OneTrueTag Acceptable Use Policy

Version: [[VERSION]] · Effective date: [[EFFECTIVE_DATE]] · Last updated: 2026-10-14 (draft)

This policy forms part of the Terms of Service. It applies to every Account, Member, API key, MCP connection and chat bot on the Service. Capitalised terms have the meaning given in the Terms.

1. Codes and authenticity

You must not:

1.1 apply Codes to goods that are counterfeit, that you are not authorised to sell, or that are not the unit the Code was issued for;

1.2 use a Brand name, logo or slug to impersonate another brand or business, or to suggest an endorsement you do not have;

1.3 sell, transfer or publish unused Codes or print files so that others can attach them to goods;

1.4 make authenticity, warranty, safety or recall statements on Scan Pages, guides or messages that you know or should know to be false or misleading.

2. Messages to End Customers

You must not:

2.1 send news or offers to anyone who has not given the consent the law requires, or who has withdrawn it;

2.2 use "important product notice" messages for marketing; those are for information about products a person registered;

2.3 send spam, chain messages, or messages that break the rules of Telegram, Meta's WhatsApp Business Platform or the messaging provider you use;

2.4 import or upload contact lists for messaging, or try to message people who never contacted your Brand through the Service;

2.5 disguise the sender or the commercial nature of a message.

3. Content

You must not upload, publish or send through the Service content that:

3.1 is unlawful, defamatory, fraudulent or deceptive;

3.2 infringes intellectual property, privacy or other rights of others;

3.3 contains malware, exploits or code meant to harm a device or system;

3.4 sexualises minors, promotes violence or terrorism, or harasses or threatens anyone;

3.5 advertises goods or services whose sale is illegal where the End Customer is.

4. Personal data

You must not:

4.1 collect personal data through the Service without a lawful basis and the notice the law requires;

4.2 ask for special category or sensitive data (for example health, religion, biometric data, government identity numbers or payment card numbers) in custom form questions unless the law allows it and you have the required basis;

4.3 use the Service to track or profile End Customers beyond what the Service is designed for, or try to identify a person from scan statistics;

4.4 knowingly collect data from children below the age at which they can give valid consent in their country, without a parent's or guardian's consent where the law requires it.

5. Security and integrity

You must not:

5.1 access, or try to access, another Account's data or any part of the Service you are not authorised to use;

5.2 probe, scan or test the vulnerability of the Service without our written permission (report suspected vulnerabilities to [[SECURITY_EMAIL]]);

5.3 bypass or try to bypass rate limits, plan limits, file checks or other protections;

5.4 use the Service, including webhook addresses, store addresses or AI assistant endpoints, to reach private networks or to attack third parties;

5.5 send traffic meant to overload the Service, or automate scans of Codes to distort statistics or duplicate-detection results;

5.6 share log-ins, API keys or MCP tokens outside your organisation.

6. API, MCP server and AI

You must not:

6.1 use the API or MCP server to copy the Service or resell its functions;

6.2 connect an AI client or AI provider that you are not permitted to use for the data involved;

6.3 configure your AI assistant to collect personal data it does not need, to give advice it is not qualified to give (for example medical or legal advice) as if it were from a professional, or to impersonate a person.

7. Enforcement

7.1 We may investigate a suspected breach of this policy and may remove content, pause a chat bot, revoke an API key or MCP connection, or suspend an Account, as described in the Terms. Where reasonable we will tell you first and give you a chance to fix the issue.

7.2 Report abuse of the Service, including a Code you believe is used on counterfeit goods, to [[SUPPORT_EMAIL]].