Acceptable Use Policy

This Acceptable Use Policy (the "AUP") describes the conduct that is prohibited in connection with the use of the website located at stackup-ai.com and any related subdomains, web pages, content, documentation, dashboards, demos, application programming interfaces, software, and other online services made available by StackUp LLC ("StackUp," "we," "us," or "our") (collectively, the "Site"). This AUP supplements, and is incorporated by reference into, our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service. By accessing or using the Site, you agree to comply with this AUP.

We reserve the right to determine, in our reasonable discretion, what conduct violates this AUP. The examples below are illustrative and not exhaustive. We may modify this AUP at any time by posting an updated version on the Site.

1. General Prohibitions

You must not use the Site, or permit any third party to use the Site, in any manner that:

• violates any applicable law, regulation, court order, industry self-regulatory standard (including those of the IAB, IAB Tech Lab, MRC, NAI, DAA, or comparable bodies), or order of any governmental or self-regulatory authority;
• infringes, misappropriates, or violates any intellectual property right, right of publicity, right of privacy, contractual right, or other proprietary right of any person;
• is fraudulent, deceptive, defamatory, libelous, threatening, harassing, hateful, racially or ethnically offensive, obscene, pornographic, or otherwise objectionable;
• exploits or endangers minors, or otherwise harms or threatens to harm any person or group;
• promotes, glorifies, or facilitates illegal activity, violence, terrorism, self-harm, or human trafficking; or
• interferes with any third party's use or enjoyment of the Site or the internet generally.

2. Prohibited Content

You must not submit, upload, transmit, link to, distribute, or otherwise make available through the Site any content that:

• contains malware, viruses, worms, Trojan horses, ransomware, spyware, keystroke loggers, cryptominers, or any other malicious code or harmful component;
• contains auto-redirects, forced downloads, drive-by installers, clickjacking payloads, or browser hijackers;
• constitutes child sexual abuse material or any other content that exploits or endangers minors;
• constitutes non-consensual intimate imagery, doxxing, or unauthorized surveillance material;
• is designed to defraud, phish, impersonate a brand or individual, or otherwise deceive the recipient as to its source or purpose;
• violates export-control or sanctions laws, including the U.S. Export Administration Regulations, the International Traffic in Arms Regulations, and OFAC-administered sanctions; or
• contains personal data of any person without that person's lawful basis for processing, including required consent where applicable.

3. Security and System Integrity

You must not, and must not attempt to:

• probe, scan, or test the vulnerability of the Site or any associated system or network, or breach or circumvent any security or authentication measure, except as expressly authorized under a written coordinated vulnerability disclosure or bug bounty program operated by StackUp;
• access, tamper with, or use non-public areas of the Site, StackUp's computer systems, or the technical delivery systems of StackUp's service providers;
• interfere with or disrupt the Site, including by transmitting any software or instruction that may damage, interfere with, intercept, or expropriate any system, data, or information;
• launch or facilitate any denial-of-service or distributed denial-of-service attack, mail bomb, or similar attack against the Site or against any third party using StackUp resources;
• forge any TCP/IP packet header, email header, HTTP header, advertising bid request, or any part of a header in any message or transmission;
• use the Site to send unsolicited bulk email, instant messages, or other unsolicited promotional communications (spam), or to harvest email addresses or contact information for that purpose;
• operate, host, or facilitate command-and-control infrastructure, botnets, or any system designed to coordinate attacks, fraud, or abuse; or
• attempt to bypass any rate limit, quota, geo-restriction, IP-based block, or other access control imposed by StackUp.

4. Advertising and Ad-Tech Specific Restrictions

Because StackUp operates in the digital advertising ecosystem, the following conduct is specifically prohibited in connection with any use of the Site, any StackUp documentation, or any interaction with StackUp's advertising technology:

4.1 Invalid Traffic and Fraud

• generating, soliciting, or facilitating invalid traffic, including general invalid traffic (GIVT) and sophisticated invalid traffic (SIVT) as defined by the MRC and IAB Tech Lab, including but not limited to non-human traffic, bot traffic, hijacked devices, data-center traffic represented as residential, incentivized clicks, cookie stuffing, click fraud, view fraud, or domain spoofing;
• misrepresenting the nature, source, ownership, or characteristics of advertising inventory, including misrepresenting domain, app bundle, content category, audience, viewability, or supply path;
• operating made-for-advertising (MFA) properties, arbitrage sites, or other low-quality inventory while representing such inventory as premium or editorial; or
• circumventing or manipulating ads.txt, app-ads.txt, sellers.json, the IAB OpenRTB SupplyChain Object (schain), or any other supply-chain transparency standard.

4.2 Malvertising and Ad Content

• delivering or attempting to deliver advertising creatives that contain malware, auto-redirects, forced downloads, cryptominers, fake system notifications, scareware, or any payload that compromises a user's device or browser;
• delivering advertising creatives that violate the IAB Quality Assurance Guidelines, the Coalition for Better Ads standards, or applicable platform creative policies; or
• delivering advertising for products or services that are unlawful in the user's jurisdiction, including unlicensed financial services, counterfeit goods, prohibited pharmaceuticals, or scams.

