Acceptable Use Policy

Operator: FinDech UAB, company code 307632436
Effective date / last updated: 2026-08-27

This Acceptable Use Policy (AUP) applies to the EVPN website, the EVPN iOS application and VPN service, and any other EVPN client later released through the Download page. It forms part of the Terms of Service.

EVPN provides shared privacy infrastructure. One installation’s misuse can harm victims, exhaust capacity, damage shared IP reputation or interrupt access for everyone, so the following rules apply to all use of the Service.

1. Lawful, ordinary use

Subject to the Terms and applicable law, you may use EVPN for purposes such as:

  • Private browsing and ordinary encrypted connectivity
  • Reducing exposure on public or untrusted networks
  • Lawful remote work, development and administration
  • Accessing services that permit VPN connections
  • Good-faith security research on systems you own or are expressly authorised to test
  • Protecting communications and personal information

VPN laws differ by country. You are responsible for determining whether and how you may lawfully use EVPN where you are located.

2. Illegal and harmful conduct

You must not use or attempt to use EVPN to commit, promote or materially facilitate:

  • Conduct that violates applicable criminal or civil law
  • Child sexual abuse or exploitation, or the creation, possession, solicitation or distribution of child sexual abuse material
  • Human trafficking, credible threats, stalking, harassment or violence
  • Fraud, phishing, impersonation, identity theft, scams or deceptive financial schemes
  • Distribution of malware, ransomware, spyware or malicious code
  • Operation or command of a botnet or compromised devices
  • Unauthorised access to, control of or interference with a system, account or network
  • Theft, unlawful disclosure or trade in credentials, personal data, payment data or confidential information
  • Unlawful sale or distribution of controlled, counterfeit, stolen or otherwise prohibited goods or services
  • Knowing, systematic or commercial-scale infringement of intellectual-property rights

3. Network and service abuse

You must not:

  • Launch or participate in denial-of-service, reflection, amplification, flooding or resource-exhaustion attacks
  • Scan, probe, enumerate or test systems without the owner’s authorisation
  • Send spam or other unsolicited bulk communications
  • Run an open relay, public proxy, public exit node or commercial resale service through EVPN without written permission
  • Generate automated traffic at a volume or pattern that degrades EVPN or a third-party service
  • Circumvent rate limits, installation restrictions, authentication, credential revocation or other technical controls
  • Attempt to obtain another installation’s identifier, credentials, tunnel material or service data
  • Interfere with VPN gateways, the control plane, domain-name resolution, commercial-placement disclosures or security monitoring
  • Misrepresent a virtual or partner-managed EVPN location as infrastructure you own or operate
  • Use EVPN in a way that predictably causes disproportionate complaints, blocklisting or disruption for users of the same shared exit

Security testing of EVPN itself requires prior written authorisation unless a published vulnerability-disclosure policy expressly permits the activity.

4. Third-party rules

EVPN does not grant permission to access another service in violation of that service’s terms, evade a lawful access restriction or use content without the necessary rights. A third-party site may block shared VPN addresses or require additional verification. You are responsible for your relationship with that provider.

Please include enough specific, verifiable information for us to assess a report, such as relevant timestamps (with time zone), EVPN exit IP address, destination, incident description, supporting logs and a way to contact you. Do not send passwords, private keys or unnecessary personal data.

Sending a request does not waive any requirement that it be validly issued, served and within the authority of the sender. FinDech UAB may request clarification or formal service.

6. How enforcement works

Depending on seriousness, reliability of the evidence, urgency, risk of harm and recurrence, FinDech UAB may:

  • Ask for more information or give a warning
  • Apply proportionate rate or capacity limits
  • Release an active tunnel or revoke an installation credential
  • Temporarily or permanently suspend access
  • Preserve information already held when lawfully required
  • Notify an infrastructure provider, affected party or competent authority when legally required or reasonably necessary to address serious harm

EVPN’s VPN gateways are designed not to keep browsing history, DNS queries, destination logs or packet contents. We therefore investigate reports using the information supplied by the reporter, short-lived service and security records described in the Privacy Policy, aggregate operational signals and information lawfully available from providers. Enforcement does not change the commercial-placement system into a traffic-monitoring system.

Immediate action may be taken without advance notice when necessary to protect users, infrastructure or third parties, or to comply with law. Otherwise, we aim to use the least restrictive action reasonably sufficient to stop the violation.

7. Review and appeals

If you believe an enforcement decision was incorrect, contact info@evpn.com with the installation reference shown in EVPN settings, the approximate time of the decision and the reason you request review. Account-free operation and limited logging may restrict what we can verify or restore.

FinDech UAB may update this AUP as threats, infrastructure and law change. The current version and effective date will be published here.