Acceptable Use Policy

The Acceptable Use Policy ("AUP") sets out the rules and controls governing the use of ZynReach's services and platform.

This Policy is intended to:

This Policy forms part of ZynReach's terms of use and must be read together with the Terms of Service, Privacy Policy, Security & Trust Policy, and Data Processing Agreement (DPA), where applicable.

• Protect ZynReach, its customers, and its users.
• Prevent misuse of the platform or infrastructure.
• Protect the confidentiality, integrity, and availability of the Services.
• Prevent unlawful or fraudulent activity.
• Prevent the use of ZynReach in a manner that could harm other parties.
• Define prohibited and restricted uses.
• Clarify the responsibilities of customers and users.
• Grant ZynReach the appropriate authority to address violations.

This Policy applies to:

The Customer is responsible for ensuring that its Authorized Users comply with this Policy, to the extent permitted by the agreement and applicable law.

For the purposes of this Policy, the "Services" include:

• All ZynReach users.
• Customers.
• Customers' Authorized Users.
• Administrative accounts.
• Trial accounts.
• Free-tier users, if any.
• APIs.
• Integrations.
• Applications or systems that connect to ZynReach.
• Any person who uses or accesses ZynReach's services.
• The ZynReach website.
• The ZynReach platform.
• Applications and interfaces.
• Storage services.
• Administrative tools.
• Associated cloud services.
• Any services or functionality provided by ZynReach.

ZynReach may only be used:

Use of the Service must be consistent with the purpose for which it was designed.

Every user must comply with all laws and regulations applicable to its use of the Service.

ZynReach may not be used to commit or facilitate:

• For lawful purposes.
• In accordance with the agreement.
• In accordance with the Terms of Service.
• In accordance with this Policy.
• In a manner that does not unlawfully affect other users.
• In a manner that does not endanger the platform.
• A crime.
• Fraud.
• Theft.
• Infringement of the rights of others.
• Invasion of privacy.
• Infringement of intellectual property rights.
• Violation of data protection laws.
• Circumvention of regulatory requirements.
• Any activity prohibited by law.

ZynReach may not be used to carry out or facilitate any of the following activities.

4.1 Hacking and Cyberattacks: The following are prohibited:

Access to Other Users' Accounts: The following are prohibited:

• Hacking into systems.
• Unauthorized access.
• Attempting to bypass security controls.
• Exploiting vulnerabilities without authorization.
• Credential stuffing.
• Brute-force attacks.
• Unauthorized privilege escalation.
• Theft of credentials.
• Deploying hacking tools for malicious purposes.
• Disabling or bypassing protection systems.
• Using another person's account without authorization.
• Sharing an account in an unauthorized manner.
• Attempting to obtain another user's password.
• Bypassing multi-factor authentication (MFA).
• Stealing session tokens.
• Using stolen credentials.

ZynReach may not be used to store, distribute, or publish:

• Malware.
• Ransomware.
• Spyware.
• Trojans.
• Worms.
• Viruses.
• Keyloggers.
• Botnet components.
• Any software designed to damage systems or steal data.

ZynReach may not be used to create or distribute:

The platform may not be used to facilitate fraud, even where the activity is presented as a "test," unless there is appropriate authorization and a clearly defined scope.

It is prohibited to impersonate:

ZynReach may also not be used to create a misleading impression that the user represents ZynReach or Zyntra Digital unless duly authorized to do so.

• Phishing messages.
• Fake login pages.
• Fraudulent campaigns.
• Identity impersonation.
• Credential-theft schemes.
• Messages designed to deceive users.
• Fraudulent offers or transactions.
• Another individual.
• Another company.
• A government entity.
• A financial institution.
• An employee.
• A customer.
• A trademark or brand.

ZynReach may not be used to send, or to facilitate the sending of:

Users must comply with the consent, opt-out, and marketing-list management requirements applicable to their activity.

• Spam.
• Unsolicited bulk messages.
• Fraudulent messages.
• Messages that violate applicable laws.
• Messages sent without an appropriate legal basis.

The following are prohibited:

ZynReach may apply technical usage limits to protect the Service.

ZynReach may not be used to carry out or facilitate:

It is prohibited to attempt to circumvent:

Multiple accounts may not be used to circumvent commercial or technical restrictions.

