Abuse, Copyright and Legal Requests

Version 1.0 · Effective 19 October 2026

The short version (a plain-English summary; it is not part of this policy and does not change it)

• Report abuse — spam, attacks, phishing, illegal content, anything that breaks our Terms of Service (section 8) — by email to abuse@vpcdesk.com, or with the report form on this page where it is shown.
• Child sexual abuse material: report it to NCMEC's CyberTipline (report.cybertip.org) and tell us where it is. Never send us the material itself.
• Copyright: send a DMCA notice to our designated agent (section 6). If your content was taken down by mistake, you can send a counter-notice.
• We confirm that we received your report, look at it, and tell you what we decided. Urgent and dangerous cases go first. A person reviews every report.
• If your Desk was reported, we tell you what we found and why we acted, and you can appeal to a person at support@vpcdesk.com.
• Police and authorities contact legal@vpcdesk.com and need valid legal process, except in emergencies.

1. About this page

1.1 This page explains how anyone, whether or not they are a VPCdesk customer, can tell Musing Corporation ("we", "us") about abuse or illegal content on VPCdesk, and what we do about it. It also sets out our copyright policy under the US Digital Millennium Copyright Act ("DMCA"), our handling of requests from law enforcement and other authorities, our contact points under the EU Digital Services Act ("DSA"), and how customers can appeal our decisions.

1.2 For customers, this page forms part of the Terms of Service (/terms section 1.2), and it applies alongside the acceptable-use rules in section 8 of the Terms. Capitalised terms not defined here (such as Account, Desk, Agent, Console and Customer Content) have the meanings given in the Terms.

1.3 What VPCdesk is, and what that means for reports. VPCdesk rents cloud computers ("Desks") on which customers have full control (root access). We do not see or curate what is on a Desk, and we usually cannot remove a single file from inside one. When we act on a report, we act on the Desk, its network access, a share link or published service, or the Account — and we normally ask the customer to remove the specific content first.

2. How to report

2.1 Where. Email abuse@vpcdesk.com. Where a report form is shown on this page, you can use it instead; it asks for everything we need. Both routes work for every kind of report, including notices of illegal content under the DSA and copyright notices. For DMCA notices you may also write to our designated agent (section 6.2).

2.2 What to include. The more precise you are, the faster we can act. Please give:

• what is wrong and why you believe it is illegal or breaks our Terms (section 8);
• where it is — the full URL (for example a share link or a site served from a Desk), the IP address, and for network abuse (attacks, scanning, spam) the exact date and time with time zone, the destination IP address and port, and any log lines;
• for spam, the full message headers;
• your name and email address, so we can reply (optional for reports of child sexual abuse material, section 5); and
• a statement that the information in your report is accurate and complete to the best of your knowledge.

2.3 Shared IP addresses. Our customers' Desks share outbound IP addresses. An IP address alone is often not enough for us to find the Desk responsible. An exact time stamp (to the second, with time zone) and the destination address and port help us investigate.

2.4 Do not send us illegal material. Describe it and tell us where it is. This matters most for child sexual abuse material, which you must never copy or send (section 5).

2.5 Abuse of the reporting process. Reports must be made in good faith. We may stop processing reports from anyone who repeatedly sends reports that are manifestly unfounded, after warning them. Knowingly false copyright notices can make the sender liable for damages (section 6.6).

3. What we do with a report

3.1 We confirm receipt. When you give us a contact address, we confirm that we received your report.

3.2 We review it. We look at every report in a timely, careful and objective way. We give priority to reports of the most serious harm — child sexual abuse material, threats to life or safety, active attacks, malware and phishing, and anything getting our shared IP addresses blocklisted. We aim to act on those as quickly as we can; other reports usually take longer. We do not promise a fixed response time. A person reviews every report. We may use automated tools to sort and route reports, and we will say so in our decision if automated means played a part.

3.3 We usually tell the customer. Unless the law, the safety of a person, or the risk of alerting a criminal prevents it, we tell the customer what the report says so that they can fix the problem or explain. We may pass your report to the customer, including your name and contact details if they are needed to resolve it (for example, a copyright notice is forwarded in full). If you want your identity withheld, say so in your report and we will do so where we can; in some cases we may then be unable to act.

