1. INTRODUCTION AND ACCEPTANCE

This Acceptable Use Policy ("AUP" or "Policy") governs the use of all services, networks, systems, websites, and platforms provided by Arrow Networks, Inc. ("Arrow", "we", "us", or "our"). This AUP is incorporated by reference into the Arrow Networks Standard Terms and Conditions available at www.arrownetworks.com/tos and applies to all customers, users, and account holders (collectively, "Customer" or "you").

By using any Arrow services, accessing our network or systems, or executing a Master Service Agreement, Service Order Addendum, proposal, or other ordering document, you acknowledge that you have read, understood, and agree to be bound by this AUP. If you do not agree to this AUP, you may not use Arrow's services.

Customer Responsibility for End Users. Customers who provide services to their own users, clients, or downstream customers must contractually pass on the restrictions of this AUP and take reasonable steps to ensure compliance, including termination of users who violate this Policy. Customers are responsible for the actions of their users and downstream customers.

Policy Updates. Arrow reserves the right to modify this AUP at any time by posting a revised version at www.arrownetworks.com/legal/aup. Material changes will be identified by updating the version number and "Last Updated" date. Continued use of Arrow services after such updates constitutes acceptance. Customers are responsible for regularly reviewing this Policy.

2. GENERAL PROHIBITIONS

The following activities constitute "Prohibited Use" and are strictly forbidden. This list is not exhaustive; Arrow reserves the right to determine, in its sole discretion, what constitutes a violation of this AUP. Customers may not use Arrow's services, network, systems, or resources in any manner that:

2.1 Legal Violations

• Violates any applicable federal, state, local, or international law, regulation, treaty, or tariff
• Violates data privacy or data protection laws, including but not limited to GDPR, CCPA, and HIPAA
• Facilitates illegal gambling, fraud, money laundering, or other criminal activity
• Distributes, transmits, or stores child sexual abuse material (CSAM) or any content depicting minors in a sexual manner
• Violates export control laws or provides services to sanctioned countries, entities, or individuals

2.2 Network Abuse and Security Violations

• Unauthorized access to, or attempted access to, any computers, networks, systems, or data
• Denial of service (DoS) attacks, distributed denial of service (DDoS) attacks, or DNS spoofing
• Introduction of malicious software including viruses, worms, Trojan horses, ransomware, spyware, or other harmful code
• Port scanning, network probing, or vulnerability scanning of systems without explicit authorization
• Packet sniffing, traffic interception, or monitoring of data not intended for the Customer
• IP address spoofing, hijacking, or falsifying network identity information
• Circumventing or attempting to circumvent authentication, security controls, or access restrictions
• Operating open mail relays, open proxies, or other systems that can be exploited by third parties
• Using Arrow services as a command and control channel for botnets or malware

2.3 Intellectual Property Violations

• Infringing patents, copyrights, trademarks, trade secrets, or other intellectual property rights of Arrow or third parties
• Distributing pirated software, music, movies, or other copyrighted content without authorization
• Using Arrow's trademarks, logos, or branding without prior written permission
• Reverse engineering, decompiling, or disassembling Arrow's software or services

2.4 Harmful Content

• Content that is defamatory, libelous, threatening, harassing, abusive, or invasive of privacy
• Content that promotes violence, terrorism, hate speech, or discrimination based on race, gender, religion, national origin, disability, or sexual orientation
• Deceptive content designed to mislead, defraud, or manipulate users
• Content that violates the privacy rights of others, including unauthorized disclosure of personal information

2.5 Service Abuse

• Reselling Arrow services without explicit written authorization
• Using services in a manner that materially degrades service quality for other Arrow customers
• Circumventing usage limits, metering, or billing systems
• Providing false or misleading information in account registration or service orders
• Using services for activities that create excessive load on Arrow's infrastructure without prior arrangement

3. EMAIL AND MESSAGING POLICIES

3.1 Spam and Unsolicited Communications

Sending unsolicited bulk email ("spam") or unsolicited commercial communications is strictly prohibited. This includes:

