Dark
Request a walkthrough

Acceptable Use Policy

Last updated:
October 4, 2026
Version:
2026.10.04
Sections

1. Introduction

This Acceptable Use Policy (“AUP”) governs your use of the services operated by Noxart Games Co. (“Noxtica”, “we”, “our” or “us”), including the Noxtica APIs, SDKs, collectors, hosted verification flows, monitoring and replay features, AI Features, the Backoffice dashboard and all related features (the “Services”). This AUP forms part of our Terms of Service. Capitalised terms not defined here have the meaning given in the Terms of Service.

You are responsible for ensuring that you, your Authorized Users and anyone who accesses the Services through your account or keys comply with this AUP. Violation may result in immediate suspension or termination without notice or refund, in addition to any other remedy.

2. Intended Use

The Services are designed for lawful security, fraud-prevention, verification and monitoring purposes, including:

  • Bot detection — identifying automated traffic and scripts
  • Fraud prevention — detecting account takeover, payment fraud and fake accounts
  • Abuse prevention — stopping spam, credential stuffing and scraping
  • Identity, business and merchant verification — collecting signals that support, but do not replace, your own know-your-customer and due-diligence processes
  • Application and real-user monitoring — understanding performance and errors of your own properties
  • Account protection — recognising trusted devices and detecting anomalies

All Output is informational only. You must verify it independently and apply human review before any adverse decision (see the Disclaimer).

3. Prohibited Uses

You may NOT use the Services, or any Output, to:

3.1 Illegal Activities

  • Violate any applicable law, regulation, court order or third-party right
  • Facilitate, promote or enable illegal activities, including money laundering, terrorist financing, fraud, sanctions evasion or human trafficking
  • Process personal data without a lawful basis or in violation of data protection, biometric or privacy laws
  • Evade law enforcement, regulatory oversight or your own compliance obligations

3.2 Privacy Violations

  • Conduct surveillance, profiling or monitoring of individuals without a lawful basis
  • Track individuals across websites or applications that you do not own or control
  • De-anonymize or identify individuals without consent or legal authority
  • Build advertising or marketing profiles from Output or Customer Data
  • Collect data from children in breach of applicable law, or verify children without the safeguards and consents the law requires
  • Capture passwords, payment card data, special category data or government identifiers through monitoring or session replay unless you have a lawful basis and have configured masking appropriately
  • Create databases, listings or profiles of individuals for any purpose other than your own security and compliance

3.3 Discrimination and Unfair Decisions

  • Discriminate against any person on the basis of a protected characteristic, or use Output as a proxy for one
  • Make decisions that produce legal or similarly significant effects on a person based solely on automated processing without the human review and safeguards required by law
  • Infer race, ethnicity, religion, health, sexual orientation, political opinions or other protected characteristics from Output, images or biometric data
  • Use Output as a factor in determining eligibility for credit, insurance, employment, housing or any other purpose regulated by the U.S. Fair Credit Reporting Act or similar laws

3.4 Verification Misuse

  • Submit identity documents, selfies, biometric data or business information of any person without that person’s knowledge and the legal basis or consent the law requires
  • Use the verification Services to create, test or improve forged or manipulated documents, deepfakes, presentation attacks or synthetic identities, except for authorised testing agreed in writing with us
  • Represent to any person or authority that Noxtica has verified, approved, certified or cleared any person or business
  • Rely on the Services as your sole means of meeting any anti-money-laundering, sanctions, age-verification or other legal obligation

3.5 AI Feature Misuse

  • Use AI Features to generate content that is unlawful, defamatory, harassing, sexually explicit involving minors, or that infringes intellectual property or privacy rights
  • Attempt to extract system prompts, model weights, training data or other confidential information from AI Features, or to bypass their safeguards (“jailbreaking” or “prompt injection”)
  • Submit to AI Features any data that you are not permitted to process or disclose to third-party AI providers
  • Present AI Output as human-verified, as professional advice or as a decision by Noxtica

3.6 Harmful Activities

  • Harass, stalk, threaten or harm any person
  • Defame, abuse or invade the privacy of others
  • Impersonate any person or entity
  • Distribute malware, viruses or malicious code

3.7 Security Violations

  • Attempt to gain unauthorized access to our systems, networks or other customers’ data
  • Probe, scan or test vulnerabilities without our prior written authorization
  • Interfere with or disrupt the Services
  • Circumvent security measures, rate limits, metering, usage limits or access controls
  • Use the Services to attack or compromise other systems

