1. The short version
Don't use the Service to harm people, deceive them, or break the law. Don't use it to host malware, spam, fraud, abuse or content that's illegal where you or your audience is.
2. Prohibited content & links
Among other things, you may not use the Service to host, redirect to, or distribute:
- Illegal content — anything unlawful in any jurisdiction you target or operate in.
- Sexual content involving minors, or any content that exploits or endangers children. We report such content to NCMEC and law enforcement.
- Malware, phishing, credential harvesting, drive-by downloads, browser-exploit kits or any code intended to compromise visitors' devices.
- Fraud and scams — fake giveaways, advance-fee schemes, romance scams, fake invoices, impersonation of real brands or government services.
- Harassment, threats, doxxing, incitement to violence, or content promoting self-harm.
- Content that infringes others' intellectual-property or privacy rights.
- Unsolicited bulk messaging (spam) — sending people to QR-code destinations they didn't opt in to.
- Regulated activity without authorisation — e.g. unlicensed gambling, financial services, pharmaceutical sales.
- Promotion of weapons, drugs, or other tightly-regulated goods in jurisdictions where it's prohibited.
3. Prohibited technical behaviour
- Probing, scanning or testing the vulnerability of the Service without our prior written permission, except via a responsible-disclosure email to privacy@drentio.com.
- Circumventing rate limits, plan limits or seat licensing.
- Automated scraping of the dashboard or API beyond documented allowances.
- Reselling the Service, white-labelling without a written agreement, or creating accounts on behalf of others without their consent.
- Using the Service to send mass automated traffic to third-party sites in a way that could be construed as a denial-of-service attack.
4. Two-way sharing & lead capture
If you use the two-way-sharing (lead-capture) feature, you must:
- Tell visitors clearly that they're handing you their contact information.
- Have a lawful basis under applicable privacy law (consent or legitimate interest, as appropriate).
- Honour deletion and opt-out requests promptly.
- Comply with anti-spam law (CAN-SPAM, CASL, ePrivacy / PECR, etc.) before sending any follow-up.
5. Reporting abuse
If you've encountered content on the Service that breaches this AUP, please email legal@drentio.com with the URL and a brief description. For child sexual abuse material, please report it directly to NCMEC and copy us.
6. Enforcement
We may, depending on severity and our reasonable judgement:
- Disable a specific QR code, link or page.
- Suspend a feature on your account.
- Suspend or terminate your account.
- Cooperate with law enforcement and regulators.
We try to give notice and a chance to fix things first when it's safe and reasonable to do so — but for severe issues (CSAM, active fraud, ongoing malware) we'll act immediately.