• Unreasonable consumption of resources.
• Running processes that affect the Service's performance.
• Attempting to exhaust resources.
• Generating an abnormal volume of requests.
• Exceeding technical limits.
• Circumventing rate limits.
• Using accounts or APIs in a manner that affects the platform's stability.
• DoS attacks.
• DDoS attacks.
• Traffic flooding.
• Resource exhaustion.
• Any activity intended to disrupt a service or system.
• Rate limits.
• Subscription limits.
• Feature restrictions.
• Authentication controls.
• Access controls.
• Usage quotas.
• Security controls.

The following may not be performed:

on ZynReach's systems unless it is:

Any scope or testing rules established by the Company must be complied with.

• Port scanning.
• Vulnerability scanning.
• Penetration testing.
• Automated security testing.
• Authorized in writing; or
• Part of an official security program; or
• Expressly permitted by ZynReach.

ZynReach may not be used to collect, extract, or process personal data in a manner that violates applicable laws.

The Customer is responsible for ensuring an appropriate legal basis exists for the data it inputs or collects through the Service.

ZynReach must not be used to process special or highly sensitive categories of data except where:

The Customer must assess the suitability of the Service for the nature of the data it intends to process.

• The functionality is suitable for that purpose.
• The agreement permits it.
• The use is lawful.
• The required controls are applied.

ZynReach may not be used to store, distribute, or publish content that is unlawful under applicable law.

ZynReach may take action upon receiving a credible notice or upon discovering unlawful activity, in accordance with the appropriate procedures.

ZynReach may not be used:

The user is responsible for ensuring that it owns or holds the necessary licenses for any content it uploads or processes.

• To infringe copyright.
• To infringe trademarks.
• To infringe patents.
• To misappropriate trade secrets.
• To distribute content the user does not have the right to distribute.

ZynReach may not be used to:

ZynReach may not be used to store or process sensitive financial information unless both the Service and the agreement permit it.

The Customer must comply with applicable regulatory requirements relating to financial data and payments.

• Monitor individuals without a legal basis.
• Collect personal data without authorization.
• Disclose personal data without a legal basis.
• Expose private information.
• Use personal data for unauthorized purposes.

ZynReach may not be used in a manner intended to cause physical, digital, or financial harm to others.

Examples may include:

ZynReach may not be used in high-risk applications where failure could result in serious harm, unless ZynReach has expressly agreed to such use under special terms.

This includes, depending on the nature of the use:

• Malicious software.
• Fraud tools.
• Identity-theft campaigns.
• Digital extortion activities.
• Deploying tools designed to damage systems.
• Critical medical systems.
• Critical industrial control systems.
• Emergency systems.
• Military systems.
• Systems whose failure could pose a direct risk to life or safety.

Where ZynReach provides AI-based functionality, it may not be used:

The user remains responsible for verifying the suitability and lawfulness of any use of AI-generated output.

• To produce fraudulent content.
• To impersonate identities.
• To bypass security controls.
• To automate harmful activities.
• To make unlawful decisions about individuals.
• To process data the user does not have the right to use.

Automation, APIs, and scripts may be used where supported and permitted by ZynReach.

It is prohibited to use automation that:

ZynReach may not be used for scraping or extraction purposes in a manner that:

Where ZynReach provides a trial or demo account, it must be used only for lawful and authorized purposes.

It is prohibited to create a large number of trial accounts for the purpose of:

• Exceeds limits.
• Affects the Service.
• Misleadingly simulates users.
• Extracts unreasonable amounts of data.
• Bypasses protection mechanisms.
• Results in a denial of service.
• Exceeds technical restrictions.
• Exceeds rate limits.
• Infringes the rights of others.
• Unlawfully collects personal data.
• Affects the stability of the Service.
• Exceeding limits.
• Exhausting resources.
• Obtaining services without payment.
• Circumventing commercial restrictions.

Users must:

The Customer is responsible for activities carried out through its accounts, to the extent provided in the agreement and applicable law.

Where the Customer is an organization or company, it is responsible for taking appropriate steps to ensure that its Authorized Users comply with this Policy.

This responsibility may include:

• Maintaining the confidentiality of login credentials.
• Not sharing passwords.
• Not sharing API keys.
• Not disclosing access tokens.
• Using authorized access mechanisms.
• Managing accounts.
• Managing permissions.
• Revoking access for unauthorized users.
• Protecting login credentials.
• Raising user awareness.
• Monitoring usage where necessary.

