Acceptable Use Policy

This Acceptable Use Policy ("Policy") governs your use of Zenovay's website analytics platform and related services (collectively, the "Services"). By using our Services, you agree to comply with this Policy and our Terms of Service.

This Policy is designed to ensure that our Services are used responsibly, ethically, and in compliance with applicable laws and regulations.

Appropriate Analytics Practices

Zenovay's Services are designed for legitimate website and application analytics purposes. When using our Services, you must:

• Use the Services only for lawful purposes and in accordance with this Policy
• Obtain proper consent from visitors before collecting their data, as required by applicable privacy laws (including GDPR, ePrivacy Directive, CCPA/CPRA, PIPEDA, and other applicable regulations)
• Provide clear and accessible privacy notices to your website visitors
• Honor user opt-out requests and data deletion requests promptly
• Implement reasonable security measures to protect collected data
• Use collected data only for the purposes disclosed in your privacy policy
• Comply with all applicable data protection regulations in your jurisdiction

Prohibited Tracking Purposes

You may not use Zenovay's Services to track visitors or collect analytics data from websites or applications that:

• Host or distribute illegal content, including but not limited to child sexual abuse material, content promoting terrorism, or content that violates intellectual property rights
• Facilitate illegal activities such as fraud, money laundering, identity theft, or the sale of illegal goods or services
• Promote violence, hatred, discrimination, or harassment based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristics
• Distribute malware, viruses, or other malicious software
• Engage in phishing, scamming, or other deceptive practices
• Target children under 13 (or the applicable age in your jurisdiction) without proper parental consent and COPPA compliance
• Violate the privacy rights of individuals or collect personal data without legal basis

Data Collection Restrictions

When using our Services, you must not:

• Collect or process sensitive personal data (e.g., health information, financial data, biometric data) without explicit consent and appropriate safeguards
• Use tracking scripts to collect data from password-protected areas, payment pages, or other sensitive sections of your website without proper disclosure
• Combine Zenovay analytics data with personally identifiable information (PII) in ways that violate your privacy policy or applicable law
• Share or sell visitor data to third parties without proper consent
• Use the Services to create detailed user profiles for purposes other than analytics and website optimization
• Bypass or circumvent user consent mechanisms, cookie banners, or privacy controls
• Track users across websites (cross-site tracking) without proper disclosure and consent
• Use the Services to facilitate surveillance, stalking, or harassment of individuals

Sensitive Data Categories

You are strictly prohibited from using Zenovay to track, collect, or process the following categories of sensitive data without prior written authorization from Zenovay and implementation of appropriate safeguards:

• Health Information: Medical records, health conditions, treatment information, prescription data, or any data covered by HIPAA or similar regulations
• Financial Information: Payment card numbers, bank account details, credit scores, or detailed financial transaction data
• Biometric Data: Fingerprints, facial recognition data, voice prints, or other biometric identifiers
• Government Identifiers: Social security numbers, passport numbers, driver's license numbers, or national identification numbers
• Precise Location: GPS coordinates or precise geolocation data that could identify an individual's exact location in real-time
• Protected Class Information: Data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or sexual orientation
• Authentication Credentials: Passwords, security questions, authentication tokens, or any credentials that could be used to access accounts

By using Zenovay, you acknowledge that you bear full responsibility for ensuring that no sensitive data as described above is transmitted to our Services, and you agree to indemnify Zenovay for any claims arising from your violation of this prohibition.

First-Party Proxy Usage

If you configure Zenovay to operate through your own domain (first-party tracking mode), you accept the following additional responsibilities:

• You must disclose in your privacy policy that analytics data is collected through your domain
• You remain fully responsible for obtaining appropriate consent from your users
• You must not use first-party tracking mode solely to circumvent user privacy preferences or ad-blocking tools without appropriate disclosure
• You accept full liability for any legal claims arising from your use of first-party tracking mode

Platform Abuse and Misuse

You must not, and you must not permit or assist any third party to:

