Acceptable Use Policy

This Acceptable Use Policy ("Policy") governs your use of Zenovay's website analytics platform and related services (collectively, the "Services"). By using our Services, you agree to comply with this Policy and our Terms of Service.

This Policy is designed to ensure that our Services are used responsibly, ethically, and in compliance with applicable laws and regulations.

Appropriate Analytics Practices

Zenovay's Services are designed for legitimate website and application analytics purposes. When using our Services, you must:

• Use the Services only for lawful purposes and in accordance with this Policy
• Obtain proper consent from visitors before collecting their data, as required by applicable privacy laws (including GDPR, ePrivacy Directive, CCPA/CPRA, PIPEDA, and other applicable regulations)
• Provide clear and accessible privacy notices to your website visitors
• Honor user opt-out requests and data deletion requests promptly
• Implement reasonable security measures to protect collected data
• Use collected data only for the purposes disclosed in your privacy policy
• Comply with all applicable data protection regulations in your jurisdiction

Prohibited Tracking Purposes

You may not use Zenovay's Services to track visitors or collect analytics data from websites or applications that:

• Host or distribute illegal content, including but not limited to child sexual abuse material, content promoting terrorism, or content that violates intellectual property rights
• Facilitate illegal activities such as fraud, money laundering, identity theft, or the sale of illegal goods or services
• Promote violence, hatred, discrimination, or harassment based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristics
• Distribute malware, viruses, or other malicious software
• Engage in phishing, scamming, or other deceptive practices
• Target children under 13 (or the applicable age in your jurisdiction) without proper parental consent and COPPA compliance
• Violate the privacy rights of individuals or collect personal data without legal basis

Data Collection Restrictions

When using our Services, you must not:

• Collect or process sensitive personal data (e.g., health information, financial data, biometric data) without explicit consent and appropriate safeguards
• Use tracking scripts to collect data from password-protected areas, payment pages, or other sensitive sections of your website without proper disclosure
• Combine Zenovay analytics data with personally identifiable information (PII) in ways that violate your privacy policy or applicable law
• Share or sell visitor data to third parties without proper consent
• Use the Services to create detailed user profiles for purposes other than analytics and website optimization
• Bypass or circumvent user consent mechanisms, cookie banners, or privacy controls
• Track users across websites (cross-site tracking) without proper disclosure and consent
• Use the Services to facilitate surveillance, stalking, or harassment of individuals

Sensitive Data Categories

You are strictly prohibited from using Zenovay to track, collect, or process the following categories of sensitive data without prior written authorization from Zenovay and implementation of appropriate safeguards:

• Health Information: Medical records, health conditions, treatment information, prescription data, or any data covered by HIPAA or similar regulations
• Financial Information: Payment card numbers, bank account details, credit scores, or detailed financial transaction data
• Biometric Data: Fingerprints, facial recognition data, voice prints, or other biometric identifiers
• Government Identifiers: Social security numbers, passport numbers, driver's license numbers, or national identification numbers
• Precise Location: GPS coordinates or precise geolocation data that could identify an individual's exact location in real-time
• Protected Class Information: Data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or sexual orientation
• Authentication Credentials: Passwords, security questions, authentication tokens, or any credentials that could be used to access accounts

By using Zenovay, you acknowledge that you bear full responsibility for ensuring that no sensitive data as described above is transmitted to our Services, and you agree to indemnify Zenovay for any claims arising from your violation of this prohibition.

First-Party Proxy Usage

If you configure Zenovay to operate through your own domain (first-party tracking mode), you accept the following additional responsibilities:

• You must disclose in your privacy policy that analytics data is collected through your domain
• You remain fully responsible for obtaining appropriate consent from your users
• You must not use first-party tracking mode solely to circumvent user privacy preferences or ad-blocking tools without appropriate disclosure
• You accept full liability for any legal claims arising from your use of first-party tracking mode

Platform Abuse and Misuse

You must not:

• Send excessive API requests or attempt to overwhelm our infrastructure through denial-of-service attacks or similar means
• Attempt to gain unauthorized access to our systems, servers, or networks
• Reverse engineer, decompile, disassemble, or otherwise attempt to discover the source code of our Services
• Circumvent usage limits, rate limits, or billing systems
• Scrape, harvest, or collect data from Zenovay's platform beyond what is provided through official APIs
• Resell, redistribute, or sublicense our Services without written authorization
• Create multiple accounts to avoid fees, restrictions, or enforcement actions
• Use our Services in a manner that infringes on the rights of other users or interferes with their use of the Services
• Impersonate Zenovay, our employees, other users, or any other person or entity

Rate Limits

To ensure fair usage and platform stability, the following rate limits apply to all users:

Exceeding these rate limits will result in temporary throttling (HTTP 429 responses). Persistent or intentional abuse of rate limits may result in account suspension or termination.

Compliance with Privacy Laws

You are responsible for ensuring that your use of our Services complies with all applicable privacy and data protection laws, including but not limited to:

• General Data Protection Regulation (GDPR): If you track visitors from the European Economic Area, you must comply with data protection requirements, including obtaining valid consent, providing data subject rights, and implementing appropriate technical and organizational measures.
• CCPA (California Consumer Privacy Act): If you track California residents, you must comply with CCPA requirements, including providing notice, honoring opt-out requests, and maintaining data security.
• COPPA (Children's Online Privacy Protection Act): If your website targets children under 13, you must obtain verifiable parental consent before collecting any personal information.
• ePrivacy Directive: If you track visitors from EU member states, you must comply with the ePrivacy Directive's requirements for cookie consent.
• Other applicable laws: You must comply with any other data protection, privacy, or consumer protection laws applicable in your jurisdiction or the jurisdictions of your visitors.

Enforcement

Zenovay reserves the right to investigate suspected violations of this Policy. We may use various methods to detect violations, including automated systems, user reports, and manual review.

If we determine that you have violated this Policy, we may take any or all of the following actions:

• Issue a warning and require you to take corrective action within a specified timeframe
• Temporarily suspend your access to the Services
• Permanently terminate your account and delete your data
• Report illegal activities to appropriate law enforcement authorities
• Cooperate with law enforcement investigations
• Pursue legal action for damages, injunctive relief, or other remedies
• Refuse to provide Services to you in the future

We may take immediate action without prior notice in cases involving:

• Illegal activity or content
• Immediate threats to the security or integrity of our Services
• Violations that risk harm to individuals or other users
• Repeated violations after prior warnings
• Legal requirements or court orders

Reporting Violations

If you become aware of any violation of this Acceptable Use Policy, please report it to us immediately. We take all reports seriously and will investigate promptly.

To report a violation, please provide:

• A detailed description of the violation
• URLs or account identifiers associated with the violation
• Evidence supporting your report (screenshots, links, etc.)
• Your contact information for follow-up questions
• Any other relevant information

Changes to This Policy

We may update this Acceptable Use Policy from time to time to reflect changes in our Services, legal requirements, or industry best practices. When we make material changes, we will:

• Update the "Last update" date at the top of this page
• Notify active users via email or through our Services
• Provide a reasonable notice period before the changes take effect (except where immediate changes are required by law)

Your continued use of our Services after changes to this Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using our Services.

Contact Us

If you have questions about this Acceptable Use Policy or need clarification about what is permitted, please contact us: