Acceptable Use Policy

Important: Zero-Tolerance Warning

This Acceptable Use Policy ("AUP") governs the use of the proxy services, APIs, and network infrastructure (collectively, the "Services") provided by WATTENNE INTERNATIONAL LLC ("Company," "we," or "us"). This AUP is incorporated by reference into the Company’s Terms of Use.

PROHIBITED USE MAY RESULT IN IMMEDIATE RESTRICTION. Depending on the available evidence, severity, and applicable legal duties, we may restrict affected activity while investigating or take enforcement action under the Terms. A complaint or official inquiry alone does not establish a violation.

1. The Shared Responsibility Framework & Neutrality

The Services provide general-purpose network routing for lawful uses. Providing a proxy address or technical support does not grant permission to access a third-party system, account, website, or dataset.

• No Payload Inspection: Company-operated proxy systems do not inspect, log, store, or monitor customer traffic payloads. This commitment is distinct from reviewing evidence submitted in an abuse report. The Privacy Policy explains the scope of Company-operated systems, operational records, and third-party processing.

• Customer Responsibilities: You are responsible for your use and use by people to whom you provide access, subject to the allocation of responsibility in the Terms of Use. You represent and warrant that you have and will maintain the authority, permissions, and lawful basis required for your activities, including access to destinations and the collection and use of data.

• Applicable Law: You must comply with laws applicable to your activity, including relevant access, privacy, intellectual-property, sanctions, and export-control requirements. Wyoming incorporation and the Terms' choice of law do not displace other applicable mandatory law.

These obligations allocate responsibilities between you and the Company. They do not bind governments or other third parties, authorize unlawful conduct, or exclude the Company's independent duties or liability that cannot lawfully be excluded.

2. Zero-Tolerance: Criminal & Illegal Activity

You must not use the Services for any activity that is criminal or illegal under applicable law. The following are strictly prohibited:

• Child Sexual Exploitation: Accessing, distributing, or soliciting CSAM, child sex trafficking, or unlawful enticement of children. Where facts come to our actual knowledge that trigger a reporting obligation, we report to the National Center for Missing & Exploited Children (NCMEC) and preserve the required records as applicable law requires.

• Terrorism & Violence: Promoting terrorism, violent extremism, or trafficking in weapons or humans.

• Fraud & Financial Crime: Phishing, carding (credit card fraud), bank fraud, money laundering, or accessing compromised financial accounts.

• Identity and Session Theft: Purchasing, selling, or using unlawfully obtained credentials, cookies, tokens, session identifiers, or other authentication information; credential harvesting; or session hijacking.

• Cyberattacks: Operating botnets, distributing malware/ransomware, or controlling command-and-control (C2) servers.

• Interception and Personal Harm: Unlawful interception, acquisition, redirection, recording, or disclosure of communications or non-public information; stalking; doxxing; or unlawful surveillance. Lawful access to one system does not authorize interception of another person's communications.

• Sanctions Evasion: Concealing a restricted person, destination, payment source, end use, or other relevant fact to evade applicable sanctions, export controls, or the eligibility restrictions in the Terms and AML Policy.

3. Zero-Tolerance: Network Abuse & Security Violations

You must not use the Services to attack, interfere with, or degrade the performance of any network, server, or system. Prohibited activities include:

• DDoS & Flooding: Launching Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks, or "stress testing" networks without explicit written consent from the target.

• Port Scanning: Scanning ports or probing security vulnerabilities on third-party networks without the system owner's express written authorization and the Company's prior written approval. Any approved testing must remain within its authorized scope and must not harm others.

• Spam & Unsolicited Communications: Sending unsolicited bulk email (spam), forum spam, comment spam, or violating the CAN-SPAM Act. Use of the Services for SMTP on port 25 is prohibited.

• Hacking & Unauthorized Access: Attempting to access any system, account, or data without lawful authority, including credential stuffing, unauthorized authentication or access-control bypass, or continuing access after you know your authority has been withdrawn.

• Ticket-Purchase Circumvention: Unlawfully circumventing ticket-purchase limits, security measures, or access controls, or facilitating ticket sales prohibited by applicable ticket-bot law.

• Defeating Enforcement: Evading a Company restriction or suspension through replacement accounts, credentials, downstream users, or false information, or helping another person do so. Re-registration after termination for abuse requires the Company's written approval.

Lawful automation and authorized security testing are not inherently unlawful. They remain subject to this AUP's contractual restrictions and any required approvals. A breach of a website's terms or robots directives is not, by itself, a determination that a criminal computer-access offense occurred.

4. Intellectual Property Violations

• Copyright Infringement: You may not use the Services to infringe copyright, including downloading, distributing, or streaming material without the required permission or a lawful exception.

