Acceptable Use Policy
Version 2026.4 | Last updated: September 20261. Overview
This Acceptable Use Policy ("AUP") sets forth the rules and guidelines for using Adbridge's influencer marketing platform and services (the "Service"). This AUP is incorporated by reference into our Terms of Service.
By using the Service, you agree to comply with this AUP. Violation of this policy may result in immediate suspension or termination of your account without refund, and we may pursue legal remedies where appropriate.
Scope: This AUP applies to all users of the Service, including brands, creators, and any third parties who access the Service through integrations or APIs.
2. Webhook Data Requirements
Critical: Data Minimization Required
Brands must only transmit data necessary for attribution and conversion tracking through webhooks. Sending unnecessary personal information violates this policy and may expose your organization to regulatory risk.
2.1 Permitted Webhook Data
You MAY include the following fields in webhook payloads:
- Order identifiers: Order IDs, transaction IDs, reference numbers
- Financial data: Transaction amounts, currency codes, commission-relevant totals
- Attribution data: Coupon codes, promo codes, affiliate codes, UTM parameters
- Timestamps: Order date/time, conversion timestamps
- Product information: SKUs (when relevant to commission calculation), product categories
- Event metadata: Event type (purchase, refund, cancellation), order status
2.2 Prohibited Webhook Data (PII)
Apart from the customer details a store platform, such as Shopify, includes with each order, do NOT transmit the following data through webhooks:
- Identity information: Customer names, usernames, display names
- Contact information: Email addresses, phone numbers, mailing addresses
- Location data: Shipping addresses, billing addresses, IP addresses, geolocation
- Financial details: Credit card numbers, bank accounts, payment method details
- Sensitive data: Health information, biometric data, religious or political views
- Government identifiers: Social Security numbers, passport numbers, driver's license numbers
- Authentication data: Passwords, security questions, access tokens
2.3 How We Handle Personal Data in Payloads
Webhook payloads are stored as we receive them. Anything you transmit is retained, so the obligation to withhold prohibited data sits with you, not with a filter. Two safeguards apply:
- Masking on display: When payloads are shown in the Adbridge interface, we mask values stored under common personal-data field names, such as those containing "email", "phone", or "ssn"
- Restricted and logged access: Viewing unmasked payload values requires elevated access and is recorded in our audit log
These are containment measures, not removal. Masking depends on field naming and will not catch personal data placed in unexpected fields or embedded in free-text values. Treat them as a backstop, never as permission to send prohibited data.
If you discover that you have transmitted prohibited data, contact us at legal@adbridge.com and we will work with you to delete the affected payloads. Repeated transmission of prohibited data may result in endpoint suspension.
2.4 Enforcement for Webhook Violations
If Adbridge detects prohibited data in webhook payloads, we may take the following actions:
- First violation: Warning notification and payload rejection
- Repeated violations: Temporary suspension of webhook endpoint (24-72 hours)
- Persistent violations: Permanent endpoint termination and potential account suspension
- Egregious violations: Immediate account termination and potential legal action
3. Fair Use and Rate Limits
To keep the Service stable and fair for every customer, we apply rate limits to requests and to the sales data you send us. Limits may be adjusted and are not a capacity commitment. We will give notice before a material reduction takes effect. We may throttle, queue, or reject traffic that exceeds them or that affects platform stability, and we will contact you first where practical.
- Temporary throttling: Requests exceeding limits are queued or rejected
- Extended abuse: Account may be temporarily suspended for 1-24 hours
- Persistent abuse: Account review and potential permanent restrictions
If you expect sustained high volume, or need higher limits for legitimate business needs, contact us in advance.
