Acceptable Use Policy

This policy applies to every OrbitPage managed account, workspace, public page, connected domain, upload, integration and API request. It forms part of the Terms & Conditions. Page owners are responsible for content and destinations they publish, including content submitted by collaborators.

Do not publish, promote or link to content or activity that:

• violates criminal, consumer, privacy, data-protection, intellectual-property or other applicable law;
• infringes copyright, trademark, publicity, confidentiality or contractual rights;
• discloses personal, intimate or confidential information without a lawful basis;
• offers regulated goods or services without the licences, age controls and disclosures required by law; or
• evades sanctions, court orders or lawful restrictions.

OrbitPage does not permit content or conduct involving child sexual abuse or exploitation, non-consensual intimate material, credible threats, targeted harassment, trafficking, violent extremism, instructions intended to cause serious harm, or praise and facilitation of such abuse. Content that exploits a vulnerable person or facilitates self-harm may also be removed or restricted.

Do not impersonate another person or organisation, create deceptive login or payment pages, operate phishing or investment scams, falsify endorsements, hide the commercial nature of an offer, or direct visitors to malware, credential theft or unauthorised downloads. Parody and commentary must not create a material risk of confusion.

Do not use OrbitPage for unsolicited bulk messaging, artificial engagement, abusive redirects, automated account creation, quota or rate-limit evasion, scraping that disregards access controls, denial-of-service activity, excessive resource consumption or resale of accounts and plan capacity without written permission.

Newsletter recipients must have given valid permission or otherwise have a lawful basis recognised where they live. Purchased, scraped, guessed, harvested or deceptively obtained address lists are prohibited. Senders must use an accurate identity, provide a working unsubscribe path, honour suppression promptly and must not repeatedly mail rejected or unsubscribed addresses.

Do not probe, scan, exploit or access OrbitPage, another tenant or a provider system without authorisation. Do not upload malware, steal tokens, interfere with App Check, bypass authentication or publish secrets. Good-faith vulnerability research must follow the repository security process and avoid privacy impact, persistence, public disclosure before remediation and service disruption.

Do not expose, trade or reuse personal Automation API tokens, OAuth credentials or Shop access links; instruct an AI or MCP client to exfiltrate data or evade safeguards; automate destructive actions without review; or use generated content to impersonate, defraud, spam, infringe rights or make deceptive professional claims. The account holder remains responsible for reviewing automated tool calls and proposed content.

Shop may be used only for lawful digital products and services that the seller has the right and practical ability to deliver. Physical goods, illegal or regulated items, counterfeit or pirated material, malware, stolen credentials, financial schemes, deceptive subscriptions, hidden charges and offers that misrepresent availability or results are prohibited.

Do not test stolen payment credentials, manufacture transactions, evade Stripe restrictions, manipulate refunds or disputes, launder funds, encourage chargeback abuse or use delivery files to bypass third-party rights. Sellers must publish and keep accurate their identity, trader status, contact details and legal policies; respond to buyers; honour applicable refund and withdrawal rights; and preserve the separate digital-delivery consent flow. OrbitPage or Stripe can suspend payment capability independently from the rest of the page.

Use only official, public or properly authorised URLs and content. Do not use embeds or redirects to bypass a provider's access controls, tracking protections, age gates, geographic restrictions, subscription requirements or terms. Do not present third-party names or logos as evidence of sponsorship, approval or an official relationship that does not exist.

Usernames, display names, domains, page titles, metadata and previews must follow the same rules as visible content. OrbitPage may reserve platform terms, prevent abusive variants, and act on names that impersonate others or create a documented trademark or safety risk.

OrbitPage may reject an action, block publication, remove specific content, disable an integration, restrict a domain, suspend a page or terminate an account. When choosing a response, OrbitPage may consider severity, illegality, context, reach, repeated violations, cooperation and immediate risk.

Automated checks can make a temporary safety decision, but account holders may request human review. Urgent risks and clear illegality may be handled immediately; less serious issues may receive a warning or opportunity to correct the content.

Use the contact form and select Report unlawful content, or email contact@orbitpage.com. A useful report includes:

• the exact public URL and the specific content concerned;
• why you believe it is unlawful or violates this policy;
• your relationship to the affected rights or person;
• supporting evidence and the country whose law is relevant; and
• your name and email for follow-up, except where the DSA permits notice without these details for specified child-protection offences; and
• a statement made in good faith that the information and allegations are accurate and complete.

OrbitPage acknowledges sufficiently detailed reports, reviews them impartially and communicates the outcome where legally and operationally possible. A complete notice can create actual knowledge for the specific content it identifies; it does not authorise a broad or unsupported removal demand. Knowingly false, abusive or repetitive reports may be limited.

The child-protection exception to notifier identity can be exercised by an email notice where legally applicable. Do not send illegal imagery or unnecessary sensitive evidence; identify the location and describe the issue. OrbitPage does not require a notifier to prove ownership of a right before reporting other kinds of illegal content. A notice is assessed on its substance and the information reasonably available.

The account holder or affected reporter can request reconsideration through the contact page. Identify the page, decision reference and why it should change. A person will review available context and may confirm, narrow, reverse or replace the original action. The decision communication explains the principal facts and basis, territorial scope and duration, material use of automation and available redress where required.

Complaints about restrictions may be submitted without charge. We will explain applicable redress in the decision, including any statutory internal-complaint period, certified out-of-court dispute procedure or court remedy that applies. Hosting duties under the DSA apply independently of any micro- or small-enterprise exemption from additional online-platform obligations; this policy does not claim a blanket DSA exemption.

OrbitPage responds to valid legal requests and may preserve relevant records where required. If someone faces immediate danger, contact local emergency services first; OrbitPage's contact channel is not monitored as an emergency service.