Acceptable Use Policy

3.1 Illegal and Unauthorized Access

• Accessing systems, accounts, or content without authorization, including unauthorized access to protected resources
• Accessing password-protected, login-required, or authentication-gated content without authorization
• Circumventing access controls or engaging in hacking, intrusion, or unauthorized system manipulation
• Using the Service for any purpose prohibited by applicable law, including harassment, stalking, or discrimination

AlterLab provides technical infrastructure for accessing web content. You are responsible for ensuring your use complies with the terms of service of target websites and all applicable laws.

3.2 Privacy and Data Protection Violations

• Collecting personal information in violation of privacy laws (GDPR, CCPA, etc.)
• Collecting sensitive information such as credit card numbers, social security numbers, or health data
• Scraping social media platforms in violation of their terms (Facebook, Twitter, LinkedIn, etc.)
• Creating fake accounts or impersonating others

3.3 Intellectual Property Violations

• Violating intellectual property rights, including copyright, trademark, or trade secret laws
• Reselling or redistributing scraped data without proper licensing

3.4 Fraud and Manipulation

• Engaging in spamming, phishing, or fraudulent activities
• Ad fraud, click fraud, or pay-per-click manipulation
• SEO manipulation, including generating fake backlinks, content spinning, or rank manipulation
• Ticket scalping bots or automated purchasing of limited-availability goods
• Fake engagement, including artificial reviews, likes, follows, or social proof
• Survey fraud or automated form submission for rewards
• Cryptocurrency mining, NFT manipulation, or blockchain fraud facilitated through the Service

3.5 System Abuse and Harmful Activities

• Distributing malware, viruses, or malicious code
• Overloading or disrupting target websites (DDoS attacks or excessive request volumes intended to degrade service)
• Attempting to reverse-engineer, decompile, or create competing products using the Service
• Reselling, sublicensing, or providing access to the Service to third parties without our written consent

3.6 Workflow-Specific Prohibitions

When using Workflow Studio or any automated pipeline feature of the Service, you additionally agree NOT to create, deploy, or operate workflows that:

• Automated spam pipelines: Chain scraping actions with outbound messaging (email, SMS, social media) to send unsolicited bulk communications, regardless of whether the contact information was obtained through the Service
• Harassment workflows: Automate repeated contact, monitoring, or data collection targeting specific individuals in a manner that constitutes harassment, stalking, or intimidation
• Bulk unauthorized extraction via connector chains: Use connector sequences to bypass rate limits, access controls, or terms of service restrictions of third-party platforms by distributing requests across multiple connectors or sessions
• OAuth connector impersonation: Use connected third-party accounts (via OAuth or stored credentials) to send messages, post content, or take actions that impersonate other individuals or organizations, or that the account holder has not authorized
• Automated manipulation pipelines: Combine scraping with form submissions, account creation, or review/rating actions for the purpose of fraud, SEO manipulation, or artificial engagement
• Sensitive data extraction at scale: Build workflows specifically designed to collect and aggregate personal information (names, contact details, financial data) from multiple sources into databases without a lawful basis under applicable privacy law

You are solely responsible for the actions your workflows take. AlterLab provides the execution infrastructure; the design, targeting, and purpose of each workflow is entirely within your control. Workflows found to violate this section may be suspended pending review. See our Terms of Service §4.7 for the full platform-vs-operator framework and indemnification terms applicable to Workflow Studio.

3.7 Storefront and Marketplace Conduct

When operating a Marketplace Storefront (whether at an AlterLab-hosted URL or a custom domain), you agree NOT to engage in the following conduct:

• Brand impersonation: Create or operate a Storefront that impersonates, copies the trade dress of, or is designed to be confused with any person, company, product, or brand that you are not authorised to represent. This includes using another party's name, logo, colour scheme, or domain name in a way that is likely to mislead buyers about the origin or affiliation of your Storefront
• Trademark abuse: Register or use custom domain names or Storefront slugs that incorporate the trademarks, brand names, or other protected identifiers of third parties without their authorisation, whether for the purpose of attracting traffic, reselling the domain, or causing consumer confusion
• Deceptive branding: Present your Storefront in a manner that falsely implies an endorsement, partnership, or affiliation with AlterLab beyond the platform relationship (i.e., you may accurately describe your product as "built on AlterLab" but may not claim to be AlterLab or an official AlterLab partner without a signed partnership agreement)
• Obscuring platform disclosure: Remove, hide, or otherwise obscure the "Powered by AlterLab" footer disclosure required by Terms of Service §4.9. This disclosure is required for transparency to buyers about the platform processing their data
• Unlawful data collection from buyers: Collect personal data from buyers through your Storefront for purposes not disclosed in your privacy policy, or beyond what is necessary for the sale and delivery of your listed products. You may not sell, transfer, or share buyer personal data with third parties without a lawful basis and appropriate disclosure
• Misrepresentation of products: List workflows or data products on the Marketplace with descriptions, samples, or functionality claims that are materially false or misleading, or that describe capabilities the product does not possess

AlterLab may suspend or remove any Storefront or Marketplace listing that violates this section, without prior notice, where immediate action is required to protect users, third-party rights holders, or the integrity of the platform. See Terms of Service §4.9 for the full data controller, privacy, and SSL/CNAME framework applicable to Storefronts.