• Send excessive API requests, generate abnormal traffic patterns, or attempt to overwhelm our infrastructure or that of our subprocessors through denial-of-service, distributed-denial-of-service, traffic amplification, slow-read, request smuggling, or any other capacity-exhaustion technique
• Attempt to gain unauthorized access to our systems, servers, networks, accounts, data, configurations, or any non-public resource, whether through credential guessing, credential reuse from public breaches, session hijacking, token theft, social engineering of our personnel, or any other method
• Reverse engineer, decompile, disassemble, decrypt, or otherwise attempt to discover the source code, algorithms, or underlying ideas of our Services, except where mandatory law permits a narrow carve-out per the Intellectual Property section of the Terms of Service
• Circumvent or attempt to circumvent any usage limit, rate limit, plan limit, geographic restriction, content filter, abuse-detection mechanism, suspension or termination decision, or billing or payment system
• Scrape, harvest, mass-download, screen-scrape, or otherwise collect data from Zenovay's platform, dashboards, marketing site, documentation, or any other surface beyond what is provided through official APIs within their documented rate limits
• Resell, redistribute, sublicense, white-label, or otherwise commercially exploit our Services, in whole or in part, without a separate written agreement with Zenovay (per-customer reseller terms or agency program where one exists)
• Create multiple accounts, use disposable email addresses, use subaddress patterns, use shared mailboxes, or use any other technique to evade fees, plan limits, free-tier limits, single-trial limits, single-discount limits, prior suspensions, or prior terminations
• Use the Services in a manner that infringes on the rights of other users, that interferes with their use of the Services, that exposes them to security risk, or that defames, harasses, threatens, intimidates, or discriminates against them
• Impersonate Zenovay, our personnel, any other Zenovay customer, or any other person or entity, or misrepresent your affiliation with any of the foregoing

Rate Limits

To ensure fair usage and platform stability, the following rate limits apply to all users:

Exceeding these rate limits will result in temporary throttling (HTTP 429 responses). Persistent or intentional abuse of rate limits may result in account suspension or termination.

Compliance with Privacy Laws

You are responsible for ensuring that your use of our Services complies with all applicable privacy and data protection laws, including but not limited to:

• General Data Protection Regulation (GDPR): If you track visitors from the European Economic Area, you must comply with data protection requirements, including obtaining valid consent, providing data subject rights, and implementing appropriate technical and organizational measures.
• CCPA (California Consumer Privacy Act): If you track California residents, you must comply with CCPA requirements, including providing notice, honoring opt-out requests, and maintaining data security.
• COPPA (Children's Online Privacy Protection Act): If your website targets children under 13, you must obtain verifiable parental consent before collecting any personal information.
• ePrivacy Directive: If you track visitors from EU member states, you must comply with the ePrivacy Directive's requirements for cookie consent.
• Other applicable laws: You must comply with any other data protection, privacy, or consumer protection laws applicable in your jurisdiction or the jurisdictions of your visitors.

Enforcement

Zenovay reserves the right to investigate suspected violations of this Policy. We may use various methods to detect violations, including automated systems, user reports, and manual review.

If we determine that you have violated this Policy, we may take any or all of the following actions:

• Issue a warning and require you to take corrective action within a specified timeframe
• Temporarily suspend your access to the Services
• Permanently terminate your account and delete your data
• Report illegal activities to appropriate law enforcement authorities
• Cooperate with law enforcement investigations
• Pursue legal action for damages, injunctive relief, or other remedies
• Refuse to provide Services to you in the future

We may take immediate action without prior notice in cases involving:

• Illegal activity or content
• Immediate threats to the security or integrity of our Services
• Violations that risk harm to individuals or other users
• Repeated violations after prior warnings
• Legal requirements or court orders

Reporting Violations

If you become aware of any violation of this Acceptable Use Policy, please report it to us immediately. We take all reports seriously and will investigate promptly.

To report a violation, please provide:

• A detailed description of the violation
• URLs or account identifiers associated with the violation
• Evidence supporting your report (screenshots, links, etc.)
• Your contact information for follow-up questions
• Any other relevant information

Changes to This Policy

We may update this Acceptable Use Policy from time to time to reflect changes in our Services, legal requirements, or industry best practices. When we make material changes, we will:

• Update the "Last update" date at the top of this page
• Notify active users via email or through our Services
• Provide a reasonable notice period before the changes take effect (except where immediate changes are required by law)

Your continued use of our Services after changes to this Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using our Services.

Contact Us

If you have questions about this Acceptable Use Policy or need clarification about what is permitted, please contact us: