Acceptable Use Policy (AUP)

1. Purpose

This Acceptable Use Policy (“AUP”) defines the permitted, restricted, and prohibited uses of Infatica services. It is intended for publication in the Trust Center and incorporation by reference into applicable customer, reseller, partner, online, or services agreements.

The purpose of this AUP is to protect the Infatica network, customers, partners, end users, peers, third-party platforms, and the public from unlawful, abusive, deceptive, harmful, or high-risk use of the Services.

2. Scope

This AUP applies to all Infatica services, including residential proxies, mobile proxies, datacenter proxies, ISP/static proxies, SDK-enabled peer network functionality, dashboard access, API access, support services, integrations, credentials, accounts, and related infrastructure.

This AUP applies to Customer, Reseller, Partner, their authorized users, customers, end clients, contractors, agents, and anyone who accesses or uses the Services through their account, credentials, API keys, integrations, systems, or resale channels.

3. General customer responsibility

Customer is responsible for all activity conducted through its account, credentials, API keys, dashboard, integrations, users, end clients, and resale channels.

Customer must ensure that its use of the Services complies with applicable laws, third-party rights, platform rules, contractual restrictions, privacy laws, electronic communications laws, sanctions, export controls, and this AUP. Infatica provides connectivity and proxy infrastructure only and does not authorize Customer to access, collect, scrape, copy, use, resell, or exploit any third-party content, data, account, system, or service.

4. Permitted use cases

Subject to the Agreement, this AUP, and applicable law, common legitimate business use cases may include:

• market intelligence and pricing research
• brand protection and anti-counterfeit monitoring
• ad verification and campaign quality assurance
• SEO, SERP, and search visibility monitoring where lawful
• cybersecurity research on systems the customer owns or is authorized to test
• public web data collection for lawful and legitimate business purposes
• availability, localization, and content quality testing
• other approved business workflows reviewed by Infatica where required

Permitted use does not mean guaranteed technical access to any website, platform, domain, geography, IP pool, or third-party service. Infatica may deny, restrict, or revoke access at any time where required for compliance, safety, legal, technical, platform, network-integrity, or reputational reasons.

5. Prohibited uses

Customer must not use, and must ensure that its users and end clients do not use, the Services for any unlawful, abusive, unauthorized, deceptive, harmful, or high-risk purpose, including without limitation:

• violating any applicable law, regulation, court order, sanctions restriction, export control, or third-party right
• circumventing, bypassing, disabling, avoiding, impairing, or evading technological protection measures, access controls, authentication mechanisms, rate limitations, anti-bot systems, CAPTCHAs, fraud detection systems, security features, child-safety controls, or platform safety restrictions
• gaining or attempting to gain unauthorized access to any website, system, network, account, data, content, service, or information
• password mining, credential stuffing, account takeover, session hijacking, token abuse, phishing, social engineering, or credential theft
• scraping, crawling, harvesting, extracting, copying, aggregating, reselling, or commercially exploiting content or data where Customer lacks the rights, permissions, authorizations, or lawful basis to do so
• scraping behind access controls, paywalls, logins, authentication gates, private APIs, or non-public systems without authorization
• sending, facilitating, or supporting spam, phishing, malware, botnet activity, denial-of-service attacks, vulnerability scanning without authorization, or other malicious or abusive traffic
• creating fake accounts, fake browsers, fake sessions, fake user behavior, fake engagement, fake reviews, fake clicks, ad fraud, ticketing abuse, marketplace manipulation, or similar deceptive automation
• using the Services to manipulate browser fingerprints, rotate identities, or otherwise disguise automated activity as ordinary human activity for the purpose of evading a third-party platform’s security, anti-abuse, or access-control systems
• processing special category data, children’s data, protected health information, payment authentication data, financial account credentials, government identifiers, biometric data, or other sensitive data without express written authorization
• using the Services for harassment, stalking, doxxing, tracking, profiling, impersonation, discrimination, exploitation, or other harmful activity
• using the Services to access, support, enable, or conceal activity involving unlawful content, sexual exploitation, grooming-related conduct, or harm to minors
• using the Services to avoid sanctions, export controls, compliance screening, KYC/KYB, or payment restrictions
• accessing websites, domains, services, or categories restricted or blocked by Infatica without prior approval

6. Child-safety and age-assurance restrictions

Customer must not use the Services to bypass, circumvent, disable, interfere with, or evade legally required or platform-imposed age-verification, age-assurance, parental-control, child-safety, minor-protection, app-store, content moderation, or platform safety mechanisms.

Customer must not knowingly market, sell, provide, or make available the Services for use cases involving access by minors to adult content, pornographic content, gambling services, AI nudity or deepfake tools, synthetic sexual content, grooming-related platforms or activity, or other age-restricted, harmful, or child-safety-sensitive services.

Infatica may immediately restrict, suspend, block, or terminate access where it reasonably suspects child-safety-sensitive abuse, age-verification bypass, grooming-related conduct, exploitation of minors, or circumvention of app-store or platform-level protections for minors.

