Acceptable Use Policy
1. General Provisions and Definitions
1.1 The Company
Nexus AI Consulting Limited is a private company limited by shares incorporated in the Hong Kong Special Administrative Region of the People’s Republic of China (the “Company” or “Nexus”). The Company operates within the applicable telecommunications regulatory framework.
1.2 The Services
The Company provides cross-border network access infrastructure as a service (the “Services”), including but not limited to: (a) dedicated residential IP connectivity; (b) edge gateway devices (the “Bridge Equipment”); (c) cloud-based control plane and monitoring infrastructure (the “Control Plane”); and (d) related compliance and customer support services.
1.3 The Customer
“Customer” or “You” means any registered business entity that has completed the Company’s Know Your Customer (“KYC”) process, executed the applicable subscription agreement, and uses any part of the Services.
1.4 Scope of this Policy
This Acceptable Use Policy (this “Policy”) sets forth the rules governing Your use of the Services. This Policy is incorporated by reference into and forms an integral part of the Terms of Service.
1.5 Acceptance
By accessing or using the Services, You agree to be bound by this Policy. If You do not agree, You must immediately cease use of the Services.
1.6 Modifications
The Company may modify this Policy at any time. Material changes will be communicated to Customers with no less than fourteen (14) days’ notice via the Customer’s registered email address. Continued use of the Services after the effective date of any modification constitutes acceptance of the modified Policy.
2. Service Description and Scope
2.1 Service Categories
The Services are designed exclusively for the following purposes:
- Lawful cross-border business communications;
- Public-domain web content access for legitimate business research;
- Cross-border e-commerce platform operations;
- Academic, legal, consulting, and professional cross-border information needs;
- Other lawful business-to-business use cases approved in writing by the Company.
2.2 Out-of-Scope
The Services are not designed for: high-frequency automated scraping, bulk data collection from any single source, mass account registration, or any consumer-facing anonymity service. Use cases requiring such capabilities require separate enterprise contracts with additional compliance review.
3. Customer Eligibility
3.1 Business Customers Only
The Services are offered exclusively to registered business entities and licensed self-employed professionals (collectively, “Eligible Customers”). Individual consumer accounts are not accepted.
3.2 Who We Serve
Eligible Customers include, but are not limited to: cross-border e-commerce operators; export-import trading companies; cross-border legal practitioners; cross-border academic researchers; cross-border consultants; overseas businesses; outbound startup founders; and cross-border newcomers with verified business intent.
3.3 KYC Requirement
All Customers must complete the Company’s KYC process before activation. The KYC process is described in the Company’s KYC Policy, and includes layered entry verification (entity verification, business authenticity, and the signing of the Company’s commitment documents) plus ongoing monitoring for the duration of the service relationship.
4. Prohibited Activities — Network Misuse
You shall not, and shall not assist, encourage, or enable others to:
4.1 Denial-of-Service Attacks
Initiate or participate in any denial-of-service (DoS), distributed denial-of-service (DDoS), or similar attack against any target.
4.2 Malicious Software
Distribute, host, or facilitate the distribution of viruses, worms, trojan horses, ransomware, adware, spyware, rootkits, or any other malicious software.
4.3 Unauthorized Access
Attempt unauthorized access to any computer system, network, account, or data, including penetration testing without prior written authorization from the owner of the target system.
4.4 Network Disruption
Cause damage, service disruption, or material degradation to any third-party network, server, or service.
4.5 Interception of Communications
Intercept, monitor, or alter any communications not addressed to You.
5. Prohibited Activities — Content and Targets
You shall not use the Services to access, host, transmit, or distribute:
5.1 Illegal Content
Content that is illegal under any applicable law in Hong Kong, the Customer’s jurisdiction of incorporation, the Customer’s operational jurisdiction, or the target jurisdiction.
5.2 Child Sexual Abuse Material
Any content depicting or facilitating the sexual abuse, exploitation, or trafficking of minors. This category triggers immediate termination and law-enforcement cooperation without notice.
5.3 Gambling, Drugs, and Sexual Content
Content related to unlicensed gambling, illegal drug trade, or sexually explicit material in jurisdictions where such activities are prohibited.
5.4 Terrorism and Extremism
Content promoting, facilitating, or providing material support to terrorism, violent extremism, or recognized terrorist organizations.
