Acceptable Use Policy

This policy applies to you, to anyone you let use your account, and to anything done through your connected integrations, including work by colleagues, contractors or agencies acting for you. It applies to the output too: content MADBOT drafts becomes yours when you publish it, and these rules travel with it.

You may connect a website only if you own it, or are authorised in writing by whoever does. Being able to reach a site in a browser is not authorisation, and neither is managing someone's marketing unless that engagement covers automated work of this kind.

Be ready to prove it if we ask, by one of:

• DNS or file-based control of the domain,
• verified ownership in Google Search Console,
• written permission from the owner.

Connecting a site you do not control is a serious breach and results in immediate suspension.

On a site you control you may crawl as deeply as the service allows. On any other site, including a competitor you snapshot, you may only take the public pages a normal browser would fetch. You may not:

• reach any page behind a login, a paywall or an access control, whether or not you hold credentials;
• ignore a robots directive, a rate limit, a block or a terms-of-use restriction on another site;
• harvest a competitor's site wholesale, mirror it, or rebuild it as your own content;
• use the crawler to test another site for weaknesses, or to load it heavily enough to degrade it.

A competitor snapshot is for understanding positioning. Copied text remains their copyright.

Your plan sets how much work the service will do. Those limits stop one account consuming capacity other customers paid for, and cap what we spend on your behalf with model and infrastructure providers. You may not work around them. That means no:

• extra accounts, or one business split across accounts, to get more allowance;
• sharing one account between separate businesses;
• tampering with usage counters, licence checks or entitlement responses;
• automated calls to our endpoints outside the product, at a rate the product would not produce.

We may throttle an account generating load far beyond its plan, and will say when we do.

The lead engine finds companies from public information and drafts an email. You send it, from your own mail client, under your own sender reputation and your own legal responsibility.

For every message you send off the back of the service you must:

• have a lawful basis for contacting that recipient in their jurisdiction;
• identify yourself and your business honestly;
• give a clear and free way to stop hearing from you, and act on it;
• honour an objection immediately and permanently, everywhere, not just in MADBOT;
• respect any stricter local rule, such as consent requirements in some jurisdictions.

Record every objection. The suppression list then keeps that contact out of the service permanently, even after the underlying lead data is deleted.

MADBOT researches organisations, not individuals. Company names, domains, technology and published pricing are commercial facts. A named person's details are personal data, and the service treats them that way. You may not use it to:

• research a person rather than the company they work for, or compile a dossier on anyone;
• load in personal data from social profiles, data brokers or purchased lists;
• target consumers rather than businesses;
• infer or record anything about a person's health, race, ethnicity, politics, religion, trade union membership, sex life or sexual orientation, or their biometric or genetic data.

That last one is not a setting. Special-category data is switched off in the data policy the service enforces and there is no option to turn it on. Smuggling it in through free-text fields breaches this policy. The Privacy Policy sets out the levels and their retention windows.

Articles, social posts, listing copy and outreach drafts are produced by an AI model. You are the publisher of anything you ship, and the law treats you as its author. You may not publish generated content that is:

• defamatory, or that states something as fact without checking it;
• infringing, including text or images copied from another site;
• deceptive about what your business is, does or has achieved;
• presented as human-written where a law or platform rule requires you to disclose AI involvement.

You may not publish generated content you have not reviewed. The product is built around that: articles ship only as pull requests you merge, social posts publish only after you approve them on screen, and listing copy is submitted by hand. Auto-merging or bulk-approving without reading breaches this policy.

The service exists to make a real site easier to find. It is not a manipulation tool. You may not use it to impersonate another business or person, to write fake reviews or fabricated testimonials, to invent customers, case studies or statistics, or to build doorway pages, cloaked pages, hidden text, link schemes or anything else that would breach a search engine's own webmaster guidelines. Nor may you use the visibility checks to plant misleading claims in content meant to be picked up by an AI assistant.

You may not use MADBOT for content or activity that is unlawful where you or your audience are, or to harass, threaten or defame anyone, to discriminate against a protected group, to promote self-harm or violence, to produce sexual content involving children, or to run a fraud or a scam.

You may not attack the service, or use it to attack anyone else. No:

• probing, scanning or automated testing of our infrastructure without written permission;
• reverse engineering, decompiling, or extracting prompts, models or source;
• attempts to read, write or delete another customer's data, or to bypass the database security rules;
• attempts to get around the guards on outbound requests, for example by pointing a connected URL at an internal host, a private address or a cloud metadata endpoint;
• using the service as a relay for denial of service, credential stuffing or any attack on a third party;
• uploading malware, or content designed to exploit a reader's browser.

Good-faith security research is welcome. The Security page says how to report something.

You may use MADBOT for clients, on sites you are authorised to manage. You may not resell it, rebrand it or present it as your own product without a written agreement with Mallah Software Services Private Limited. Write to contact@mallahsoftware.com if you want one.

Most problems are honest mistakes. We take the smallest step that resolves the issue.

• Warning. We describe the problem and give you reasonable time to correct it. This is the normal first step.
• Suspension. We pause the account or the affected feature. Your data stays where it is.
• Termination. For serious or repeated breaches we end the agreement. Refunds follow the Refunds and Cancellation policy.

We suspend immediately, with no warning, where continuing would put other customers, third parties or the people whose data is being processed at risk. Connecting a site you do not control, sending unlawful marketing at volume, and attacking the service or a third party all fall into that category. We will tell you why as soon as we act.

Where the law requires it we report unlawful activity to the relevant authority. Nothing here limits any other remedy.

If you believe an account is using MADBOT against your site, or that content produced with it breaches this policy, write to contact@mallahsoftware.com. Tell us the site or content, what you think is happening, and how we can reach you.

For a complaint about your own personal data, the Privacy Policy sets out your rights and the address for those requests. For a security vulnerability, use the route on the Security page.

We investigate every report. We may not be able to tell you the outcome for another customer's account, but we will confirm that we looked.