Acceptable Use Policy

Scope

This Acceptable Use Policy applies to everyone who uses iLawForms — the product at ilawforms.com, the hosted documents at policies.ilawforms.com, the consent banner, the rights-request intake, the scanner and any API. It forms part of the Terms of Service, and it applies to anyone you give access to your account.

Nothing unlawful

You may not use the Service:

• to break any law that applies to you, or to help someone else break one;
• to infringe copyright, trade marks, trade secrets, privacy or publicity rights;
• to defraud, or to facilitate money laundering, sanctions evasion or terrorist financing;
• in breach of US export control or sanctions law, or from a comprehensively sanctioned jurisdiction; or
• to publish or transmit material that is defamatory, harassing, obscene, or that sexually exploits or endangers a child.

No using compliance documents to deceive

This is the one prohibition specific to this product, and it is the one we take most seriously. The purpose of a privacy policy is to tell people the truth about your data practices. A policy that says you do not use analytics while you do, or that promises a deletion process you have not built, converts a compliance document into a misrepresentation — and it is our text, on our infrastructure, doing the misrepresenting.

Specifically, you may not:

• answer the questionnaire in a way you know to be false in order to produce a shorter or more favourable document;
• publish a generated document for a business, domain or legal entity other than the one it was generated for;
• edit a generated document so that it describes safeguards, rights or processes you do not provide;
• operate a consent banner while ignoring the consent decisions it records; or
• use the rights-request intake to collect requests you have no intention of answering.

The hosted policy network

policies.ilawforms.com exists so that a live legal document stays available. It is not general web hosting. You may not use it:

• to host content that is not a legal document for a site or business you operate;
• as a CDN for images, scripts, downloads or any other asset;
• to host redirects, link shorteners, landing pages or advertising;
• to serve content under a domain or brand you do not control, or in a way that impersonates another business; or
• for phishing, malware distribution, or anything that would put the reputation of the network at risk for every other customer on it.

You may only add a domain you own or are authorised to act for. We may ask you to prove it.

Security and integrity

You may not:

• probe, scan or test the vulnerability of our systems except under the disclosure process below;
• attempt to gain access to an account, organisation, document or record that is not yours;
• circumvent rate limits, authentication, bot protection, entitlement checks or any other control;
• introduce malware, or interfere with the operation of the Service for anyone else;
• send traffic designed to degrade or deny service; or
• reverse engineer the Service, or extract the clause library, except where the law says that restriction cannot be enforced against you.

The site scanner

You may only scan a domain your organisation has claimed and is authorised to test. Pointing the scanner at someone else’s infrastructure is unauthorised scanning, and we treat it as an attack rather than a misconfiguration. The scanner is rate-limited and obeys robots directives; do not attempt to make it do otherwise.

Automated access and scraping

Use the API where we provide one, within its published limits. Without our written permission you may not scrape, crawl or systematically download the Service or the clause library, use it to build a competing document-generation product, or use its output as training or evaluation data for a machine-learning model.

Public hosted policy pages may be fetched by search engines and by anyone reading them, which is the point of publishing them. Bulk harvesting of the network is not that.

Fair use of resources

Plan limits — sites, documents, seats — are published and enforced. Do not create multiple accounts to work around them, share one account across separate businesses, or resell access. If you need more than a plan allows, ask us at support@ilawforms.com.

Email and notifications

Email we send on your behalf — rights-request verification links, policy-change notices — exists to carry a legally required message to a specific person. Do not use it to send marketing, bulk mail, or anything the recipient did not initiate, and do not enter addresses you have no relationship with.

How we enforce this

Where we can, we will contact you first and give you a reasonable chance to fix the problem. Where the issue is severe, unlawful, or presents an immediate risk to other customers or to the public, we may act first and explain afterwards.

Our responses, roughly in order:

• a request that you stop;
• rate limiting, or disabling a specific feature;
• unpublishing a specific hosted document;
• suspending the account; and
• terminating the account, and where appropriate reporting the matter to law enforcement.

Suspension for cause does not entitle you to a refund. Nothing here obliges us to monitor content, and not acting on one breach does not waive our right to act on another.

Reporting abuse and vulnerabilities