7. Blocked and restricted targets

For safety and compliance purposes, certain websites, domains, categories, or services may be inaccessible by default or require manual approval.

7.1. Blocked targets

Access through the Services is generally prohibited for the following target categories unless expressly approved by Infatica management in exceptional circumstances:

• banks and financial account access portals
• payment systems, fintech platforms, payment circumvention services, and wallet services
• government websites, public-sector resources, tax portals, voting systems, and similar civic infrastructure
• educational institution portals and student account systems
• domains under .gov, .mil, .edu, or similar restricted categories where proxy use may create legal or compliance risk
• targets associated with child-safety-sensitive, age-restricted, platform-safety-sensitive, fraudulent, abusive, or unlawful activity
• any website or service where access through the Services may violate applicable law, third-party rights, or platform restrictions

7.2. Restricted targets

Access may require manual review and approval for the following target categories:

• financial services platforms
• marketplaces and ticketing platforms
• social networks and messaging platforms
• advertising platforms and ad exchanges
• platforms requiring login or account access
• platforms with fraud, security, anti-abuse, age-assurance, or child-safety systems
• high-volume or high-risk public web data workflows
• cybersecurity research, vulnerability scanning, or security testing unless Customer owns or is authorized to test the target

8. Access review and approval process

Infatica may request information reasonably necessary to assess restricted targets, blacklist exceptions, use cases, compliance risks, or suspected misuse. Requested information may include:

• Customer identity and whether Customer is direct, reseller, partner, or end client
• end-client information where applicable
• target domain, website, category, platform, or service
• business purpose and use-case description
• expected traffic type, traffic pattern, volume, and duration
• whether login, account access, API interaction, or data collection is involved
• confirmation that the activity does not involve fraud, unlawful access, credential abuse, payment circumvention, identity masking for financial accounts, child-safety-sensitive abuse, or violation of applicable law or platform terms

Infatica may approve, deny, condition, restrict, suspend, or revoke access at its sole discretion. Approval of one use case or target does not guarantee approval of any other use case, target, customer, end client, geography, traffic pattern, or future request.

9. KYC, KYB, and use-case review

Infatica may refuse, restrict, suspend, or terminate access where the customer does not provide required information, provides inaccurate or incomplete information, fails screening, changes its use case without notice, or creates legal, compliance, security, abuse, platform, or reputational risk.

Customer must provide accurate and complete information. Infatica may suspend, restrict, or terminate access if Customer refuses to provide required information, provides inaccurate information, fails screening, changes its use case without notice, or creates legal, compliance, security, platform, abuse, or reputational risk.

10. Monitoring, metadata review, and technical controls

Infatica may apply risk-based technical and operational controls, including metadata analysis, domain-category restrictions, blacklist/whitelist controls, rate limits, throttling, traffic pattern review, blocking, suspension, credential disabling, account review, or other access limitations where Infatica reasonably considers such measures necessary to prevent misuse, protect infrastructure, comply with law, respond to complaints, reduce risk, or enforce this AUP.

Infatica does not undertake to monitor all Customer activity and does not assume responsibility for Customer’s legality, permissions, targets, instructions, downstream processing, or end-client behavior.

11. Suspension and termination

Infatica may immediately suspend, restrict, throttle, block, or terminate access to the Services, in whole or in part, without prior notice, where Infatica reasonably suspects misuse, abuse, technical circumvention, unauthorized scraping, unlawful data extraction, violation of third-party rights, violation of applicable law, breach of the Agreement, breach of this AUP, or conduct that may expose Infatica to legal, regulatory, enforcement, platform, security, or reputational risk.

12. Cooperation with investigations

Customer must promptly cooperate with Infatica in investigating suspected misuse, abuse complaints, legal notices, platform complaints, governmental requests, vulnerability reports, security incidents, or other concerns relating to Customer’s or its end clients’ use of the Services.

Customer must provide information lawfully available to Customer and reasonably necessary to demonstrate compliance with the Agreement, this AUP, applicable law, and applicable platform requirements. Infatica has no obligation to respond to government, regulatory, or third-party requests on behalf of Customer or Customer’s end clients except where required by applicable law.

13. Resellers and downstream customers

If Customer resells, makes available, or otherwise enables access to the Services by any third party, Customer remains responsible for the acts and omissions of such third party. Customer must ensure that its downstream agreements and controls prohibit conduct that would violate this AUP if conducted by Customer directly.

Infatica may require Customer to suspend or terminate downstream access where Infatica reasonably suspects that a downstream user, end client, or customer is violating the Agreement, this AUP, applicable law, third-party rights, or platform restrictions.

14. Abuse reporting and contacts

Abuse reports, security concerns, platform complaints, or law-enforcement-related notices should be sent to:

15. Changes to this AUP

Infatica may update this AUP from time to time to reflect changes in laws, services, platform risks, abuse patterns, technical controls, or business practices. The updated version will be posted in the Trust Center or otherwise made available by Infatica. Continued use of the Services after an update constitutes acceptance of the updated AUP to the extent permitted by the Agreement and applicable law.