Acceptable Use Policy

Collect and communicate lawfully

• Provide notices and obtain required permissions before collecting data or contacting people. Respect consent choices, unsubscribe requests, and device notification settings.
• Do not send spam, misleading promotions, fraudulent requests, impersonation, phishing, or messages to unlawfully obtained audiences. Do not evade delivery-provider or app-store rules.
• Use only data and content you have authority to process. Do not sell access to another customer’s data or use the service for covert surveillance or discriminatory targeting.
• Do not intentionally collect children’s data or regulated/sensitive information through the standard service without a separate approved arrangement. Never send passwords, full card data, authentication secrets, or unnecessary government identifiers.

Keep content and participation safe

• Do not publish illegal content, threats, exploitation, harassment, non-consensual intimate material, or content that infringes privacy or intellectual property rights.
• Do not expose confidential support messages or private personal information on public boards. Published requests, comments, roadmaps, changelogs, and help articles may be copied or indexed.
• Do not manipulate feedback, votes, surveys, delivery metrics, or identities through deceptive automation. Authorised testing must use appropriate test environments and accounts.

Protect the service and other customers

• Do not bypass authentication, scopes, consent gates, rate limits, approval requirements, or tenant boundaries.
• Do not distribute malware, conduct denial-of-service attacks, extract secrets, or use a credential without permission. Report suspected weaknesses through the security contact process.
• Do not use SDK write keys as management authority or embed server tokens in client apps. Revoke compromised credentials promptly.
• Connected AI tools must remain within granted access. Do not use prompt injection or untrusted customer content to induce actions beyond the user’s authorisation.

Delivery-critical and prohibited uses

UserGist is not an emergency or life-safety messaging system. Do not depend on it for medical alarms, critical infrastructure control, emergency dispatch, or other uses where a delayed, missing, or incorrect message could cause serious harm. Notification providers and user device settings affect delivery.

The customer must comply with applicable sanctions and export rules. The service must not be used to facilitate unlawful activity or evade legally applicable restrictions.

Reports and proportionate enforcement

We may investigate reported violations, restrict harmful content or activity, and suspend affected access as permitted by the service agreement and law. Where practical, we should explain the action and provide a way to challenge a mistake. Urgent security or legal risks may require immediate action.

Send reports to [email protected] with the relevant app or URL, a description, and only the evidence necessary to investigate. Do not include credentials or unnecessary personal information.