• Sending "opt-out" bulk email (email sent to recipients who have not affirmatively requested it)
• Harvesting email addresses from the Internet for the purpose of sending unsolicited communications
• Selling, distributing, or using lists of harvested email addresses
• Sending bulk email from another provider that references or implicates Arrow services
• Using deceptive subject lines, falsified headers, or misleading sender information

3.2 Permitted Bulk Email

Customers may send bulk email only through "closed-loop opt-in" lists where recipients have affirmatively requested to receive communications. Customers sending bulk email must:

• Maintain verifiable records of subscription and consent for all recipients
• Provide a clear and functional unsubscribe mechanism in every message
• Honor unsubscribe requests within ten (10) business days
• Include accurate sender identification and contact information
• Comply with the CAN-SPAM Act and all applicable anti-spam laws

3.3 Email Harassment

Using email for harassment, whether through language, frequency, or volume of messages, is prohibited. Continuing to send email to any individual after being asked to stop constitutes harassment. Mail bombing, flooding, or other attacks designed to disrupt email systems are strictly prohibited.

3.4 Spam Listings

If a Customer or Customer's network is listed on an industry-recognized spam abuse list (such as Spamhaus, SORBS, or similar), such listing shall be deemed a violation of this AUP. Arrow may suspend or terminate services until the listing is resolved.

4. SECURITY REQUIREMENTS

Customers are responsible for the security of their own networks, systems, and accounts. Arrow assumes no responsibility for security failures or breaches resulting from Customer's failure to implement appropriate protective measures.

4.1 Customer Obligations

Customers must:

• • Implement and maintain reasonable security measures appropriate to their use of services
• • Keep all software, operating systems, and applications updated with security patches
• • Use strong, unique passwords and implement multi-factor authentication where available
• • Maintain current and valid contact information for security and abuse communications
• • Respond promptly to security-related communications from Arrow
• • Report suspected security incidents or AUP violations to abuse@arrownetworks.com

4.2 Compromised Systems

If a Customer's system is compromised (e.g., infected with malware, used in attacks, or otherwise abused), Arrow may immediately suspend services to prevent harm to Arrow's network, other customers, or third parties. Suspension may occur without prior notice. Services will be restored once the Customer demonstrates that the compromise has been remediated.

4.3 IP Transit and Dedicated Access Customers

Customers receiving IP transit or dedicated Internet access services must additionally:

• • Maintain valid postmaster@ and abuse@ email addresses for their domains
• • Maintain appropriate reverse DNS (PTR) records for all IP addresses
• • Take reasonable steps to prevent IP spoofing by users and downstream customers
• • Maintain accurate contact information with relevant domain and IP registrars
• • Provide a 24/7 contact for security and abuse issues
• • Implement appropriate filtering (e.g., BCP38/BCP84) to prevent network abuse

5. COPYRIGHT AND DMCA COMPLIANCE

5.1 Policy Statement

Arrow respects intellectual property rights and complies with the Digital Millennium Copyright Act ("DMCA"). Arrow will respond expeditiously to valid claims of copyright infringement and will take appropriate actions, including removing or disabling access to allegedly infringing material.

5.2 Repeat Infringer Policy

Arrow will terminate access for Customers who are repeat copyright infringers. A Customer may be deemed a repeat infringer after receiving multiple valid DMCA takedown notices or upon determination by Arrow that the Customer has engaged in a pattern of infringing activity.

5.3 DMCA Takedown Notices

If you believe that copyrighted material has been infringed using Arrow's services, you may submit a DMCA takedown notice to our designated agent. The notice must include:

• • A physical or electronic signature of the copyright owner or authorized representative
• • Identification of the copyrighted work claimed to be infringed
• • Identification of the material claimed to be infringing and its location
• • Your contact information (address, telephone number, email)
• • A statement of good faith belief that the use is not authorized
• • A statement, under penalty of perjury, that the information is accurate and you are authorized to act

DMCA Designated Agent: Arrow Networks, Inc., Attn: DMCA Agent, [Address], Kansas City, MO [ZIP], Email: dmca@arrownetworks.com

5.4 Counter-Notifications

Customers who believe material was removed in error may submit a counter-notification in accordance with the DMCA. Arrow will provide the counter-notification to the complaining party and restore access if no legal action is initiated within the statutory timeframe.

