Legal
Acceptable Use Policy
Last updated 2026-11-04
dply runs many customers’ apps on shared infrastructure. This policy sets out what you may not do with it. It is part of the Terms of Service and applies to everyone who uses dply, and to every app and resource hosted on it.
1. Prohibited content
Do not host, store, send or link to:
- Anything illegal where you, your users or dply are, or that promotes illegal activity.
- Child sexual abuse material, or any content that sexualizes minors. We report it to the National Center for Missing & Exploited Children (NCMEC) and to law enforcement.
- Malware, viruses, ransomware, spyware, or other harmful code, including command-and-control servers.
- Phishing pages, or sites that impersonate another person, brand or service to deceive people.
- Content that infringes someone else’s copyright, trademark, privacy or other rights.
- Harassment, threats, incitement to violence, or content that promotes terrorism.
- Personal data about others that you have no right to publish, such as leaked credentials or doxxing.
2. Prohibited activity
Do not use dply to:
- Send spam or unsolicited bulk messages, or host sites advertised that way.
- Mine cryptocurrency.
- Attack other systems: denial-of-service, flooding, or generating abusive load on dply or anyone else.
- Scan, probe or test the security of systems you do not own or have permission to test.
- Get around plan limits, trial caps, fair-use limits, billing, or the isolation between customers, including by opening multiple accounts or trials.
- Access, or try to access, another customer’s data, apps or resources.
- Resell or sublicense dply as a hosting service without our written permission. Building and hosting apps for your own clients is fine.
- Run proxies, VPNs or open relays that let others hide abusive traffic.
- Break the policies of the infrastructure dply runs on, including Cloudflare’s terms and acceptable use policies.
3. Security testing
You may test the security of your own apps and your own dply accounts. When you do, don’t access, change or delete data that isn’t yours, don’t degrade the service for others (no denial-of-service or load testing against shared infrastructure), and stop and tell us if you reach someone else’s data. Report vulnerabilities in dply itself under our responsible disclosure policy.
4. Public files and share links
Files you serve publicly, such as a bucket served on a public path, and anything reachable through a share link, access key or token you create, are your responsibility under this policy, the same as content on your site. Do not use them to distribute content this policy prohibits. Revoke links and keys you no longer need.
5. Enforcement
If we find or are told about a violation, we may, depending on how serious it is:
- remove or disable the content, site, app or resource;
- suspend the organization or account;
- terminate the account, for serious or repeated violations;
- report illegal activity to the authorities.
We tell the owner what was reported and what we did, unless doing so would put someone at risk, hamper an investigation, or break the law. If you think we made a mistake, reply to the email you received.
6. Copyright (DMCA)
We respond to copyright notices under the US Digital Millennium Copyright Act, 17 U.S.C. §512.
Sending a notice
Under §512(c)(3), your notice must include:
- Your physical or electronic signature, as the copyright owner or a person authorized to act for the owner.
- Identification of the copyrighted work you say is infringed (or a representative list, if several works are covered by one notice).
- Identification of the infringing material and enough information for us to find it, such as the full URL.
- Information reasonably sufficient for us to contact you, such as your address, telephone number and email address.
- A statement that you have a good faith belief that the use is not authorized by the copyright owner, its agent or the law.
- A statement that the information in the notice is accurate and, under penalty of perjury, that you are the owner or authorized to act for the owner.
Sending a counter-notice
If your content was removed and you believe that was a mistake or misidentification, send a counter-notice. Under §512(g)(3), it must include:
- Your physical or electronic signature.
- Identification of the material that was removed and where it appeared before removal.
- A statement under penalty of perjury that you have a good faith belief the material was removed or disabled as a result of mistake or misidentification.
- Your name, address and telephone number, and a statement that you consent to the jurisdiction of the federal district court for your address (or, if you are outside the US, any judicial district in which Shafer LLC may be found), and that you will accept service of process from the person who sent the original notice or their agent.
We forward the counter-notice to the person who sent the notice. Unless they tell us within 10 to 14 business days that they have filed a court action to restrain the activity, we may restore the material.
Designated agent
Copyright Agent, Shafer LLC
Shafer LLC
dmca@dply.io
Sending a false notice or counter-notice can make you liable for damages under §512(f).
Repeat infringers
We terminate, in appropriate circumstances, the accounts and organizations of customers who are the subject of repeated valid infringement notices.
7. Reporting abuse
To report a site on dply for phishing, malware, spam or other abuse, email hello@dply.io with “Abuse” in the subject line. Report abuse explains what to include and what happens next.
Questions: hello@dply.io