Skip to main content

Acceptable Use Policy

Revision of: 13 August 2026

1. General Provisions​

1.1. This Policy defines what use of the Tuna platform services is acceptable and applies to all users regardless of their plan.

1.2. The Policy forms an integral part of the Terms of Service (clause 12.1). Terms are used in the meanings defined by the Terms of Service.

1.3. The Policy covers the actions of the Customer, the members of its Organization and any persons to whom the Customer has granted access to the services or to the results of their operation.

1.4. The Customer is responsible for compliance with this Policy by all such persons as for its own actions.

2. General Requirements​

2.1. Use of the services must be lawful under the law of the Republic of Armenia, the law of the Customer's country and the law of the country where the infrastructure used is located.

2.2. The Customer must hold the rights to the data and content published or processed through the services, as well as to the domain names and TLS certificates used.

2.3. The Customer must not create risks to the operability of the platform, its infrastructure or other users.

3. Prohibited Activity​

3.1. Unlawful and harmful content​

It is prohibited to place, distribute or transmit through the services:

  • materials whose circulation is prohibited by applicable law;
  • child sexual abuse material — such reports are handled with priority and result in immediate blocking;
  • materials inciting violence, terrorism or hatred;
  • content infringing copyright and related rights, trademarks or other third-party rights;
  • personal data distributed without a legal basis.

3.2. Attacks and malware​

It is prohibited to use the services for:

  • distributing malware, including viruses, trojans, ransomware, exploits and loaders;
  • phishing and spoofing of websites, sign-in forms and payment pages of any organization;
  • spoofing, interception and substitution of third-party traffic;
  • operating command and control infrastructure for malware;
  • denial-of-service attacks, port scanning, password brute-forcing and other attacks against any systems;
  • circumventing third-party security controls and filtering systems.

3.3. Spam and unsolicited mailings​

It is prohibited to use the services to send unsolicited messages, including through SMTP tunnels and webhooks, or to host infrastructure serving such mailings.

3.4. Abuse of resources​

It is prohibited to:

  • circumvent plan limits, including by registering multiple accounts, automatically recreating resources and using technical means to bypass billing;
  • use the services for cryptocurrency mining or other computations aimed at extracting value from the Provider's infrastructure resources;
  • use tunnels and gateways as an anonymizing proxy or VPN for routing third-party traffic unrelated to the Customer's own resources;
  • use the services to operate file-sharing networks and distribute traffic-heavy content unrelated to the development and operation of the Customer's own applications;
  • generate load that materially exceeds what is typical for the selected plan and interferes with other users.

3.5. Actions affecting the platform​

It is prohibited to:

  • conduct load testing, scanning or penetration testing against the Provider's infrastructure without prior written consent;
  • exploit discovered vulnerabilities; vulnerabilities should be reported to info@tuna.am;
  • interfere with the operation of the platform, decompile or modify the client software beyond what is expressly permitted by law;
  • present Tuna services as your own unless this is provided by the terms of your plan or a separate agreement.

4. Service-Specific Rules​

4.1. Tunnels and gateways are intended for providing access to the Customer's own resources — applications it develops or operates. Providing access through them to third-party infrastructure without the consent of its owner is prohibited.

4.2. For free accounts, an interstitial warning page is shown for browser requests. Bypassing this page is permitted only via the header described in the documentation and only for the Customer's own requests.

4.3. Addresses of dynamic domains contain the source IP address — an anti-fraud measure described in the Abuse section. Actions aimed at circumventing it are treated as a breach of this Policy.

4.4. Passwords and Secrets are intended for storing the Customer's credentials and configurations. Restrictions on the composition of stored data are set out in Section 14 of the Terms of Service.

4.5. Meetings, boards and reports are not intended for processing special categories of personal data. Recording and publishing meeting materials is permitted only where there is a legal basis and participants have been notified.

4.6. Monitors must target resources owned by the Customer or resources whose owner has consented to being checked. Using monitors to scan third-party systems is prohibited.

5. Abuse Reports​

5.1. Reports are sent to abuse@tuna.am, stating the problematic address, a description of the violation and supporting materials. The submission and handling procedure is described in the Abuse and Complaints section.

5.2. The reporter receives confirmation that the report has been accepted. The review period depends on the nature of the violation; reports involving an immediate security threat are handled with priority.

5.3. Organizations that regularly submit reports can use the API integration.

6. Enforcement​

6.1. In the event of a breach of this Policy, the measures provided for in clause 12.6 of the Terms of Service apply: a demand to remedy the breach, restriction or suspension of a resource, service or account, removal of content placed in breach of the rules, termination of the agreement and blocking of the account.

6.2. The measure is chosen proportionately to the nature of the breach, its consequences and whether it is repeated.

6.3. Immediate blocking without prior notice applies to breaches that pose an immediate threat to security or to third parties: phishing, distribution of malware, child sexual abuse material, attacks on third-party systems and spam.

6.4. In all other cases, the Customer is sent a notice stating the grounds and is given a reasonable period to remedy the breach.

7. Appeals​

7.1. The Customer may submit an objection to info@tuna.am, attaching explanations and supporting materials.

7.2. The objection is reviewed within 10 business days. If the breach is not confirmed, access is restored.

7.3. Where the agreement is terminated on the grounds set out in this Policy, amounts paid are not refundable (clause 12.9 of the Terms of Service).

8. Changes to the Policy​

8.1. The Provider may amend this Policy in accordance with Section 22 of the Terms of Service. The current revision is published at /aup/ with the date indicated.