Policies published before 7 September 2026

IT Nut Hosting — Legal Policy Suite
Nut Digital LLC • Bogura, Bangladesh
BASIS Member ID: 23-08-028
This section contains all legal policies and agreements that govern the relationship between IT Nut Hosting (a trading name of Nut Digital LLC) and its customers. These policies are designed to protect both parties, ensure regulatory compliance with Bangladesh law and international standards (GDPR, ICANN), and provide clarity on service terms.

---

Policy Documents

All policies work together as an integrated legal framework. The Terms of Service is the master agreement; all other policies are incorporated into it by reference.
1. Terms of Service
2. Privacy Policy
3. Acceptable Use Policy (AUP)
4. Service Level Agreement (SLA)
5. Refund & Cancellation Policy
6. Abuse Handling Policy
7. Domain Registration Agreement
8. Data Processing Addendum (DPA)
9. Policy Version History

---

Key Legal Parameters

---

Bangladesh Regulatory Framework

These policies are designed to comply with:

• Cyber Security Act 2023 (replacing Digital Security Act 2018)
• Consumer Rights Protection Act 2009 (CRPA)
• Information and Communication Technology Act 2006 (amended)
• Contract Act 1872
• Sale of Goods Act 1930
• Digital Commerce Operational Guidelines 2021
• Foreign Exchange Regulation Act 1947 (for cryptocurrency and cross-border provisions)
• Right to Information Act 2009
• Draft Personal Data Protection Act (future-ready)

International Standards Observed

• GDPR (EU Regulation 2016/679) — for EEA customers
• ICANN 2013 Registrar Accreditation Agreement & Registrant Rights/Responsibilities — for domain services
• DMCA (17 U.S.C. § 512) — for copyright complaints on US-located servers

---

Legal & Compliance Contact

Postal Address:
Nut Digital LLC (trading as IT Nut Hosting)
Bogura, Rajshahi Division
Bangladesh

Version Control

All policies are versioned. Material changes to any policy trigger a 30-day advance notice by email to all active customers and a banner on the customer dashboard. A full change log is maintained in the Policy Change Log database below.

Version 2.1.1 — 26 April 2026 (VPS refund correction)

• Refund § 1.1: VPS (self-managed and managed) window 30 days → 7 days (corrects v2.0 drafting error; matches actual operational practice)

Version 2.1 — 26 April 2026 (Reseller Hosting relaunch)

• AUP § 2.8 (new): Per-cPanel resource limits + feature restrictions for 4 Reseller tiers
• AUP § 4.2 (rewritten): Detailed Reseller responsibilities (7 sub-clauses)
• SLA § 2.4 (new): Reseller support scope split (IT Nut handles infrastructure, Reseller handles end-customer relationship)
• Refund § 1.1: Reseller window 30 days → 7 days
• Refund § 4.6 (new): Reseller-specific refund rules (migration deduction, non-refundable add-ons, end-user disputes)

Version 2.0.1 — 25 April 2026 (Operational corrections + restoration option)

• ToS § 5.1, 5.2, 5.6 corrections (currency, Brac Bank, tax inclusivity)
• ToS § 5.4, 5.7, 10.5 corrections (15-day reminders, Day 0 suspension, Day 7 termination)
• ToS § 10.6 (new): Paid post-deletion restoration (BDT 6,000, eligible services only)
• ToS § 10.7 (new): Customer backup responsibility, RAID vs backup
• AUP § 3 (rewritten): Per-service backup eligibility
• Refund § 4.5 (new): Restoration cross-reference

Version 2.0 — 20 April 2026 (Initial comprehensive relaunch)

• Initial comprehensive legal policy suite, replacing prior informal v1.x policies (2021–2025)
• Replaces previous TOS, Abuse Policy, Fair Usage Policy, and Refund Policy
• Introduces: Limitation of Liability, Indemnification, Force Majeure, Dispute Resolution, CSA 2023 Compliance Framework, Standalone Privacy Policy, Dedicated SLA, DPA, Domain Registration Agreement

---

Important Notice
These policies are in effect from 20 April 2026. Existing customers (who purchased services before this date) will be governed by the previous policies for 30 days after publication date, after which the new policies automatically apply. Continued use of our services after the effective date constitutes acceptance of these terms.
Questions? If you’re unsure which policy applies to your situation, contact legal@itnuthosting.com and we’ll point you to the right document.

Document: Master Terms of Service (apex agreement)
Version: 2.0 | Effective Date: 20 April 2026 | Last Updated: 25 April 2026
Applies To: All customers, all services
This is the apex agreement between you and IT Nut Hosting. All other policies in this section (Privacy, AUP, SLA, Refund, Abuse, Domain, DPA) are incorporated into this document by reference and form part of your contract with us.

About This Document

These Terms of Service ("Terms" or "Agreement") form a legally binding contract between you ("Customer", "you") and IT Nut Hosting, a trading name of Nut Digital LLC, a company incorporated in Bangladesh with its principal place of business in Bogura ("IT Nut", "we", "us", "our").
By creating an Account, purchasing a Service, or using our Services, you agree to be bound by these Terms and all incorporated policies.

In these Terms, the following words have the following meanings:

2. Acceptance and Scope

2.1 Binding Agreement

By (a) clicking "I agree" or a similar button during signup, (b) purchasing any Service, (c) accessing or using any Service, or (d) continuing to use the Services after any revision to these Terms, you agree to be bound by this Agreement.
If you are accepting this Agreement on behalf of a company, partnership, organisation, or other legal entity, you represent that you have the authority to bind that entity. In that case, "you" and "Customer" refer to that entity.

2.2 Minimum Age and Capacity

You must be at least 18 years old and legally competent to enter into a binding contract under the Bangladesh Contract Act, 1872 (or the applicable law of your country of residence, whichever imposes a higher age threshold).
If you are under 18 or otherwise lack legal capacity, your parent or legal guardian must create and maintain the Account in their own name, assuming full legal and financial responsibility. Registration using another person’s identity documents is a serious violation of this Agreement and may constitute identity fraud.

2.3 Scope of the Agreement

This Agreement, together with all incorporated policies and any Service-Specific Terms, constitutes the entire agreement between you and IT Nut regarding the Services. It supersedes all prior agreements, proposals, representations, and understandings, whether oral or written.

2.4 Amendments and Notice

We may revise this Agreement from time to time. When we do:

• Material changes (changes affecting your rights, obligations, or fees) will be notified to you by email at least thirty (30) days before they take effect. You may cancel the affected Service without penalty during this notice period if you do not accept the changes.
• Non-material changes (clarifications, typo fixes, formatting, additional examples) take effect immediately upon posting.
• A full change log is maintained in the Policy Version History sub-page.
  Continued use of the Services after the effective date of a revised Agreement constitutes your acceptance of the revised Agreement.

3. Account Registration and Security

3.1 Accurate Information

You must provide accurate, current, and complete information when registering an Account and maintain that information throughout the term of this Agreement. Providing false information (including fake names, fake addresses, disposable email addresses, or stolen payment methods) is grounds for immediate Account suspension or termination without refund.

3.2 Account Security — Your Responsibility

You are solely responsible for:

1. Maintaining the confidentiality of your Account credentials (username, password, API keys, 2FA codes, SSH keys)
2. All activities that occur under your Account, whether or not authorised by you
3. Using strong, unique passwords and enabling two-factor authentication (2FA) where available
4. Notifying us immediately (within 24 hours of discovery) of any unauthorised access or suspected compromise by emailing abuse@itnuthosting.com or opening a priority support ticket
   We strongly recommend 2FA for all Accounts and will require it for enterprise-tier Accounts from 1 July 2026.

3.3 Account Security — Our Responsibility

We commit to:

1. Maintaining industry-standard physical, technical, and administrative safeguards for our infrastructure
2. Encrypting stored passwords using modern hashing algorithms (we never store plaintext passwords)
3. Using TLS encryption for all administrative connections to our billing and control panels
4. Conducting periodic security audits of our systems
5. Notifying affected Customers within 72 hours of confirming a data breach that materially affects their data, as further described in our Privacy Policy

3.4 Multiple Accounts

You may not create multiple Accounts to circumvent limits, abuse promotional offers, evade suspensions, or for any other improper purpose. We may, at our discretion, merge or suspend duplicate Accounts.

4. Services

4.1 Description of Services

IT Nut provides web hosting and related infrastructure services, including but not limited to: shared hosting, BDIX hosting, VPS, dedicated servers, reseller hosting, RDP service, domain registration, business email, Google Workspace resale, SSL certificates, proxy/BD IP services, n8n hosting, and professional services (website maintenance, Laravel development).
Specific features, specifications, and limits of each Service are described on the relevant product page on itnuthosting.com and in any Service-Specific Terms.

4.2 Service Delivery

We aim to provision Services within the following timelines after successful payment and completion of any required verification:

These are target timelines, not guarantees. Delays caused by Customer (e.g., pending verification, incomplete information, payment issues) do not count against these targets.

4.3 Evolution of Services

We may, at our reasonable discretion and with appropriate notice: add new features or Services; modify existing features for reasons of security, legal compliance, hardware compatibility, or service improvement; discontinue Services that are no longer commercially viable, with at least 90 days’ advance written notice and the option to migrate to an equivalent Service or receive a pro-rata refund.

5. Fees, Payment, and Renewal

5.1 Fees

Fees for all Services are listed in Bangladeshi Taka (BDT ) and/or US Dollars (USD) on our website and in your invoice. Service Fees are inclusive of any applicable Bangladesh VAT, supplementary duty, and government fees that are payable by IT Nut as the service provider. Customer is responsible for any taxes, duties, or levies imposed in the Customer’s own country of residence (such as withholding tax, import VAT, GST, or income tax on imported services), as further described in Section 5.6.

5.2 Payment Methods

We accept payments via: bKash, Nagad, Rocket, bank transfer (our primary banking partner is Brac Bank; other local banks are also supported), SSL Commerz, Stripe, PayPal, Payoneer, and other methods listed on our website. Acceptable methods may change from time to time.

5.3 Billing Cycle and Advance Payment

All Services are charged in advance for the billing cycle selected (monthly, quarterly, semi-annual, annual, biennial, or triennial). Services are not activated or renewed until payment is received and confirmed.

5.4 Auto-Renewal and Renewal Reminders

Renewal reminders. We send renewal invoices and reminders by email starting 15 days before the renewal date and continuing through to the due date.
Automatic charging. Bangladesh payment methods (bKash, Nagad, Rocket, local bank transfer, SSL Commerz) do not support automatic recurring charging; you must complete the renewal payment manually before the due date. Stripe is the only supported payment method for automatic recurring charging, and only where you have explicitly opted in. For Stripe auto-renewal, we attempt to charge the saved card starting 15 days before renewal; if the first attempt fails, we retry and notify you.
You may disable auto-renewal (where enabled on Stripe) at any time from your billing dashboard before the renewal attempt.

5.5 Price Changes

Fees for the current billing cycle are fixed for that cycle. For renewal billing cycles:

1. Hosting, VPS, dedicated servers, email, and proxy Services: We will give you at least 30 days’ advance email notice before any price increase takes effect at renewal. If the renewal price increases by more than 15%, you may cancel that Service before the renewal date without penalty and receive a pro-rata refund of any unused portion of the current cycle.
2. Domain registration, renewal, and transfer: Pricing is pass-through from upstream registries. Because registries (such as ICANN, .com, .bd, and country-code TLDs) may change pricing at any time, domain Fees may change without advance notice. The prevailing domain price at the time of renewal applies.

5.6 Taxes and Duties

IT Nut Service Fees are inclusive of Bangladesh VAT, supplementary duty, and any other taxes payable by IT Nut on the supply of the Services. No additional Bangladesh tax will be added to the listed price.
Customer remains solely responsible for any taxes, duties, or levies imposed by the Customer’s own country of residence on the importation, receipt, or use of the Services — including (without limitation) withholding tax, import VAT, GST, sales tax, and income tax on imported digital services. Where Customer is required by its local law to withhold tax from a payment, Customer must gross up the payment so that IT Nut receives the full Fee net of such withholding.
If we are required by Bangladesh law to collect a new tax (e.g., a future digital-services tax) that did not exist at the time of pricing, we will give you advance notice per Section 5.5 and that tax will then be itemised on future invoices.

5.7 Non-Payment

If payment is not received by the due date:

Suspended Services may be restored upon payment of overdue amounts plus a reactivation fee of BDT 200 (where applicable). Once an account is terminated on Day 7, all data is permanently deleted — see Section 10.6 below for the limited paid restoration option that may be available within a 30-day window after deletion.

