1. Purpose and scope
This policy applies to VPN access provided by DinoTech, LLC and to activity carried out using issued credentials or connection profiles. It is intended to protect users, infrastructure providers and third parties from abuse.
You may use the service for lawful personal or business connectivity within your agreed plan. You must comply with applicable law, your service agreement and the rights of others. Access to a VPN does not provide permission to access another person’s account, system or data.
2. Unauthorized access and attacks
You must not use the service for unauthorized entry into, interference with, or exploitation of computers, networks, accounts or applications. Prohibited activities include:
- Credential theft, credential stuffing, brute-force login attempts and use of stolen credentials.
- Exploitation of vulnerabilities without the system owner’s permission, or attempts to escalate access beyond an authorized scope.
- Denial-of-service attacks, traffic amplification, botnet operation, deliberate network disruption or evasion of controls on systems you are not authorized to test.
- Scanning or probing aimed at unauthorized access or causing disruption.
3. Malware, fraud and abusive communications
Do not distribute, deploy, control or knowingly support malware, ransomware, malicious command-and-control systems, credential harvesting or phishing infrastructure.
Spam, unsolicited bulk communications, impersonation, financial fraud, deceptive collection of information, and attempts to trick people into disclosing money or credentials are prohibited. Do not use access to evade reasonable anti-abuse measures of third-party services.
4. Illegal content and harm to people
The service must not be used to create, obtain, distribute or facilitate illegal content or conduct, including child sexual abuse material or other exploitation of children, trafficking, credible threats of violence, or unlawful harassment and stalking.
Do not publish private information in violation of applicable law, facilitate unlawful surveillance, or participate in coercion, extortion or other activities that infringe the legal rights of another person.
5. Intellectual property and lawful transfers
You are responsible for having the necessary rights or permission for material you access, share or distribute. Copyright, trademark and other intellectual property infringement is prohibited.
A transfer protocol, including peer-to-peer technology, is not permission to distribute protected content without authorization. Any location-specific restrictions or limitations in your service agreement also apply. We do not guarantee that a particular transfer service or protocol is available on every endpoint.
6. Credentials, resale and resource use
Do not sell, lease, publish or share access outside your agreed plan. Household and team access is limited to the arrangements expressly included in the relevant service. Keep keys and subscription links confidential.
Do not turn access into an unrestricted public proxy, operate a resale service without agreement, intentionally evade device or traffic limits, or run automation that materially degrades the network for others. “Unmetered” access is subject to these rules and does not authorize unlimited harmful load.
7. Authorized security research
Security testing is permitted only within the authorization of the system owner and the scope of your service agreement. You should be able to explain the authorization, targets and intended activity if a credible abuse concern arises. Research must not compromise unrelated systems or expose third-party data.
If you believe you have found a security issue affecting DinoTech, contact our team privately with a concise description and safe reproduction steps. Do not access other users’ accounts, retrieve unnecessary personal information, disrupt service or publish access credentials.
8. Submitting an abuse report
Send reports to our team with “Network abuse” in the subject. A useful report includes:
- Your name or organization and a reply address.
- The source IP address and, where relevant, destination IP address and port.
- The date, time and time zone, preferably UTC, with the time range involved.
- A description of the activity, why it appears abusive, and concise supporting evidence such as log excerpts.
- Any related case reference or urgent operational impact.
Keep evidence relevant and proportionate. Do not email passwords, full payment details, unrelated personal records or illegal material. Describe sensitive material and request an appropriate reporting route instead.
9. Assessment and enforcement
We may review a report, seek clarification, compare the available information with service records that actually exist, and assess the severity and reliability of the evidence. A shared VPN address does not by itself identify a person, and a report alone is not proof of a breach.
Depending on the circumstances, action may include a warning, a request to correct a configuration, a credential reset, restrictions on affected access, suspension or termination. Urgent protective measures may be taken before notice. Where practical and legally permitted, we will communicate the reason and a way to contact us.
This policy does not promise that particular traffic or connection records are collected or retained, or that every incident can be attributed to an individual user.
10. Review, legal obligations and updates
If you believe an enforcement action was mistaken, contact us with the affected service or case reference and relevant facts. Do not attempt to bypass a suspension while it is under review. We will consider additional information without requiring disclosure of passwords or unrelated personal data.
We comply with valid legal obligations as required by applicable law. Legal requests should identify the authority, legal basis, requested information, relevant addresses and time period. We may request clarification or appropriate process before disclosure.
Updates to this policy will be published here. Changes affecting an existing service agreement are handled in accordance with that agreement and applicable law. Company and postal contact details are available on the company page.