ACCEPTABLE USE POLICY

Last Updated: July 11, 2026

This Acceptable Use Policy (“AUP”) applies to Client’s access to and use of the Services and is incorporated into the Main Services Agreement (the “Agreement”) between Reslify, LLC (“Reslify”) and the legal entity accepting the Agreement (“Client”). Capitalized terms not defined in this AUP have the meanings set forth in the Agreement and the other Agreement Documents.

1) Scope; Responsibility for Authorized Users

1.1 Applies to all use. This AUP applies to all use of the Services, including Client’s use of widgets, embeddable booking components, Reslify-hosted booking pages/links, APIs (if any), and any Beta Services. 1.2 Authorized Users. Client is responsible for all acts and omissions of its Authorized Users and Affiliates (if applicable) and for their compliance with this AUP. 1.3 Non-exhaustive. The prohibited conduct described below is not exhaustive. Reslify may restrict or suspend use to protect the Services, Client, Guests, or third parties.

2) General Prohibitions (Illegal, Harmful, Deceptive, Abusive)

Client must not (and must not permit any third party to): 2.1 Break the law or enable wrongdoing. Use the Services in a manner that is illegal, fraudulent, deceptive, or that violates applicable laws, regulations, governmental orders, or industry standards (including communications and marketing rules, privacy/data protection laws, and payment network rules where applicable). 2.2 Harm or harass. Post, transmit, store, or otherwise make available content or communications that are threatening, harassing, defamatory, invasive of privacy, abusive, hateful, or that encourages violence or discrimination against individuals or groups. 2.3 Exploit or endanger. Facilitate exploitation, abuse, or endangerment of any person (including minors), or promote self-harm, violence, or public-safety threats. 2.4 Objectionable content on guest-facing surfaces. Display or distribute content via booking pages/widgets that is obscene, pornographic, or otherwise unlawful or widely regarded as offensive in the applicable jurisdiction(s).

3) Spam; Unsolicited Communications; “Lead List” Restrictions

3.1 No spam. Do not send spam or unsolicited communications, including bulk or automated messages, to recipients who have not provided required consent or where you do not have a lawful basis. 3.2 No purchased/rented lists (unless lawful + documented). Do not use purchased, rented, scraped, or otherwise unlawfully obtained contact lists. If you use any third-party list source, you must be able to demonstrate lawful collection, required notices, and consent where required. 3.3 No evasion. Do not take actions designed to evade opt-outs, suppress complaints, or bypass provider filters (e.g., rotating identifiers, link shortener abuse, or deceptive routing).

4) Identity, Transparency, and Anti-Spoofing

4.1 No impersonation. Do not impersonate any person or entity, or misrepresent affiliation with any person/entity. 4.2 No spoofing/phishing. Do not spoof headers, sender identifiers, domains, numbers, or other routing information; do not phish or solicit credentials, payment details, or sensitive data through deception. 4.3 Clear sender identity. Guest communications must clearly identify Client as the sender (at minimum in the first message of a thread/campaign where required).

5) Security, Abuse, Interference, and Technical Restrictions

Client must not: 5.1 Attack or disrupt. Interfere with, disrupt, degrade, or attempt to overload the Services (including DoS/DDoS), or interfere with other customers’ use. 5.2 Probe or exploit. Probe, scan, test, or attempt to exploit vulnerabilities, bypass authentication, defeat security controls, or access non-public areas, accounts, systems, or data. 5.3 Malware/automation abuse. Introduce malware (viruses, worms, trojans, spyware), or use bots/scrapers/spiders or automated means to access the Services except via permitted functionality and documented APIs (if any). 5.4 Circumvent limits. Circumvent rate limits, access controls, feature gating, license management, or other technical measures Reslify implements to secure or operate the Services. 5.5 Reverse engineering. Reverse engineer, decompile, disassemble, or attempt to derive source code or underlying ideas/algorithms except to the extent prohibited by applicable law. 5.6 Benchmark disclosure. Publish or disclose benchmarking, performance, or comparative test results without Reslify’s prior written consent (consistent with the Agreement).

6) Data Protection and Privacy Misuse

Client must not: 6.1 Unlawful personal data processing. Use the Services to collect, access, disclose, sell, share, or otherwise process personal data in violation of applicable law, the DPA (if applicable), Client’s notices/consents, or the Agreement. 6.2 Sensitive data misuse. Upload or process sensitive categories of data in a way that triggers heightened legal duties unless you have a clear lawful basis, required notices/consents, and appropriate safeguards. 6.3 Data scraping of Guests. Use guest-facing booking experiences to scrape, harvest, or infer personal data or to build profiles beyond what is needed for legitimate reservation/experience management and permitted communications.

