Acceptable Use Policy

Use the service only on devices you own or have explicit permission to administer (your phone, your family's enrolled devices with consent, your organisation's managed devices with authorisation). Do not use scanning, firewall, VPN or safety features to surveil, intercept, or interfere with third parties without their knowledge and legal basis.

Respect the law in your country and in the country where the device/data is located. Where mandatory local law is stricter than this policy, local law prevails.

• Scanning, administering, intercepting or blocking traffic/devices you do not own or have permission to administer; using threat-intel, firewall or VPN to harm third-party systems.
• Probing, scanning, fuzzing, load-testing or circumventing our website, APIs, authentication, rate limits, firewall/VPN handshakes or abuse controls without prior written authorisation (security research follows the Vulnerability Disclosure Policy scope/rules).
• Credential stuffing, brute force, session hijacking, IDOR/BOLA exploitation, XSS/CSRF/injection attempts, or bypassing age/consent gates.
• Uploading malware, spyware, or executable content; abusing vault/password-manager for illicit storage; exfiltrating another user's data.
• False SOS/emergency abuse, swatting, harassing guardians, or spamming safety notifications.
• Fraud, phishing, impersonation, harassment, hate, CSAM, or any criminal offence; violating sanctions/export controls (see Terms Section 17).
• Reverse engineering beyond what the law permits (interoperability exceptions preserved); removing licence/attribution notices.
• Reselling, sublicensing or scraping the service/feed data at scale without agreement; violating robots/API limits.

Do not use AI outputs to make high-impact decisions about others without human review; do not misrepresent AI verdicts as guarantees; do not attempt to extract training data, bypass safety filters, or poison threat feeds. Automated access must respect rate limits, authentication and the API terms (once published).

Material breach may lead to warning, rate-limit, feature suspension or account termination, with notice and a remedy opportunity where the law requires it. Safety-critical abuse (SOS misuse, vault abuse, credential attacks) may be contained immediately to protect others, then reviewed. You may appeal to legal@zdefence.com; we log policy, export, deletion, role, vendor, security and billing changes in audit_events. Repeat copyright infringers are handled per the DMCA policy.

Version 0.9.0-draft, last updated 2026-10-02, next review 2026-12-01, LEGAL REVIEW REQUIRED.