposes that do not violate the laws of the Republic of Kazakhstan or third-party rights.

4.2. The User must keep systems updated, close unused ports, protect administrative interfaces, securely configure DNS and mail services, perform monitoring, and maintain backups.

4.3. Hosting Tor exit nodes, scanners, cryptocurrency nodes, mining operations, and other high-risk workloads is prohibited.

5. Strictly Prohibited Activities

unauthorised access, exploitation of vulnerabilities, password guessing, credential stuffing, and scanning without permission;
DDoS attacks, participation in botnets, operation of malware, ransomware, spyware, stealers, loaders, or other malicious infrastructure;
phishing, pharming, page spoofing, fraudulent payment forms, or unlawful financial schemes;
spam, unsolicited bulk messaging, open SMTP relays, e-mail bombing, or distribution of contact databases without a lawful basis;
spoofing of source addresses, headers, domains, digital certificates, or other technical identifiers for the purpose of deception;
hosting content whose circulation is prohibited or restricted by law without the required authorisation, including terrorist or extremist materials, child sexual abuse material, illegal drugs, weapons, and gambling;
infringement of copyright and related rights, trademarks, trade secrets, and software rights;
doxing, unlawful disclosure of personal data, leaked databases, or sale of stolen credentials;
circumvention of resource limits, concealment of actual workload, or intentional disruption of a node or neighbouring virtual machines;
use of the service to circumvent court orders, lawful blocking measures, sanctions imposed by competent authorities, or data-centre requirements.

6. Resource and Network Restrictions

6.1. The User must comply with the parameters of the Tariff and the fair-use principles applicable to shared resources. Continuous maximum consumption of CPU, disk operations, or network capacity may be limited where it affects other Clients and such limitation is provided for by the Tariff.

6.2. It is prohibited to bypass virtualisation restrictions or interfere with the hypervisor, service networks, monitoring systems, or management systems.

6.3. An IP address is provided for use with the Service and does not become the User’s property. The Provider does not guarantee that an IP address is absent from third-party reputation lists, but considers substantiated replacement requests in accordance with the Tariff.

7. Content and Intellectual Property

7.1. The User retains all rights to their Content and grants the Provider a limited right to technically store, transmit, copy for backup purposes, and otherwise process such Content solely to provide the Services, ensure security, and comply with the law.

7.2. The User warrants that they possess all necessary rights to the Content. The Provider does not become an editor or publisher of the Content and does not perform prior moderation of it.

7.3. Website materials, panel software code, design, trade designations, and documentation belong to their respective rights holders. Ordinary use of the interface is permitted; copying, decompilation, and creation of derivative products without permission are prohibited, except where expressly allowed by law.

8. Complaints and Notices of Violations

8.1. Reports of network abuse, phishing, malware, spam, or other abusive activity must be sent to [email protected]. A report must include the IP address/domain, date and time with time zone, a description, logs/headers, and the complainant’s contact details.

8.2. A complaint concerning infringement of intellectual property rights must identify the rights holder, the protected subject matter, the infringing material, the basis of the complainant’s authority, and a good-faith declaration that the information provided is accurate.

8.3. The Provider may forward a complaint to the Client while withholding data that is unnecessary for a response or protected by law. Knowingly false or incomplete complaints may be rejected.

8.4. The User must respond within the specified period and take corrective action. Failure to respond may be taken into account when deciding whether to suspend the Service.

9. Response to Violations

9.1. Depending on the severity of a violation, the Provider may issue a warning, require remediation, apply filtering, restrict a port or traffic, isolate or stop a VPS, block an Account, or terminate the Services.

9.2. Immediate action without prior notice is permitted in the event of a real threat, an active attack, phishing, malware, child sexual abuse material, a requirement of a competent authority, a risk of loss of evidence, or a risk of substantial harm.

9.3. Measures must be proportionate and, where possible, limited to the affected Service. The User may submit a reasoned objection to [email protected].

9.4. The Provider may preserve technical logs and a data image necessary for an investigation and compliance with the law, subject to applicable privacy rules.

10. Technical Support

10.1. Support requests are accepted through the Personal Account and at [email protected]. The channel is available around the clock for receipt of messages; however, the specific response time and priority are determined by the incident category and the Tariff.

10.2. Basic support covers infrastructure availability, the panel, the network, and operations available to the Provider. Administration of the Client’s operating system, applications, code, and databases is not included in basic support.

10.3. For diagnostics, the User must provide precise symptoms, time, IP address, logs, and reproduction steps, after removing unnecessary personal data and secrets. Passwords and private keys must not be sent in plain text.

10.4. When granting temporary access, the User must create separate credentials, restrict permissions, and revoke access after the work has been completed.

11. Backups and Data

11.1. Unless a separate backup service is specified in the Order, the User must maintain an independent external backup. VPS snapshots created for technical work are not guaranteed backups.

11.2. When a VPS is deleted, data may be destroyed without the possibility of recovery after the period specified in the Offer expires. The User must export data in advance.

12. Links and External Services

12.1. The website may contain links to third-party services. The Provider does not control their content or rules; the User independently assesses the associated risks.

12.2. Payments are processed by independent payment organisations under their own rules. The Provider receives only the information necessary to confirm payment, unless otherwise stated.

13. Restriction of Access and Termination

13.1. The User may stop using the Services and disable automatic renewal. Deletion of an Account is possible after termination of the Services, settlement of payments, and compliance with mandatory data-retention periods.

13.2. The Provider may restrict an Account in the event of a breach of the Agreement, a security threat, fraud, non-payment, or a lawful requirement. Refunds are governed by the Refund Policy and the laws of the Republic of Kazakhstan.

14. Liability and Warranties

14.1. The User uses administrative access to the VPS at their own risk and is responsible for its configuration. The Provider does not warrant that a specific Tariff is suitable for a particular purpose unless that purpose and its requirements were agreed in writing.

14.2. Nothing in this Agreement excludes the Provider’s mandatory liability to a Consumer or any liability that cannot be limited under the laws of the Republic of Kazakhstan.

15. Amendments and Governing Law

15.1. This Agreement is governed by the laws of the Republic of Kazakhstan. Disputes are resolved in accordance with the Public Offer and applicable law.

15.2. Amendments are published on the websites. Material amendments affecting existing users are communicated in advance where possible; continued use during a new billing period constitutes acceptance, except where separate confirmation is required.

15.3. If any provision is invalid, the remaining provisions remain in force.

Contacts

General matters, contracts, and finance: [email protected]
Technical support, incidents, security, and complaints: [email protected]