Fair Use Policy

Cryptocurrency Mining:

• Running Bitcoin, Ethereum, or other cryptocurrency mining nodes is prohibited
• Running validators or staking pools is prohibited
• Using resources for hashing or mining is prohibited

Cyber Attacks:

• Carrying out DDoS (Distributed Denial of Service) attacks is prohibited
• Stress testing without written permission is prohibited
• Running botnets or command-and-control servers is prohibited
• Port scanning or vulnerability scanning is prohibited

Malware Distribution:

• Hosting or distributing viruses, trojans, or worms is prohibited
• Running ransomware or crypters is prohibited
• Hosting phishing kits or credential harvesters is prohibited

Illegal Content:

• Hosting pornographic or exploitative content is prohibited
• Distributing material that infringes copyright is prohibited
• Running marketplaces for illegal goods is prohibited
• Hosting content that violates the law in Indonesia is prohibited

Infrastructure Abuse:

• Using the Services as a public proxy or VPN is prohibited
• Cryptojacking (stealing visitors' resources) is prohibited
• Running mail servers for spam is prohibited
• Credential stuffing or brute force attacks are prohibited

CPU & Memory:

• CPU usage must match the selected plan
• Sustained usage above 80% for more than 24 hours will be reviewed
• Burst usage is allowed, but sustained usage must be reasonable

Storage:

• Use storage within your plan's quota
• Avoid storing large-scale media files (video, audio) in primary storage
• Use object storage integrations (S3, R2) for large files

Bandwidth:

• There is no strict limit, but excessive usage will be reviewed
• Large-scale video/audio streaming should use an external CDN
• Data transfer between regions may incur additional charges

Build Minutes:

• Optimize your CI/CD pipeline to reduce build time
• Avoid unnecessary build loops
• Use caching for dependencies that don't change

Authentication:

• Use a strong and unique password
• Enable two-factor authentication (2FA) where available
• Do not share account credentials with others

API Access:

• Use a separate API key for each service
• Rotate API keys regularly
• Do not commit API keys to public repositories

Reporting:

• Report suspicious activity to security@helipod.io
• Report vulnerabilities through responsible disclosure
• Do not expose vulnerabilities publicly before they are fixed

Violation Levels:

• Warning: For unintentional first violations
• Temporary Suspension: For repeated or moderate violations
• Account Termination: For serious violations or illegal activity

Review Process:

• All reports will be reviewed within 24 hours
• Users will be given the opportunity to explain
• Decisions will be communicated transparently

Appeals:

• Users may file an appeal within 7 days
• Appeals will be reviewed by a different team from the one that made the original decision
• Appeal decisions are final