Acceptable Use Policy

1. Why This Policy Exists

Consumers trust what they see when they scan a QR code on a product, and regulators rely on Digital Product Passports being accurate. This policy sets out what is not allowed on Veribl so that trust holds for everyone. It applies to every customer, User and anyone who accesses the Service through a customer’s account, API keys or AI connectors.

This policy is part of our Terms of Service. Capitalised terms have the meaning given there. We may update it as new risks appear; material changes are notified as described in the Terms.

2. Product Information and Passports

Do not use Veribl to publish:

• false or misleading product information, including specifications, origin, materials, recycled content, repairability, durability or safety information
• false compliance claims in a Digital Product Passport or on a product page, such as CE marking, declarations of conformity, carbon footprint, battery data or certifications you do not hold
• unsubstantiated environmental claims (“greenwashing”), such as “climate neutral” or “eco-friendly” without evidence you can produce on request
• passports or pages for products made by someone else, unless you are authorised to act for the manufacturer, importer or distributor
• warranty terms that misrepresent consumers’ statutory rights, or that you do not intend to honour

3. Reviews, Registrations and Claims

• Do not create, buy or publish fake reviews, ratings or registrations, or post reviews written by you or anyone paid by you as if they came from consumers.
• Do not selectively hide negative reviews in a way that misleads consumers about overall feedback, or offer incentives for reviews without disclosing them.
• Do not use registration, proof-of-purchase or claim forms to collect data you do not need or that your privacy notice does not cover.

4. Emails and Consumer Contact

• Do not send marketing emails through Veribl to anyone who has not given valid consent, and do not import purchased, rented or scraped email lists.
• Do not remove, hide or disable unsubscribe links, or keep emailing people who have unsubscribed.
• Do not disguise marketing as transactional messages (for example, adding promotions to a warranty confirmation sent to someone who has not opted in).
• Do not use misleading sender names, subject lines or content, or send emails that impersonate another brand.

If your emails generate abnormal bounce or complaint rates, we may pause sending while we work with you to fix the cause.

5. AI Chat, Translations and AI Connectors

• Do not use prompt injection or other techniques to make the AI assistant reveal system instructions, other customers’ data, consumers’ personal data, or anything outside the product content it is meant to use.
• Do not configure the assistant to pose as a human, to give medical, legal or safety-critical advice it is not able to give reliably, or to pressure or mislead consumers.
• Do not use the chat or translation features as a general-purpose AI service unrelated to your products, or send automated traffic to them to run up usage.
• Do not connect AI assistants through the MCP server or API in ways that let unauthorised people act on your account, and do not use them to publish content that would break this policy. Content an AI connector writes with your credentials is your responsibility.

6. Security and Platform Integrity

• Do not access, or try to access, accounts, product data, passports or consumer data that do not belong to you, including through restricted battery-passport access links that were not issued to you.
• Do not probe, scan or test the vulnerability of the Service, or bypass any authentication or security measure, without our prior written permission.
• Do not upload or distribute malware, malicious files or links, including through manuals, images or proof-of-purchase uploads.
• Do not overload or disrupt the Service, for example with denial-of-service attacks, excessive automated requests, or by exceeding API rate limits on purpose.
• Do not scrape, crawl or bulk-download the Service, including other brands’ product pages or passports, except through documented APIs, public machine-readable passport formats used as intended, or with our permission.

Found a vulnerability?

We welcome good-faith security research. Please report it to [email protected] and follow the guidance in our security.txt. Do not access or change data that is not yours, do not degrade the Service for others, and give us reasonable time to fix the issue before disclosing it. We will not pursue action against research that stays within these limits.

7. Plans, Accounts and Custom Domains

• Do not get around plan limits or feature gates, for example by sharing seats, opening multiple accounts or trials for the same business, or manipulating requests to unlock paid features.
• Do not resell, sublicense or white-label the Service without a written agreement with us.
• Do not connect custom domains you do not own or control, or use a custom domain or product page for phishing, credential harvesting, impersonating another company, or redirecting consumers to deceptive or malicious sites.
• Do not create accounts with false information or on behalf of a business you do not represent.

8. Illegal and Harmful Content and Products

Do not use Veribl for:

• products that are illegal to sell where you sell them, recalled products marketed as safe, or counterfeit goods
• weapons, explosives, illegal drugs or other hazardous products whose sale or promotion is prohibited, or instructions that facilitate serious harm
• content that infringes intellectual property or other rights, including manuals, images or brand assets you are not allowed to use
• content that is defamatory, harassing, hateful, sexually explicit, or that exploits or endangers children
• any activity that breaches EU or other applicable sanctions, export controls or anti-money-laundering laws

9. Enforcement

We may investigate suspected breaches of this policy. Depending on how serious the breach is, we may:

• contact you and ask you to fix it within a set time
• remove or disable specific content, product pages or emails
• pause features such as email sending, AI chat, API keys or a custom domain
• suspend or terminate your account, as described in the Terms
• report illegal activity to the relevant authorities where required

Where we can, we will tell you first and give you a chance to respond. We may act immediately when there is a risk to consumers, other customers, the Service, or a legal obligation to do so. A published Digital Product Passport may be taken down or corrected before its 10-year availability period ends only where the law requires it or its content breaches the Terms or this policy.

10. Reporting Abuse

If you see content on a Veribl-hosted product page or passport that you believe is illegal, misleading or breaks this policy, email [email protected] with the page address, what is wrong, and your contact details. Please report security issues to [email protected] instead. We review every report and will let you know what we decide. Consumers with questions about a specific product, warranty or their personal data should contact the brand first; the brand’s details are shown on its product page. For how product pages handle personal data, see our Product Page Privacy Notice.