Acceptable Use Policy

This policy applies to everyone who uses the ARC Proxies network, dashboard or API (“the Services”), whether as a consumer or in the course of a business, and to everyone you allow to use your credentials. It forms part of the Terms of Service. Where it and Section 8 of the Terms differ, Section 8 prevails.

The Services are provided by Ravaiq Ltd., trading as ARC Proxies.

We sell bandwidth through residential, ISP and mobile proxy pools so that software can retrieve web content the way a visitor in a given country or city would. Typical, legitimate uses include:

• collecting publicly accessible data for research, analytics, price and availability monitoring, and search or brand monitoring;
• running AI agents, headless browsers and crawlers that need residential exit IPs and stable sessions;
• verifying how your own sites, ads, listings or content appear from other locations;
• testing your own systems from outside your network.

Automated collection of publicly accessible data is a legitimate use and we do not prohibit it as such. You remain responsible for making sure your specific activity is lawful — including under data protection, computer misuse, contract and copyright law — both where you are and where the systems you connect to are.

You must not use the Services to:

• commit, facilitate or conceal any criminal offence, or do anything that is unlawful in Cyprus, in the European Union, or in the jurisdiction of the systems you connect to;
• commit fraud of any kind — including payment fraud, carding and testing stolen payment instruments, identity theft, click fraud and advertising fraud;
• take over, or attempt to take over, accounts that are not yours — including credential stuffing, password spraying, brute-force attacks and any other form of unauthorised access;
• circumvent access controls on non-public data — anything behind a login, a paywall or an authorisation check that you are not entitled to pass;
• gain or attempt to gain unauthorised access to any system or network, exploit vulnerabilities, or bypass authentication;
• send spam or unsolicited bulk messages, or run phishing, pharming, social-engineering or other deceptive campaigns;
• distribute malware, ransomware or spyware, or operate a botnet or command-and-control infrastructure;
• launch or take part in a denial-of-service or distributed denial-of-service attack, or send traffic whose purpose or effect is to degrade, overload or disrupt a system;
• access, transmit or store child sexual abuse material, content depicting non-consensual sexual activity, or content promoting terrorism or mass violence;
• harass, stalk, threaten, defame or dox any person, or monitor an individual against their will;
• infringe intellectual property rights, trade secrets or privacy rights, or collect personal data in breach of applicable data protection law;
• circumvent economic sanctions or export controls, or route traffic from or to a jurisdiction under comprehensive EU sanctions;
• resell, share, rent or otherwise make the Services or your credentials available to anyone else (Terms, Section 10);
• misrepresent the nature or source of your traffic to us, or evade a suspension or ban.

The list is specific on purpose, but it is not exhaustive: anything that breaks the law that applies to you or to your target is prohibited whether or not it is named here.

We do not inspect the content of your traffic or the destinations you connect to — see Section 4 of the Privacy Policy. When a breach of this policy comes to our attention — through an abuse report, a notice from an authority or an upstream provider, or our own review of an account — the Terms of Service apply as follows:

• Suspension or termination of the account, immediately and without prior notice where the breach is serious, and after an opportunity to remedy where it is not (Terms, Section 11).
• Forfeiture of remaining bandwidth. An account terminated for a breach of Section 8 of the Terms is not entitled to a refund, and unused bandwidth is forfeited (Terms, Section 9).
• Reports to authorities. Activity involving child sexual abuse material, non-consensual sexual content, or terrorist content is reported to the competent authorities without notice to you (Terms, Section 8). We comply with lawful orders and valid notices from courts and competent authorities (Terms, Section 12).
• Records. Where we terminate an account for abuse we keep a minimal record for as long as necessary to defend a legal claim or to prevent the person from returning (Privacy Policy, Section 7).
• Your liability. You are responsible for your traffic and for its consequences, and you indemnify us for claims arising from use in breach of the Terms or the law, to the extent the law allows (Terms, Section 12).

If you believe traffic from our network is being used against you or in breach of this policy, write to contact@arcproxies.io. That address is also our single point of contact for authorities and users under Articles 11 and 12 of the Digital Services Act.

Please include what you can of the following:

• the IP addresses involved and the exact timestamps, with time zone — without these we usually cannot attribute traffic;
• the target hostname or URL, and what the traffic did (log excerpts help);
• who you are and how to reach you for follow-up questions;
• if you are acting for someone else, on whose behalf.

We review every report. Where we can attribute the traffic to an account and the report shows a breach, we act under Section 4. We do not disclose customer identities to reporters; we do respond to valid legal process.

Because exit addresses in a residential network are shared and change hands, an IP address alone is often not enough to identify a customer. Timestamps and the target are what make attribution possible.

We may update this policy — for example, to reflect a change in the law or in the Services. We will publish the amended policy here and update the date at the top. Material changes are notified in the same way as changes to the Terms (Terms, Section 17).