Acceptable Use Policy

This Acceptable Use Policy applies to every EXVIV user, workspace, monitored source, export, API request, and accountless purchase. It is incorporated into the Terms of Service. You are responsible for activity conducted through your account, workspace, or automated client.

01Public-source boundary

You may submit only public HTTP or HTTPS pages that you are lawfully entitled to monitor. You must not use EXVIV to:

• access an internal network, private address, local service, authenticated page, paywall, private API, or content requiring credentials;
• embed usernames, passwords, tokens, session values, or other credentials in a monitored URL;
• bypass authentication, CAPTCHAs, rate limits, paywalls, robots exclusions, technical restrictions, or instructions that prohibit the requested access;
• target a source where your monitoring purpose, frequency, or use would violate law, contract, or third-party rights; or
• use EXVIV as a vulnerability scanner, port scanner, penetration-testing tool, or mechanism to reach a non-public destination.

02No personal surveillance or sensitive targeting

EXVIV is designed to track commercial changes by companies and products, not to monitor individuals. You must not use it to:

• stalk, harass, intimidate, dox, threaten, or facilitate physical or digital harm;
• build dossiers about a person's movements, relationships, health, finances, precise location, sexuality, religion, immigration status, political activity, or other sensitive traits;
• make employment, housing, credit, insurance, education, healthcare, or other eligibility decisions about a person;
• collect personal information in violation of privacy, data-protection, communications, employment, or consumer-reporting law; or
• target children or services primarily directed to children.

03No abuse of EXVIV or third-party systems

You may not:

• probe, attack, overload, disrupt, degrade, or interfere with EXVIV, a monitored source, a provider, or another customer;
• introduce malware, malicious instructions, destructive payloads, phishing, credential harvesting, or code intended to compromise a system or person;
• evade plan limits, rate limits, access controls, payment requirements, review gates, source validation, or security protections;
• access another workspace, session, purchase, receipt, or private record without authorization;
• reverse engineer or extract non-public source code, prompts, credentials, infrastructure details, or proprietary logic except where law expressly permits;
• use multiple accounts, wallets, identities, or requests to conceal abuse or avoid enforcement; or
• send wallet private keys, seed phrases, or unrelated secrets to EXVIV.

04Content, evidence, and intellectual property

You may not use EXVIV to:

• upload or distribute unlawful, deceptive, defamatory, infringing, or unauthorized material;
• remove source attribution, alter evidence to mislead, present interpretation as captured fact, or fabricate an EXVIV receipt;
• impersonate a company, rights holder, user, AIURION employee, or authorized representative;
• republish raw captures or private workspace data in a way that violates law or third-party rights;
• resell, sublicense, scrape, or bulk-extract EXVIV to create a competing dataset or monitoring service without written permission; or
• use third-party names or marks to falsely imply affiliation, sponsorship, or endorsement.

05Automated and agent use

Automated clients must follow the published catalog and OpenAPI contract, use bounded request rates, validate product inputs before payment, and apply an appropriate wallet spend policy. Sending a PAYMENT-SIGNATURE authorizes an exact attempted purchase. An agent must not repeatedly submit payments after an indeterminate response or use automation to amplify abuse prohibited by this Policy.

06Legal and trade compliance

You must comply with applicable privacy, intellectual-property, anti-hacking, consumer-protection, employment, export-control, sanctions, anti-corruption, and other laws. You may not use EXVIV for or on behalf of a prohibited person, entity, territory, or transaction, or to evade a legal or regulatory restriction.

07Enforcement

We may investigate suspected violations and may limit a source, reject a request, preserve relevant records, suspend or terminate access, block a wallet or client where technically feasible, or report conduct to affected parties or authorities where appropriate. We will consider context, severity, history, risk, and whether a violation can be cured. We are not required to provide advance notice where immediate action is reasonably needed to protect a person, source, customer, system, or legal interest.