Acceptable use policy

You must not

• Advertise products, services or claims that are unlawful in the target market, or that breach the advertising codes or platform policies that apply there.
• Ask us to target or exclude people based on sensitive characteristics, or to discriminate in housing, employment or credit advertising.
• Upload personal data without a lawful basis, or upload special category data.
• Try to access another organisation's workspace, reports, invoices or files.
• Share account credentials, bypass multi-factor authentication, or ask us to collect passwords for advertising accounts.
• Scrape, copy, overload, reverse engineer or security-test the Site outside our responsible disclosure process, or use it to train or build a competing model, dataset or service.
• Use the Site to send spam or malware, or for any purpose that breaches sanctions.

Evidence collection

Where clients authorise us to collect evidence from advertising interfaces, we work only within the platform's terms, with the client's delegated access, and never bypass CAPTCHA, multi-factor authentication or rate limits.

Enforcement

We may pause campaigns, remove content or suspend access where a breach is likely to cause harm, legal exposure or platform penalties. We explain why through the application unless the law prevents it.

Reporting a security issue

Report suspected vulnerabilities through the contact form by choosing "Security report". Give us reasonable time to fix the issue before disclosure, do not access or change data that is not yours, and stop testing once you have found an issue. We will not take legal action against good-faith research that follows these rules.