4.3 Bid Stream and Auction Conduct

• intercepting, modifying, replaying, or injecting unauthorized data into any advertising bid request, bid response, auction signal, or telemetry stream involving StackUp or any third party;
• scraping, mirroring, or otherwise systematically collecting bid-stream data, auction logs, or StackUp Enrichment Signals for resale, redistribution, model training, or competitive intelligence;
• reverse engineering or attempting to derive the inputs, weights, taxonomies, classification logic, or other trade secrets underlying StackUp's Curation Enrichment Platform, Ad Stack Performance Analyzer, telemetry components, or RTD submodule; or
• using StackUp signals, deal IDs, or curation outputs outside the scope expressly authorized by a written agreement with StackUp.

4.4 Privacy and Consent

• processing personal data through the Site or in connection with StackUp services without a valid lawful basis under applicable law, including GDPR, the UK GDPR, CCPA/CPRA, and other U.S. state privacy laws;
• ignoring, stripping, falsifying, or failing to honor user consent signals, including IAB TCF strings, GPP strings, Global Privacy Control (GPC) signals, and U.S. state opt-out signals;
• processing sensitive or special-category personal data (including data revealing health, sexuality, precise geolocation, biometric data, or data of children under 13, or under 16 in applicable jurisdictions) other than in accordance with applicable law; or
• using the Site or any StackUp output to enable surveillance, profiling, or targeting of individuals in a manner that violates applicable law or industry self-regulation.

5. Automated Access, Scraping, and AI Training

Without StackUp's prior written consent, you must not, and must not permit any third party to:

• use any robot, spider, scraper, crawler, headless browser, or other automated means to access, monitor, copy, index, or extract data from the Site, other than well-behaved general-purpose search-engine indexing that fully complies with the Site's robots.txt file and any expressed crawl preferences;
• use the Site, the StackUp Materials, or any content obtained from the Site as input, training data, fine-tuning data, evaluation data, retrieval-augmented-generation source, or distillation source for any machine learning model, large language model, foundation model, embedding model, or other artificial-intelligence system, whether for your own benefit or for the benefit of any third party;
• aggregate, frame, mirror, or republish any portion of the Site, or create any product, service, dataset, or benchmark derived from the Site; or
• circumvent any technical measure, rate limit, paywall, login wall, or access control that restricts access to any portion of the Site.

For the avoidance of doubt, StackUp expressly reserves all rights under applicable law (including 17 U.S.C. § 1201, the Computer Fraud and Abuse Act, and equivalent foreign statutes) with respect to unauthorized scraping and unauthorized AI training. Nothing on the Site, including the absence of a technical block, constitutes a license or consent for such activity.

6. Accounts and Credentials

• You must not share, sell, lease, or transfer any account credentials issued to you by StackUp, or allow any other person to use your credentials.
• You must use a strong, unique password and enable multi-factor authentication where offered.
• You must promptly notify StackUp of any actual or suspected unauthorized use of your credentials or any other breach of security.
• You must not create accounts using false, misleading, or third-party identifying information, or operate sock-puppet or duplicative accounts to evade restrictions.

7. Reporting Abuse

If you become aware of any actual or suspected violation of this AUP — including malvertising, invalid traffic, abusive scraping, security vulnerabilities, or content that violates Section 2 — please report it promptly to [email protected]. Please include sufficient detail to allow StackUp to investigate, including timestamps (with timezone), affected URLs or domains, applicable identifiers (deal IDs, creative IDs, bidder IDs, request IDs), screenshots or log excerpts, and your contact information.

Security researchers may report suspected vulnerabilities to [email protected]. We ask that researchers act in good faith, avoid privacy violations and service disruption, give us a reasonable opportunity to remediate before public disclosure, and refrain from extortive or commercially coercive conduct.

8. Investigation and Cooperation

StackUp may, but is not obligated to, investigate any suspected violation of this AUP. In connection with such investigation, StackUp may:

• review logs, telemetry, account information, transmitted content, and other records;
• consult with affected third parties, demand-side platforms, supply-side platforms, publishers, measurement vendors, or self-regulatory bodies;
• cooperate with law enforcement, regulators, or third-party rights holders, including by responding to lawful process; and
• disclose information about you, your account, or your use of the Site to the extent required or permitted by law.

9. Enforcement and Remedies

If StackUp determines, in its reasonable discretion, that you have violated this AUP, StackUp may take any one or more of the following actions, with or without notice and without liability to you:

• issue a warning;
• remove, block, restrict, or refuse to transmit any content, advertising creative, signal, or transmission;
• throttle, rate-limit, or otherwise restrict your access to the Site;
• suspend or terminate your account or your access to the Site, in whole or in part;
• withhold or reverse payments to the extent permitted under any separate executed agreement;
• notify and cooperate with affected counterparties, self-regulatory bodies, and law enforcement; and
• pursue any other remedy available at law or in equity, including injunctive relief, damages, and recovery of investigation and enforcement costs.

StackUp's exercise or non-exercise of any remedy under this AUP does not waive any other remedy and does not relieve you of liability for the underlying violation.

10. Relationship to Other Agreements

This AUP supplements the Terms of Service and any other agreement between you and StackUp. In the event of a conflict between this AUP and an executed written agreement between you and StackUp (such as a Master Services Agreement, Data Processing Addendum, Insertion Order, or Statement of Work), that executed agreement controls with respect to the services it covers. Otherwise, the more restrictive provision controls.

11. Contact

Questions regarding this AUP may be directed to:

StackUp LLC
24 Valley Road
Norwalk, CT 06854, United States

General: [email protected]
Abuse: [email protected]
Security: [email protected]