1. Scope
This Acceptable Use Policy (“AUP”) applies to every Customer, account user, integration and public form operated through EventForm Pro™. It forms part of the Terms of Service.
2. Use the service lawfully
You must not use EventForm Pro to create, collect, transmit, upload, store or distribute content that is unlawful, fraudulent, defamatory, threatening, harassing, discriminatory or that infringes another person's intellectual-property, privacy or other rights.
3. No abuse, phishing or malicious activity
You must not use the service to:
- impersonate another person or organisation in a deceptive way;
- conduct phishing, credential harvesting, payment-card harvesting or other social-engineering attacks;
- upload or distribute malware, ransomware, malicious scripts or intentionally harmful files;
- send spam or unsolicited bulk communications;
- facilitate fraud, unauthorised surveillance, harassment or exploitation; or
- attempt to gain unauthorised access to EventForm Pro, another Customer's data or any connected system.
4. Protect respondents and sensitive information
Customers must collect only information that is appropriate for their stated purpose and must provide any privacy information required by law.
Special-category data, criminal-offence data, children's data, financial credentials, identity documents and other high-risk information require additional care. Do not collect high-risk information merely because the form builder technically permits a free-text field or file upload. The Customer is responsible for determining a lawful basis, applying any additional legal conditions and deciding whether EventForm Pro is suitable for the proposed processing.
Never ask respondents to submit passwords, authentication secrets, full payment-card credentials or private cryptographic keys through an EventForm Pro form.
5. Files and intellectual property
Uploaded files must be lawful, necessary for the Customer's workflow and safe to process. You must have permission to upload and distribute material and must not use the service as a general-purpose file-hosting, piracy or warez platform.
6. Platform integrity
You must not intentionally:
- bypass plan, storage, rate or access limits;
- probe, scan or test the service for vulnerabilities except under an authorised security-testing arrangement;
- interfere with service availability or place unreasonable automated load on the platform;
- reverse engineer protected parts of the service except where the law expressly permits it; or
- use API credentials outside the organisation or purpose for which they were issued.
7. Responsible integrations
Customers using the API are responsible for securing tokens, validating their own integrations and ensuring data exported to another system remains protected. API tokens should be revoked promptly if they are exposed or no longer needed.
8. Enforcement
If we reasonably believe use of the service breaches this AUP, creates a security risk, harms another person or exposes us to legal liability, we may investigate, rate-limit, remove access to affected content, suspend an account or terminate access. Where practicable and safe, we will give the Customer an opportunity to explain or correct the issue.
9. Reporting abuse
Report suspected abuse or misuse to support@eventform.pro.