5.8 Chargebacks and Payment Disputes

Before initiating any chargeback, dispute, or payment reversal with your bank, card issuer, bKash, or any payment processor, you agree to first contact our billing team in good faith at billing@itnuthosting.com to attempt resolution.
If a chargeback is filed without first contacting us, or is filed in bad faith (for example, after you have materially used the Service):

1. The affected Service will be immediately suspended
2. Your Account will be flagged and may be terminated
3. We may recover from you the disputed amount, any chargeback fees charged to us by the payment processor, reasonable investigation costs, and any additional fees
4. We may report the chargeback to fraud prevention networks and future service applications may be denied
   This clause does not limit any legitimate consumer rights you may have under Bangladesh Consumer Rights Protection Act, 2009, or equivalent law in your country of residence.

6. Customer Content and Responsibility

6.1 Ownership of Customer Content

You retain ownership of all Content you upload, store, or transmit using the Services. This Agreement does not transfer any intellectual property rights in your Content to IT Nut.

6.2 Limited License to IT Nut

You grant IT Nut a worldwide, non-exclusive, royalty-free license to store, copy, cache, transmit, display, and back up your Content solely to the extent necessary to provide the Services to you. This license terminates when you delete the Content or terminate the Service, subject to our data retention policy in Section 10.5.

6.3 Customer Responsibility for Content

You are solely and fully responsible for all Content you upload, store, transmit, or cause to be transmitted through the Services. You represent and warrant that:

1. You own or have all necessary rights, licenses, and permissions to use and distribute the Content
2. The Content does not infringe any third-party intellectual property right, privacy right, or any other right
3. The Content does not violate any applicable law, regulation, or court order
4. The Content does not violate our Acceptable Use Policy (AUP)

6.4 Prohibited Content

Detailed prohibitions are set out in our Acceptable Use Policy (sibling page). By way of summary, you may not use our Services to store, host, or transmit Content that:

• Is illegal under the law of Bangladesh or the law of any country from which the Content is accessed
• Infringes intellectual property rights (copyright, trademark, patent, trade secret)
• Is defamatory, libellous, or slanderous
• Constitutes child sexual abuse material (CSAM) — zero tolerance, immediate termination and mandatory reporting to authorities
• Promotes terrorism, violent extremism, or serious violence
• Facilitates fraud, phishing, identity theft, or any financial crime
• Contains malware, viruses, ransomware, or hostile code
• Is cryptocurrency-related (mining, exchange, wallet services) — prohibited in all jurisdictions per Bangladesh Bank regulations and our risk policy
• Violates any other prohibition in our AUP

6.5 DMCA and Copyright Notices

We respect intellectual property rights and comply with the notice-and-takedown procedure of the US Digital Millennium Copyright Act (17 U.S.C. § 512) as a matter of good practice, while operating under Bangladesh law.
To submit a copyright infringement notice, send a written notice to dmca@itnuthosting.com containing:

1. Identification of the copyrighted work claimed to be infringed
2. Identification of the allegedly infringing material (URL or specific location)
3. Your contact information (name, address, phone, email)
4. A statement that you have a good-faith belief the use is not authorised
5. A statement, under penalty of perjury, that the information is accurate and that you are authorised to act on behalf of the copyright owner
6. Your physical or electronic signature
   We will review valid notices within 72 working hours, act on legitimate claims, and forward the notice to the affected Customer. Repeat infringers will have their Accounts terminated. Counter-notices may be submitted following the same format and content requirements.

7. Intellectual Property

7.1 IT Nut’s Intellectual Property

All rights in and to the IT Nut brand, logo, website, control panel customisations, documentation, knowledge base content, and any proprietary software developed by us are owned by IT Nut or our licensors. Nothing in this Agreement transfers any such rights to Customer.

7.2 Third-Party Software

Services include third-party software licensed to IT Nut (such as cPanel/WHM, LiteSpeed, CloudLinux, Imunify360, Softaculous, and open-source software). Use of these components is subject to their respective licenses, which take precedence over this Agreement for the relevant software.

7.3 Feedback

If you provide suggestions, feedback, or ideas about our Services, you grant us a perpetual, worldwide, royalty-free license to use such feedback for any purpose, including to improve our Services, without obligation to compensate you.

8. Data Protection, Privacy, and Government Requests

8.1 Privacy Policy

Our collection, use, and protection of personal data is governed by our Privacy Policy (sibling page), which is incorporated into this Agreement.

8.2 Data Processing Addendum (B2B)

Business Customers who use our Services to process personal data of their own end users may request a Data Processing Addendum (DPA) (sibling page) to comply with GDPR, the forthcoming Bangladesh Personal Data Protection Act, or similar law.

8.3 Data Location and International Transfer

Customer data is stored in the following primary locations, depending on the Service:

By using a Service, you consent to the storage and processing of your data in the locations above. Where personal data is transferred out of the EU/EEA or UK, we rely on the European Commission’s Standard Contractual Clauses (SCCs) as the transfer mechanism, available on request.

8.4 Government and Legal Requests

IT Nut is a company incorporated and operating in Bangladesh. We operate in compliance with the laws of Bangladesh, including:

• The Cyber Security Act, 2023 (CSA 2023), Sections 8 (removal/blocking orders), 40–44 (investigation powers), and 50 (service-provider obligations)
• The Information and Communication Technology Act, 2006 (as amended)
• Lawful court orders, subpoenas, warrants, and governmental directives issued by authorities with valid jurisdiction over us
  Upon receipt of a lawful request, we will:

1. Verify that the request is lawful, specific, and issued by an authority with jurisdiction over IT Nut or its operations
2. Produce only the specific data demanded; we will not provide blanket access or bulk data
3. Notify the affected Customer of the request unless prohibited by law, court order, or active investigation gag order
4. Challenge overbroad, vague, or improperly served requests to the extent permitted by law
5. Log every law-enforcement request for internal audit and annual transparency reporting
   Customers located outside Bangladesh should be aware that Bangladeshi authorities may lawfully request access to data hosted on our Bangladesh infrastructure, regardless of the Customer’s country of residence. If this is a concern, we recommend selecting a USA-located Service.

8.5 Data Breach Notification

In the event of a confirmed security breach affecting your personal data, we will notify you by email within 72 hours of confirmation, providing: the nature of the breach, categories of data affected, probable consequences, mitigation measures taken, and contact details for further information.

9. Service Level and Support

9.1 Uptime Commitment

Our detailed uptime commitments, measurement methodology, and service-credit mechanism are set out in the Service Level Agreement (sibling page).

9.2 Support Channels

We provide support through the following channels during Working Hours (and 24×7 emergency ticket coverage):

• Ticket system via the Customer dashboard (clients.itnuthosting.com)
• Live chat at itnuthosting.com
• WhatsApp / Messenger
• Email: support@itnuthosting.com
• Phone: as listed on our contact page
  Support response-time targets are specified in the SLA.

9.3 Scope of Support

Standard support covers: Account, billing, and general Service questions; server-side issues within our infrastructure; guidance on Service usage and configuration.
Standard support does not cover: custom application development, third-party software issues outside our control panel ecosystem, migration of third-party applications that are not industry-standard, performance tuning of Customer code, or any work that our team, at their reasonable discretion, determines is outside the scope of the purchased Service. Such work may be offered as a paid Professional Service.

9.4 Scheduled Maintenance

We will provide at least 72 hours’ advance notice of routine scheduled maintenance via email and dashboard notification. Emergency maintenance (required to address security vulnerabilities or imminent service failures) may be conducted with shorter or no notice where reasonably necessary. Scheduled maintenance windows do not count against uptime SLA calculations.

10. Suspension and Termination

10.1 Termination by Customer

You may cancel any Service at any time through your Customer dashboard or by opening a support ticket. Cancellation takes effect at the end of your current billing cycle unless you request earlier termination. Refund eligibility is governed by our Refund & Cancellation Policy (sibling page).

10.2 Suspension or Termination by IT Nut for Cause

We may suspend or terminate your Services or Account immediately, with or without notice, if:

1. You breach this Agreement, the AUP, or any incorporated policy
2. You fail to pay amounts due (as per Section 5.7)
3. You engage in illegal activity or we receive credible evidence of illegal activity on your Account
4. Your Account is the target of a serious security incident that threatens other Customers
5. We receive a lawful government order requiring suspension or termination
6. You become insolvent, file for bankruptcy, or are placed into liquidation
7. Your use of the Services materially threatens the stability, security, or reputation of our platform

10.3 Termination by IT Nut for Convenience

We may terminate any Service for convenience with at least 30 days’ advance written notice and, in that case, a pro-rata refund of any prepaid, unused Fees for the terminated Service.

10.4 Effects of Termination

Upon termination: your right to use the Services ends; outstanding Fees become immediately due and payable; we may disable your access to the Customer dashboard and Services; sections designated to survive termination (Limitation of Liability, Indemnification, Governing Law, and others) continue to apply.

10.5 Data Retention After Termination

After termination:

After the retention window expires, all Customer data is permanently deleted and cannot be recovered, except where a paid post-deletion restoration is available under Section 10.6 below.

10.6 Paid Post-Deletion Restoration (Limited Best-Effort Service — Eligible Services Only)

Where a Service has been terminated and data permanently deleted, Customer may request a paid best-effort restoration — but only for Services that we actually back up at the platform level.

10.6.1 Eligible Services (where restoration may be possible)

10.6.2 Not Eligible (no platform backup exists)

IT Nut does not maintain platform-level backups for, and no restoration is available for, the following Services. Backup of Customer data on these Services is entirely the Customer’s own responsibility:

• VPS — self-managed (without the paid VPS Backup Add-on)
• Managed VPS — without the paid VPS Backup Add-on
• Storage VPS
• Dedicated Servers
• Business Email Hosting
• n8n Hosting
• RDP Service
• BD IP / Proxy Service
• SSL Certificates (no data backup concept applies)

10.6.3 Conditions for Restoration (Eligible Services Only)

1. Window: The request must be received within 30 days of the deletion event
2. Fee: A non-refundable restoration fee of BDT 6,000 (BDT) per account or service is payable in advance
3. Best effort only — NOT guaranteed: Restoration depends on the existence and integrity of internal backups at the time of the request. We do not guarantee that data is recoverable, and we do not guarantee any specific restoration timeline. If restoration fails for technical reasons, the fee is refunded
4. Outstanding amounts: Any unpaid Service Fees that caused the original termination must also be settled before restoration
5. Exclusions: Restoration is not available for Accounts terminated for breach, illegal activity, abuse, fraud, CSAM, court order, or law-enforcement directive
6. No SLA: This is a best-effort recovery service and is not subject to any SLA, uptime commitment, or service credit
   To request restoration, email billing@itnuthosting.com with subject "DATA RESTORATION REQUEST — [Account ID]".

10.7 Customer Backup Responsibility (VPS, Email, n8n, and Other Non-Backed-Up Services)

For any Service listed in Section 10.6.2 as not eligible for restoration, Customer is solely responsible for maintaining adequate backups of all data, configuration, code, databases, mailboxes, and other content on the Service. IT Nut does not maintain disaster-recovery copies of these Services.

10.7.1 VPS — RAID Protection vs. Backup

VPS nodes are protected by RAID redundancy at the physical-storage layer:

• A single disk failure is automatically tolerated by the RAID array; the Service continues to operate without data loss.
• A simultaneous failure of two or more disks, a controller failure, a filesystem corruption, accidental deletion by Customer, ransomware, or any logical-level data loss is treated as a disaster scenario. In any disaster scenario, IT Nut is not liable for data loss on a VPS that is not subscribed to the paid VPS Backup Add-on, and recovery is the Customer’s sole responsibility.
  RAID is not a backup. Customers running production workloads on VPS without the Backup Add-on should maintain off-server backups using their own tooling (for example, rsync to remote storage, snapshots to S3 or B2, or application-level dumps).

10.7.2 VPS Backup Add-on

Managed VPS Customers may purchase the VPS Backup Add-on at an additional 20% of the VPS Fee per billing cycle. The add-on covers periodic snapshots of the VPS retained on separate storage and is the only IT Nut-provided backup option for VPS. Specifications, retention, and restoration scope are described on the VPS product page.

11. Warranty Disclaimer

11.1 "As Is" and "As Available" Basis

To the maximum extent permitted by applicable law, the Services are provided on an "AS IS" and "AS AVAILABLE" basis, without warranties of any kind, express or implied.
We specifically disclaim any implied warranties of merchantability, fitness for a particular purpose, non-infringement, and any warranties arising from course of dealing or usage of trade.

11.2 Specific Non-Warranties

Without limiting Section 11.1, we do not warrant that:

1. The Services will be uninterrupted, error-free, or completely secure
2. Any particular result will be achieved through use of the Services
3. Any data, content, or information transmitted will be preserved against loss or corruption (notwithstanding any backup service purchased, which is governed by its own terms)
4. The Services are suitable for storing data subject to specific regulatory requirements such as PCI-DSS (payment card data) or HIPAA (US health data), unless we have explicitly confirmed such compliance in writing

11.3 Third-Party Dependencies

Our Services rely on third-party infrastructure and software, including cPanel/WHM, LiteSpeed, CloudLinux, Imunify360, Softaculous, Cloudflare, our data-centre and colocation partners, upstream connectivity providers, payment gateways (bKash, SSL Commerz, Stripe, PayPal, Payoneer), ICANN-accredited domain registrars, and third-party SSL certificate authorities. We are not liable for outages, errors, or defects in third-party components beyond our reasonable control, though we will make commercially reasonable efforts to mitigate their impact on your Service.

