Acceptable Use Policy

1. Purpose of the Service

RepuFix is a data conditioning and analysis tool. Its sole intended purpose is to help users assess and improve the internal quality of contact datasets — including cleaning, classifying, scoring, verifying, and simulating list performance. The Service is not a sending tool, a campaign platform, or a compliance system.

All use of the Service must be consistent with this purpose. Any use of the Service to facilitate, enable, or prepare for activities that violate applicable law or this AUP is prohibited, regardless of whether those activities occur through RepuFix itself or through a downstream tool or channel.

2. Prohibited Data Sources

You may not upload, process, or analyze any list or dataset that was obtained through any of the following means:

• Purchased from a third-party list vendor, data broker, or lead provider, where the contacts have not provided express, verifiable opt-in consent to receive communications from you specifically
• Harvested, scraped, or extracted from websites, social networks, public directories, or any other online source without the explicit permission of the platform and the individuals whose data is being collected
• Obtained through deceptive means, including fake sign-up forms, misleading lead magnets, pre-checked consent boxes, or implied consent that does not meet the threshold required under applicable law
• Stolen, leaked, or otherwise obtained without authorization from any system, database, or third party
• Shared or transferred from another party without a documented, lawful basis for that transfer under applicable data protection law
• Collected from individuals who have previously unsubscribed, opted out, or requested deletion of their data from your systems
• Sourced from countries or regions where the method of collection would violate local law, regardless of where your business is incorporated

You represent and warrant, each time you upload data to the Service, that your data was collected lawfully and that you have a valid legal basis for processing it. RepuFix does not audit the provenance of uploaded data, but reserves the right to investigate and act on credible reports of prohibited data sourcing.

3. Prohibited Downstream Uses

You may not use data processed through RepuFix as input into any of the following activities:

• Sending unsolicited commercial email (spam) to any recipient who has not provided prior express consent or with whom you do not have an existing business relationship as defined by applicable law
• Sending commercial messages in violation of the CAN-SPAM Act, including but not limited to failing to include a physical mailing address, failing to honor opt-out requests within 10 business days, using deceptive subject lines, or falsifying header information
• Sending commercial electronic messages in violation of Canada's Anti-Spam Legislation (CASL), including but not limited to sending messages without express or implied consent as defined under CASL, failing to include required sender identification, or failing to provide a compliant unsubscribe mechanism
• Processing or using personal data of EU or EEA residents in violation of the General Data Protection Regulation (GDPR), including but not limited to processing without a lawful basis, failing to honor data subject rights, or transferring data outside the EEA without adequate safeguards
• Harassment, threatening, or abusive communications of any kind directed at any individual or group
• Any form of phishing, social engineering, or fraudulent impersonation
• Lead generation or outreach for products or services that are illegal, deceptive, or harmful

4. Prohibited Technical Conduct

The following technical behaviors are strictly prohibited:

• Scraping, crawling, or programmatically extracting content from the Service using automated scripts, bots, or tools not explicitly authorized by us
• Reverse engineering, decompiling, or attempting to derive the source code, machine learning models, scoring algorithms, or proprietary methods underlying the Service
• Submitting malformed, malicious, or intentionally corrupt data to probe system vulnerabilities or interfere with service operation
• Using the Service to perform denial-of-service attacks or to generate excessive, automated load on our infrastructure
• Bypassing, disabling, or circumventing any authentication, rate limiting, access control, or security mechanism
• Attempting to access accounts, data, or system areas that do not belong to you
• Injecting malicious code, scripts, or content into data uploads intended to compromise the Service or its users
• Creating multiple accounts to circumvent plan limits, abuse free tiers, or evade a prior suspension or termination
• Sharing API keys, session tokens, or account credentials with unauthorized parties

5. Prohibited Content

You may not upload, store, or process data through the Service that contains:

• Protected health information (PHI) as defined under HIPAA, unless you have entered into a separate Business Associate Agreement with RepuFix
• Payment card numbers, bank account numbers, or other financial account identifiers, unless encrypted and with our prior written consent
• Government-issued identification numbers (Social Security numbers, passport numbers, national ID numbers) except as minimally necessary and with documented legal basis
• Biometric identifiers or genetic data
• Data pertaining to individuals under 18 years of age
• Any content that is defamatory, obscene, threatening, or otherwise unlawful
• Data that you know or reasonably should know was obtained through illegal means

6. Anti-Spam Compliance

RepuFix is not responsible for your outreach practices, but we take abuse of our platform seriously where it enables spam or unlawful messaging. You must not use this Service as part of a workflow that results in:

• Mass unsolicited commercial email campaigns sent to contacts who have not opted in
• Repeated outreach to contacts who have previously unsubscribed or requested removal
• Outreach that misrepresents the sender identity, origin, or subject matter of communications
• High-volume cold outreach to personally scraped contact data with no prior relationship
• Outreach to role-based addresses (abuse@, postmaster@, noc@, hostmaster@) for commercial purposes

If we receive credible reports, notice patterns, or are contacted by regulators suggesting that a user is operating a spam or abuse workflow that leverages data processed through RepuFix, we will investigate and take enforcement action including immediate account suspension.

7. Enforcement and Consequences

Violation of this AUP, our Terms of Service, or any applicable law may result in any of the following enforcement actions at RepuFix's sole discretion:

• A written warning and required acknowledgment of the violation
• Temporary suspension of your account and access to the Service
• Permanent termination of your account with no right of reinstatement
• Forfeiture of any unused credits or prepaid plan value with no refund
• Reporting the violation to applicable law enforcement or regulatory authorities
• Cooperation with third-party investigations, subpoenas, or legal proceedings relating to your account activity
• Civil action to recover damages caused by your violation of these policies

RepuFix reserves the right to take enforcement action without prior notice where the violation poses immediate risk of harm to third parties, our infrastructure, or our legal standing. The severity of the enforcement response will be proportionate to the nature and severity of the violation, but we are under no obligation to issue warnings before terminating accounts involved in serious or repeated abuse.

8. No Refunds for Policy Violations

If your account is suspended or terminated due to a violation of this AUP or our Terms of Service, you are not entitled to any refund of fees paid, credits purchased, or prepaid plan value remaining at the time of termination. This applies regardless of how recently the purchase was made, how much of your plan you have used, or whether you dispute the characterization of the violation.

By accepting these terms, you acknowledge that your right to use the Service is contingent on compliance with this AUP, and that fees paid represent compensation for the right of access subject to these conditions — not an unconditional entitlement to continued service.

9. Reporting Violations

If you believe a user of the Service is violating this AUP, or if you have received unsolicited communications that may involve data processed by RepuFix, please report it to us at:

Email: abuse@repufix.io

We take all reports seriously and will investigate promptly. We may not be able to disclose the outcome of investigations due to confidentiality obligations, but we commit to taking appropriate action on confirmed violations.

10. Updates to This Policy

We may update this AUP from time to time to reflect changes in the Service, applicable law, or industry standards. We will notify you of material changes by email or by posting a prominent notice in the Service. Your continued use of the Service after the effective date of an updated AUP constitutes your acceptance of the revised policy.