Acceptable Use Policy

1. Authorised and lawful use

Use the service only for lawful purposes. You must own, administer or have permission to monitor websites and domains you add. Public DNS and registration lookups may be used for legitimate research, subject to applicable law and provider restrictions. Public information does not give you permission to access a private system or change a website.

Obtain explicit authority before connecting WordPress, requesting updates or performing security checks against systems belonging to another organisation. Respect the scope of that authority.

2. Prohibited activity

Do not use Nimbus Hub for attacks, exploitation, unauthorised penetration testing, password guessing, credential stuffing, denial of service, malware distribution, phishing, spam, harassment or unlawful surveillance.

Do not bypass authentication, two-factor checks, client boundaries, domain limits, rate limits or other safeguards. Do not use multiple accounts, automation or modified clients to evade restrictions or repeatedly overload monitored websites, DNS services or our infrastructure.

Do not upload malicious files, inject commands or scripts, falsify results, impersonate another user, or attempt to obtain other clients’ data. Do not probe our service for vulnerabilities without prior written authorisation defining the scope.

3. Data and credentials

Only submit information necessary for the service and which you are entitled to use. Do not put passwords, secret keys, payment-card data, health information or other sensitive personal information into domain names, tags, saved searches, expected website text or support messages. Use designated credential fields only for the credentials those fields require.

Keep exports and reports secure. Share them only with people who are entitled to see them. Do not publish unsupported accusations about a domain owner based on a look-alike or security finding.

4. Responsible operation

Use reasonable check frequencies and bulk actions. Avoid repeated manual checks when a result is already queued. Confirm that email alert recipients are authorised to receive reports about the monitored systems.

Keep WordPress backups and recovery arrangements outside this service. Disconnect the connector and revoke its key if control of a website changes. Report suspected compromise promptly to support@voxit.co.uk.

5. Enforcement and reporting

We may investigate suspected misuse using relevant activity and security records, limit requests, suspend affected access or remove unlawful content where appropriate. We will take proportionate action and, where practicable, explain it and allow the issue to be resolved. Serious or ongoing misuse may lead to termination under the applicable service agreement.

We may preserve relevant evidence and disclose it where required by law or where legally justified to protect people or systems. To report abuse or challenge a restriction, contact support@voxit.co.uk with relevant details, without sending passwords or connection keys.