11.4 Statutory Rights Preserved

Nothing in this Section limits any non-excludable rights you may have under the Bangladesh Consumer Rights Protection Act, 2009, or any equivalent mandatory consumer law in your country of residence.

12. Limitation of Liability

Please read this section carefully. It limits the amount and types of compensation you can claim from us. It is a fundamental part of this Agreement and the Fees we charge reflect this allocation of risk.

12.1 Aggregate Liability Cap

To the maximum extent permitted by applicable law, IT Nut’s total aggregate liability to Customer for any and all claims arising out of or relating to this Agreement or the Services, regardless of the form of action (whether in contract, tort, negligence, strict liability, or otherwise) and regardless of the theory of liability, shall not exceed the total Fees actually paid by Customer to IT Nut for the affected Service during the three (3) months immediately preceding the event giving rise to the claim.

12.2 Exclusion of Indirect and Consequential Damages

In no event shall IT Nut be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including but not limited to:

• Lost profits or lost revenue
• Loss of business opportunity or goodwill
• Loss, corruption, or unauthorised access to data
• Cost of substitute services or re-creation of data
• Damage to reputation
  even if we have been advised of the possibility of such damages.

12.3 Carve-Outs

The limitations in Sections 12.1 and 12.2 do not apply to:

1. IT Nut’s gross negligence, wilful misconduct, or fraud
2. IT Nut’s indemnification obligations in Section 13
3. Any liability that cannot be limited or excluded by applicable law, including certain non-excludable rights under the Bangladesh Consumer Rights Protection Act, 2009

12.4 Time Limit for Claims

Any claim arising out of or relating to this Agreement must be brought within one (1) year after the cause of action accrues. Claims brought after this period are permanently barred, subject to any longer limitation period mandated by applicable law.

12.5 Basis of the Bargain

Customer acknowledges that the Fees charged by IT Nut reflect the allocation of risk set forth in this Agreement and that IT Nut would not enter into this Agreement without these limitations. Customer acknowledges that these limitations are an essential basis of the bargain between the parties.

13. Indemnification

13.1 Customer Indemnity

You agree to indemnify, defend, and hold harmless IT Nut, its parent company Nut Digital LLC, and their respective directors, officers, employees, contractors, agents, suppliers, and licensors (the "Indemnified Parties") from and against any and all claims, demands, suits, proceedings, losses, liabilities, damages, settlements, judgments, costs, and expenses (including reasonable attorneys’ fees and court costs) arising out of or in connection with:

1. Your access to or use of the Services
2. Your violation of this Agreement or any incorporated policy
3. Your violation of any applicable law, regulation, or court order
4. Your infringement or misappropriation of any third-party intellectual property or other right
5. Any Content uploaded, transmitted, stored, or processed by you or through your Account
6. Any dispute between you and a third party (including another Customer or your own end user)
7. Fraudulent or unauthorised use of your Account resulting from your failure to secure your credentials

13.2 Procedure

To claim indemnification, we will: promptly notify you in writing of the claim; give you sole control of the defence and settlement (provided that any settlement requiring admission of fault, payment by us, or imposing ongoing obligations on us requires our prior written consent, which shall not be unreasonably withheld); cooperate with you, at your reasonable expense, in the defence.
We reserve the right, at our own expense, to assume the exclusive defence and control of any matter subject to indemnification, in which case you agree to cooperate with our defence.

13.3 Survival

Your indemnification obligations survive termination of this Agreement.

14. Force Majeure

14.1 Definition

Neither party shall be liable for any delay or failure to perform its obligations under this Agreement (other than payment obligations) to the extent such delay or failure is caused by circumstances beyond that party’s reasonable control ("Force Majeure Event"), including but not limited to:

1. Natural disasters (floods, cyclones, earthquakes, fires)
2. Pandemics, epidemics, or public-health emergencies
3. War, armed conflict, terrorism, civil disturbance, or riot
4. Strikes, lockouts, or industrial action
5. Submarine cable cuts, national backbone outages, or upstream connectivity failures
6. Nationwide or region-wide internet shutdowns ordered by government authority
7. Grid power failures or prolonged fuel shortages beyond the capacity of standby systems
8. Data-centre-level incidents at our colocation or upstream providers
9. Large-scale DDoS attacks exceeding normal mitigation capacity
10. Government orders, including emergency ICT directives, removal orders under CSA 2023, or blocking directives
11. Failures of third-party infrastructure (cPanel, LiteSpeed, Cloudflare, payment gateways, registries)
12. Any other event of the type commonly understood as force majeure

14.2 Notification and Mitigation

The affected party will notify the other party of the Force Majeure Event as soon as reasonably practicable and will use commercially reasonable efforts to mitigate its impact and resume performance.

14.3 Effect

During a Force Majeure Event: the affected party’s obligations are suspended, not extinguished; downtime attributable to the Force Majeure Event is excluded from SLA calculations. If the Force Majeure Event continues for more than 60 consecutive days, either party may terminate the affected Service upon written notice, and IT Nut will provide a pro-rata refund of any prepaid, unused Fees.

15. Governing Law, Jurisdiction, and Dispute Resolution

15.1 Governing Law

This Agreement and any dispute arising out of or in connection with it shall be governed by and construed in accordance with the laws of the People’s Republic of Bangladesh, without regard to its conflict-of-law principles. For Customers located outside Bangladesh, the mandatory consumer-protection laws of their country of residence may apply in addition, where those laws cannot be contractually waived.

15.2 Good-Faith Resolution

Before initiating any formal dispute resolution, the parties will attempt in good faith to resolve any dispute through direct communication. Customer should send a written notice describing the dispute to legal@itnuthosting.com. The parties will have 30 days from the date of the notice to resolve the matter informally.

15.3 Arbitration

If informal resolution fails, any unresolved dispute, controversy, or claim arising out of or relating to this Agreement, including the formation, validity, interpretation, performance, breach, or termination, shall be finally settled by binding arbitration.

1. Seat of arbitration: Bogura, Bangladesh
2. Administering body: The Bangladesh Association of Software and Information Services (BASIS) Arbitration Panel for domestic disputes; or the Bangladesh International Arbitration Centre (BIAC) for disputes involving parties based outside Bangladesh, by mutual agreement
3. Rules: The arbitration rules of the administering body in force at the time of the dispute
4. Number of arbitrators: One (1), unless the parties agree otherwise
5. Language: English (Bengali may be used by mutual agreement)
6. Confidentiality: The arbitration and the award are confidential

15.4 Court Jurisdiction

Subject to Sections 15.2 and 15.3, the courts of Bogura, Bangladesh, shall have exclusive jurisdiction over any matter not resolvable by arbitration, including:

1. Applications for interim relief, injunctions, or conservatory measures
2. Enforcement of arbitral awards
3. Matters that cannot, as a matter of law, be submitted to arbitration

15.5 Class Action Waiver

To the maximum extent permitted by applicable law, any dispute shall be brought on an individual basis only, not as a class, collective, or representative action. This clause does not limit any collective or class rights that cannot be waived under Bangladesh law.

15.6 Customer’s Statutory Complaint Rights (Bangladesh)

This Agreement does not restrict Bangladesh Customers from lodging a complaint with the Directorate of National Consumer Rights Protection (DNCRP) under the Consumer Rights Protection Act, 2009. We encourage Customers to first contact us directly so we have a fair opportunity to resolve the matter, but we will not retaliate against any Customer for exercising statutory rights.

16. General Provisions

16.1 Entire Agreement

This Agreement, including all incorporated policies and Service-Specific Terms, constitutes the entire agreement between the parties and supersedes all prior or contemporaneous agreements, proposals, representations, and understandings regarding the subject matter.

16.2 Severability

If any provision of this Agreement is held invalid, illegal, or unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, severed. The remaining provisions will continue in full force and effect.

16.3 Waiver

No failure or delay by either party in exercising any right under this Agreement will be a waiver of that right. A waiver is effective only if given in writing.

16.4 Assignment

You may not assign, transfer, or sublicense this Agreement or your Account without our prior written consent. We may assign this Agreement in connection with a merger, acquisition, or sale of all or substantially all of our assets, with notice to you.

16.5 Relationship of the Parties

The parties are independent contractors. Nothing in this Agreement creates a partnership, joint venture, agency, or employment relationship.

16.6 Notices

• Notices to Customer will be sent to the email address on the Account and are deemed received on the day sent
• Notices to IT Nut should be sent to legal@itnuthosting.com for legal matters, billing@itnuthosting.com for billing matters, and abuse@itnuthosting.com for abuse reports
• Postal notices to IT Nut may be sent to: IT Nut Hosting, Nut Digital LLC, Bogura, Bangladesh

16.7 Language

This Agreement is published in English and Bengali. In case of any conflict or inconsistency, the English version shall prevail for purposes of legal interpretation. The Bengali version is provided for accessibility and is also available to Bangladeshi consumers for purposes of the Consumer Rights Protection Act, 2009.

16.8 Headings and Interpretation

Headings are for convenience only and do not affect interpretation. References to "including" mean "including without limitation". Singular terms include the plural and vice versa.

16.9 No Third-Party Beneficiaries

This Agreement is for the benefit of the parties only and creates no rights in any third party.

16.10 Survival

Sections 5 (to the extent of unpaid Fees), 6.1, 6.3, 7, 8, 10.4, 10.5, 11, 12, 13, 14.3, 15, and 16 survive termination of this Agreement.

16.11 Contact

• Legal and compliance: legal@itnuthosting.com
• Billing and accounts: billing@itnuthosting.com
• Abuse and copyright: abuse@itnuthosting.com
• Support: support@itnuthosting.com
• General enquiries: info@itnuthosting.com
• Website: https://itnuthosting.com
• Customer dashboard: https://clients.itnuthosting.com

By using IT Nut Hosting Services, you acknowledge that you have read, understood, and agreed to be bound by these Terms of Service and all incorporated policies.
IT Nut Hosting — A Nut Digital LLC Company
Bogura, Bangladesh | Established 2014 | BASIS Member ID: 23-08-028

Document: Privacy Policy
Version: 2.0 | Effective Date: 20 April 2026 | Last Updated: 20 April 2026
Applies To: All visitors & customers
This Privacy Policy is incorporated into and forms part of the Terms of Service. It explains how we collect, use, share, and protect your personal data.

Who We Are

This Privacy Policy is issued by IT Nut Hosting, a trading name of Nut Digital LLC, a company incorporated in Bangladesh with its principal place of business in Bogura, Bangladesh ("IT Nut", "we", "us"). We are the data controller of your personal data processed under this Policy, except where we act as data processor on your behalf under a separate Data Processing Addendum (DPA).
For privacy questions, contact: privacy@itnuthosting.com

1. Scope of this Policy

This Policy explains how we collect, use, share, store, and protect your personal data when you:

1. Visit our website (itnuthosting.com) or Customer dashboard (clients.itnuthosting.com)
2. Purchase or use our Services
3. Communicate with us (support, sales, billing, legal)
4. Interact with our marketing content or social media

2. Data We Collect

2.1 Information You Provide Directly

2.2 Information We Collect Automatically

2.3 Information from Third Parties

• Payment gateways (SSL Commerz, Stripe, bKash, PayPal, Payoneer) — payment confirmation status and fraud signals
• Domain registries and registrars — WHOIS data and domain status
• Email and communication providers (Chatwoot, WhatsApp) — customer communications
• Analytics and security services (Cloudflare, Imunify360) — threat and traffic signals
• Anti-fraud services — reputation data for payment methods and IP addresses

2.4 Sensitive Data

We do not knowingly collect sensitive personal data such as racial/ethnic origin, political opinions, religious beliefs, health data, genetic or biometric data, or sexual orientation. Do not submit such data to us. If you host such data on our Services, you are responsible for its lawful processing.

