1. Purpose

This Acceptable Use Policy (“AUP”) supplements the Terms of Service. It describes activities that are not permitted when using the Touristic IQ platform. The AUP exists to protect customers, the integrity of the Service and the underlying data partners.

2. Prohibited activities

You may not, and may not allow any user under your control to:

• use the Service to violate applicable law, regulation or third-party rights;
• attempt to gain unauthorised access to other tenants, accounts or systems, including by exploiting vulnerabilities or bypassing authentication;
• reverse engineer, decompile or extract source code from the Service except to the extent permitted by mandatory law;
• use automated means (crawlers, scrapers, bots) to access the Service beyond the rate and scope of your subscription, or in a way that degrades performance for other tenants;
• upload or transmit malware, malicious code, or content that is unlawful, defamatory or infringes the rights of third parties;
• resell, sublicense or otherwise make the Service available to third parties outside the scope of your subscription;
• use the Service to send unsolicited commercial communications (spam).

3. Account security

You are responsible for keeping your credentials secret, for the actions performed under your account, and for promptly notifying us of any suspected compromise. We strongly recommend enabling two-factor authentication where available.

4. Security testing

Penetration testing, vulnerability scanning and similar activities against the Service require our prior written consent. Coordinated, good-faith reports of security issues are welcome and will not be pursued legally, provided the reporter does not disrupt the Service or access data that is not their own.

5. Reporting abuse

Suspected violations of this AUP or security issues should be reported to abuse@touristiciq.com.

6. Enforcement

We may investigate suspected violations, remove or restrict access to offending content, suspend or terminate offending accounts, and take any further action permitted by the Terms of Service or applicable law. We will balance enforcement actions against the impact on legitimate users and notify affected customers where reasonable.