ZynReach bears no responsibility for content that a Customer or user inputs or uploads to the platform merely by virtue of hosting or processing it, unless otherwise provided by law or the agreement.

The user is responsible for:

ZynReach's failure to take action against a particular use at a particular time does not mean that:

• The lawfulness of the content.
• Its rights to use the content.
• Its accuracy, where accuracy is material.
• That it does not infringe the rights of others.
• That it does not violate this Policy.
• The use is always permitted.
• The Company has approved it.
• The Company has waived its rights.
• The Company will not take action in the future.

ZynReach may use technical systems to monitor:

This is carried out in accordance with applicable privacy policies and laws.

Where there are reasonable grounds to suspect a violation of this Policy, ZynReach may conduct an appropriate investigation.

The investigation may include:

The Customer must, to the extent required under the agreement and applicable law, cooperate with ZynReach in investigations relating to:

This may include providing appropriate information to help identify the source of the activity.

• Performance.
• Security.
• Abnormal activity.
• Misuse.
• Attempted breaches.
• Resource consumption.
• Reviewing logs.
• Reviewing accounts.
• Analyzing activity.
• Examining requests.
• Communicating with the Customer.
• Engaging experts.
• Misuse of the Service.
• Security incidents.
• Fraud.
• Policy violations.

Where there is a security risk or a material violation, ZynReach may, to the extent permitted under the agreement and applicable law:

ZynReach may take immediate action without prior notice where reasonably necessary to protect:

Subsequent notice may be provided where appropriate and permitted.

• Suspend the account.
• Suspend a specific feature.
• Restrict access.
• Disable API access.
• Block a specific activity.
• Terminate sessions.
• Take temporary protective measures.
• The platform.
• Users.
• Customers.
• Data.
• Infrastructure.
• Third parties.

Where permitted or required by law or contract, ZynReach may:

This does not mean that ZynReach assumes a general obligation to monitor all content.

ZynReach may take action in response to:

Any response is made in accordance with applicable law.

• Restrict access to specific content.
• Disable a link.
• Remove content from the Service interface.
• Suspend the associated account.
• A court order.
• A valid legal request.
• A request from a competent governmental authority.
• Regulatory requirements.

Use suspected of violating this Policy may be reported through ZynReach's official contact channels.

A report should preferably include:

The abuse-reporting mechanism may not be used to submit:

ZynReach may disregard, or take appropriate action regarding, reports that appear abusive or made in bad faith.

Security violations or abuse must be reported through the official channels designated by ZynReach.

The following items should not be sent through public reporting channels:

• The nature of the violation.
• The account or service concerned, if known.
• The date and time.
• A description of the activity.
• Any available evidence.
• The reporter's contact information.
• Malicious reports.
• Claims the reporter knows to be false.
• Attempts to harass users.
• Attempts to disrupt competitors' accounts.
• Passwords.
• API keys.
• Tokens.
• Payment card data.
• Unnecessary confidential information.

Security vulnerabilities should preferably be reported through the official Responsible Disclosure channel designated by ZynReach.

A vulnerability may not be exploited for malicious purposes or to extract data unrelated to verifying the vulnerability.

This Policy supplements ZynReach's security policies.

The Security & Trust Policy sets out the controls the Company uses to protect the Services, while this document defines what is and is not acceptable on the part of users.

Any processing of personal data by ZynReach is subject to the applicable Privacy Policy.

This Policy does not grant ZynReach any authority beyond what is permitted by law, the Privacy Policy, or the agreement.

Where the Customer acts as Controller and ZynReach acts as Processor, obligations relating to the processing of Customer Data are also subject to the DPA.

In the event of a conflict, the provisions of the DPA shall govern with respect to the processing of Customer Data.

This Policy forms an integral part of the Terms of Service.

In the event of a conflict between this Policy and the Terms of Service, the provisions of the Terms of Service shall apply to the extent determined by the agreement, unless mandatory law provides otherwise.

ZynReach may take appropriate action upon a violation of this Policy.

Such action may include:

The action taken is selected based on the severity of the violation, the risks involved, and the circumstances.

ZynReach may take into account:

ZynReach is not obligated to follow all of the foregoing actions sequentially.

