This policy is part of the Terms of Service. It applies to everyone who uses invisit, including people who only follow a short link. Capitalised terms mean what they mean in the Terms.
Short links
Short links on invisit.cc and on custom domains must not lead to, or be used for:
- phishing, credential harvesting, or pages that imitate another person, brand or service;
- malware, unwanted software, drive-by downloads, or exploit kits;
- scams, fraud, fake giveaways, investment or crypto schemes, or fake shops;
- spam, including links sent in unsolicited bulk messages, and link cloaking meant to evade the filters of email providers, social networks or ad platforms;
- child sexual abuse material, which we report to the authorities;
- sexually explicit content on the shared domain;
- content that promotes violence, terrorism or violent extremism, or harasses or threatens people;
- the sale of illegal goods or services, including drugs, weapons and stolen data;
- content that infringes copyright, trademarks or other rights;
- anything illegal where you or your audience are.
Password protection, expiry dates, click limits and routing rules are for legitimate use. Using them to hide a prohibited destination from our checks is itself a breach.
We check destinations against public threat-intelligence feeds and our own signals, at creation and afterwards. We may disable a link, show visitors a warning, or delete it, and may suspend the workspace behind it, without prior notice where people are at risk.
Analytics and tracking
You must not use the Service to:
- track people on sites or apps you do not own or are not authorised to measure;
- collect special categories of personal data, government identifiers, payment card data,
passwords, or children’s personal data, through events, properties, URLs,
identify, feedback forms or any other channel; - try to re-identify visitors from the pseudonymous data the Service keeps, or combine it with other data to build profiles of individuals across sites;
- send fabricated or inflated traffic, or use the Service to make traffic figures appear different from reality to advertisers, investors or buyers.
The platform itself
You must not:
- probe, scan or test the vulnerability of the Service without our written permission (see “Security research” below);
- interfere with or overload the Service, including through denial-of-service attacks, excessive automated requests, or sending events at volumes meant to degrade it;
- get around plan limits, rate limits, the shared Free allowance or access controls, for example by creating accounts to multiply free allowance;
- access another customer’s data, or use credentials, tokens or keys that are not yours;
- resell, sublicense or offer the Service as part of your own product without our agreement, except for agencies managing sites for their own clients;
- reverse engineer the hosted Service, except where the law allows it or the code is published under an open-source licence;
- use the Service to build a competing product by copying its features, design or data.
Security research
We welcome reports of security issues at security@invisit.dev. Test only against your own
account and data, do not access or change other people’s data, do not degrade the Service, and
give us reasonable time to fix an issue before you disclose it. If you follow these rules we will
not pursue legal action for your research.
Reporting abuse
Report a malicious short link, a phishing page, or any other abuse to abuse@invisit.dev. Include
the link or site, what you saw, and when. We aim to act on credible phishing and malware reports
within 24 hours.
Rights holders can send copyright or trademark notices to the same address with: the work or mark concerned, the link or content that infringes it, your contact details, and a statement that you believe in good faith the use is not authorised and that your notice is accurate.
Enforcement
We decide what breaches this policy. Depending on how serious the breach is, we may warn you, remove content or links, restrict features, or suspend or terminate the workspace or account, as set out in section 11 of the Terms. We may report illegal activity to the authorities and cooperate with them.