Acceptable Use Policy

Version 1.1 · Last updated 24 October 2026

This policy is part of our Terms of Service. Breaking it is breaking the Terms. It applies to the client, the client's users, and anyone else the client lets use the account.

1. One account, one business

AYRAA gives each client one website for one business: the business named on the account. The price of a plan is set by its number of pages, so every page must belong to that business.

The business may have several branches, services, trips or products; they all belong on its one website. It may describe and sell things other businesses supply (a partner's trek, a hotel it books for guests, a brand it stocks), as long as the visitor is dealing with the client's business: its name, its contact details, its booking.

2. Pages for another business are not allowed

A client may not use any page of its website for another business, whether paid, free, or as a favour. For example, this is not allowed:

Client A takes money from business B, builds B a page in one of A's own page slots, and then points B's domain, or a subdomain such as b.example.com, at that page, so that B's customers land on a page hosted on A's account.

In particular, a client may not:

• build a page, or a set of pages, that presents another business as the one the visitor is dealing with (its own name, logo, phone number, email, WhatsApp number or booking address);
• rent, sell, lend or give away pages, page slots, the website's address or a login;
• put another business's contact details in the site details, contact form or booking form, so that its customers' messages come through the client's account.

A second business needs its own account and plan.

Agencies. A web designer or agency may build and manage websites for its own customers only under a separate written agency agreement with us, at the agency price we quote. Without that agreement, building for others is not allowed, and each of those businesses must have its own account.

3. Domains, subdomains and redirects

A client may not send another business's visitors to its website, or its visitors to another business, by any means. This includes:

• pointing, forwarding or redirecting another business's domain, or any subdomain of it, at the client's website or at any page in it;
• creating a subdomain of the client's own domain (such as b.clientdomain.com) for another business and forwarding it to a page on the client's website;
• pointing, forwarding or redirecting the client's domain, or the address we give it, at another business;
• using a domain that copies or closely imitates another business's name or brand, or one the client has no right to use.

Forwarding set up outside AYRAA counts. A domain company or forwarding service can send visitors anywhere, and we cannot stop that. So this rule is about the result: if another business's domain or subdomain lands on a client's website, that is a breach, whoever set it up.

Scripts and redirects inside the website are not possible. The editor shows everything a client types as text, and lets no one add code, scripts or redirects to a page. Trying to get around that, for example through a link or an embedded map or video, is a breach.

We connect a client's own domain only when the client asks us to, and we may ask the client to show that it is entitled to use it. We may refuse a domain, or disconnect one, that does not belong to the business on the account. When an account ends, we disconnect its domains.

4. Links and search engines

Links to other websites are fine: suppliers, partners, reviews, maps, booking platforms. A client may not publish:

• a page whose main purpose is to pass visitors or search engines on to another business ("doorway" or "bridge" pages);
• affiliate pages whose only content is another seller's offer;
• paid links, or pages of links, to help other websites' search rankings;
• hidden text or links, or anything that shows search engines something different from what visitors see.

5. Honesty and impersonation

A client may not:

• pretend to be another person or business, or copy another business's website, name, logo or design so that visitors might take one for the other;
• show a licence, registration, membership, award, review or testimonial it does not hold or did not receive;
• use the website for fraud, phishing, a fake business, or to take bookings or payments for services it does not intend to provide;
• ask visitors for passwords, card numbers or bank details. The contact and booking forms are for enquiries; they are not payment forms.

6. Lawful content

A client is responsible for everything on its website and must follow the law of Nepal and of the places its website is aimed at. It may not publish anything unlawful, including under Nepal's Electronic Transactions Act, 2063, Copyright Act, 2059, Consumer Protection Act, 2075, Advertisement (Regulation) Act, 2076 and E-Commerce Act, 2081: for example illegal goods or services, gambling, sexual content, hate, harassment or threats, misleading advertising, or anything it has no right to use (photos, text, logos or trademarks of others).

A client must hold the licences and registrations its business needs, such as a tourism or trekking licence, its PAN, and registration as an online seller where the E-Commerce Act requires it.

7. Enquiries, email and photos

A client may not:

• collect enquiries for another business, or pass them on to one as a service;
• use the forms, or the emails we send for it, to send messages people did not ask for;
• send email through a sending account that is not its own business's;
• use our photo storage to serve images to other websites, or as storage for anything not on its website.

8. The service itself

A client may not:

• try to reach another client's information or admin panel;
• test, scan or attack the service's security, unless we have agreed it in writing;
• send so many requests that the service slows for others, or use software to do so;
• open several accounts, or use someone else's, to get around a plan's limits;
• upload malware, or link to it.

9. How we check

We look when something gives us a reason: a report, a complaint, a request to connect a domain, unusual use, or a request from an authority. We may also check at random. When we look we may review the published pages and their earlier versions, the domains connected to the website and public records about them, where the links lead, the admin panel's security log, and how many enquiries the website received. We read the content of an enquiry only to investigate a specific report, or when the law requires it. Our Privacy Policy (section 9) explains what we keep.

10. What happens if you break this policy

Using the website for another business

Using the website, or any page of it, for another business (sections 2 and 3) is a serious breach. It includes building or keeping a page for another business, and pointing, forwarding or redirecting another business's domain or subdomain at the website. If we find it:

10.1 We suspend the whole account at once, without notice. The website goes offline and shows nothing to visitors, its contact and booking forms stop accepting messages, and the admin panel may be closed to every user of the account. We tell the client why as soon as we reasonably can.

10.2 The fees stay as they are. We charge nothing extra for the breach, but no fee is refunded or reduced for the time the account is suspended, and fees that fall due while it is suspended remain payable.

10.3 We decide whether the account comes back. We look at what happened, how long it went on, whether it happened before, and what the client does once told. We may restore the account once the other business's pages are removed and its domains disconnected, or we may end the agreement under the Terms of Service, with no refund. We do not have to restore an account.

10.4 If we end the agreement, the website stays offline, we disconnect every domain connected to it, and we keep the content and enquiries for 90 days and then delete them, as the Terms of Service (section 13.3) say.

10.5 We may refuse a new account from the business, its owners, or anyone acting for them, after we have ended an agreement for a breach of this policy.

10.6 We may tell the business affected. Where a client used another business's name, domain, content or customers, we may tell that business what we found and what we did. We may also report it to the police or a regulator where the law requires it or someone may be harmed.

10.7 The client answers for what it did. The other business, its customers and anyone else misled deal with the client, not with us. If someone makes a claim against us because of the breach, the client covers our reasonable costs and losses, as the Terms of Service (section 9.5) say.

Any other breach

For any other breach we may, depending on how serious it is:

• ask the client to fix it within 7 days;
• take a page off the website (unpublish it); its versions are kept, and it can be published again once fixed;
• disconnect a domain;
• suspend the account, or end the agreement, with no refund;
• report it to the police, a regulator or the business affected, where the law requires it or someone may be harmed.

Unlawful content, fraud, impersonation or a security risk may be treated as a serious breach, as above.

In every case

We keep a record of what we found and what we did, for the period in our Privacy Policy. Acting on one breach does not stop us acting on another, and not acting at once does not mean we accept it.

11. Reporting misuse

If a website we host is misusing your name, your domain, your content or your customers, write to (email address to be confirmed) with the website's address, what is wrong, and how to reach you. If it concerns your copyright or trademark, tell us what you own and where it appears. We acknowledge reports within 3 working days (Sunday to Friday), and act on them as section 10 says.

12. Changes

We may update this policy as the Terms of Service allow. A new kind of misuse may be added at once when that is needed to protect visitors, other businesses or the service.