1. The basic expectation

Use Vistiqo to measure traffic on websites you own or are authorised to instrument, in a way that is lawful where you and your visitors are. Most customers will never need to think about this policy again. The rest of it describes the specific things that are not acceptable, so there is no ambiguity if a problem arises.

2. Lawful and authorised tracking only

You must not:

• install the tracking script on a website you do not own or have no permission to instrument;
• use Vistiqo to monitor people covertly where the law requires that they be told, or to conduct surveillance of individuals;
• use Vistiqo for unlawful purposes, fraud, or to support activity that is illegal where you or your visitors are located.

3. Sensitive data

Vistiqo is built to measure aggregate traffic, not to hold sensitive records about people, and it has no special handling for such data. Do not use Vistiqo to collect special-category or highly sensitive personal information - for example health, biometric, precise-location, financial-account, government-identifier, or children's data - whether through page paths, custom events, or any other field you control.

Custom events and page URLs are supplied by your own website. Take care that neither carries personal data in a query string or path segment, since that would end up stored in your analytics.

4. Protecting the service

You must not:

• attempt to access another customer's account, websites or analytics;
• probe, scan or attempt to bypass Vistiqo's authentication, authorisation or rate limits;
• send fabricated or automated traffic to the tracking endpoints in order to inflate statistics, distort another customer's data, or exhaust our capacity;
• attempt to disrupt the service, including through denial-of-service traffic;
• upload or transmit malware, or use Vistiqo to distribute it;
• reverse engineer, resell or copy the Vistiqo service or its interface, except where the law expressly permits it.

Ordinary use of the tracking script on a busy website is not "excessive traffic" - this section is about deliberate abuse, not popularity. If you expect unusually high volume, tell us and we will work it out with you.

5. Content and intellectual property

Do not use Vistiqo in connection with infringement of copyright, trade marks or other intellectual property rights, and do not misuse the Vistiqo name or branding to suggest an association or endorsement that does not exist.

6. Security research

We welcome good-faith reports of security problems. Report them to support@vistiqo.online rather than exploiting them or making them public first, do not access or modify other customers' data while investigating, and give us a reasonable chance to fix the issue. We will not pursue a researcher who follows that in good faith. Note that Vistiqo does not currently operate a paid bug-bounty programme.

7. What happens if this policy is breached

Where we can, we will contact you first and give you a chance to put things right - most problems turn out to be misconfiguration rather than intent. For serious cases, such as active abuse of our infrastructure, attempts to reach other customers' data, or clearly unlawful use, we may suspend or terminate the account immediately and without notice.

Suspension for abuse does not automatically entitle you to a refund; refund requests are considered under the Refund Policy. Our rights here are subject to applicable law, including any consumer-protection rights you have.

8. Reporting misuse and contact

If you believe someone is using Vistiqo in breach of this policy - including tracking a website without authorisation - tell us at support@vistiqo.online with enough detail to investigate. This policy forms part of the Terms of Service, and we may update it as the product and its risks change.