[invisit](https://invisit.dev) · [Docs](https://invisit.dev/docs) · [llms.txt](https://invisit.dev/llms.txt) · [llms-full.txt](https://invisit.dev/llms-full.txt)

# Acceptable Use Policy

- Effective: 2026-11-03
- Page: https://invisit.dev/legal/acceptable-use

This policy is part of the [Terms of Service](https://invisit.dev/legal/terms.md). It applies to everyone who uses
invisit, including people who only follow a short link. Capitalised terms mean what they mean in
the Terms.

## Short links

Short links on invisit.cc and on custom domains must not lead to, or be used for:

- phishing, credential harvesting, or pages that imitate another person, brand or service;
- malware, unwanted software, drive-by downloads, or exploit kits;
- scams, fraud, fake giveaways, investment or crypto schemes, or fake shops;
- spam, including links sent in unsolicited bulk messages, and link cloaking meant to evade the
  filters of email providers, social networks or ad platforms;
- child sexual abuse material, which we report to the authorities;
- sexually explicit content on the shared domain;
- content that promotes violence, terrorism or violent extremism, or harasses or threatens
  people;
- the sale of illegal goods or services, including drugs, weapons and stolen data;
- content that infringes copyright, trademarks or other rights;
- anything illegal where you or your audience are.

Password protection, expiry dates, click limits and routing rules are for legitimate use. Using
them to hide a prohibited destination from our checks is itself a breach.

We check destinations against public threat-intelligence feeds and our own signals, at creation
and afterwards. We may disable a link, show visitors a warning, or delete it, and may suspend the
workspace behind it, without prior notice where people are at risk.

## Analytics and tracking

You must not use the Service to:

- track people on sites or apps you do not own or are not authorised to measure;
- collect special categories of personal data, government identifiers, payment card data,
  passwords, or children's personal data, through events, properties, URLs, `identify`, feedback
  forms or any other channel;
- try to re-identify visitors from the pseudonymous data the Service keeps, or combine it with
  other data to build profiles of individuals across sites;
- send fabricated or inflated traffic, or use the Service to make traffic figures appear
  different from reality to advertisers, investors or buyers.

## The platform itself

You must not:

- probe, scan or test the vulnerability of the Service without our written permission (see
  "Security research" below);
- interfere with or overload the Service, including through denial-of-service attacks, excessive
  automated requests, or sending events at volumes meant to degrade it;
- get around plan limits, rate limits, the shared Free allowance or access controls, for example
  by creating accounts to multiply free allowance;
- access another customer's data, or use credentials, tokens or keys that are not yours;
- resell, sublicense or offer the Service as part of your own product without our agreement,
  except for agencies managing sites for their own clients;
- reverse engineer the hosted Service, except where the law allows it or the code is published
  under an open-source licence;
- use the Service to build a competing product by copying its features, design or data.

## Security research

We welcome reports of security issues at `security@invisit.dev`. Test only against your own
account and data, do not access or change other people's data, do not degrade the Service, and
give us reasonable time to fix an issue before you disclose it. If you follow these rules we will
not pursue legal action for your research.

## Reporting abuse

Report a malicious short link, a phishing page, or any other abuse to `abuse@invisit.dev`. Include
the link or site, what you saw, and when. We aim to act on credible phishing and malware reports
within 24 hours.

Rights holders can send copyright or trademark notices to the same address with: the work or mark
concerned, the link or content that infringes it, your contact details, and a statement that you
believe in good faith the use is not authorised and that your notice is accurate.

## Enforcement

We decide what breaches this policy. Depending on how serious the breach is, we may warn you,
remove content or links, restrict features, or suspend or terminate the workspace or account, as
set out in section 11 of the Terms. We may report illegal activity to the authorities and
cooperate with them.