3. Legal Bases for Processing (EU/EEA/UK Customers)

Where GDPR or UK GDPR applies, we rely on the following legal bases:

4. How We Use Your Data

We use your personal data to:

1. Provide Services — create your Account, provision Services, deliver support, process payments, send service notifications
2. Manage the relationship — invoicing, renewal reminders, Account security alerts, respond to your questions
3. Improve Services — analyse usage patterns, diagnose errors, develop new features
4. Protect Services — detect and prevent fraud, abuse, security incidents, spam, and illegal activity
5. Comply with law — respond to lawful requests from Bangladesh or other authorities with jurisdiction; KYC / anti-money-laundering; tax reporting
6. Marketing (with your consent or as permitted by law) — send promotional offers, newsletters, and product updates; you may unsubscribe at any time via the link in every marketing email

5. Data Sharing and Disclosure

We share your personal data only in the following circumstances:

5.1 Service Providers (Processors Acting on Our Behalf)

• Payment processors — SSL Commerz, Stripe, bKash, PayPal, Payoneer (only payment data necessary for transactions)
• Domain registrars — ICANN-accredited upstream registrars (for domain registration and management; WHOIS data as required by ICANN)
• Data centres and infrastructure — our Dhaka data-centre partners and US-based colocation partners
• Third-party software licensors — cPanel LLC, LiteSpeed Technologies, CloudLinux Inc., Imunify (for licensing and technical support)
• Communication platforms — Chatwoot, WhatsApp Business, our email delivery provider
• Analytics and security — Cloudflare (CDN/DNS/DDoS), uptime monitors
• Professional advisors — accountants, auditors, lawyers, under confidentiality obligations
  All processors are contractually bound to protect your data consistently with this Policy.

5.2 Legal and Compliance Disclosures

We may disclose your personal data where required to:

• Comply with Bangladesh law, including CSA 2023 Sections 8, 40–44, and 50, and the ICT Act 2006
• Respond to lawful court orders, subpoenas, warrants, or governmental directives from authorities with jurisdiction
• Enforce our Terms of Service or investigate violations
• Protect the rights, property, or safety of IT Nut, our Customers, or others
• Prevent or investigate fraud, abuse, or security incidents
  Our government-request procedure is described in Section 8.4 of the Terms of Service.

5.3 Business Transfers

If IT Nut is involved in a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction. We will notify affected Customers and give them meaningful choices where required by law.

5.4 What We Do Not Do

We do not sell your personal data. We do not share your personal data with third-party advertisers for their own marketing purposes.

6. International Data Transfers

Your personal data may be stored or processed in:

• Bangladesh (primary location for BDIX Services, .bd domains, local billing data)
• United States (USA VPS, Dedicated Servers, email hosting, certain backup locations)
• Other jurisdictions where our service providers operate (for example, Cloudflare’s global network)
  For transfers of EU/EEA/UK personal data outside those regions, we rely on the European Commission’s Standard Contractual Clauses (SCCs), which may be requested from privacy@itnuthosting.com.

7. Cookies and Similar Technologies

We use the following categories of cookies:

Detailed information about specific cookies is available in our Cookie Notice on the website.

8. Data Retention

After the applicable retention period, data is securely deleted or anonymised, except where longer retention is required by law, regulation, or active investigation.

9. Your Rights

Depending on your country of residence, you may have the following rights with respect to your personal data:

To exercise any right, email privacy@itnuthosting.com. We will respond within 30 days (extendable to 90 days for complex requests) and may require identity verification before disclosing data.

10. Data Security

We implement technical and organisational measures appropriate to the risk, including:

• Encryption in transit (TLS 1.2+) for all administrative connections
• Encryption at rest for sensitive credentials (password hashes, 2FA secrets, API keys)
• Network segmentation, firewalls, and intrusion detection (Imunify360)
• Physical security at data-centre partners (access controls, CCTV, environmental controls)
• Role-based access control with least-privilege principles
• Employee confidentiality agreements and security training
• Regular security audits and vulnerability assessments
• Incident-response plan with 72-hour breach notification commitment (see Terms of Service § 8.5)
  No security is perfect. While we work hard to protect your data, we cannot guarantee absolute security. You are responsible for securing your credentials and following good security practices.

11. Children’s Privacy

Our Services are not directed to persons under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided data to us, please contact privacy@itnuthosting.com for prompt deletion.

12. Automated Decision-Making

We use automated systems for fraud detection, spam filtering, and security monitoring. These systems may result in Account suspension or transaction blocking. You may request human review of any significant automated decision by contacting support@itnuthosting.com.

13. Changes to this Policy

We may revise this Privacy Policy from time to time. Material changes will be notified by email at least 30 days before they take effect. A full version history is available in the Policy Version History sub-page.

14. Contact

• Privacy questions: privacy@itnuthosting.com
• Data subject requests: privacy@itnuthosting.com
• Data Protection Officer (DPO): To be appointed; interim contact via privacy@itnuthosting.com
• Legal team: legal@itnuthosting.com
• Postal: IT Nut Hosting, Nut Digital LLC, Bogura, Bangladesh

Your privacy matters. If you ever feel we are falling short of our commitments here, please tell us. We take privacy seriously and will investigate and respond.

Document: Acceptable Use Policy (AUP)
Version: 2.1 | Effective Date: 20 April 2026 | Last Updated: 26 April 2026
Applies To: All customers using any service
This AUP is incorporated into and forms part of the Terms of Service. Violations may result in suspension, termination, and legal action.

Purpose

This Acceptable Use Policy sets out what you may and may not do with IT Nut Hosting Services. It exists to protect:

• Our Customers — from noisy neighbours, spam, and security risks
• Our infrastructure — from abuse, overload, and reputation damage
• Third parties and the public — from illegal or harmful content
• IT Nut — from legal liability arising from Customer misuse

1. General Prohibitions

You must not use any IT Nut Service to host, transmit, store, link to, distribute, or facilitate any of the following:

1.1 Illegal Content and Activity

• Any content or activity that violates the laws of Bangladesh, your country of residence, or any country from which the content is accessed
• Offences under the Cyber Security Act, 2023, the ICT Act, 2006, the Penal Code 1860, the Special Powers Act 1974, or any other applicable Bangladesh law
• Financial crimes: money laundering, tax evasion, fraud, Ponzi schemes, unauthorised deposit-taking
• Narcotics, unlicensed pharmaceuticals, or controlled substances
• Unlicensed gambling, betting, or lottery operations
• Human trafficking, modern slavery, or smuggling operations

1.2 Child Safety — Zero Tolerance

Child sexual abuse material (CSAM), grooming content, or any sexualised content involving minors is absolutely prohibited. Any such content will result in:

1. Immediate Account termination without notice or refund
2. Immediate report to Bangladesh authorities (Bangladesh Police Cyber Crime Unit) and, where applicable, international bodies such as NCMEC
3. Preservation and disclosure of all relevant data to law-enforcement authorities
4. Permanent blacklist from all IT Nut Services
   This applies regardless of intent, framing, artistic merit claims, or any other justification.

1.3 Terrorism, Violent Extremism, and Incitement

• Content promoting, glorifying, funding, or recruiting for terrorism or violent extremism
• Content inciting violence against individuals or groups based on religion, ethnicity, nationality, gender, sexual orientation, disability, or any other protected characteristic
• Content promoting or planning violent acts

1.4 Intellectual Property Infringement

• Unauthorised distribution of copyrighted software, films, music, books, games, or other works
• Pirated software keys, activators, cracks, or licence bypass tools
• Counterfeit goods storefronts or trademark-infringing branding
• Stolen trade secrets or confidential business information
  Repeat copyright infringers will have Accounts terminated per Terms of Service Section 6.5.

1.5 Defamation, Harassment, and Privacy Violations

• Defamatory, libellous, or slanderous content
• Content disclosing another person’s private information (doxing) without consent
• Non-consensual intimate images, voyeuristic content
• Harassment, threats, stalking, or cyberbullying
• Impersonation of another person, business, or organisation without authorisation

1.6 Fraud, Phishing, and Deception

• Phishing pages targeting any brand, bank, payment processor, or government agency
• Fake login pages, credential harvesters, or fake e-commerce storefronts
• Scam emails, SMS gateways for scam campaigns, fake romance/investment scams
• Identity theft, synthetic identity creation, forged documents
• Fake news or deepfake content designed to deceive or defraud

1.7 Malware and Security Threats

• Viruses, worms, trojans, ransomware, rootkits, spyware, adware
• Command-and-control (C2) servers for botnets
• Credential stuffing tools, password crackers, bruteforce tools
• Keyloggers, remote access tools (RATs) used maliciously
• Exploit kits, zero-day markets, or hacking-as-a-service operations
• Content that probes, scans, or attacks third-party systems without authorisation

1.8 Network Abuse

• Distributed Denial of Service (DDoS) attacks, reflection attacks, amplification attacks
• Port scanning, vulnerability scanning, or penetration testing of third-party systems without written authorisation from the target
• IP spoofing or other traffic falsification
• Proxy chains designed to facilitate the above
• Operating open relays, open proxies, or unsecured SOCKS servers

1.9 Spam and Email Abuse

• Unsolicited commercial email (UCE / spam)
• Purchase or use of harvested email lists
• Bulk email without verifiable opt-in consent
• Email spoofing or forging headers to hide origin
• Operating Services with purpose of enabling spam for others
• Non-compliance with applicable email laws (Bangladesh ICT Act, CAN-SPAM, GDPR e-privacy, etc.)

1.10 Cryptocurrency and Financial Services

• Cryptocurrency mining, exchange, wallet services, or trading platforms (prohibited in all jurisdictions per Bangladesh Bank regulations and our risk policy)
• Unlicensed money-transfer services, hawala, or informal remittance
• Unregulated investment schemes, forex brokerages without licence
• Token sales, ICOs, NFT marketplaces with financial speculation

Want to build something blockchain-related? Contact us first at legal@itnuthosting.com. Non-financial blockchain use cases (logistics tracking, document verification, academic research) may be permitted with prior written approval.

1.11 Adult Content

• Pornography of any kind (including legal adult content) is prohibited on shared hosting
• On VPS or dedicated servers, adult content involving consenting adults is permitted only if all content complies with laws of Bangladesh and the Customer’s country; age verification of both performers and viewers is in place; content is not stored on Bangladesh-located servers (BDIX, .bd); and Customer notifies IT Nut in writing and receives written approval

1.12 Discriminatory, Hateful, or Harmful Content

• Hate speech or discrimination against protected groups
• Content promoting self-harm, suicide, or eating disorders
• Deepfake content created to harm, defame, or deceive
• Doxing or outing content

2. Resource Usage and Fair Use

2.1 Shared Hosting — Fair Usage

Shared hosting is designed for typical websites of small to medium traffic. While we offer "unmetered" resources on many plans, this does not mean unlimited. To ensure fair use:

2.2 Shared Hosting — Prohibited Uses

Shared hosting is not intended for:

• File hosting or backup services (Dropbox-style)
• Video streaming platforms
• Online gaming servers (Minecraft, game private servers, etc.)
• Torrent trackers or seedboxes
• IRC servers or bots
• Public proxy / VPN endpoints
• High-traffic sites exceeding 250,000 visitors/month
• CPU-intensive applications (heavy image/video processing, scientific computing, cryptocurrency mining)
• Database-heavy applications better suited to dedicated resources
  If your needs exceed shared hosting limits, please upgrade to VPS or Dedicated Server.

2.3 VPS and Dedicated Servers

You have greater flexibility on VPS and Dedicated Servers, but must still comply with:

• All prohibitions in Section 1
• Bandwidth limits specified in your Service plan
• Outbound network traffic patterns consistent with legitimate use (sustained high outbound traffic triggers review)
• No CPU / I/O abuse that harms the underlying node or neighbours

2.4 RDP Service

RDP Service has the following specific prohibitions:

• Ad fraud, click fraud, impression fraud
• Credential stuffing or account-checking operations
• Mass account creation on third-party platforms
• Game account farming or multi-boxing in violation of game ToS
• Dropshipping fraud (fake tracking numbers, bait-and-switch)
• SMS verification bypass services
• Any operation that results in IP reputation damage

2.5 BD IP / Proxy Service

BD IP and Proxy Services are primarily intended for: IVAC and visa application access; legitimate geo-restricted content access; market research and competitive analysis; Bangladesh-based testing and QA.
They must not be used for:

• Circumventing bans or restrictions imposed for abuse
• Ticket scalping or queue-jumping systems
• Sneaker/drop bots that violate retailer ToS
• Credential stuffing through residential IPs
• Scraping in violation of target site ToS
• Any illegal activity under Bangladesh law

2.6 n8n Service

n8n workflows are powerful automation tools that can be misused. The following are prohibited:

• Scraping websites in violation of their ToS or robots.txt
• Mass email automation without opt-in consent
• Fake engagement generation (likes, follows, views)
• API abuse of third-party platforms
• Content farm operations
• Automated spam posting
  When your n8n workflow interacts with a third-party service, you must comply with that service’s own Terms of Service.

2.7 Business Email

Business Email is for legitimate transactional and business communication. Specifically prohibited:

• Sending unsolicited bulk email (spam)
• Purchased or scraped contact lists
• Deceptive subject lines or sender identity
• Content violating CAN-SPAM, GDPR e-privacy, or equivalent
• Phishing, even against your own employees without written authorisation
  High-volume senders may be required to use a dedicated IP plan and maintain a documented opt-in process.

2.8 Reseller Hosting — Per-cPanel Limits and Feature Restrictions

Reseller Hosting plans use CloudLinux LVE to enforce per-end-user cPanel account limits. Each individual cPanel account that you (as a Reseller) provision inside your package is bound by these limits, in addition to the total bandwidth, storage, and account-count limits described on the product page.