Immediate or severe action may be taken where necessary to protect:

• Warning the user.
• Requesting that the activity be corrected.
• Restricting use.
• Suspending the account.
• Suspending the Service.
• Disabling API access.
• Removing or restricting content.
• Terminating the account.
• Barring future access.
• Pursuing legal action where necessary.
• The nature of the violation.
• Its severity.
• Its recurrence.
• Its effect on others.
• Whether it was intentional.
• The presence of fraud.
• The presence of a security risk.
• The user's cooperation.
• The account's prior history.
• Legal requirements.
• Users.
• Customers.
• Data.
• The Service.
• Infrastructure.
• Security.

If an account is suspended due to a violation, ZynReach may restore the Service once it determines that:

There is no obligation to restore an account where termination is justified under the agreement or applicable law.

ZynReach may not be used in a manner that causes harm to third-party systems or services.

The user remains responsible for its conduct toward external systems, even where the activity is carried out through ZynReach.

• The risk has been contained.
• The violation has been corrected.
• The account has become secure.
• Contractual and legal requirements permit it.

ZynReach may not be used to circumvent subscription plans, pricing, or usage limits.

This includes:

ZynReach may not be resold, licensed, or provided as a standalone service except under an agreement or official program authorized by ZynReach.

The following items may not be used in a manner that suggests a relationship, affiliation, partnership, or endorsement that does not exist:

• Creating multiple accounts to circumvent restrictions.
• Reselling the Service without authorization.
• Sharing a commercial account in a manner that violates the plan's terms.
• Exceeding user limits.
• Using the Service in a manner inconsistent with the license.
• The ZynReach name.
• The ZynReach logo.
• The Zyntra Digital name.
• Related trademarks.

ZynReach cannot guarantee that all users will comply with this Policy.

Each user remains responsible for its use of the Service.

To the extent permitted by law and the agreement, ZynReach bears no responsibility for:

• Unlawful use by the Customer.
• Content uploaded by the user.
• Damage resulting from the sharing of login credentials.
• Misuse of the API by the Customer.
• Use of the Service in a manner that violates this Policy.
• Damage arising from systems or services outside ZynReach's control.

ZynReach may amend this Policy from time to time to reflect:

The updated version is published through the appropriate official channels.

Unless otherwise provided by the agreement or applicable law, amendments become effective upon publication or on the date specified in the updated version.

Continued use of the Service after an amendment takes effect is subject to the updated Policy, to the extent permitted by law.

• Technical developments.
• New security risks.
• Legal changes.
• Changes to the Services.
• Lessons learned from incidents.
• Regulatory requirements.

In the event of a conflict:

The above order of precedence applies only to the extent an actual conflict exists.

If any provision of this Policy is found to be invalid or unenforceable in a particular jurisdiction, it shall be interpreted or modified to the minimum extent necessary to make it valid and enforceable, without affecting the remaining provisions of the Policy.

ZynReach's failure to enforce any provision of this Policy at a given time does not constitute a waiver of its right to enforce that provision at a later time.

• Applicable mandatory law.
• The signed written agreement.
• Terms of Service / Master Services Agreement.
• Data Processing Agreement, with respect to Customer Data.
• This Policy.

For inquiries regarding the Acceptable Use Policy or to report misuse of the Services, please use the official contact channels published on the ZynReach website or specified in the agreement entered into with the Customer.

The document record is set out below:

This document constitutes the general Acceptable Use Policy for ZynReach's services and does not constitute an exhaustive list of all forms of prohibited use.

ZynReach reserves the right to take appropriate action against any use that poses a reasonable risk to:

This Policy is interpreted and applied in light of applicable laws and agreements.

This Policy does not grant ZynReach an unlimited right to monitor or access Customer content, nor does it relieve users of their legal and contractual responsibilities.

• Document Name: Acceptable Use Policy
• Abbreviation: AUP
• Company: Zyntra Digital
• Platform: ZynReach
• Website: zynreach.com
• Version: 1.0
• Effective Date: August 31, 2026
• Classification: Public / Legal / Security / Compliance
• Owner: Legal / Security / Operations
• Review: Periodically, or upon a material change
• Related Documents: Terms of Service / Privacy Policy / DPA / Security & Trust Policy / Incident Response Policy
• Platform security.
• Data integrity.
• Service stability.
• Users.
• Customers.
• Third parties.
• Legal compliance.