Acceptable Use Policy

1. Purpose and Scope

This Acceptable Use Policy ("AUP") describes prohibited and restricted uses of the Inviterio platform and related services (collectively, the "Service"). It applies to all users, including event hosts, co-planners, workspace members, and anyone accessing the Service on their behalf.

Violations of this AUP may result in content removal, sending privilege suspension, account restriction, or permanent account termination — with or without notice, depending on severity. We may also report illegal activity to relevant law enforcement or regulatory authorities.

2. Prohibited Content and Events

You may not use the Service to create events, send communications, or upload content that:

• Is illegal or promotes illegal activity — including fraud, money laundering, drug trafficking, or any other activity prohibited by applicable law.
• Is hateful or discriminatory — content targeting individuals or groups based on race, ethnicity, nationality, religion, gender, sexual orientation, disability, or other protected characteristics.
• Is harassing or threatening — content designed to intimidate, threaten, stalk, or otherwise harm specific individuals.
• Is deceptive or misleading — including phishing attacks, impersonation of Inviterio or third parties, fake events designed to harvest personal data, or false claims intended to mislead recipients.
• Infringes intellectual property rights — using copyrighted images, text, or designs without appropriate license or fair use justification.
• Violates privacy rights — publishing or distributing private information about individuals without their consent.
• Contains malware or malicious code — including viruses, trojans, ransomware, spyware, or links to sites distributing such software.
• Involves soliciting payments through fraudulent means — using the event platform to collect money under false pretenses.

3. Email and SMS Communication Rules

Invitations, reminders, and updates sent via the Service's email (Brevo) and SMS (Twilio) integrations must comply with the following:

3.1 Recipient consent and relationship

• You may only use Inviterio to contact individuals who have a legitimate relationship to your event — people you are inviting as guests, informing as event stakeholders, or following up with as part of event management.
• You may not use the Service for bulk commercial marketing, cold outreach, affiliate marketing, or any purpose unrelated to managing a specific event.
• You may not import or use purchased, rented, or scraped contact lists.

3.2 Legal compliance

• All communications must comply with applicable anti-spam legislation, including the CAN-SPAM Act (US), CASL (Canada), GDPR Article 6 lawful basis requirements (EU/EEA/UK), and equivalent laws in your jurisdiction.
• For SMS: you must have the recipient's permission before sending text messages. One exception — if a guest signs themselves up through your event's open RSVP page and enters their phone number there, they'll see their own opt-in checkbox and the Service handles that consent for you. For anyone you add yourself — invited, imported, or entered manually — getting SMS permission is still on you.
• You must include clear identification of yourself as the sender and provide a method for recipients to stop receiving communications.

3.3 Volume and quality

We reserve the right to suspend sending privileges if your account generates:

• Spam complaint rates exceeding 0.1% on any sending batch
• Hard bounce rates exceeding 5% on any sending batch (indicating use of invalid or stale contact lists)
• Unsubscribe rates that suggest recipients did not expect or consent to your communications

Suspension may be temporary (pending investigation) or permanent. We will notify you where practicable, but immediate suspension may be required to protect the platform's shared email sending reputation.

4. Guest Data Use Restrictions

Personal information you collect about guests through the Service — including names, email addresses, phone numbers, RSVP responses, dietary preferences, and other details — may only be used for purposes directly related to the event for which it was collected. Specifically, you may not:

• Sell, rent, or share guest contact data with third parties for their own marketing purposes.
• Use guest data collected via Inviterio to populate mailing lists, CRMs, or marketing databases without the guest's separate explicit consent.
• Use guest data after the conclusion of the event for unrelated purposes without a new lawful basis for processing.

5. Platform and API Abuse

You may not engage in any of the following:

• Circumventing plan limits — creating multiple accounts, using automated scripts, or exploiting technical workarounds to exceed guest caps, event limits, or credit allocations without paying for an appropriate plan.
• Unauthorized automated access — using bots, crawlers, or automated scripts to access or extract data from the Service outside of documented API endpoints.
• Security probing — attempting to scan, probe, or test the vulnerability of our infrastructure, APIs, or databases without our express prior authorization.
• Denial of service — sending excessive requests, flooding endpoints, or otherwise interfering with the performance or availability of the Service for other users.
• Reverse engineering — attempting to decompile, reverse engineer, or extract source code from the Service's client or server components.
• Credential sharing for seat circumvention — sharing account credentials or API keys in a way designed to circumvent per-seat, per-workspace, or per-event billing.
• Reselling without authorization — reselling or sublicensing access to the Service without our prior written consent.

6. Reporting Violations

If you become aware of content or activity on the Service that violates this AUP — including receiving an unsolicited invitation, discovering a fraudulent event page, or identifying an account being used for spam — you can report it in either of two ways:

• Report the page directly. Every public event page and shared invitation card carries a "Report this content" option. You do not need an Inviterio account to use it, and you may report anonymously; providing an email address only lets us follow up with you.
• Email us at support@inviterio.com with as much detail as possible, including the address of the page concerned.

Reports concerning child safety are escalated immediately rather than waiting in the review queue.

We treat all reports seriously and investigate within a reasonable timeframe. We may not be able to share the outcome of investigations due to privacy obligations.

6.1 Suspension of an event

Where we determine that an event page or invitation card breaches this AUP, we may suspend the event. A suspended event stops being reachable at every public address — its event page, its custom subdomain, and any shared invitation cards — for everyone, including the host. Suspension does not delete the host's content or their guest list.

Suspension is separate from the host's own draft/published setting, and a host cannot lift it by re-publishing. If we lift a suspension, the event returns exactly as the host left it.

7. Enforcement

We reserve sole and final discretion to determine whether a violation of this AUP has occurred and to determine the appropriate response. Actions may include, without limitation:

• Warning and request to remedy
• Removal of specific content
• Suspension of email or SMS sending privileges
• Restriction of specific features
• Temporary account suspension
• Permanent account termination without refund
• Referral to law enforcement where criminal activity is suspected

Where we determine that the violation poses an immediate risk of harm, we may take action without prior notice. For less severe violations, we will typically contact you before taking action beyond content removal.