5.5 Spam and Unsolicited Communications
Unsolicited bulk email, SMS, or messaging on any platform; comment spam; review spam; mass automated social-media posting.
5.6 High-Frequency Automated Activity
High-frequency web scraping that violates the target website’s terms of service, robots.txt directives, or rate-limit policies. Limited, courteous, public-data scraping for legitimate business purposes is permitted, subject to Section 9 (Upstream Provider Terms).
5.7 CAPTCHA and Bot-Detection Circumvention
Bypassing CAPTCHA, bot-detection, fingerprinting countermeasures, or other automated access-control mechanisms on websites that have not granted express permission.
5.8 Sneaker Bots and Ticket Scalping
Automated high-speed purchasing of limited-release retail products or event tickets in violation of vendor terms.
5.9 Intellectual Property Infringement
Infringement of copyright, trademark, trade secret, patent, or other intellectual property rights.
6. Prohibited Activities — Resale and Account Sharing
6.1 No Resale
You shall not resell, sublicence, lease, redistribute, or otherwise transfer access to the Services, including the assigned IP addresses, Bridge Equipment, or Control Plane credentials, to any third party.
6.2 No Cross-Account Sharing
You shall not share Your account credentials, assigned IP addresses, or Bridge Equipment with any individual or entity outside of Your authorized internal users.
6.3 One Account — One Identity
Each Customer account must correspond to a single Eligible Customer entity. Operating multiple accounts to circumvent service limits, pricing tiers, or KYC restrictions is prohibited.
6.4 Device Tampering
You shall not modify, reverse-engineer, disassemble, jailbreak, root, or attempt to extract embedded credentials, certificates, or firmware from the Bridge Equipment.
6.5 Title Reservation
The Bridge Equipment is provided under lease only. Title to the Bridge Equipment remains with the Company at all times. You shall not pledge, encumber, or transfer the Bridge Equipment.
7. Legal Compliance
7.1 Multi-Jurisdictional Compliance
You shall comply with all applicable laws and regulations of: (a) Hong Kong SAR; (b) Your jurisdiction of incorporation; (c) Your operational jurisdiction; and (d) any jurisdiction You target through the Services.
7.2 Specific Regulatory Compliance
Without limitation, You shall comply with applicable: anti-money-laundering regulations; export-control and sanctions laws; data-protection laws including the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and equivalent laws in Your jurisdiction; intellectual-property laws; and consumer-protection laws.
7.3 Sanctions and Embargoes
You shall not use the Services to engage in transactions with parties subject to sanctions administered by the United Nations Security Council, the United States Office of Foreign Assets Control (OFAC), the European Union, the United Kingdom HM Treasury, or applicable Hong Kong authorities.
7.4 Tax Compliance
You are solely responsible for Your own tax obligations in all applicable jurisdictions.
8. Permanent Exclusion Categories
The following categories of use are permanently prohibited. Confirmed violation results in immediate account termination, forfeiture of the service deposit, IP address blacklisting, remote disablement of the Bridge Equipment, and reservation of all rights to legal remedy.
8.1 No Cryptocurrency or Blockchain Infrastructure
The Services shall not be used for: decentralized physical infrastructure networks; decentralized finance; cryptocurrency token issuance, sale, distribution, or staking; or any comparable blockchain-infrastructure participation.
8.2 No Consumer Anonymity Resale
The Services shall not be resold, repackaged, white-labelled, or otherwise made available as an anonymity service or general content-access service to individual consumers.
8.3 No Unlawful Cross-Border Data Transfer
The Services shall not be used to transfer any data, content, corpora, or network traffic across borders in violation of any applicable data-protection, data-security, or data-export law of any relevant jurisdiction.
8.4 No Unauthorized Distribution
The Services shall not be resold, sublicensed, or distributed through any unauthorized reseller, master agent, or distribution channel. All access is provided directly by the Company to the contracting Customer under the Company’s authorized structure.
8.5 No Disguised Fund Transfer
The Services and related payment flows shall not be used as a disguise for any cross-border fund transfer that lacks substantive service delivery, or for any arrangement that would contravene applicable anti-money-laundering regulations.
8.6 No Circumvention of Telecommunications Regulation
The Services shall not be packaged, marketed, or distributed in any form that attempts to bypass any applicable telecommunications licensing or regulatory requirement.
8.7 No On-Device AI Model Inference
The Bridge Equipment shall not be used to host or perform local artificial-intelligence model inference, including the loading of large-language-model weights or running of generative-AI workloads on the device.
8.8 No Hardware Purchase Conversion
The Bridge Equipment is provided strictly under lease. Customers shall not convert, purchase, or take title to the Bridge Equipment. Any attempt to do so is void.
9. Upstream Provider Terms of Service
9.1 Pass-Through Compliance
The Services rely on third-party residential-IP infrastructure providers (collectively, “Upstream Providers”), which may change from time to time.
9.2 Incorporation by Reference
The acceptable use policies, terms of service, and fair-use policies of the Upstream Providers are incorporated into this Policy by reference. Where there is any conflict, the more restrictive provision applies.
9.3 Customer Acknowledgment
You acknowledge that violation of an Upstream Provider’s terms (including but not limited to scraping limits, CAPTCHA-circumvention restrictions, and content restrictions) constitutes a violation of this Policy and triggers the enforcement actions described in Sections 10 and 11.
9.4 Provider Information on Request
The identity of the current Upstream Provider and the applicable upstream acceptable use policy will be made available to active Customers upon written request.
10. Monitoring and Enforcement
10.1 Monitoring Categories
The Company monitors Customer use of the Services across three categories: (a) Behaviour Red Lines — spam, high-frequency scraping, prohibited content domains; (b) Compliance Violations — resale, cross-account sharing, upstream-terms breaches; and (c) Legal Cooperation — response to lawful court orders, regulator requests, or law-enforcement investigations.
10.2 What Is Not Monitored
The Company does not monitor: (a) the specific content of Customer business communications; (b) Customer browsing preferences within lawful categories; (c) the specific identity of Customer’s end users or counterparties; or (d) Customer business strategy or operational details unrelated to red-line behaviour.
10.3 Monitoring Tools and Layers
The Company uses a combination of: real-time domain-level access controls; bandwidth analytics; daily aggregate behaviour reports; and customer-specific service-health indicators.
10.4 Behaviour Log Retention
Behaviour logs (metadata only) are retained for twelve (12) months in accordance with applicable regulatory requirements for telecommunications service providers in Hong Kong. The specific content of Customer communications is not stored.
10.5 Legal Cooperation
The Company will cooperate with lawful written requests from courts, regulators, and law-enforcement and judicial authorities of any relevant jurisdiction, where such requests are supported by appropriate legal process and fall within the requesting authority’s lawful jurisdiction over the matter.
11. Graduated Enforcement Response
11.1 First-Tier Response (Moderate Violations)
For violations that constitute moderate breaches or fall within the fair-use boundary (such as occasional rate-limit exceedance):
- Immediate service suspension pending Customer remediation;
- Seven (7) calendar-day remediation window;
- Deposit treatment in accordance with the Customer’s service agreement;
- Notification via email and the Customer support portal.
11.2 Second-Tier Response (Severe Violations)
For violations of any prohibited category in Sections 4-8 or any severe breach of Upstream Provider terms:
- Immediate and permanent service termination;
- IP address permanent blacklisting;
- Forfeiture of the full service deposit;
- Recovery of all outstanding fees through the remainder of the subscription term, with no refund of any previously paid amounts;
- Remote disablement of the Bridge Equipment;
- Cooperation with law-enforcement and judicial authorities of any relevant jurisdiction by providing supporting evidence such as behaviour logs, service-health records, IP blacklist database entries, and behavioural audit trails;
- Reservation of all rights to seek further damages.
11.3 No-Notice Severe Cases
For violations described in Sections 5.2, 5.4, 8.1, 8.2, 8.3, or any case involving active law-enforcement cooperation, the Company may execute a second-tier response without prior notice.
11.4 No Refund During Violation
No refunds will be issued for any period during which the Customer is in violation of this Policy, regardless of whether the violation was the proximate cause of termination.
11.5 Appeal
A Customer subject to a second-tier response may submit a written appeal within fourteen (14) calendar days of termination to support@nexusaistart.com with the subject line “Acceptable Use Appeal”. The Company’s compliance review is final and binding within the Company’s sole discretion, subject to the Customer’s right to judicial review in the courts of Hong Kong.