3.8 Abuse of Services

  • Use automated systems to overload, abuse or scrape the Services
  • Generate excessive requests beyond your plan limits, or manipulate metering or billing
  • Deploy SDKs or collectors on domains or applications you do not own or control
  • Share account credentials or API keys with unauthorized parties
  • Resell, redistribute, white-label or sublicense the Services or Output without written authorization

3.9 Sanctions and Export Controls

  • Use the Services in, or for the benefit of any person located in, a comprehensively sanctioned country or territory, or for any person on a sanctions or restricted-party list
  • Export, re-export or transfer the Services or Output in violation of export control or sanctions laws

3.10 Intellectual Property and Competition

  • Infringe copyrights, trademarks, patents or other intellectual property rights
  • Reverse engineer, decompile or extract source code, models, signals or scoring logic from the Services
  • Remove or alter proprietary notices or branding
  • Use the Services or Output to build, train or benchmark a competing product

3.11 Misrepresentation

  • Provide false or misleading information when creating an account or describing your intended use
  • Misrepresent your identity or affiliation
  • Falsely claim endorsement by, partnership with or certification by Noxtica
  • Use our trademarks without authorization

4. Customer Responsibilities

You are solely responsible for:

  • Understanding and complying with all laws that apply to you and your use of the Services
  • Determining whether the Services are appropriate for your use case
  • Implementing appropriate safeguards, including human review, for automated decisions

4.2 End User Notices and Consents

When deploying the Services on your properties or verification flows, you must:

  • Provide clear notices to your End Users about fingerprinting, monitoring, session replay and verification
  • Obtain any legally required consent, including consent for device storage and explicit consent for biometric processing where required
  • Include appropriate disclosures in your privacy policy
  • Honor opt-out requests and data subject rights

4.3 Data Handling

You are responsible for:

  • Using collected data only for lawful security, fraud-prevention and compliance purposes
  • Configuring appropriate data retention, masking and sampling settings
  • Securing any data you export from the Services
  • Responding to data subject requests from your End Users

4.4 Output Interpretation

You acknowledge that:

  • Risk scores and verification results are probabilistic estimates, not certainties
  • False positives and false negatives will occur
  • Output must never be the sole basis for a decision that significantly affects a person or business
  • You must verify Output independently against original and official sources before acting

5. Security Best Practices

We require customers to follow security best practices:

  • Protect credentials — keep API keys and site keys secure; never expose secret keys in client-side code
  • Rotate keys — rotate API keys periodically; revoke compromised keys immediately
  • Use HTTPS — deploy the SDK only on HTTPS websites
  • Limit access — use role-based access control in the Backoffice and grant minimum necessary permissions
  • Enable MFA — enable multi-factor authentication for all accounts
  • Monitor usage — review audit logs for suspicious activity
  • Report issues — report any security incident to us immediately

6. Reporting Violations

If you become aware of any violation of this AUP, report it to:

Include the nature of the violation, any evidence, and the parties involved (if known).

7. Enforcement

7.1 Monitoring

We may (but are not obliged to) monitor use of the Services to detect violations of this AUP, using automated systems and human review.

7.2 Actions

If we believe, in our sole discretion, that you have violated or may violate this AUP, we may take any one or more of the following actions, with or without notice:

  • Issue a warning
  • Require you to cease the activity
  • Throttle, limit or disable features, keys or integrations
  • Suspend your access
  • Terminate your account without refund
  • Report the matter to law enforcement or regulators and cooperate with them
  • Pursue any other legal remedy

7.3 No Liability

To the maximum extent permitted by applicable law, we are not liable to you or anyone else for any action we take, or decide not to take, to enforce this AUP.

7.4 Appeals

If you believe we took action in error, you may contact us at hello@noxtica.com with “AUP Appeal” in the subject line. Our decision on appeal is final.

8. Language; Controlling Version

Only the English version of this AUP is legally valid and binding. The controlling version is the English text published at https://noxtica.com/acceptable-use. Any translation of this document (including any machine translation) is provided for reference purposes only, does not have any legal value, should not be relied upon as a legally binding document, and creates no obligation or responsibility for Noxtica. In the event of any discrepancies or inconsistencies between a translation and the English version, the English version shall prevail.

9. Changes to This Policy

We may update this AUP at any time to address new threats, legal requirements or operational changes, by posting a new version with a new “Last Updated” date and version number. We will notify you of material changes through the Backoffice, by email or on our website. Your continued use of the Services after the changes take effect constitutes acceptance of the updated AUP.

10. Contact

For questions about this Acceptable Use Policy:

This Acceptable Use Policy is effective as of the Effective Date above.