6. WEBSITE AND PLATFORM USE

6.1 Permitted Use

You may access and use Arrow's websites and online platforms for legitimate business purposes related to evaluating, purchasing, or managing Arrow services. You may download and print content solely for personal, non-commercial, informational use, provided you maintain all copyright and proprietary notices.

6.2 Restrictions

You may not:

• • Copy, reproduce, distribute, or publicly display website content without permission
• • Mirror, frame, or embed Arrow website content on other websites
• • Use automated tools (bots, scrapers, crawlers) to access or collect data from Arrow websites
• • Attempt to gain unauthorized access to restricted areas of Arrow websites or systems
• • Interfere with the proper functioning of Arrow websites or systems
• • Use Arrow trademarks as metatags, keywords, or hidden text without permission

6.3 Third-Party Links

Arrow websites may contain links to third-party websites. Arrow does not endorse, control, or assume responsibility for the content, privacy practices, or availability of third-party websites. Access to third-party websites is at your own risk.

7. ENFORCEMENT AND REMEDIES

7.1 Investigation and Determination

Arrow has sole discretion in determining whether a Customer's activities violate this AUP. Arrow may investigate any suspected violation and may access, preserve, and disclose information as reasonably necessary to investigate violations, comply with legal obligations, or protect Arrow's rights and property.

7.2 Remedial Actions

If Arrow determines that a Customer has violated this AUP, Arrow may take any remedial action it deems appropriate, including but not limited to:

• • Issuing written or verbal warnings
• • Filtering, blocking, or rate-limiting traffic
• • Suspending services, with or without notice
• • Terminating services and the Customer relationship
• • Billing Customer for administrative costs incurred in responding to violations
• • Pursuing legal action to enjoin violations or recover damages
• • Reporting violations to law enforcement authorities

7.3 Emergency Suspension

Arrow may suspend services immediately and without prior notice if Arrow reasonably believes that: (a) immediate suspension is necessary to prevent harm to Arrow's network, other customers, or third parties; (b) the Customer's system has been compromised; (c) the Customer is engaged in illegal activity; or (d) continued service would expose Arrow to legal liability.

7.4 Administrative Fees

Customers who violate this AUP may be charged administrative fees to cover the cost of investigating and responding to violations, with a minimum charge of $200 per incident. Customers who engage in spam or abuse activities may be charged the cost of labor to respond to complaints and issue cancellations.

7.5 No Waiver

Arrow's failure to enforce any provision of this AUP shall not constitute a waiver of that provision or Arrow's right to enforce it at a later time. Arrow's decision not to act on a particular violation does not waive its right to act on similar or other violations.

8. REPORTING VIOLATIONS

If you become aware of any violation of this AUP, please report it to:

Abuse Reports: abuse@arrownetworks.com

DMCA/Copyright: dmca@arrownetworks.com

Security Incidents: security@arrownetworks.com

General Questions: legal@arrownetworks.com

Please include as much detail as possible, including dates, times, IP addresses, URLs, and any other information that would assist in investigating the reported violation.

9. DISCLAIMER

ARROW PROVIDES INFORMATION ON THIS WEBSITE AND IN THIS AUP FOR GENERAL INFORMATIONAL PURPOSES ONLY. WHILE ARROW USES REASONABLE EFFORTS TO PROVIDE ACCURATE AND UP-TO-DATE INFORMATION, ARROW MAKES NO WARRANTY AS TO THE ACCURACY, COMPLETENESS, OR TIMELINESS OF SUCH INFORMATION. THIS AUP IS NOT LEGAL ADVICE AND SHOULD NOT BE RELIED UPON AS SUCH.

CONTACT INFORMATION

For questions regarding these Service Terms, please contact:

Arrow Networks, Inc.

Email: legal@arrownetworks.com