12. Reporting Violations
If You become aware of any violation of this Policy by any party, please report it to support@nexusaistart.com with the subject line “Acceptable Use Violation Report” and including: (a) the nature of the suspected violation; (b) the affected IP address or service; (c) the date and time of observation; and (d) any supporting evidence.
13. Modifications
This Policy may be updated to reflect changes in applicable law, regulatory requirements, or business practices. Material changes will be communicated to Customers as set forth in Section 1.6. The Customer is responsible for periodically reviewing the most current version available at the Company’s official website.
14. Contact and Governing Law
14.1 Contact
Nexus AI Consulting Limited, Hong Kong Special Administrative Region
- General inquiries: support@nexusaistart.com
- Compliance matters: support@nexusaistart.com
14.2 Governing Law
This Policy is governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region of the People’s Republic of China.
14.3 Dispute Resolution
Any dispute arising out of or in connection with this Policy shall be submitted to the exclusive jurisdiction of the Hong Kong courts. The Customer and the Company may, by mutual written agreement, refer specific disputes to arbitration administered by the Hong Kong International Arbitration Centre (HKIAC) under its then-current rules.
14.4 Severability
If any provision of this Policy is held to be unenforceable, the remaining provisions shall continue in full force and effect.
中文摘要（Chinese Summary — Non-Binding Reference）
本中文摘要仅供参考，与英文条款发生歧义时以英文条款为准。
主体与适用
- 服务提供方：Nexus AI Consulting Limited（香港注册公司，在适用的电信监管框架内运营）
- 服务对象：仅限完成 KYC 流程的注册企业 / 持牌自由职业者
- 服务范围：跨境网络访问基础设施（专属住宅 IP / 边缘网关 / 控制台）
服务的目标客户
跨境电商 / 外贸 / 涉外律师 / 跨境学术研究者 / 跨境咨询师 / 海外企业 / 出海创业者 / 跨境新手（含业务意图核验）
五大类禁止行为（§4-8 概览）
§4 网络滥用：DDoS / 恶意软件 / 未授权访问 / 网络损害 / 通信拦截
§5 内容禁止：违法 / 儿童性剥削 / 涉黄涉赌涉毒 / 恐怖主义 / Spam / 高频抓取违反 robots.txt / 绕过 CAPTCHA / 抢购机器人 / 知识产权侵权
§6 转售与共享：禁止转售 / 跨账号共享 / 一账号一主体 / 不得拆设备 / 物权属公司
§7 多司法管辖合规：HK 法 + 客户注册地法 + 运营地法 + 目标地法 + UN/OFAC/EU/UK/HK 制裁名单
§8 八条永久红线：
- ❌ 加密代币 / 去中心化金融 / 区块链基础设施参与
- ❌ 面向个人消费者的匿名服务转售 / 重新包装
- ❌ 违反任何相关司法辖区数据保护、数据安全或数据出境法律的跨境数据转移
- ❌ 通过任何未授权渠道转售 / 分销本服务
- ❌ 缺乏真实服务交付的资金转移伪装 / 任何违反反洗钱规定的安排
- ❌ 规避适用电信监管要求的产品包装 / 分销
- ❌ 设备本地 AI 模型推理（含 LLM 权重 / 生成式 AI）
- ❌ 硬件买断（仅租赁，物权保留）
处置二级响应（§11）
- 一级（中度）：服务暂停 + 7 天整改 + 按服务协议处理押金 + 邮件通知
- 二级（重度）：立即终止 + IP 永久拉黑 + 押金全扣 + 设备远程失能 + 配合执法 + 保留追偿权
- 无通知二级：儿童性剥削 / 恐怖主义 / 红线 1/2/3 / 配合执法
监控范围（§10）
- 监控：红线行为 / 合规违约 / 法律配合（仅元数据）
- 不监控：通信内容 / 浏览偏好 / 业务策略 / 终端用户身份
- 日志保存：12 个月（电信监管要求）
上游供应商（§9）
本服务依赖第三方住宅 IP 基础设施供应商，其条款通过引用纳入本政策；冲突时以更严格条款为准。当前供应商身份与适用上游政策可应在册客户书面请求提供。
适用法（§14）
- 香港特别行政区法律
- 香港法院专属管辖
- 可协议提交 HKIAC 仲裁
- 客户对终止决定可在 14 日内书面申诉至 support@nexusaistart.com（邮件主题 “Acceptable Use Appeal”）