4. Prohibited Activities
You may not use the Service for any unlawful purpose or in violation of these guidelines. The following activities are strictly prohibited:
4.1 Fraud and Manipulation
- Generating fake conversions, orders, or attribution events
- Inflating metrics through artificial means (bots, scripts, fake accounts)
- Click fraud, cookie stuffing, or attribution hijacking
- Misrepresenting campaign performance to brands or creators
- Creating multiple accounts to circumvent restrictions or abuse promotions
- Manipulating payout calculations or commission structures
4.2 Security Violations
- Attempting to access accounts, data, or systems without authorization
- Probing, scanning, or testing for security vulnerabilities without permission
- Interfering with service availability (DDoS attacks, flooding, resource exhaustion)
- Bypassing or circumventing security measures, authentication, or access controls
- Reverse engineering, decompiling, or disassembling the Service
- Distributing malware, viruses, or other harmful code
- Exploiting bugs or vulnerabilities for unauthorized access or data extraction
4.3 Content and Campaign Restrictions
- Promoting illegal products, services, or activities
- Deceptive advertising, misleading claims, or false endorsements
- Failing to disclose sponsored content as required by FTC guidelines
- Infringing on intellectual property rights (trademarks, copyrights, patents)
- Promoting hate speech, discrimination, harassment, or violence
- Adult content, gambling, or regulated substances without proper compliance
- Pyramid schemes, multi-level marketing fraud, or get-rich-quick schemes
4.4 Data and Privacy Violations
- Collecting, storing, or processing personal data in violation of applicable laws
- Sharing user data with unauthorized third parties
- Using the Service to build competing databases or services
- Scraping, harvesting, or bulk-downloading data from the platform
- Violating the privacy or data protection rights of any individual
5. Contract and Deal Compliance
When creating deals and uploading contracts through the Service:
5.1 Contract Document Requirements
- Only include information necessary for deal execution
- Do not embed unnecessary customer PII in contract documents
- Ensure contract terms comply with applicable laws and regulations
- Use accurate and truthful representations of campaign requirements
- Maintain confidentiality of deal terms as agreed between parties
5.2 Payout Requirements
- Define payout terms clearly and accurately in deal agreements
- Honor agreed-upon payment schedules and commission structures
- Provide accurate tax documentation when required (W-9, W-8BEN)
- Do not use the payout system for money laundering or illegal transfers
Payout methods: Payouts are disbursed through Stripe or Gusto, depending on the method configured for the recipient. Brands may also export payout data and pay creators outside the Service. Recipients must complete the payment provider's own onboarding and tax requirements before that provider can disburse funds.
6. Account Responsibilities
6.1 Account Security
- Use strong, unique passwords and enable two-factor authentication when available
- Do not share your account credentials with unauthorized individuals
- Notify us immediately if you suspect unauthorized access to your account
- Keep your contact information current and accurate
6.2 Authorized Use
- You are responsible for all activities conducted through your account
- Ensure anyone accessing your account on your behalf complies with this AUP
- Brand accounts must only be used by authorized representatives of the organization
7. Monitoring and Enforcement
Adbridge reserves the right to monitor usage of the Service for compliance with this AUP. We may take the following actions:
7.1 Monitoring Activities
- Monitor API and webhook usage patterns for anomalies
- Mask common personal-data field names when payloads are displayed, and delete payloads found to contain prohibited data
- Log security-relevant events for audit and compliance purposes
- Review reported violations and suspicious activity
7.2 Enforcement Actions
Depending on the severity and frequency of violations, we may take one or more of the following actions:
- Warning: Written notice of the violation and required corrective action
- Temporary suspension: Suspension of account or specific features (24 hours to 30 days)
- Permanent termination: Immediate and permanent account termination
- Data deletion: Removal of violating content or data
- Legal action: Pursuit of civil or criminal remedies where appropriate
- Reporting: Disclosure to law enforcement for illegal activities
7.3 Appeals
If you believe an enforcement action was taken in error, you may appeal by contactinglegal@adbridge.com. Appeals are reviewed within 5 business days, and decisions are final.
8. Reporting Violations
If you become aware of any violations of this policy, please report them promptly:
Report Policy Violations:
Email: legal@adbridge.com
Report Security Vulnerabilities:
Email: support@adbridge.com with "Security" in the subject line. Please give us a reasonable opportunity to investigate and remediate before public disclosure. We will not pursue action against good-faith research that respects user privacy and avoids service disruption or data destruction.
Reports should include as much detail as possible, including the nature of the violation, any relevant account or transaction identifiers, and supporting evidence.
9. Changes to This Policy
We may update this Acceptable Use Policy from time to time. When we make changes:
- We will update the version number and "Last updated" date at the top of this page
- For material changes, we will notify you via email or through the Service
- Continued use of the Service after changes become effective constitutes acceptance
We encourage you to review this policy periodically to stay informed of our requirements.
10. Contact Information
If you have questions about this Acceptable Use Policy, please contact us:
This Acceptable Use Policy is effective as of September 2026 (Version 2026.4).