2.8.1 Per-cPanel Resource Limits by Plan Tier

2.8.2 Default-Disabled Features on Reseller Hosting

The following features are not enabled by default on any cPanel account inside any Reseller Hosting tier:

• Jailed Shell SSH access (CageFS-jailed only — never root)
• Node.js application support
• Python application support
• Ruby on Rails support
• PostgreSQL database
  These features are disabled because they require specialized runtimes or elevated permissions that introduce stability and security risk in a shared reseller environment.

Root SSH access is NEVER available on Shared, Reseller, or BDIX Hosting. All three products run on cPanel infrastructure where root SSH is exclusive to IT Nut staff. Root SSH access is available only on VPS and Dedicated Server products. There is no exception to this rule, regardless of price tier, account count, or business need.

2.8.3 Enabling Restricted Features (Add-on Options)

Where your end-user requires any default-disabled feature, three paths are available:

1. Dev Tools Bundle Add-on — BDT 500 per end-client cPanel account per month. Enables Jailed Shell SSH, Node.js, Python, Ruby, and PostgreSQL on the specific cPanel account. Recurring monthly charge per account.
2. Resource Boost Add-on — BDT 500 per "unit" per end-client cPanel account per month. Each unit = +1 CPU Core and +2 GB RAM. Multiple units may be stacked on the same account.
3. VPS Migration — for end-users requiring root SSH access, dedicated resources, or significant horizontal scaling, the appropriate path is migration to a VPS plan (minimum: VPS Grow tier).
   Add-on charges are billed in advance, are recurring per cPanel account or per unit, and are non-refundable per Refund & Cancellation Policy § 4.6.3.

3. Backup and Data Protection Responsibility

3.1 Your Responsibility (Always Primary)

You are always solely responsible for maintaining adequate backups of your own Content. Even where IT Nut maintains platform-level backups for your Service, we strongly recommend you maintain independent off-site backups under your own control.

3.2 Where IT Nut Maintains Platform-Level Backups

IT Nut maintains internal backups (best-effort, not guaranteed) for the following Services:

• Shared Hosting (all tiers)
• Reseller Hosting
• BDIX Hosting
• Managed VPS — only when the paid VPS Backup Add-on (priced at 20% of VPS Fee) is active
  These backups are a courtesy / supplementary service. We do not guarantee availability, frequency, retention period, or successful restoration of platform backups. They exist primarily to enable the paid post-deletion restoration option in Terms of Service Section 10.6.

3.3 Where Customer is Solely Responsible (No Platform Backup)

IT Nut does not maintain platform-level backups for the following Services. Backup, disaster recovery, snapshots, and data preservation on these Services are entirely Customer’s own responsibility:

• VPS — self-managed (no Backup Add-on)
• Managed VPS — without the paid Backup Add-on
• Storage VPS
• Dedicated Servers
• Business Email Hosting
• n8n Hosting
• RDP Service
• BD IP / Proxy Service
• SSL Certificates (no data backup concept)

3.4 VPS RAID Protection vs. Backup (Important)

VPS nodes are protected by RAID redundancy at the storage layer. This means:

• A single disk failure is automatically tolerated by the RAID array — your Service continues without data loss.
• Two or more simultaneous disk failures, controller failures, filesystem corruption, accidental Customer deletion, ransomware, or any logical-level data loss are disaster scenarios. In any disaster scenario, IT Nut is not liable for data loss on a VPS that is not subscribed to the paid Backup Add-on. Recovery is the Customer’s sole responsibility.
  RAID is not a backup. RAID protects against hardware disk failure only — it does not protect against accidental deletion, application-level corruption, ransomware, fire/flood at the data centre, or any other non-disk event. Customers running production workloads on VPS without the Backup Add-on must maintain their own off-server backups.

3.5 VPS Backup Add-on

Managed VPS Customers may purchase the VPS Backup Add-on at an additional 20% of the VPS Fee per billing cycle. This is the only IT Nut-provided backup option for VPS. Specifications are described on the VPS product page.

4. Account Sharing and Resale

4.1 Personal Accounts

Unless you have purchased a Reseller Hosting plan, your Account is for your own use and may not be resold, sublet, or shared with third parties as a commercial service.

4.2 Reseller Hosting — Responsibilities of the Reseller

If you operate a Reseller Hosting plan, you are running your own hosting business using IT Nut infrastructure as your wholesale supplier. You assume the following responsibilities:

4.2.1 End-User Compliance

You are responsible for ensuring your end-customers’ compliance with this AUP and all incorporated policies. Any violation by an end-user is treated as a violation by you, the Reseller, for purposes of enforcement. We may suspend or terminate the affected end-user cPanel account, the affected Reseller package, or both, depending on severity.

4.2.2 Reseller’s Own Customer-Facing Terms

You must publish your own Terms of Service and Acceptable Use Policy to your end-customers. Your customer-facing terms must be no less restrictive than this AUP — in particular, you must prohibit all activity listed in Section 1 of this AUP. You are not required to mirror IT Nut’s Terms of Service in full, but the substantive prohibitions must carry through to your end-customers.

4.2.3 First-Line Support

You are the first-line support contact for your end-customers. End-customer support tickets, account questions, configuration help, billing complaints, and disputes flow to you, not to IT Nut. The support-scope split is described in SLA § 2.4 (Reseller Hosting Support Scope).

4.2.4 Cooperation in Abuse Cases

You agree to cooperate promptly with IT Nut in response to abuse reports, DMCA notices, law-enforcement requests, or security incidents affecting any cPanel account inside your reseller package. Failure to cooperate within reasonable timelines may result in suspension of the affected end-user account or your entire reseller package.

4.2.5 No Resource-Limit Circumvention

You may not circumvent our per-cPanel limits (§ 2.8) by distributing a single cPanel account across multiple unrelated end-customers, sharing one account between unconnected websites, or any similar arrangement designed to defeat the per-cPanel limits.

4.2.6 Brand and Identification

You may operate your reseller business under your own brand. You may not use IT Nut’s branding, logo, or business name in your customer-facing communications without prior written consent. You must clearly identify yourself (or your business) as the responsible party to your end-customers.

4.2.7 Migration

First-time migration of existing end-user accounts at signup is provided free, subject to a 30-day completion window. Subsequent migrations and migrations from non-cPanel sources are subject to paid migration fees as described on the Reseller Hosting product page. Migration charges are non-refundable per Refund & Cancellation Policy § 4.6.2 and are deducted from any money-back refund where free migration was used.

5. Security Research

We welcome good-faith security research that helps improve the security of our platform. If you discover a vulnerability:

1. Do not exploit it beyond the minimum necessary to demonstrate the issue
2. Do not access, modify, or delete other Customers’ data
3. Do not publicly disclose before we have had a reasonable opportunity to remediate
4. Report to security@itnuthosting.com with clear reproduction steps
   We will acknowledge receipt within 3 Business Days and work with you in good faith.

6. Enforcement

6.1 Our Response to Violations

6.2 Investigation

We may, at our reasonable discretion, access and review Customer Content to investigate suspected violations of this AUP. Such access is limited to what is necessary for the investigation and is conducted by authorised personnel only.

6.3 Appeals

If you believe an enforcement action was taken in error, you may appeal by emailing abuse@itnuthosting.com with the subject "AUP Appeal" and a factual explanation. We will respond within 5 Business Days.

7. Reporting Abuse

If you believe an IT Nut-hosted site is violating this AUP, please report to abuse@itnuthosting.com with: URL or IP address of the offending content; nature of the violation; evidence (screenshots, logs, headers); your contact information (for follow-up).
We investigate all legitimate reports. Our response targets are set out in the Abuse Handling Policy sibling page.

8. Changes to this AUP

We may update this AUP to address new abuse patterns, legal requirements, or operational needs. Material changes are notified per the amendment procedure in the Terms of Service.

9. Contact

• Abuse reports: abuse@itnuthosting.com
• Security vulnerabilities: security@itnuthosting.com
• Appeals: abuse@itnuthosting.com (subject: "AUP Appeal")
• Sales / pre-purchase questions: sales@itnuthosting.com
• General support: support@itnuthosting.com

Document: Service Level Agreement (SLA)
Version: 2.1 | Effective Date: 20 April 2026 | Last Updated: 26 April 2026
Applies To: Hosting, VPS, Dedicated, Email, and Proxy customers
This SLA is incorporated into and forms part of the Terms of Service. It sets out our uptime guarantees, support-response commitments, and the service-credit remedy for failures.

Purpose

This Service Level Agreement ("SLA") defines the performance and availability commitments IT Nut Hosting makes to Customers, the measurement methodology, and the service credits payable if we fail to meet those commitments.

1. Uptime Commitment by Service

We target the following monthly uptime commitments, measured as a percentage of the total minutes in the calendar month:

1.1 What "Uptime" Means

"Uptime" means the network and server components necessary to access the Service are operational and responding, measured from our monitoring network. The Service is considered "down" when a full outage lasts more than 2 consecutive minutes and is confirmed by our monitoring system.

1.2 What "Uptime" Does NOT Cover

The following are excluded from uptime calculations and do not count as downtime:

1. Scheduled maintenance with at least 72 hours advance notice
2. Emergency maintenance to address security vulnerabilities or imminent failures
3. Force Majeure events as defined in Terms of Service Section 14
4. Customer-caused issues: misconfiguration, exceeding resource limits, buggy code, malware on Customer site, DDoS targeting Customer, etc.
5. Third-party failures beyond our reasonable control (upstream ISP, registry, DNS provider when not hosted by us, CDN, payment processor, government-ordered shutdowns)
6. Account suspensions for AUP violations, non-payment, or lawful authority requests
7. Bandwidth/resource limits reached on Customer’s plan
8. Issues with Customer’s application code or database queries rather than our infrastructure

2. Support Response Targets

2.1 Response-Time Targets

2.2 Severity Levels

2.3 Resolution Targets

Resolution targets are best-effort and depend on the complexity of the issue. We commit to:

• Keeping you informed of progress every 2 hours on Critical issues and every 24 hours on High severity
• Escalating unresolved Critical issues to senior engineering and, if needed, third-party vendors (cPanel, LiteSpeed, CloudLinux) within 4 hours
• Documenting root cause for all Critical issues in a post-mortem provided to affected Customers within 72 hours of resolution

2.4 Reseller Hosting Support Scope

Reseller Hosting Customers operate their own hosting businesses on top of IT Nut infrastructure. The support response targets in § 2.1 apply to Reseller-level issues only. The full split is:

2.4.1 What IT Nut Supports for Reseller Customers

• Server-side issues affecting the underlying node or the Reseller’s WHM (server down, network outage, control-panel failures, RAID/storage incidents)
• WHM-level configuration questions (package creation, nameserver setup, SSL configuration at the WHM level)
• Billing, account, and subscription questions for the Reseller’s own account with IT Nut
• Abuse, security, and DMCA escalations affecting the Reseller package
• Migration assistance (during the first-time free migration window or where a paid migration has been purchased)

2.4.2 What Reseller Customers Must Handle Themselves (End-User Support)

The Reseller is the first-line support contact for their own end-customers. Issues that originate from a single end-user cPanel account inside the Reseller package are the Reseller’s responsibility to handle, including:

• End-user cPanel account-level issues (login problems, file management, email setup inside an end-user account, application configuration)
• Website / application troubleshooting on a single end-user account
• Billing and account questions between the Reseller and the Reseller’s own customers
• Disputes between the Reseller and the Reseller’s own customers
• General "how do I" questions about cPanel, WordPress, or other end-user-level applications

2.4.3 Routing of End-User Tickets to IT Nut

If an end-customer of a Reseller contacts IT Nut directly, we will politely redirect the end-customer to their hosting provider (the Reseller) without disclosing internal Reseller-IT Nut commercial details.
If the Reseller raises a ticket with IT Nut on behalf of an end-user issue that falls outside the IT Nut scope above, we may offer paid Professional Support rather than handling the ticket as a standard support request.

2.4.4 Edge Cases

Where a server-side issue is first noticed by an end-user (e.g., a network outage that the end-user reports to the Reseller, who then reports to IT Nut), IT Nut handles the root cause regardless of how the report originated. The principle is: IT Nut handles the infrastructure; the Reseller handles the end-customer relationship.

3. Scheduled Maintenance

3.1 Notification

We provide at least 72 hours’ advance notice for routine scheduled maintenance via:

• Email to the Account’s contact address
• Dashboard notice at clients.itnuthosting.com
• Status page at status.itnuthosting.com (when operational)

3.2 Typical Maintenance Windows

Where feasible, scheduled maintenance is performed during low-traffic windows:

• Weekday overnight: Tuesday–Thursday, 02:00–05:00 Bangladesh Standard Time
• Weekend: Friday night / Saturday early morning

3.3 Emergency Maintenance

We may perform emergency maintenance with less notice (or no notice) when required to address:

• Active security vulnerabilities (zero-day exploits, critical patches)
• Imminent infrastructure failure (disk health, memory faults)
• Lawful governmental directives
• Upstream provider incidents requiring immediate action
  Emergency maintenance is excluded from SLA uptime calculations.

