Acceptable Use Policy

This Acceptable Use Policy ("AUP") forms part of the Terms of Service. It applies to your use of ExaRoutes, including any QR code, short link, lead-capture form, or landing page you create through the service. Breach of the AUP can result in immediate suspension or termination of your account.

ExaRoutes redirects scanners to URLs you choose. We do not pre-screen those URLs. That makes the AUP load-bearing: keeping the platform safe to scan is how every legitimate customer keeps the trust of their audience.

1. Things you must not do

You may not use ExaRoutes to:

Illegal content and activity

• Distribute, link to, or facilitate access to anything that is illegal in your jurisdiction or in India.
• Distribute or link to child sexual abuse material. We report this to authorities and to the relevant hotlines without delay.
• Distribute or link to content that incites violence or terrorism, or that is on a sanctions list.
• Sell or market goods or services in regulated categories (firearms, controlled substances, prescription pharmaceuticals, gambling, financial securities, adult services) without holding the licences your jurisdiction requires and without disclosing them on the destination page.

Deceptive and harmful redirects

• Phishing: capturing credentials, payment details, or personal data while pretending to be another brand or service.
• Distributing malware, drive-by downloads, browser exploits, ransomware, spyware, or any code designed to compromise a device.
• Cryptocurrency scams: rug pulls, fake airdrops, fake giveaways, impersonation of project founders or exchanges.
• Investment fraud, pyramid schemes, multi-level-marketing recruiting that misrepresents earnings, "guaranteed return" schemes.
• Bait-and-switch redirects where the QR code or short link claims to be one thing and resolves to something materially different.

Abuse of people

• Harassment, threats, stalking, or doxxing.
• Hate speech or content that demeans a person on the basis of race, ethnicity, national origin, religion, caste, gender, gender identity, sexual orientation, disability, or similar protected characteristics.
• Non-consensual sexual content. Sexual content involving any person who has not provided clear, verified consent.
• Sharing personal information about someone without their consent in a way intended to cause harm.

Infringement

• Posting or linking to material that infringes someone else's copyright, trademark, patent, trade secret, or other intellectual property.
• Impersonating another business or person, or implying an endorsement that does not exist.
• Using ExaRoutes branding, logos, or trade dress without our written permission. Plans that include white-label rights are an exception, scoped to those rights.

Spam and unwanted communications

• Sending unsolicited commercial messages (SMS, email, WhatsApp) that link to ExaRoutes-hosted destinations without prior consent of the recipient as required by their local law.
• Generating QR codes or short links in bulk for the purpose of mass-blasting them in violation of anti-spam laws (CAN-SPAM, GDPR, India's TRAI regulations, etc.).
• Using lead-capture forms to collect addresses you intend to use without consent.

Abuse of the platform itself

• Bypassing or attempting to bypass rate limits, plan quotas, scan caps, or paywalls.
• Automated scraping of the marketing site, dashboard, or public scan endpoints beyond what robots.txt and the API documentation allow.
• Probing, scanning, or testing the security of ExaRoutes infrastructure without prior written authorisation. (Coordinated disclosure of vulnerabilities is welcome at security@exaroutes.com; see "Security research" below.)
• Reselling ExaRoutes capacity to third parties, framing the dashboard inside another product, or operating ExaRoutes as a backend for a competing QR or short-link service.
• Sharing one paid account between multiple distinct organisations to evade per-seat or per-workspace pricing.
• Creating multiple accounts to abuse free trials, vouchers, or other promotional pricing.

2. Security research

Good-faith security research is welcome. Email security@exaroutes.com with the details before you publish anything. Do not access, modify, or exfiltrate data that is not your own; do not disrupt the service for other customers. Researchers acting in good faith and following coordinated disclosure will not be subject to legal action by us.

3. Reporting abuse

If a QR code or short link hosted by ExaRoutes is being used in violation of this AUP, please report it to abuse@exaroutes.com. Include the full URL, a short description of the issue, and any evidence you have (screenshots, scan logs, sample messages). We aim to acknowledge reports within one business day and act on validated reports promptly.

For urgent reports involving phishing, malware, or child sexual abuse material, mark the email subject with URGENT ABUSE. We prioritise these.

4. How we enforce

When we receive a credible report or detect a violation we may, depending on severity:

• Disable the offending QR code or short link so future scans return a branded "this link has been disabled" page.
• Suspend the account, blocking sign-in and freezing all redirects until the issue is resolved.
• Terminate the account and delete its data in line with the Privacy Policy.
• Cooperate with law enforcement or regulators where compelled by valid legal process.
• Refuse refunds for any unused subscription time on accounts terminated for AUP violations.

Where reasonable, we will notify you and give you a chance to fix the issue first. For severe or urgent matters (active phishing, malware, illegal content) we may act first and notify afterwards. You can appeal an enforcement action by replying to our notice; we read every appeal.

5. Bad-faith reports

We take reports seriously, but we also see false reports filed to harass competitors. Repeated bad-faith reports may themselves be treated as AUP violations, including loss of reporting privileges.

6. Changes

We may update this AUP as new abuse patterns emerge. The "Last updated" date at the top reflects the most recent change. For material changes we will tell you in advance.

7. Contact

Questions or appeals go to abuse@exaroutes.com.