Acceptable Use Policy

Freehold doesn't ask who you are. That only works if the platform stays clean, so this page is the deal: a short, specific list of what you may and may not run, and — just as important — how we act on it, so an honest project is never caught in a sweep aimed at a bad neighbour. If something isn't listed here, use good judgment, or ask first at hello@haven.roy.it.com. We'd rather say yes up front than shut you down later.

What you may deploy

Freehold is designed for self-hosted software. Personal, commercial, and open-source use is all welcome. Common examples:

• Personal productivity — Nextcloud, Obsidian, Paperless, Vaultwarden
• Media servers — Jellyfin, Plex, Immich, PhotoPrism
• Developer tools — Gitea, GitLab, n8n, Airflow, code-server
• Databases and data tools — PostgreSQL, NocoDB, Metabase, Grafana
• Communication — Mattermost, Matrix/Element, Rocket.Chat
• Game servers — Minecraft, Valheim, Terraria, and other personal or community game servers for you and your friends
• AI and ML tools — Ollama, Open WebUI, AnythingLLM, LocalAI
• Small-to-medium web services — personal websites, SaaS side projects, internal tools

What you may not deploy

The following are prohibited on Freehold:

Illegal content and activity

• Child sexual abuse material (CSAM) or any sexual content involving minors
• Content that violates copyright, trademark, or other intellectual property rights at scale
• Services that facilitate illegal gambling, fraud, or money laundering
• Sale or distribution of controlled substances

Abuse and malicious activity

• Spam: unsolicited bulk email, SMS, or messaging campaigns
• Distributed denial-of-service (DDoS) attacks or network amplification
• Port scanning, credential stuffing, or other attacks against third parties
• Phishing sites or credential harvesting pages
• Malware hosting, botnet command-and-control, or exploit kits
• Cryptocurrency mining beyond personal/experimental use

Platform abuse

• Circumventing resource limits, rate limits, or billing controls
• Reselling Freehold compute resources to third parties without our written consent
• Probing or attacking Freehold's own infrastructure

How we fight abuse without asking who you are

Most platforms use identity checks — legal name, ID scan, tax number — as their anti-abuse tool. Freehold doesn't, and won't. Instead we rely on:

• A working card before anything runs. Deploying an app requires a valid card on file, charged for real usage. An abuser has to fund their own abuse, and a card that fails gets the apps suspended fast.
• Rate limits on new accounts — per network and per device — so one actor can't spin up hundreds of throwaway apps.
• Automated anomaly detection. Sustained outbound floods, credential-stuffing patterns, and crypto-mining signatures are throttled and then suspended automatically. Outbound email port 25 is blocked by default.
• Fast human response to reports, on the timeline below.

None of this involves reading the contents of your app or learning your identity. It's designed to stop the cheap, high-volume abuse that would otherwise force everyone else to prove who they are.

Self-hosted content

Freehold does not moderate the content of your private applications. You are responsible for what you deploy and for ensuring it complies with applicable laws in your jurisdiction. Freehold is not a CDN or public content host — it is a platform for running your own software.

Public-facing services (websites, APIs, media servers with unauthenticated access) must still comply with this policy. If your service is reported for violating it, we will investigate and may suspend it.

Reporting a violation

If you believe a Freehold-hosted service is violating this policy, email hello@haven.roy.it.com with details. We take reports seriously and will respond within 48 hours.

Enforcement — and what you can count on

When we act on a violation, we act narrowly:

• We suspend the offending app, not your whole account, whenever the problem is isolated to one app. Your other apps keep running.
• We contact you first and give you a chance to fix it — except for a short list of severe cases (CSAM, an active attack in progress, a court order) where we act immediately and explain after.
• You can appeal. Reply to the notice, or email hello@haven.roy.it.com. A person reviews it.
• Your data stays exportable for 30 days after a suspension or account closure, unless the law requires otherwise. A suspension is not a deletion.
• We don't trawl your apps. We look at a specific app when we get a specific report or an automated signal fires — not otherwise.

Repeated or deliberate violations, and the severe cases above, can still result in full account termination. For those we generally do not refund the current balance.

Questions

Not sure if your use case is allowed? Email us before you build: hello@haven.roy.it.com. We'd rather say yes than turn you away after the fact.