4. Service Credits

4.1 Credit Calculation

If we fail to meet the monthly uptime commitment for your Service, you are entitled to a service credit against a future monthly invoice, calculated as follows:

4.2 How to Claim

To claim a service credit:

1. Email billing@itnuthosting.com within 30 calendar days of the incident
2. Subject line: "SLA Credit Claim — [Service name] — [Month Year]"
3. Include:
   • Your Customer ID / Account email
   • Service identifier (domain, server hostname, plan)
   • Dates, times, and durations of the downtime you observed
   • Supporting evidence (independent monitor screenshots or logs; we cross-reference with our monitoring)
     Claims submitted after 30 days or without sufficient detail may be rejected.

4.3 How Credits Are Applied

• Credits are applied to your next invoice for the affected Service
• Credits are non-transferable and non-refundable for cash
• Credits may not exceed the monthly Fee paid for the affected Service
• Multiple incidents in the same month are aggregated (not stacked)
• Unused credits at termination of Service are forfeited

4.4 Exclusive Remedy

Service credits under this SLA are your sole and exclusive remedy for downtime or failure to meet uptime targets, subject to any non-excludable statutory rights under the Bangladesh Consumer Rights Protection Act, 2009.

5. Status Page and Monitoring

We operate public status monitoring at status.itnuthosting.com (when available) and post incident updates there during outages. Historical uptime data is available on the status page for at least 12 months.
If the status page is unreachable, alternative update channels include our Facebook page, Twitter/X account, and email notifications to affected Customers.

6. Exclusions and Conditions

6.1 Good Standing Required

Service credits are only available to Customers in good standing — meaning the Account is current on payments, not in breach of the Terms of Service or AUP, and not suspended for any reason.

6.2 First-Month Pro-Rating

For Services activated mid-month, the uptime target applies from the activation date to month-end, prorated accordingly.

6.3 No Double-Counting

If a single incident affects multiple Services you hold with us, service credits are calculated on a per-Service basis and are not aggregated into a single larger credit.

7. Reporting an Outage

If you experience an outage, please:

1. Check status.itnuthosting.com first for any ongoing incident we’ve already acknowledged
2. Open a Priority ticket via clients.itnuthosting.com if your issue is not listed
3. Include specific timestamps, error messages, and observed behaviour
4. Do not file a chargeback or cancel in the first instance — give us a chance to investigate and resolve

8. Contact

• SLA credit claims: billing@itnuthosting.com
• Priority incidents: support@itnuthosting.com (subject: "CRITICAL")
• Status page: status.itnuthosting.com
• General support: support@itnuthosting.com

Document: Refund & Cancellation Policy
Version: 2.1.1 | Effective Date: 20 April 2026 | Last Updated: 26 April 2026
Applies To: All paying customers
This Refund & Cancellation Policy is incorporated into and forms part of the Terms of Service. It explains your money-back guarantees, what is refundable, what is not, and how to cancel.

Summary (TL;DR)

• Shared Hosting, BDIX Hosting: 30-day money-back guarantee
• VPS (self-managed and managed), Reseller Hosting: 7-day money-back guarantee
• Business Email: 14-day money-back guarantee
• Domains, SSL, Dedicated Servers, RDP, BD IP/Proxy, Licences: Non-refundable
• Reseller paid add-ons (Dev Tools, Resource Boost, Extended Backup, paid Migration): Non-refundable
• Refund process: 7–14 Business Days back to original payment method
• Data restoration after termination: Best-effort, BDT 6,000, within 30 days — only for Shared, Reseller, BDIX, and Managed VPS with paid Backup Add-on (see § 4.5)
• VPS, Email, n8n, Dedicated, RDP, BD IP/Proxy, SSL: customer must maintain own backups — no IT Nut platform backup
• Consumer rights under Bangladesh CRPA 2009 are always preserved

1. Money-Back Guarantees by Service

1.1 Refundable Services

1.2 Non-Refundable Services

The following Services are non-refundable once activated, due to pass-through costs, one-time licensing, or irreversible provisioning:

1.3 What the Money-Back Guarantee Covers

For Services eligible under Section 1.1, the money-back guarantee provides a full refund of the Service Fee paid, subject to:

1. Cancellation request received within the applicable window
2. Purchase was a first-time purchase (not a renewal or upgrade)
3. Payment method can accept a refund (see Section 3)
4. Account is in good standing (not terminated for breach, fraud, or chargeback)
5. Any included domain fees, SSL fees, or other pass-through costs are deducted from the refund at our actual cost

2. Cancellations

2.1 Customer-Initiated Cancellation

You may cancel any Service at any time through:

• Your Customer dashboard (clients.itnuthosting.com) → Services → [Service] → Request Cancellation
• A support ticket to support@itnuthosting.com
• Email to billing@itnuthosting.com from the Account’s registered email address

2.2 Effective Date of Cancellation

You may choose:

• Immediate cancellation — Service terminates on the date of the request; any refund (if applicable under Section 1) is processed
• End of current billing cycle — Service continues until the end of the prepaid period, then terminates without auto-renewal

2.3 Auto-Renewal Disable vs. Cancellation

You can disable auto-renewal without cancelling the Service. The Service continues until the end of the current billing cycle and then is not renewed. This is the recommended approach if you want to use the Service until its prepaid expiry.

3. Refund Processing

3.1 Payment Methods and Refund Routes

3.2 Refund to Original Payment Method Only

Refunds are processed back to the original payment method used for the transaction. We cannot refund to a different card, wallet, or bank account for reasons of fraud prevention and regulatory compliance.
If the original payment method is no longer active (e.g., closed bank account, expired card), we may issue Account credit instead, which may be used against future invoices for up to 12 months.

3.3 Currency and Exchange

• Refunds for payments made in Bangladeshi Taka are issued in Taka
• Refunds for payments made in foreign currency (via Stripe, PayPal, Payoneer) are issued in the original transaction currency, at our then-current exchange rate if any conversion is required
• Any exchange-rate differences or gateway fees are not compensable

4. Special Situations

4.1 Pro-Rata Refunds

Pro-rata refunds (partial refunds based on unused time) are available in limited circumstances:

4.2 Partial Month Refunds

For annual or multi-year prepayments that qualify for a refund, the calculation uses:
Refund = (Total paid) × (days remaining / total days prepaid) − (any domain, SSL, or pass-through costs already incurred)

4.3 Downgrades and Plan Changes

If you downgrade to a lower-tier plan mid-cycle:

• Unused value is converted to Account credit for future invoices
• Cash refund of the difference is not available for plan changes

4.4 Upgrades and Plan Changes

If you upgrade to a higher-tier plan mid-cycle:

• Prorated amount for unused time on the old plan is credited to the new plan invoice
• Remaining balance on the new plan is charged

4.5 Data Restoration After Termination (Eligible Services Only)

If your account has been terminated and data deletion has occurred, a paid best-effort restoration may be available within 30 days of deletion for a non-refundable fee of BDT 6,000 per account.
Restoration is available only for Services that we back up at the platform level: Shared Hosting, Reseller Hosting, BDIX Hosting, and Managed VPS with the paid VPS Backup Add-on.
Restoration is NOT available for: self-managed VPS (no Backup Add-on), Managed VPS without Backup Add-on, Storage VPS, Dedicated Servers, Business Email, n8n Hosting, RDP, BD IP/Proxy, or SSL. For these Services, Customer is solely responsible for maintaining their own backups — IT Nut does not maintain platform-level backup copies.
See Terms of Service Section 10.6 for full conditions and Section 10.7 for VPS RAID/backup responsibility details.

4.6 Reseller Hosting — Special Refund Rules

Reseller Hosting customers are subject to the following additional rules in addition to the general refund process:

4.6.1 Money-Back Window

Reseller Hosting has a 7-day money-back window from activation (shorter than the 30-day window for Shared/VPS), reflecting the B2B nature of the product and the resource-allocation cost incurred from day one.

4.6.2 Free Migration Charge Deduction

If you used our first-time free Migration service when signing up and you then claim a money-back refund within the 7-day window, the actual cost of migration is deducted from your refund at our standard rate of $5 (or BDT equivalent) per cPanel account migrated. This reflects the labour and time already invested in the migration.
Example: You purchase Reseller Pro at BDT 4,000 and we migrate 30 cPanel accounts for free. You request a refund on day 5. Refund payable = BDT 4,000 − (30 × BDT 550 equivalent of $5) = approximately BDT -12,500. In this scenario, no refund is owed and a balance may be payable.

4.6.3 Non-Refundable Reseller Add-ons

The following Reseller-specific charges are never refundable, regardless of when cancellation occurs:

• Dev Tools Bundle (BDT 500/end-client/month)
• Resource Boost (BDT 500/unit/end-client/month)
• Extended Backup add-on (priced at 10% of plan)
• Paid Migration service (BDT 550 / $5 per cPanel account or per non-cPanel website)
• Paid Support fees for end-user issues outside Reseller scope

4.6.4 No Refund for End-User Disputes

If your end-customers (the customers of your reseller business) raise disputes with you, this does not entitle you to a refund from IT Nut. Reseller-to-end-customer relationships are entirely your responsibility, as further described in our SLA § 2.4 and AUP § 4.

5. Dispute Escalation Ladder

If you disagree with our refund decision, please follow this escalation path before initiating any external action:

We encourage resolving disputes through Steps 1–3 first, as this is typically the fastest and least costly path.

6. Chargebacks

Please read Terms of Service Section 5.8 before filing a chargeback. Filing a chargeback without first exhausting Steps 1–3 above may result in:

• Immediate Service suspension
• Account termination and permanent blacklist
• Recovery claim for the disputed amount plus chargeback fees, processor costs, and investigation expenses
• Report to fraud prevention networks

If you have a genuine complaint, please contact us first. We want to resolve it. Chargebacks are a last resort for deceptive merchants — we are not that, and we will prove it.

7. Consumer Rights Protected

This Policy does not limit any mandatory consumer rights you have under:

• Bangladesh Consumer Rights Protection Act, 2009 (CRPA)
• Bangladesh Digital Commerce Operational Guidelines, 2021
• EU Consumer Rights Directive (if you are an EU consumer and the Directive applies)
• Any equivalent mandatory consumer law in your country of residence
  If any term of this Policy conflicts with a non-waivable statutory consumer right, the statutory right prevails to the extent of the conflict.

8. Contact

• Refund requests: billing@itnuthosting.com
• Cancellation requests: billing@itnuthosting.com or via your Customer dashboard
• Billing escalation: billing@itnuthosting.com (subject: "Escalation")
• Legal / general management: legal@itnuthosting.com
• General support: support@itnuthosting.com

Document: Abuse Handling Policy
Version: 2.0 | Effective Date: 20 April 2026 | Last Updated: 20 April 2026
Applies To: Customers + third-party reporters
This policy explains how IT Nut Hosting handles abuse reports, copyright complaints, phishing, malware, spam, and other misuse of our platform. It also sets out the due-process rights of customers whose accounts are the subject of a complaint.

Purpose

IT Nut Hosting takes abuse of our platform seriously. We want to be a responsible neighbour on the internet and protect innocent third parties from harm originating on our infrastructure. At the same time, we give our Customers fair notice and a reasonable opportunity to respond before taking destructive action.

1. How to Report Abuse

1.1 Contact Channels

1.2 Information to Include

To help us investigate quickly and fairly, please provide:

1. Target identifier: URL, IP address, domain, email header, or specific resource
2. Nature of the abuse: What type of violation (phishing, spam, copyright, etc.)
3. Evidence:
   • Screenshots with timestamps
   • Full email headers (for spam/phishing)
   • HTTP response bodies showing the offending content
   • Log excerpts with timestamps (for network attacks)
   • For copyright: the original work, your ownership proof, and statement of good-faith belief
4. Your contact information: Name, email, organisation (for follow-up questions)
5. Preferred outcome: Takedown, investigation, account suspension, preservation order
   Anonymous reports are accepted but are given lower priority and cannot receive status updates.

2. Our Response Timeline

3. Investigation Process

3.1 Verification

Before acting on a report, we verify:

1. The reported resource is actually on our infrastructure (not on a third-party service we don’t control)
2. The report is credible and specific enough to act on
3. The type of abuse and the appropriate response under our policies
4. Whether the Customer has prior history of similar reports

3.2 Customer Notice (Except CSAM and Emergencies)

For most reports, we notify the Customer of the complaint before suspending or removing content, providing:

• Nature of the complaint
• Reported resource(s)
• Relevant policy or law violated
• Time to remediate: typically 24–72 hours depending on severity
• Instructions for response or dispute

3.3 When We Act Without Customer Notice

We may suspend or remove content without prior Customer notice in cases of:

• CSAM (immediate termination and law-enforcement referral)
• Active malware or C2 infrastructure currently harming third parties
• Active phishing campaigns with ongoing victims
• Active DDoS attacks being launched from Customer’s Service
• Government orders requiring immediate action under CSA 2023 or equivalent
• Court injunctions or emergency warrants
• Credible risk of imminent harm to persons or critical infrastructure
  In these cases, we notify the Customer after taking action, with the factual basis for our decision and appeal process.