3.4 We decide and act. What we do depends on the facts, as set out in section 11 of the Terms. Most cases follow this path:

1. we notify the customer and give a reasonable deadline to fix the problem;
2. we remind them if it is not fixed;
3. once the deadline passes, a member of our staff checks the case, and we restrict the Desk's network access, disable the share link or feature concerned, or suspend the Desk;
4. for serious or repeated breaches, we suspend or terminate the Account.

We skip steps, and act immediately, when that is needed to stop serious or ongoing harm, to protect our shared IP addresses, other customers or third parties, or to comply with the law.

3.5 We tell you the outcome. We let you know what we decided about your report, unless the law or the safety of a person prevents it, and how you can seek a review if you disagree (section 9).

3.6 We tell the customer why. Whenever we restrict a Desk, a feature or an Account, we send the customer a statement of reasons (section 8).

4. Reporting illegal content in the EU (Digital Services Act)

4.1 If you believe content stored on VPCdesk is illegal under EU law or the law of an EU Member State, you can notify us by email to abuse@vpcdesk.com (with "Illegal content (EU)" in the subject), or with the report form on this page where it is shown. Your notice should contain:

• (a) a sufficiently substantiated explanation of why you consider the content illegal;
• (b) a clear indication of its exact location — the URL or URLs, and where needed further details such as the Desk's share link, IP address and time;
• (c) your name and email address (not required if your notice concerns child sexual abuse, exploitation or related offences); and
• (d) a statement confirming your good-faith belief that the information and allegations in the notice are accurate and complete.

4.2 We confirm receipt, decide on the notice in a timely, diligent, non-arbitrary and objective manner, and tell you our decision and the ways to seek redress. If we used automated means to process or decide on your notice, we say so.

4.3 A notice that meets 4.1 may give us knowledge of the content concerned for the purposes of EU law. We may still decline to act if, after review, we conclude the content is not illegal and does not breach our Terms; we will explain why.

5. Child sexual abuse material

5.1 Do not copy, download, screenshot or send us the material. Possessing or sending it is a crime in most countries, even when the intention is to report it.

5.2 Report it to the authorities:

• in the United States, to the NCMEC CyberTipline at report.cybertip.org or 1-800-843-5678;
• in the EU and elsewhere, to your national hotline (listed at inhope.org) or to the police.

5.3 Then tell us where it is — the URL, share link or IP address and time — by email to abuse@vpcdesk.com, or with the report form on this page where it is shown. You do not have to give your name.

5.4 What we do. We act on these reports first. We disable access, preserve the evidence as the law requires, report to NCMEC and law enforcement, and terminate the Account. We do not warn the customer before we act, and we will not discuss the case with them in a way that could alert them or harm an investigation.

6. Copyright: DMCA notices

6.1 We respect the intellectual property of others and expect our customers to do the same. We respond to notices of alleged copyright infringement that comply with the DMCA (17 U.S.C. § 512). Rights holders outside the United States may use this procedure too, or the general report route (section 4 for EU law). This procedure is for copyright only; report trademark and other claims through the general route in section 2.

6.2 Designated agent. Send DMCA notices to our designated agent:

Copyright Agent, Musing Corporation 8 The Green, Ste A, Dover, DE 19901 Email: abuse@vpcdesk.com Phone: +1 302 907 9589

Where a report form is shown on this page, you may also use its copyright option.

6.3 What a notice must contain. Under 17 U.S.C. § 512(c)(3), your notice must be in writing and include:

1. a physical or electronic signature of a person authorised to act on behalf of the owner of the exclusive right that is allegedly infringed;
2. identification of the copyrighted work claimed to have been infringed or, if multiple works at a single site are covered by one notice, a representative list of them;
3. identification of the material claimed to be infringing and that is to be removed or access to which is to be disabled, and information reasonably sufficient to permit us to locate it (for example the exact URL or share link);
4. information reasonably sufficient to permit us to contact you, such as an address, telephone number and email address;
5. a statement that you have a good-faith belief that use of the material in the manner complained of is not authorised by the copyright owner, its agent or the law; and
6. a statement that the information in the notice is accurate, and, under penalty of perjury, that you are authorised to act on behalf of the owner of the exclusive right that is allegedly infringed.

Please consider whether the use may be fair use, or licensed, before sending a notice.

6.4 What we do with a valid notice. We act expeditiously. We forward the notice to the customer and ask them to remove or disable the material promptly. If they do not, or if the notice concerns a share link or published service as a whole, we disable access to the material by the means available to us — usually by disabling the share link or published service, restricting the Desk's network access, or suspending the Desk. We tell the customer what we did and that they may send a counter-notice. We may decline a notice that does not substantially comply with 6.3, and will tell you what is missing where we can.

6.5 Counter-notice. If you are the customer and believe the material was removed or disabled by mistake or misidentification, you may send a counter-notice to our designated agent. Under 17 U.S.C. § 512(g)(3) it must be in writing and include:

1. your physical or electronic signature;
2. identification of the material that has been removed or to which access has been disabled, and the location at which it appeared before it was removed or disabled;
3. a statement under penalty of perjury that you have a good-faith belief that the material was removed or disabled as a result of mistake or misidentification of the material to be removed or disabled; and
4. your name, address and telephone number, and a statement that you consent to the jurisdiction of the Federal District Court for the judicial district in which your address is located (or, if your address is outside the United States, any judicial district in which Musing Inc may be found), and that you will accept service of process from the person who provided the original notice or an agent of that person.

We send a copy of a valid counter-notice to the person who sent the original notice. Unless that person tells us, within 10 business days of receiving it, that they have filed a court action seeking to restrain you from the infringing activity, we restore the material or stop disabling access to it within 10 to 14 business days of receiving the counter-notice. Restoring access may mean lifting the restriction we placed on the share link, service or Desk.

6.6 False claims. Under 17 U.S.C. § 512(f), anyone who knowingly materially misrepresents that material is infringing, or that it was removed by mistake, may be liable for damages, including costs and attorneys' fees. If you are unsure whether material infringes, get legal advice first.

7. Repeat infringers

7.1 It is our policy, in appropriate circumstances, to terminate the Accounts of customers who are repeat infringers. We record each valid copyright notice against the Account concerned. A notice counts unless it was withdrawn, successfully countered (6.5), or shown to be mistaken.

7.2 Ordinarily, we terminate an Account that has received three counted notices within any twelve-month period. We may terminate sooner — including on a single notice — where the infringement is wilful, large-scale, or the main purpose of the Account, and we may also terminate Accounts we otherwise find to infringe repeatedly. A customer whose Account is terminated under this policy may not open a new one.

7.3 Termination for repeat infringement follows the Terms, including the statement of reasons (section 8) and appeal (section 9).

8. If your Desk or Account is reported (for customers)

8.1 What we tell you. If we restrict, suspend or terminate any part of your Account because of a report, because content is illegal, or because of a breach of our Terms, we send you a statement of reasons — at the latest when the restriction starts — that sets out:

• what we did (for example disabling a share link, restricting network access, suspending a Desk or the Account), its scope, and how long it will last;
• the facts and circumstances we relied on, including whether we acted on a third-party report and, where needed, an outline of that report;
• whether automated means were used in detecting the issue or deciding on it;
• the legal ground (if we consider the content illegal) or the rule in our Terms (if it breaks them), with an explanation; and
• how you can appeal (section 9) and other redress available to you.

We may leave out information where the law requires it, or where including it would put a person at risk or alert a criminal.

8.2 Fixing it. Most problems end when the customer removes the content or stops the activity and tells us. Reply to our message to say what you changed, and we will review and lift the restriction when we are satisfied the problem is fixed and the risk has passed.

8.3 Getting your data. If a suspension stops you reaching your data, tell us. Unless the law, an investigation or the nature of the content prevents it, we will help you retrieve data that is not itself the subject of the action.

9. Appeals

9.1 Who can appeal. A customer affected by our decision, and a person who reported content and disagrees with our decision on their report.

9.2 How. Reply to our decision, or email support@vpcdesk.com with "Appeal" in the subject, within six months of the decision. Tell us why you think the decision was wrong and add anything we did not have. A customer who accepts there was a problem but has fixed it can instead ask for reinstatement (8.2).

