Acceptable Use Policy

1. Scope

This Acceptable Use Policy (AUP) applies to all Tenants of the Qoro platform, their staff and their End Customers. The AUP forms part of the Terms of Service §8 — by accepting the Terms you also accept the AUP.

2. Prohibited Content

Uploading, publishing or processing the following content on the platform is prohibited:

• Illegal goods and services (drugs, weapons, smuggled goods, fake documents, etc.)
• Sale of age-restricted products without age verification
• Infringing images, trademarks or copyrighted content
• Misleading menu pricing, fake product descriptions, non-existent promotions
• Hate speech, harassment, incitement to violence, discriminatory text/imagery
• Sexually explicit imagery (without age gating) and any form of child sexual abuse material
• Malware, exploit code, phishing URLs in text/URL fields

3. Prohibited Conduct

• Attempting unauthorised access to another Tenant's account
• Damaging other businesses through fake orders
• Payment fraud and abuse of chargebacks
• Creating fake accounts/businesses (identity fraud)
• Marketing to End Customers via spam (non-unsubscribeable email, SMS flooding)
• Reselling the platform as multi-tenant to off-contract businesses
• Attempting to bypass APIs and fees for illegal or harmful purposes

4. Security & Abuse

• Attempts to bypass the platform's security mechanisms (rate limiting, bot defence, authentication) are prohibited.
• Security vulnerabilities should be reported under responsible disclosure to security@qoro.cc. Reports made before any attack receive reasonable good-faith-research protection.
• DDoS, load testing, automated spam or broad unauthorised scanning is prohibited.
• Scraping Tenant data from the platform and bulk-selling it to third parties is prohibited (data belongs to the Tenant; Flexton's processing license does not extend beyond Service provision).

5. API & Resource Use

APIs and platform resources are provided under fair-use. Tenants exceeding fair use are warned first, then rate-limited, or directed to an Enterprise Plan conversation. Limits:

• API calls per minute — Plan-dependent; HTTP 429 on over-use.
• Monthly media storage — Plan-dependent; new uploads blocked on over-use.
• Concurrent WebSocket connections — default 50.

6. Reporting Violations

Report suspected AUP violations to abuse@qoro.cc. Please include the URL, screenshots and a description. Reports are handled confidentially.

7. Enforcement

On AUP violations, Flexton applies the following actions by nature and recurrence:

• Warning and removal request
• Removal of content by Flexton
• Temporary feature restriction (e.g. API access)
• Temporary account suspension
• Account termination with data deletion under Terms §15
• Reporting to authorities and legal proceedings for serious violations (illegal content, fraud, CSAM)

Flexton reserves the right to suspend accounts without prior notice in the event of immediate risk.