4. DMCA / Copyright Specifics

4.1 Notice Requirements

A valid copyright infringement notice must contain all six elements listed in Terms of Service Section 6.5. Notices that do not meet these requirements will be returned for correction.

4.2 Our Response

On receipt of a valid notice:

1. We review the claim for facial validity
2. We notify the affected Customer within 72 working hours, forwarding the notice
3. We remove or disable access to the allegedly infringing material pending resolution
4. We track the notice for repeat-infringer purposes

4.3 Counter-Notice

If you believe content was removed in error, you may submit a counter-notice containing the same six elements (substituting a good-faith belief the removal was erroneous or misidentified). On receipt of a valid counter-notice:

1. We forward the counter-notice to the original complainant
2. If the complainant does not file a court action within 10–14 Business Days, we may restore the content
3. If the complainant does file a court action, we respect the court’s ruling

4.4 Repeat Infringer Policy

Customers who receive multiple substantiated copyright notices (typically 3 in any 12-month period) are subject to:

• Final warning with Account flag
• Suspension of the affected Service
• Termination of the Account in accordance with the DMCA repeat-infringer rule

5. Law Enforcement Requests

5.1 Who May Submit

Lawful requests must come from: Bangladesh Police Cyber Crime Unit or other authorised Bangladesh government bodies; foreign law-enforcement via MLAT (Mutual Legal Assistance Treaty) processes; courts with jurisdiction over IT Nut or Nut Digital LLC.

5.2 Required Documentation

We require:

1. Credentials verifying the requesting officer’s identity and authority
2. Specific legal basis (citation to CSA 2023 section, court order number, etc.)
3. Specific scope of data requested (not blanket or unbounded)
4. Preservation request separately if applicable

5.3 Our Handling Standard

See Terms of Service Section 8.4 for our full handling framework.

5.4 Transparency Reporting

We log every law-enforcement request received and publish an annual transparency report summarising the number of requests, types, and our response actions, to the extent permitted by gag orders or confidentiality obligations.

6. Customer Due Process

6.1 Right to Notice (Where Applicable)

Except in emergency situations listed in Section 3.3, Customers receive notice of complaints affecting their Services.

6.2 Right to Respond

Customers may respond to complaints with:

• Factual explanation or evidence
• Counter-documentation (for copyright)
• Evidence that the report is inaccurate or made in bad faith
• Remediation actions taken

6.3 Right to Appeal

If your Service is suspended or content removed and you believe the action was taken in error:

1. Email abuse@itnuthosting.com with subject "ABUSE APPEAL — [Ticket/Case ID]"
2. Include all relevant evidence and context
3. We will review within 5 Business Days
4. If the original action is upheld, we provide a final written explanation and you may escalate per Terms of Service Section 15

6.4 Preservation of Evidence

Where practical, we preserve copies of removed content for 90 days in case a Customer successfully appeals or a counter-notice restores the content. Preservation does not apply where law-enforcement has directed otherwise or where the content is unlawful to retain (e.g., CSAM).

7. Anti-Retaliation

We do not retaliate against Customers who:

• Make good-faith abuse reports about third parties
• Submit counter-notices or appeals
• Exercise statutory consumer rights
• File complaints with DNCRP, BASIS, or other authorities
• Disclose our practices to regulators

8. Specific Abuse Categories — Quick Reference

9. Contact

• Abuse reports: abuse@itnuthosting.com
• DMCA / copyright: dmca@itnuthosting.com
• Trademark: legal@itnuthosting.com
• Security vulnerabilities: security@itnuthosting.com
• Law enforcement requests: legal@itnuthosting.com (subject: "LEA Request")
• Appeals: abuse@itnuthosting.com (subject: "ABUSE APPEAL")
• Postal: IT Nut Hosting, Nut Digital LLC, Bogura, Bangladesh

Document: Domain Registration Agreement
Version: 2.0 | Effective Date: 20 April 2026 | Last Updated: 20 April 2026
Applies To: Domain registration, renewal, and transfer customers
This Domain Registration Agreement is incorporated into and forms part of the Terms of Service. It governs domain-specific rights and obligations in addition to the Terms of Service.

Purpose

This Agreement sets out the specific terms that apply when you register, renew, transfer, or manage a domain name through IT Nut Hosting. Domain registration is regulated by ICANN (for generic TLDs like .com, .net, .org) and by country-code registries (for .bd, .com.bd, and other ccTLDs). As a result, domain Services carry additional rules beyond our regular Services.

1. Role of IT Nut

IT Nut Hosting is a reseller of domain registration services. We provide domain registration, renewal, transfer, and management to you through upstream ICANN-accredited registrars with whom we hold commercial relationships.
You, the Customer, are the Registrant (registered name holder). The upstream registrar is the entity of record with the registry. We are your intermediary and management interface.

2. Accurate Registration Data (WHOIS)

2.1 Your Obligation

ICANN policy requires that all domain registrations include accurate, current, and complete contact information:

• Registrant name (your legal name or organisation name)
• Postal address
• Email address
• Phone number
  You warrant that the information you provide is accurate and that you are authorised to register the domain on behalf of the named Registrant.

2.2 Updating WHOIS Data

You must update your WHOIS data within 7 days of any change. Failure to maintain accurate WHOIS data is a violation of ICANN policy and grounds for:

• Domain suspension by the upstream registrar
• Domain cancellation by the registry
• Loss of the domain without refund

2.3 WHOIS Privacy

For eligible TLDs, we offer WHOIS Privacy / Domain Privacy as an add-on. When enabled:

• Your personal contact details are replaced in public WHOIS with privacy-service contact details
• Your actual data remains on file with the registrar and registry
• Privacy does not shield you from lawful legal process; registrars disclose actual Registrant information on valid legal request
• Privacy is not available for all TLDs (notably, many ccTLDs including .bd do not permit privacy)

2.4 Inaccurate WHOIS Complaints

If a third party submits a valid complaint under ICANN’s WHOIS Inaccuracy Complaint System that your data is false, we will:

1. Notify you at the email address on file
2. Require you to confirm or update your data within 15 days
3. Suspend or cancel the domain if you fail to respond

3. Domain Fees and Pricing

3.1 Registration, Renewal, and Transfer Pricing

Domain pricing varies by TLD and may change at any time, as pricing is pass-through from upstream registries. The prevailing price at the time of registration, renewal, or transfer applies.

3.2 Promotional Pricing

Promotional prices (first-year discounts) apply only to the initial registration year. Renewal is at the standard (non-promotional) price unless otherwise explicitly agreed.

3.3 Non-Refundable

Domain registrations, renewals, and transfers are non-refundable once the registry processes the transaction. This is because registry fees are paid immediately and cannot be reversed.

4. Renewal and Expiration

4.1 Renewal Notices

We send renewal reminders by email at approximately:

• 60 days before expiry
• 30 days before expiry
• 7 days before expiry
• On expiry date
• 5 days after expiry (grace period reminder)
• 25 days after expiry (last chance before redemption)
  It is your responsibility to ensure your contact email is current and that you respond to renewal reminders.

4.2 Auto-Renewal (Where Enabled)

If auto-renewal is enabled on your domain, we attempt to charge your saved payment method 7–14 days before expiry. If payment fails, we retry and notify you.

4.3 Expiry and Grace Period (gTLDs)

For most generic TLDs (.com, .net, .org, .io, etc.):

4.4 Expiry and Grace Period (.bd and ccTLDs)

Country-code TLDs including .bd and .com.bd follow the local registry’s schedule (BTCL for .bd). Typically:

• Active → Expiry
• Grace period varies by registry (often 15–30 days)
• After grace, domain may be released to the public
  Specific timelines are subject to the registry’s rules and may change without notice.

4.5 Non-Renewal and Loss of Domain

If you do not renew within the grace period, the domain drops and is released to the public. Once dropped:

• The domain may be registered by any other party
• We cannot recover or guarantee re-registration
• No refund or credit applies
  We strongly recommend annual renewal with auto-renew enabled to prevent accidental loss.

5. Domain Transfers

5.1 Transfer In (Bringing a Domain to Us)

To transfer a domain to IT Nut management:

1. Unlock the domain at the losing registrar
2. Obtain the Authorization Code (EPP / Auth Code)
3. Submit a transfer-in order with us, providing the Auth Code
4. Approve the transfer at the confirmation email (if sent)
5. Transfer completes in 5–7 days (gTLDs) or per registry rules (ccTLDs)

5.2 Transfer Out (Taking a Domain to Another Provider)

You are free to transfer any domain out of our management. To do so:

1. Log into your Customer dashboard
2. Unlock the domain and request the Auth Code
3. Initiate the transfer at the gaining registrar
   We will not unreasonably withhold or delay transfers. A transfer may only be refused in the specific circumstances permitted by ICANN (e.g., ongoing fraud investigation, court order, ICANN 60-day lock after change of Registrant).

5.3 60-Day Transfer Lock (ICANN Rule)

ICANN imposes a 60-day transfer lock after:

• Initial domain registration
• Transfer between registrars
• Change of Registrant (owner change)
  During this period, the domain cannot be transferred to another registrar. This is an ICANN policy, not our rule, and we cannot override it.

5.4 Transfer Disputes

If you believe your domain was transferred without authorisation, contact us immediately at legal@itnuthosting.com. We will investigate and, where appropriate, invoke the ICANN Transfer Dispute Resolution Policy (TDRP).

6. Domain Disputes and UDRP

6.1 Our Role in Disputes

We are not a judge of trademark or domain disputes. If a third party claims your domain infringes their rights:

1. We may receive a Uniform Domain-Name Dispute-Resolution Policy (UDRP) complaint from an ICANN-approved provider (WIPO, NAF, etc.)
2. We will notify you and forward the complaint
3. You must respond to the UDRP panel directly; we do not represent you
4. We will implement any UDRP decision (lock, transfer, or cancel as ordered)

6.2 Country-Code TLD Disputes

For ccTLDs, local dispute resolution policies apply. For .bd domains, disputes are resolved per the BTCL policy framework.

6.3 Court Orders

We comply with lawful court orders affecting domain registrations, subject to the procedure in Terms of Service Section 8.4.

7. Prohibited Domain Uses

You may not register or use a domain for any purpose prohibited by:

• Our Acceptable Use Policy (sibling page)
• The applicable registry’s Acceptable Use Policy (e.g., ICANN, BTCL)
• Any applicable law, including CSA 2023 and the ICT Act 2006
  This includes, without limitation: phishing, typosquatting of well-known brands, malware distribution, trademark infringement, and defamatory use.

8. Registry / Registrar Changes

We may change upstream registrars at our discretion (for example, for commercial, operational, or compliance reasons). In that case:

• Your domain continues to function normally
• WHOIS data and DNS settings are preserved
• We notify you of any administrative effects
• No action is required from you unless we specifically request it

9. Registrant Rights

As a domain Registrant, you have rights established by ICANN, including:

• The right to accurate information about your registrar and registry
• The right to transfer your domain
• The right to privacy via opt-in privacy services (for eligible TLDs)
• The right to a reply from us to domain-related questions within 30 days
• The right to be notified of WHOIS inaccuracy complaints and a reasonable opportunity to respond
  Full Registrant rights are described in ICANN’s Registrant Educational Materials.

10. Data Shared with Registries

When you register a domain, the following data is shared with the relevant registry and made publicly available via WHOIS (unless privacy is enabled):

• Registrant name / organisation
• Postal address
• Email address
• Phone number
• Administrative, technical, and billing contacts (often the same as Registrant)
• Domain creation, updated, and expiry dates
• Nameserver information
  This disclosure is required by ICANN and registry policy and is not within our discretion to prevent, beyond offering Privacy Services where available.

11. Domain Suspension and Cancellation

11.1 Reasons for Suspension

A domain may be suspended by us, the upstream registrar, or the registry if:

• WHOIS data is verified as inaccurate (ICANN policy)
• Domain is used for phishing, malware, fraud, or CSAM
• Court order, UDRP decision, or law-enforcement directive requires suspension
• Registry policy violation
• Chargeback or fraud related to the registration payment
• Breach of the Terms of Service or this Agreement

11.2 Reasons for Cancellation

A domain may be cancelled in similar circumstances, generally after notice and opportunity to cure (except in emergencies involving CSAM, imminent harm, or law-enforcement orders).