• Complaints and Repeat Infringement: Our IP / Copyright Complaints Policy explains how to submit a complaint, the available account-level responses, termination of repeat infringers in appropriate circumstances, and review of mistakes.

• Trademark Violations: You may not use the Services to facilitate the sale of counterfeit goods.

5. Web Scraping & Data Collection Standards

Data collection can be a lawful use case, but abusive scraping is prohibited. You must determine and meet your obligations under applicable privacy and data-protection law, including any controller or processor obligations arising from your actual role. Using the Services does not supply a missing lawful basis or required consent.

5.1 "Legitimate" vs. "Abusive" Scraping

• Respect for Robots.txt: You agree to respect the robots.txt protocols and standard exclusion headers of target websites.

• Performance Degradation: You must not engage in scraping that materially degrades the performance of the target website, including excessive concurrent requests. This contractual restriction applies whether or not the conduct also constitutes an unlawful denial-of-service attack.

• Target Terms of Service: You are solely responsible for ensuring your scraping does not violate the Terms of Service (ToS) of the target website. The Company is not a party to your agreement with third-party websites.

5.2 Prohibited Scraping Targets

You must not use the Services to scrape:

• Government Infrastructure: (e.g., .gov domains, military sites, critical infrastructure).

• Personal Health Data: (HIPAA-protected data or equivalent).

• Non-Public or Login-Gated Data: Harvesting information that is not publicly available, including content behind a login, paywall, or session token, except where you access accounts or data that you own or are expressly authorized to access, using credentials lawfully issued to you, and in compliance with the destination's terms and applicable law.

6. Social Media & Ad Tech Abuse

• Fake Account Creation: Automating the bulk creation of fake accounts on social media, email platforms, or other services.

• Ad Fraud: Engaging in click fraud, impression fraud, or generating non-human traffic to defraud advertisers or ad networks.

7. Monitoring & Enforcement

7.1 Available Information
We may review reports, relevant account information, and available operational records as described in the Privacy Policy. Records may be incomplete or insufficient to connect an incident to a particular account or downstream user. We do not guarantee detection of prohibited activity or attribution of every report. This review does not authorize payload surveillance or create a general duty to monitor customer traffic.

7.2 Investigation and Cooperation
You must reasonably cooperate with an investigation of suspected misuse, including responding accurately to proportionate requests for an explanation, relevant account or downstream-user information, and evidence of authority to access an affected destination. Requests will be limited to information reasonably needed for the issue and permitted by law, with a reasonable response period in light of urgency. Tell us if a lawful confidentiality or privacy restriction prevents a requested disclosure so that a narrower lawful response can be considered. This clause does not require you to retain traffic payloads or disclose unrelated personal data.

Where credible allegations or other evidence indicate a material risk, we may restrict the affected destination, credential, account, or functionality while investigating, including while requesting evidence of authorization. A temporary restriction is not a finding of misconduct. We may consider explanations and correct or lift a restriction where appropriate. Materially false information, unreasonable refusal to cooperate with a lawful and proportionate request, or attempts to defeat enforcement may independently breach this AUP.

7.3 Consequences of Violation
If we reasonably determine that you have violated this AUP:

• Restriction or Termination: Your account may be throttled, suspended, restricted, or terminated immediately where the evidence and severity justify it.

• Balances and Costs: Any hold, setoff, abuse handling charge, or return of Wallet Balance or Data Packages is governed by Section 12.2 of the Terms, the Refund Policy, and non-waivable law. This AUP creates no separate automatic fee or forfeiture. A complaint or official inquiry alone does not establish an amount owed.

7.4 Resellers and Downstream Access
If you resell or provide downstream access under Section 10.7 of the Terms, you must communicate and contractually pass through use restrictions no less protective than this AUP to your downstream customers, take reasonable steps to address their violations, and cooperate with lawful, appropriately scoped investigations. Use reasonable account or credential assignments that enable you to identify the responsible downstream customer from records lawfully available to you. On a proportionate request, provide relevant attribution or authorization information to the extent lawfully held and disclose any material limitation. These obligations do not require new payload retention, unrestricted disclosure of downstream personal data, or a particular retention period. The Terms govern your responsibility for downstream conduct.

8. Reporting Abuse

If you believe the Services are being misused, use the abuse-report form or email abuse@databay.com. Include the observed IP address, incident time and timezone, affected destination, and a focused explanation or evidence. Redact credentials and unrelated personal information; do not send suspected CSAM files. An IP address or timestamp supplied by a complainant does not mean that we hold corresponding traffic records or can identify a customer.

See the IP / Copyright Complaints Policy for rights-holder complaints and the Law Enforcement Guidelines for official requests. Receipt of an official inquiry does not automatically suspend an account. Neither the form nor the email address is a guaranteed emergency-response channel.