Acceptable Use Policy

1. Authorized use only

Use scanning, crawling, verification, connected services, and reports only for websites and accounts you own, administer, or have clear permission to assess. A publicly reachable website is not by itself permission for intrusive testing or excessive automated requests.

2. Prohibited activity

• Scanning targets without authorization where the activity could disrupt, burden, evade controls, or violate terms or law.
• Attempting to access private areas, credentials, tokens, source code, databases, internal networks, or other information not intentionally exposed to the service.
• Security exploitation, vulnerability weaponization, malware delivery, credential testing, phishing, spam, surveillance, harassment, or unlawful content activity.
• Bypassing rate limits, plan entitlements, payment controls, visitor identification, access permissions, or technical restrictions.
• Using bots or scripts to overload Aekpani SEO or a target website, or reselling access without written authorization.
• Uploading malicious files, fabricated payment receipts, unlawful personal data, or content that infringes another party’s rights.
• Misrepresenting reports, scores, affiliations, ownership, or Aekpani’s endorsement.
• Reverse engineering or extracting protected product logic except where a restriction is prohibited by law.

3. Responsible scanning

Respect target-site rules, maintenance windows, contractual restrictions, and reasonable request rates. Do not use the service as a penetration-testing or denial-of-service tool. Stop scanning if the target owner withdraws permission or if activity causes instability.

4. Connected accounts and team members

Connect only accounts you are authorized to use, request only necessary access, and remove connections when no longer required. Invite only intended team members, assign the least privilege needed, and promptly remove departed or unauthorized users.

5. Enforcement

We may throttle, block, suspend, remove content, preserve relevant evidence, or terminate access when we reasonably believe activity creates risk or violates this policy. Serious or repeated abuse may be reported to the affected provider or lawful authority. Where appropriate, we may ask for proof of authorization.

6. Reporting abuse

Report suspected misuse through our official contact page. Include the relevant domain, approximate time, report or workspace reference, and a clear explanation. Do not send passwords, secret tokens, or unnecessary personal information.