8.1 Allowed Workflow Types

The following categories of workflows are permitted on the Marketplace, subject to compliance with all other sections of this AUP:

• Legitimate business automation (e.g., lead qualification, CRM enrichment, internal reporting)
• Lead generation from publicly available sources such as business directories, public registries, and openly-indexed professional profiles
• Market research and competitive intelligence using publicly accessible data
• Price monitoring, product availability tracking, and inventory intelligence
• Content aggregation, news monitoring, and media intelligence

8.2 Prohibited Workflow Listings

The following types of workflows may NOT be listed on the Marketplace under any circumstances:

• Authentication bypass: Workflows designed to circumvent authentication mechanisms, bypass login requirements, or access protected resources without authorisation
• Personal data aggregation (doxxing): Workflows whose primary purpose is to aggregate personal information about private individuals from multiple sources, including but not limited to address lookups, identity aggregation, or relationship mapping of private persons
• Spam generation at scale: Workflows that automate the sending of unsolicited bulk communications (email, SMS, social media messages, or any other channel), regardless of the data source used to compile recipient lists
• robots.txt violation targeting non-public data: Workflows that scrape websites explicitly prohibiting automated access in their robots.txt file AND whose target data is not otherwise publicly available through authorised means
• Credential harvesting or phishing: Workflows designed to collect authentication credentials, security tokens, session cookies, or any information that could be used to gain unauthorised access to accounts or systems; or workflows that automate any step of a phishing or social engineering attack
• Facilitation of illegal activity: Any workflow whose primary purpose or reasonably foreseeable primary use is to facilitate activity that is illegal under applicable law, including fraud, harassment, stalking, identity theft, or violations of data protection regulations

8.3 Content Standards for Listings

All Marketplace listings must meet the following content standards:

• Titles, descriptions, and documentation must accurately describe what the workflow does, the data sources it accesses, and any credentials or third-party accounts required
• Listings must not make misleading claims about data sources, success rates, data accuracy, or the legality of the workflow's use case
• Sample outputs or screenshots included in listings must be genuine representations of actual workflow output
• Pricing and fee descriptions must be accurate and complete, including any per-use costs, credit consumption rates, or subscription requirements

8.4 Review Process

AlterLab reserves the right to review any workflow submitted for Marketplace listing before publication, and to re-review published workflows at any time. We may reject or unpublish a workflow without prior notice if it does not comply with this AUP, our Terms of Service, or applicable law. Review does not constitute endorsement of a workflow or guarantee of its accuracy, legality, or fitness for any particular purpose.

8.5 Enforcement

Violations of this section will result in removal of the offending workflow from the Marketplace. Repeat violations, or a single severe violation (including any listing in the categories prohibited under §8.2), will result in permanent suspension of Marketplace publishing privileges and may result in account termination pursuant to Section 4 of this AUP. AlterLab may also refer matters involving illegal activity to relevant law enforcement authorities.

9.1 Designated DMCA Agent

AlterLab has designated an agent to receive notifications of claimed copyright infringement. All DMCA takedown notices must be sent to:

We process takedown requests sent to other addresses on a best-efforts basis but cannot guarantee response times for notices received outside this channel.

9.2 Takedown Notice Requirements

To be valid under 17 U.S.C. § 512(c)(3), a takedown notice must include all of the following:

• A physical or electronic signature of a person authorised to act on behalf of the owner of an exclusive right that is allegedly infringed
• Identification of the copyrighted work claimed to have been infringed, or, if multiple works are covered by a single notification, a representative list of such works
• Identification of the material that is claimed to be infringing or to be the subject of infringing activity, and information reasonably sufficient to permit us to locate the material (e.g., the URL or listing identifier)
• Information reasonably sufficient to permit us to contact the complaining party, such as an address, telephone number, and, if available, an email address
• A statement that the complaining party has a good-faith belief that use of the material in the manner complained of is not authorised by the copyright owner, its agent, or applicable law
• A statement that the information in the notification is accurate, and under penalty of perjury, that the complaining party is authorised to act on behalf of the owner of an exclusive right that is allegedly infringed

Notices that do not substantially comply with these requirements may not be acted upon. Submitting a materially false takedown notice may result in liability for damages under 17 U.S.C. § 512(f).

9.3 Counter-Notice Process

If you believe that content you submitted was removed or disabled as a result of a mistake or misidentification, you may submit a counter-notice to our designated agent. A valid counter-notice must include:

• Your physical or electronic signature
• Identification of the material that has been removed or disabled, and the location at which the material appeared before removal
• A statement under penalty of perjury that you have a good-faith belief that the material was removed or disabled as a result of mistake or misidentification
• Your name, address, and telephone number, and a statement that you consent to the jurisdiction of the federal district court for the judicial district in which your address is located, or if your address is outside the United States, any judicial district in which AlterLab may be found, and that you will accept service of process from the person who provided the original takedown notice or an agent of that person

Upon receipt of a valid counter-notice, we will forward it to the original complainant and may restore the removed content within 10 to 14 business days, unless the complainant notifies us that they have filed an action seeking a court order to restrain you from engaging in the infringing activity.

9.4 Repeat Infringer Policy

In accordance with the DMCA and our commitment to protecting intellectual property, AlterLab will terminate the accounts of users who are determined to be repeat infringers. We maintain records of all DMCA notices received and counter-notices filed. A user may be designated a repeat infringer after receiving two or more substantiated takedown notices, or where a pattern of infringing conduct is otherwise established. Account termination under this section is final and non-refundable.

9.5 Safe Harbor

AlterLab operates as a service provider within the meaning of DMCA Section 512 and the EU E-Commerce Directive Article 14 (as implemented in applicable EU member state law and succeeded by the EU Digital Services Act). We do not have actual knowledge of, and do not financially benefit from, infringing activity in respect of content hosted or transmitted through our platform, and we act expeditiously upon receiving proper notice to remove or disable access to infringing material. This policy is maintained to preserve our safe harbour protections under applicable law.