Acceptable Use Policy

This Acceptable Use Policy (the “Policy”) sets out what you may and may not do when using gbeya.com and the Gbeya Services — our multi-tenant “Creator Business OS”, where creators and businesses run bookings, courses, a podcast & guest engine, sponsorships, link-in-bio, email marketing and campaigns, YouTube tools, analytics and AI features within an isolated Workspace to serve their own end-customers. This Policy is part of, and incorporated into, our Terms & Conditions; capitalised terms have the meaning given there. It applies to everyone who uses the Services, including your team members and your end-customers. Breaching this Policy is a breach of the Terms and may lead to enforcement action. You are responsible for ensuring that everyone who uses your Workspace complies with it.

1. Prohibited content

You must not create, upload, store, send, publish or otherwise make available through the Services any content that:

• is illegal, or promotes, facilitates or provides instructions for illegal activity;
• infringes the intellectual property, publicity, privacy or other rights of any third party, including copyright, trade marks, trade secrets and rights in databases (see our Copyright & DMCA Policy);
• contains or distributes malware, viruses, worms, ransomware, spyware, or any code designed to disrupt, damage, or gain unauthorised access to systems or data;
• is fraudulent, deceptive or misleading, including phishing, pyramid or Ponzi schemes, counterfeit goods, fake reviews, deepfakes intended to deceive, or “get rich quick” scams;
• is hateful, harassing, threatening, defamatory, or that incites violence or discrimination against individuals or groups on the basis of a protected characteristic;
• sexually exploits or endangers any person, and in particular any child sexual abuse material (CSAM) or any content that sexualises, exploits or endangers minors — we report such material to the appropriate authorities and remove it without notice;
• depicts, promotes or facilitates violence, terrorism, self-harm, or the sale of weapons, drugs or other dangerous or regulated goods where prohibited;
• violates the privacy of others, including publishing personal or confidential information without a lawful basis or consent (“doxxing”), or unlawful surveillance.

2. Prohibited conduct

You must not, and must not permit anyone to:

• access, or attempt to access, any account, Workspace, data or system that you are not authorised to access;
• probe, scan, test or attempt to breach the security, authentication or tenant isolation of the Services, or interfere with any other tenant’s Workspace, data or use of the platform;
• circumvent, disable or exceed any rate limits, usage limits, quotas, plan restrictions or access controls, or attempt to obtain features or capacity beyond your entitlements;
• reverse engineer, decompile, disassemble or otherwise attempt to derive the source code or underlying structure of the Services, except to the limited extent this restriction is prohibited by law;
• resell, sublicense, rent, lease or otherwise commercially exploit the Services or make them available to third parties except as expressly permitted for serving your own end-customers;
• use bots, crawlers, scrapers or other automated means to access, harvest or extract data from the Services without our prior written permission, or otherwise place an unreasonable load on our infrastructure;
• impersonate any person or entity, or misrepresent your affiliation with any person or entity, including Gbeya;
• use the Services to develop a competing product, or to benchmark them for a competitor, without our consent.

3. Email & anti-spam

Gbeya provides an email marketing and campaign engine. Because email abuse harms recipients and the deliverability of every creator on the platform, we enforce strict anti-spam rules. When sending email, SMS or other messages through the Services, you must:

• only contact people who have given you clear, verifiable and appropriate consent to receive your messages, or with whom you have another lawful basis to communicate;
• comply with all applicable laws governing electronic communications, including the US CAN-SPAM Act, Canada’s Anti-Spam Legislation (CASL), the UK Privacy and Electronic Communications Regulations (PECR) and the EU/UK General Data Protection Regulation (GDPR);
• include a functioning, easy-to-use unsubscribe mechanism in every marketing message and a valid physical postal address for the sender;
• never use purchased, rented, scraped or harvested lists, and never send to addresses obtained without the recipient’s knowledge;
• promptly honour all unsubscribe requests and suppression lists, and never attempt to re-subscribe or contact anyone who has opted out;
• use accurate “from”, “to” and routing information and truthful, non-deceptive subject lines, and never send phishing, spoofed or fraudulent messages;
• maintain healthy sending practices — we may pause, throttle or terminate sending that generates high bounce, spam-complaint or blocklist rates.

You are the sender and controller of your campaigns and remain responsible for their content, for holding evidence of consent, and for compliance with the laws of every jurisdiction in which your recipients are located.

4. Fair use, rate limits and resource abuse

The Services are provided on a fair-use basis and are subject to rate limits, quotas and resource allocations appropriate to your plan. You must not take any action that imposes an unreasonable or disproportionate load on our infrastructure, degrades performance for other tenants, or is designed to circumvent metering, billing or capacity controls. This includes misuse of AI features, mass automated requests, cryptomining, or using storage or compute for purposes unrelated to your legitimate use of the Services. We may apply technical limits and take reasonable measures to protect platform stability for everyone.

5. Security & vulnerability reporting

We welcome responsible disclosure. If you discover a security vulnerability or a flaw affecting tenant isolation, please report it promptly and in good faith to hello@gbeya.com, and give us a reasonable opportunity to remediate before any public disclosure. You must not conduct penetration testing, load testing, vulnerability scanning or other security testing against the Services without our prior written authorisation, and you must never access, alter or exfiltrate data that is not yours in the course of any research.

6. Responsibility for your end-customers and Workspace content

Your Workspace is yours to run. You are responsible for all content, campaigns, bookings, courses, listings and other activity within it, and for the conduct of your team members and your end-customers. You must publish and enforce your own terms and privacy notices with your end-customers where required, obtain any necessary consents, and ensure your use of the Services — and theirs — complies with this Policy and applicable law. Nothing on the platform constitutes professional advice from us; please also review our Disclaimer.

7. Enforcement

We may investigate suspected violations of this Policy and take any action we consider appropriate and proportionate, which may include: issuing a warning; removing, disabling or restricting access to content; throttling or suspending features such as email sending; suspending or terminating your account or Workspace; and preserving and disclosing information to, or otherwise cooperating with, law enforcement or regulators where required or permitted by law. Where the risk is severe — for example CSAM, active fraud, or an ongoing security threat — we may act immediately and without prior notice. Our right to enforce is in addition to the remedies set out in the Terms.

8. Reporting violations

If you believe someone is using the Services in breach of this Policy — for example spam, fraud, abuse, or harmful content — please report it to hello@gbeya.com with enough detail for us to investigate. Copyright complaints should be submitted under our Copyright & DMCA Policy. You can also reach us via our contact page.

9. Changes to this Policy

We may update this Policy from time to time to reflect changes to the Services, legal requirements or best practice. Material changes will be notified via the Services or by email and the effective date above will be revised. Your continued use of the Services after an update takes effect constitutes acceptance of the revised Policy.