Acceptable Use Policy

This Acceptable Use Policy ("AUP") is part of the VenueRun Terms of Service and applies to everyone who uses the Services — Merchants, Venues, their team members, Customers, and developers using our APIs. Capitalized terms have the meanings given in the Terms.

1. Lawful use

Do not use the Services:

• For any unlawful purpose, or to sell anything that is illegal where it is sold or delivered.
• For a business on our Prohibited Businesses list.
• In violation of sanctions, export control, consumer protection, food safety, alcohol, age verification, tax or privacy laws.
• To defraud anyone, including by running fake orders, testing stolen cards, laundering money, or moving funds unrelated to a genuine sale.

2. Honest selling

Merchants and Venues must:

• Describe products, prices, taxes, fees and availability accurately. Do not use hidden fees or misleading pricing.
• Fulfill the orders they accept, or refund them.
• Not impersonate another business, or claim a handle, name or logo they have no right to.
• Not publish fake reviews or testimonials, or deceptive claims about health or other effects.

3. Content

Do not upload, publish or send content that:

• Infringes anyone's copyright, trademark or other rights.
• Is sexually explicit, hateful, harassing, threatening or violent, or that exploits or endangers minors.
• Contains malware or harmful code, or links to it.
• Includes another person's private information without their permission.

4. Customer data

• Use Customer information only to fulfill orders, provide customer service, and as the law and your own privacy notice allow.
• Honor Customers' requests to stop receiving marketing.
• Do not send spam or unsolicited messages, and do not sell Customer information obtained through the Services.
• Do not collect, through the Services, payment card numbers, government ID numbers, health information or other sensitive data beyond what an order genuinely requires.

5. Security and integrity

Do not:

• Access, or try to access, accounts, workspaces, orders or data that are not yours, including by guessing tag, order or workspace identifiers.
• Probe, scan or test the vulnerability of the Services, or bypass authentication, rate limits, payment checks or other security measures, except as part of a responsible disclosure under Reporting security issues.
• Interfere with or disrupt the Services, for example by overloading them, flooding them with requests, or interfering with other users.
• Reverse engineer, decompile or copy the Services, except where the law allows it.
• Scrape, crawl or bulk-download storefronts or catalogs by automated means without our written permission.
• Tamper with, clone or reprogram NFC tags or QR codes so they send Customers somewhere other than the storefront they are presented for.

6. APIs, webhooks and functions

• Use only documented APIs, and stay within the published rate limits.
• Keep API keys secret, give each integration only the access it needs, and revoke keys you no longer use.
• Do not use functions or webhooks to run unrelated workloads, attack other systems, or send data to places your Customers would not expect.
• Do not use test mode to process real payments or real orders.

7. Enforcement

We may investigate suspected violations. If we believe this AUP has been violated, we may remove content, disable ordering, revoke API keys, suspend or terminate accounts, and report activity to law enforcement or payment providers. Where reasonable, we will tell you and give you a chance to fix the problem first, but we may act immediately to prevent harm.

To report abuse, contact venuerun@gmail.com.

8. Reporting security issues

If you find a security vulnerability, please email venuerun@gmail.com with the details and give us reasonable time to fix it before disclosing it. Do not access more data than you need to demonstrate the issue, do not degrade the Services, and do not access, change or delete other users' data. We will not take legal action against good-faith research that follows these rules.

9. Changes

We may update this AUP from time to time. The "Last updated" date above shows when it last changed. Continuing to use the Services after a change means you accept it.