7) Payment-Enabled Offerings Misuse (If Used)

If Client enables Payment-Enabled Offerings (via a Payment Processor / Third-Party Service), Client must not: 7.1 Violate processor/network rules. Use Payment-Enabled Offerings in violation of Payment Processor Terms or card network rules (this is a material breach under the Agreement). 7.2 Prohibited goods/services. Use the Services to sell or promote illegal goods/services, or categories prohibited by your Payment Processor or applicable law. 7.3 Collect card data via Reslify. Send or collect raw card numbers or sensitive authentication data through Reslify communications or non-approved fields. (Client must rely on the Payment Processor’s compliant capture surfaces.) 7.4 Mislead Guests. Misrepresent pricing, deposits, cancellation/no-show fees, minimum spend, refunds, or charge timing. You must clearly disclose Guest-facing terms you set (policies, windows, fees) before collecting payment/holds where required by law or network rules.

8) Communications Rules (Email/SMS/WhatsApp and Similar)

If Client uses the Services to message Guests or other individuals: 8.1 Compliance required. Client must comply with all applicable communications, privacy, and marketing laws (e.g., consent/opt-in where required; honoring opt-outs; required disclosures; quiet hours if applicable; and recordkeeping). 8.2 Consent + records. Where consent is required, Client must obtain it before messaging, maintain records of consent (timestamp/source), and be able to produce them upon request in an investigation. 8.3 Opt-out. Provide and honor an operational opt-out mechanism where required, within the legally required timeframe. 8.4 Age gating. Do not knowingly message individuals below the legal age of consent in the recipient’s jurisdiction. 8.5 High-risk categories. Messages relating to regulated or adult categories (e.g., alcohol, gambling, tobacco, firearms) may be restricted or prohibited depending on jurisdiction/provider rules; Client must comply with those rules and is solely responsible for eligibility and compliance.

9) Competitive Use; AI/ML Training; Misuse of Reslify IP

Client must not: 9.1 Competitive products. Access or use the Services to build or support, or assist a third party in building or supporting, a product or service materially competitive with the Services. 9.2 AI/ML model training. Use the Services or non-public information obtained through the Services to train, calibrate, or validate any AI/ML models, except where expressly permitted by the Agreement (e.g., using only Client Data exported by Client for Client’s internal business purposes and not to build a Competitive Product). 9.3 Misuse Reslify Marks. Use, register, purchase, or claim rights in Reslify Marks (including as keywords, domain names, social handles, or branding) without Reslify’s prior written consent. 9.4 AI Feature misuse. Use an AI Feature to generate or distribute unlawful, misleading, discriminatory, harmful, or deceptive content; to make decisions based on Sensitive Data or other protected characteristics; to circumvent booking-flow confirmation controls; or to submit unnecessary Sensitive Data, including health or allergy information, through a guest-facing AI interaction.

10) Intellectual Property and Unlawful Content

10.1 No infringement. Do not upload, post, transmit, or make available any content that infringes or misappropriates third-party IP or other rights. 10.2 Takedown. Reslify may remove or disable access to content alleged to be infringing consistent with the Agreement and Reslify’s Intellectual Property Policy.

11) Reporting, Investigation, and Enforcement

11.1 Duty to report. Client must promptly notify Reslify of suspected misuse of Client accounts or violations of this AUP involving Client’s use of the Services and reasonably cooperate in investigations. 11.2 Enforcement actions. Reslify may (in its discretion and to the maximum extent permitted by law) investigate suspected violations and take actions such as:

• limiting, suspending, or terminating access to the Services;
• disabling specific features (e.g., messaging, API access) or removing content;
• requiring remediation steps (e.g., security resets, consent proof, configuration changes);
• reporting suspected illegal activity to appropriate authorities or third parties (where legally permitted/required).

11.3 Immediate action for severe risk. Reslify may act without prior notice where necessary to prevent harm, address security risks, comply with law, or stop ongoing abuse.

12) Updates to This AUP

Reslify may update this AUP from time to time in accordance with the Agreement. If an update is material, Reslify will provide notice as required under the Agreement. Continued use of the Services after the effective date of an updated AUP constitutes acceptance, subject to Client’s remedies under the Agreement.

13) Contact

To report abuse, suspected security issues, or violations of this AUP, contact:

• Support: support@reslify.com
• Legal notices (if required): support@reslify.com