9.3 How we decide. A person reviews every appeal — where practical, someone other than the person who made the original decision — and we do not decide appeals by automated means alone. We reverse or change our decision if it was wrong, if the content or conduct was neither illegal nor against our Terms, or if a lighter measure is enough. We send you a reasoned decision.

9.4 Other routes. You may also have rights under the law where you live, including the right to take the matter to a court or a competent authority. EU users may contact the Digital Services Coordinator in their Member State. Appealing to us does not affect those rights.

10. Law enforcement and government requests

10.1 Where to send them. Law-enforcement agencies, courts and other authorities should send requests to legal@vpcdesk.com, with the requesting authority's name, the officer's contact details, the legal basis, and the Account, Desk, IP address and time, or other identifiers concerned.

10.2 Valid legal process. We disclose information about our customers only when required by law and on valid legal process, when we report child sexual abuse material as the law requires (section 5.4), or in an emergency as described in 10.4. For United States authorities this means the process required by the Stored Communications Act — generally a subpoena for basic subscriber information, a court order for other non-content records, and a search warrant for the contents of a Desk or communications. Authorities outside the United States should use a mutual legal assistance request or another channel recognised under US law or an applicable international agreement, or send an order under applicable law that binds us. We review every request for legal sufficiency and may object to, narrow or refuse a request that is overbroad or not valid.

10.3 Notice to the customer. We will try to tell the affected customer about a request for their data before we disclose it, so they can challenge it, unless the law or a court order prohibits notice, or notice would be dangerous (for example, a risk of death or serious harm) or futile, or would harm an investigation into a crime against a child or a similar serious crime. Where we delay notice, we will try to give it once the reason has passed, if the law allows.

10.4 Emergencies. If we believe in good faith that an emergency involving danger of death or serious physical injury to a person requires disclosure without delay, we may disclose limited information needed to deal with it. Authorities making an emergency request should explain the emergency and how the information will help.

10.5 Preservation. On a lawful preservation request from a law-enforcement authority, we take reasonable steps to preserve the records concerned that we still hold, for the period the law provides (in the United States, 90 days, extendable once by a further 90 days on renewed request, under 18 U.S.C. § 2703(f)), pending legal process. Material reported to NCMEC is preserved as the law requires.

10.6 What we hold. We keep limited records. We do not log the content of our customers' traffic or the websites their Desks visit. We may keep a short-lived security record linking a shared outbound address and port, at a given time, to the Desk that used it, but we may still be unable to identify which Desk used a shared IP address at a particular moment. What we collect and how long we keep it is described in the Privacy Policy. We do not have, and cannot provide, data we do not hold.

10.7 Threats to life or safety. If we become aware of information giving rise to a suspicion that a criminal offence involving a threat to the life or safety of a person has taken place, is taking place or is likely to take place, we inform the competent law-enforcement or judicial authorities, including those of the EU Member State concerned where required.

10.8 Costs. We may seek reimbursement of reasonable costs of responding to legal process where the law allows. We do not charge in emergencies or for reports about child sexual abuse.

11. Contact points

11.1 For authorities (DSA Article 11). Our single point of contact for direct communication with EU Member State authorities, the European Commission and the European Board for Digital Services is:

legal@vpcdesk.com Language: English.

11.2 For users (DSA Article 12). Our single point of contact for users of the Services, including customers and anyone reporting content, is:

support@vpcdesk.com — a person reads every conversation, and you can always ask for one. Language: English.

For help with your Account or billing, write to support@vpcdesk.com (our support chat in the Console can also hand you to a person). For abuse reports, use abuse@vpcdesk.com.

11.3 Legal representative in the EU (DSA Article 13). Our legal representative in the European Union, who is also our representative under Article 27 of the GDPR, is: Data Protection Representative Limited (DataRep), 77 Camden Street Lower, Dublin, D02 XE80, Ireland — datarequest@datarep.com (mention VPCdesk) or www.datarep.com/data-request. Authorities may address it instead of, or as well as, us on any matter under the DSA.

11.4 Other contacts.

Portions of section 6 are adapted from Basecamp's open-source policies (github.com/basecamp/policies), CC BY 4.0 (creativecommons.org/licenses/by/4.0), modified; the notice and counter-notice elements follow 17 U.S.C. § 512. Other portions draw on GitHub's site policies, dedicated to the public domain under CC0 1.0.