11.3 No Refund

Domains suspended or cancelled for cause are not refundable. The registry fee has already been paid and is not recoverable.

12. Limitation of Liability (Domain-Specific)

In addition to the limitations in Terms of Service Section 12, IT Nut is not liable for:

1. Loss of a domain due to Customer’s failure to renew
2. Loss of a domain due to WHOIS inaccuracy leading to registry action
3. Actions of upstream registrars or registries beyond our control
4. Changes in registry pricing or policy
5. Loss of value or business due to domain suspension, cancellation, or transfer dispute
6. Domain name disputes or UDRP proceedings

13. Contact

• Domain registration / renewal / transfer questions: support@itnuthosting.com
• WHOIS updates: support@itnuthosting.com
• Domain disputes / UDRP: legal@itnuthosting.com
• Unauthorised transfer claims: legal@itnuthosting.com
• Billing: billing@itnuthosting.com

---

Protect your domain. Keep WHOIS data current, enable auto-renew, and respond to renewal reminders. A lost domain can be extremely difficult or impossible to recover.

Document: Data Processing Addendum (DPA)
Version: 2.0 | Effective Date: 20 April 2026 | Last Updated: 20 April 2026
Applies To: Business (B2B) customers processing personal data of their end users
This Data Processing Addendum ("DPA") is incorporated into and forms part of the Terms of Service. It applies where you, as a Business Customer (the Controller), use IT Nut Hosting (the Processor) to process personal data of your own end users, employees, or other data subjects.

When This DPA Applies

This DPA applies if you are a business and you use our hosting Services to store or process personal data (email addresses, names, phone numbers, user accounts, customer records, etc.) of individuals for whom you are the data controller. Examples: an e-commerce business hosting its customer database with us; a SaaS company hosting user data with us; a business hosting its website with forms that collect personal data.
This DPA does not apply to individuals using our Services for personal use — in those cases, we act as controller of the personal data we collect from you, as described in our Privacy Policy.

1. Definitions

Terms used in this DPA have the meanings given in the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") where applicable, or the forthcoming Bangladesh Personal Data Protection Act. Key terms:

2. Roles and Scope

2.1 Parties’ Roles

• Customer is the Controller. The Customer determines the purposes and means of processing Customer Personal Data (what data is collected, why, how long, etc.).
• IT Nut is the Processor. IT Nut processes Customer Personal Data only on documented instructions from Controller.

2.2 Processing Scope

2.3 Controller’s Instructions

IT Nut will process Customer Personal Data only:

1. To provide the Services as described in the Agreement
2. On documented instructions from Controller (the Agreement and Controller’s use of the Services constitute such instructions)
3. To comply with applicable law (with notice to Controller where permitted)

3. Processor’s Obligations

IT Nut commits to:

3.1 Confidentiality

Ensure that persons authorised to process Customer Personal Data are bound by written confidentiality obligations or are under an appropriate statutory obligation of confidentiality.

3.2 Security of Processing

Implement appropriate technical and organisational measures ("TOMs") to ensure a level of security appropriate to the risk, including:

3.3 Assistance with Data Subject Rights

IT Nut will, to the extent reasonably possible, assist Controller in fulfilling Controller’s obligations to respond to data-subject requests under applicable law, including rights of access, rectification, erasure, restriction, portability, and objection. This assistance is provided via our standard support channels.

3.4 Assistance with DPIAs and Consultations

IT Nut will provide reasonable assistance to Controller in conducting Data Protection Impact Assessments (DPIAs) and consultations with supervisory authorities, where required by applicable law.

3.5 Return or Deletion of Data

At termination of the Services, IT Nut will, at Controller’s choice:

• Return a copy of Customer Personal Data to Controller (where technically feasible); or
• Delete all Customer Personal Data
  unless applicable law requires continued storage. IT Nut will certify deletion upon request. Standard post-termination data retention is 30 days (per Terms of Service § 10.5) unless Controller requests earlier deletion.

3.6 Demonstrating Compliance

On reasonable request and no more frequently than once per year (except in case of Personal Data Breach or regulatory investigation), IT Nut will make available to Controller information necessary to demonstrate compliance with this DPA, including:

• Our current TOMs documentation
• Sub-processor list
• Recent audit summaries (where available)
• Incident logs (anonymised) relevant to Controller’s services

4. Sub-Processors

4.1 General Authorisation

Controller provides general authorisation for IT Nut to engage sub-processors to assist in providing the Services. This includes, by category:

A detailed current list is available on request to privacy@itnuthosting.com.

4.2 Obligations on Sub-Processors

IT Nut will:

1. Enter into written agreements with each sub-processor imposing data-protection obligations substantially similar to those in this DPA
2. Remain liable to Controller for sub-processors’ acts and omissions
3. Conduct reasonable due diligence on sub-processors

4.3 Notification of New Sub-Processors

IT Nut will give Controller at least 30 days’ advance notice (via email or dashboard) of any new sub-processor in a new category or any change that materially expands sub-processor scope.

4.4 Objection Right

Controller may object in writing to a new sub-processor within 30 days of notification, on reasonable data-protection grounds. On objection:

1. The parties will discuss alternatives in good faith
2. If no alternative is reasonably available, Controller may terminate the affected Service with a pro-rata refund of unused Fees

5. International Data Transfers

5.1 Transfer Locations

Customer Personal Data may be transferred to and processed in:

• Bangladesh (our primary location)
• United States (for USA-located Services and certain backups)
• Other jurisdictions where our sub-processors operate (e.g., Cloudflare’s global network, payment processors)

5.2 Transfer Mechanism for EU/EEA/UK Data

For transfers of Customer Personal Data from the EU/EEA or UK to jurisdictions not recognised as providing adequate protection (including Bangladesh and the United States, subject to any applicable adequacy decision):

1. The parties incorporate the EU Standard Contractual Clauses (2021/914) Module 2 (Controller to Processor), which is deemed executed by both parties by entering into this DPA
2. Where data is onward-transferred to a sub-processor in such a jurisdiction, IT Nut will ensure that the sub-processor is bound by SCCs or an equivalent mechanism
3. For UK data, the UK International Data Transfer Addendum to the SCCs applies

5.3 Bangladesh Personal Data Protection Act

Once the Bangladesh Personal Data Protection Act comes into force, the parties will cooperate in good faith to implement any required mechanisms for cross-border transfer.

6. Personal Data Breach Notification

6.1 Notification Timeline

IT Nut will notify Controller without undue delay, and in any event within 72 hours after becoming aware of a Personal Data Breach affecting Customer Personal Data.

6.2 Notification Content

The notification will include, to the extent available:

1. The nature of the breach, categories and approximate number of affected data subjects and records
2. Likely consequences
3. Measures taken or proposed to address the breach and mitigate its effects
4. Point of contact for more information

6.3 Ongoing Updates

If complete information is not available at the time of initial notification, IT Nut will provide updates as further information becomes available.

6.4 Controller’s Obligations

Controller is responsible for notifying data subjects and supervisory authorities of breaches where required by applicable law, based on the information IT Nut provides. IT Nut will provide reasonable assistance.

7. Audit Rights

7.1 Controller’s Audit Right

Controller (or an independent third-party auditor appointed by Controller, bound by confidentiality) may audit IT Nut’s compliance with this DPA:

• Scope: Limited to matters directly relevant to Controller’s Customer Personal Data
• Frequency: Once per year, unless a Personal Data Breach or regulatory order requires otherwise
• Notice: At least 30 days’ advance written notice
• Conduct: During IT Nut’s normal business hours; non-disruptive to operations
• Costs: Controller bears its own audit costs; if the audit reveals material non-compliance, IT Nut bears its own remediation costs

7.2 Alternative: Third-Party Attestations

IT Nut may satisfy audit requests by providing relevant third-party audit reports, certifications (e.g., ISO 27001 if obtained), or written responses to questionnaires, where reasonable.

8. Liability

The parties’ respective liability under or in connection with this DPA is subject to the Limitation of Liability in Terms of Service Section 12, except that this limitation does not apply to the extent that it conflicts with mandatory non-excludable rights under GDPR Article 82 or equivalent applicable law.

9. Term and Termination

9.1 Term

This DPA takes effect on the Effective Date and continues for the term of the Agreement, plus any period required for return, deletion, or statutory retention of Customer Personal Data.

9.2 Termination

This DPA terminates automatically on termination of the Agreement. Provisions relating to return/deletion of data, confidentiality, and liability survive termination.

10. General

10.1 Conflict

In the event of a conflict between this DPA and the Terms of Service, this DPA prevails with respect to matters of data protection.

10.2 Standard Contractual Clauses Prevail

Where the SCCs apply, the SCCs prevail over any conflicting terms in this DPA.

10.3 Governing Law

This DPA is governed by the law specified in the Terms of Service (Bangladesh), except that where the SCCs or a specific data-protection regime require a different governing law, that law applies to the extent required.

10.4 Amendments

We may update this DPA from time to time to reflect changes in applicable law or our practices. Material changes follow the amendment procedure in the Terms of Service.

11. Contact

• Data protection queries: privacy@itnuthosting.com
• DPA requests / execution: privacy@itnuthosting.com
• Data subject requests: privacy@itnuthosting.com
• Breach notifications: privacy@itnuthosting.com + support@itnuthosting.com
• Data Protection Officer: To be appointed; interim contact via privacy@itnuthosting.com

---

Need a signed copy? If your compliance programme requires a counter-signed DPA (for example, to satisfy a DPIA or an enterprise customer questionnaire), email privacy@itnuthosting.com and we will provide an executable version within 5 Business Days.

Document: Policy Version History (Change Log)
Version: 2.1 | Effective Date: 20 April 2026 | Last Updated: 26 April 2026
Applies To: All legal policies in this suite
This document is the official change log for IT Nut Hosting’s legal policy suite. The live, queryable change log is maintained in the Policy Change Log database linked below. Every material amendment to any policy is recorded there with date, document, version, summary, and reason.

Live Change Log Database

The authoritative, real-time change log is the Policy Change Log database under this Legal Policies parent page. Open it directly: Policy Change Log
Every update to any policy creates a new entry with structured metadata: date, document, version, type (Major/Minor/Patch/Correction), section, summary, reason, and customer-notice tracking.

Why We Keep a Version History

Transparency with our Customers is fundamental. By maintaining a complete change log:

1. Customers know when each policy changed and what changed
2. Customers can verify that material changes were notified per our amendment procedure
3. Regulators and auditors have a clear audit trail
4. Disputes about which version of a policy was in effect on a given date can be resolved definitively

Current Policy Versions (as of 26 April 2026)

About Versioning — Why v2.0?

The previous IT Nut Hosting legal policies (informal TOS, refund, abuse, fair-usage policies published 2021–2025) constituted version 1.x of our policy framework. The 20 April 2026 comprehensive relaunch is therefore version 2.0 — a major version bump because:

• The entire structure is new (modular 9-document suite vs. prior single informal page)
• Substantive new commitments (Limitation of Liability, Indemnification, Force Majeure, formal SLA, DPA) that did not exist in v1.x
• Material changes affecting customer rights and obligations
• Full alignment with current Bangladesh law (CSA 2023, CRPA 2009) and international standards (GDPR, ICANN 2013 RAA, DMCA)

How Material Changes Are Handled Going Forward

When a material change is made to any policy:

1. Drafting — Revised language is prepared with internal legal review
2. Database entry — A new row is added to the Policy Change Log database with full metadata
3. Document update — Version number on the affected document is bumped (major/minor/patch per scheme below)
4. Notice to Customers — 30 days’ advance email notice to all active Customers (where the change affects their rights, obligations, or fees)
5. Dashboard banner — Persistent notice on Customer dashboard during the notice period
6. Website update — Public policy pages updated on the effective date
7. Effective date — Revised policy takes effect on or after the notice period
8. Notice tracking — Notice Sent Date field in the database is updated when customer notification is sent
   Non-material changes (typo corrections, formatting improvements, clarifications without legal effect) are made without advance notice but are still recorded in the database with a patch version bump.

Versioning Scheme

We use semantic versioning for policies:

Document Archive (Prior Versions)

Prior versions of policies are archived internally and available on written request to legal@itnuthosting.com. Please specify: which document, which version or date range, and the purpose of your request.
Archives are retained for a minimum of 6 years (matching our tax-record retention), or longer where required by law or ongoing dispute.

Superseded Documents

Next Scheduled Review

• Regular review: Annually on the anniversary of the last comprehensive update (next: 20 April 2027)
• Event-driven review: On enactment of Bangladesh Personal Data Protection Act; significant ICANN policy changes; significant CSA 2023 amendments; operational or commercial triggers

Contact

• Policy questions / request for prior version: legal@itnuthosting.com
• Privacy-related policy questions: privacy@itnuthosting.com
• General support: support@itnuthosting.com

Want to see a prior version? Email legal@itnuthosting.com with the document name and the period you’re asking about. We respond to archive requests within 5 Business Days.