Acceptable Use Policy

1. Scope

This Acceptable Use Policy (“AUP”) applies to your use of the TravelBoost Service and to any content you upload, transmit, or generate through it. It forms part of the Terms of Service.

2. Prohibited activities

You may not use the Service to:

• Violate any applicable law, regulation, or third-party right;
• Infringe intellectual property, publicity, or privacy rights;
• Send unsolicited commercial communications (spam) — including via WhatsApp, SMS, or email;
• Send communications you know or should know to be false, deceptive, or misleading;
• Distribute malware, viruses, worms, trojans, or other harmful code;
• Engage in phishing, credential harvesting, or fraud;
• Impersonate any person or entity, or misrepresent your affiliation;
• Harvest or collect information about other users without their consent;
• Interfere with the operation of the Service or any other user’s use of it;
• Attempt to bypass rate limits, authentication, or security controls;
• Reverse engineer, decompile, or attempt to derive source code;
• Use the Service to build a competing product or benchmark for a competitor;
• Resell, sublicense, or transfer your access without our prior written consent;
• Test the Service’s vulnerability without prior written coordination with our security team (see §5).

3. Prohibited content

You may not upload, store, or send through the Service any content that:

• Is illegal in the jurisdictions where you or the recipients are located;
• Sexually exploits or endangers children;
• Promotes terrorism, violence, or hate speech;
• Contains personal data of individuals who have not consented (where consent is required);
• Contains payment card details in an unauthorised, unencrypted, or non-compliant manner;
• Violates export control laws (US OFAC, EU sanctions, UK sanctions).

4. Fair use of computational resources

The Service is designed for typical travel-agency operations. If your usage significantly exceeds these patterns — for example, generating millions of API calls per hour, or bulk-importing extraordinarily large datasets — we may throttle, meter, or require a custom plan. We will contact you first where practical.

5. Security testing and responsible disclosure

We welcome responsible security research. However, you may not perform automated scanning, penetration testing, or exploit-development against the Service without prior written coordination. To coordinate testing, email [email protected].

If you discover a vulnerability, report it privately to the same address. We will acknowledge receipt within 48 hours and work with you on remediation. We do not take legal action against researchers who act in good faith and adhere to reasonable disclosure timelines.

6. Communications you send through the Service

Where you use the Service to send emails, WhatsApp messages, SMS, or push notifications to your own customers, leads, or contacts:

• You must have a lawful basis (consent, contract, or other lawful basis under GDPR / CAN-SPAM / TCPA / CASL / equivalent);
• You must honour opt-out requests promptly;
• You must not use the Service to spam;
• You must include your accurate identifying information in transactional messages where required by law.

Travelboost Inc. may suspend your ability to send communications through the Service if we receive substantiated complaints or if a downstream provider (WhatsApp, an SMS aggregator, a mail relay) requires it.

7. Fair use of the WhatsApp Business API

Your use of the WhatsApp Business API through the Service is additionally governed by WhatsApp Business Policy and Commerce Policy. Violations of those policies may result in suspension by Meta beyond our control.

8. Enforcement

We may investigate any suspected violation, and — where a violation is found — take one or more of the following actions:

• Warn the account holder and request cure;
• Suspend affected features (e.g. outbound WhatsApp, outbound email);
• Suspend the account, in whole or in part;
• Terminate the account for material or repeated violations;
• Preserve evidence and cooperate with law-enforcement requests where legally required.

Where possible, we give reasonable notice. In cases of imminent harm, active abuse, or when required by law, we may act immediately without notice.

9. Reporting violations

To report abuse of the Service, email [email protected] with the subject “[Abuse]”. Include the relevant URL, timestamps, and any evidence you can share.