Acceptable Use Policy

Document ID: WBL-POL-AUP-v1.0 Effective Date: [DATE] Last Revised: 2026-02-19 Applies To: All users of the Webility website and all clients of Webility's services.

Webility | legal@webility.local | webility.local

1. Introduction & Purpose

This Acceptable Use Policy ("AUP" or "Policy") defines the standards of conduct that apply to all persons who:

(a) Access or use the Webility website (webility.local); (b) Engage Webility's services as a client; (c) Use any website, application, system, or digital product built, hosted, or maintained by Webility on their behalf; (d) Access any Webility-managed hosting infrastructure, servers, or platforms.

This Policy exists to:

• Protect the integrity, security, and availability of Webility's systems and those of our clients
• Protect Webility, our clients, and third parties from illegal or harmful conduct
• Ensure that Webility's services are not used in ways that violate applicable law or ethical standards
• Define the consequences of violations clearly so that expectations are set from the outset

This Policy is incorporated by reference into Webility's Terms of Service, Master Service Agreement (MSA), and all Statements of Work (SOW). By engaging Webility's services or using our website, you agree to comply with this Policy.

2. Scope

2.1 Who This Policy Applies To

This Policy applies to:

• Website visitors: Anyone who accesses webility.local
• Clients: Any organization or individual engaged under a Webility service agreement
• Client-authorized users: Employees, contractors, or agents of a client who are granted access to Webility-managed systems
• End users: Members of the public who interact with websites or systems built and/or hosted by Webility on behalf of a client

2.2 What This Policy Covers

3. General Conduct Standards

All users must:

(a) Use Webility's services only for lawful purposes and in accordance with applicable laws and regulations in their jurisdiction; (b) Be honest and accurate in all communications and information provided to Webility; (c) Respect the intellectual property rights of Webility and third parties; (d) Maintain appropriate security practices for any access credentials provided; (e) Report suspected security vulnerabilities or policy violations promptly (see Section 9); (f) Treat Webility personnel with dignity and professionalism in all interactions.

4. Prohibited Uses — Webility Website

The following uses of the Webility website are strictly prohibited:

4.1 Illegal Activities

• Using the website to plan, facilitate, or carry out any illegal activity
• Uploading or transmitting content that violates applicable law
• Attempting to circumvent any access controls or security measures
• Violating the privacy rights of individuals

4.2 Harmful Technical Conduct

• Introducing malware, viruses, ransomware, trojan horses, spyware, or any other malicious code
• Attempting unauthorized access to Webility's systems, servers, databases, or accounts
• Conducting denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks against Webility or any other party
• Port scanning, network probing, or vulnerability scanning of Webility's infrastructure without explicit written authorization
• Interfering with the operation of the website or degrading its availability for other users

4.3 Automated & Scraping Activities

• Using bots, crawlers, scrapers, or automated tools to collect data from our website at a rate that places unreasonable load on our servers
• Systematically extracting email addresses, contact information, or other data for commercial purposes
• Bypassing or circumventing rate limiting or other technical access controls

4.4 Abusive Communications

• Submitting spam, unsolicited bulk communications, or fraudulent inquiries through our contact forms
• Using our contact channels to harass, threaten, or abuse Webility personnel
• Impersonating Webility, any Webility employee, or any other person or organization
• Misrepresenting your identity, affiliation, or authority

5. Prohibited Uses — Webility-Hosted Services & Client Platforms

Clients who use Webility-managed hosting or whose digital products are built and maintained by Webility may not use those services for:

5.1 Illegal Content & Activities

• Publishing, transmitting, or storing content that violates applicable law in any jurisdiction where the content is accessible
• Facilitating gambling, betting, or lottery services where not legally licensed to do so
• Distributing controlled substances, illegal weapons, or contraband
• Operating darknet markets or services designed to anonymize illegal transactions
• Publishing child sexual abuse material (CSAM) or any content that sexually exploits minors — this is a zero-tolerance violation and will result in immediate termination and reporting to law enforcement
• Facilitating human trafficking, forced labor, or sexual exploitation

5.2 Intellectual Property Violations

• Publishing, distributing, or storing content that infringes third-party copyrights, trademarks, patents, or trade secrets
• Operating services designed to facilitate copyright infringement (e.g., piracy platforms, torrent indexing)
• Using Webility-developed code or design assets beyond the license granted in the applicable service agreement

5.3 Privacy Violations

• Collecting personal data of individuals without proper legal basis, consent, or disclosure as required by applicable privacy laws (GDPR, PIPEDA, Law 25, CCPA, HIPAA, etc.)
• Using Webility-built systems to surveil, track, or monitor individuals without their knowledge or consent
• Publishing personal data of individuals without their consent (doxing)
• Using Webility-managed hosting to store, process, or transmit personal data in violation of applicable data protection laws
• Using AI systems built by Webility to process biometric data, health data, or other sensitive personal data without appropriate legal basis and safeguards

5.4 Spam & Unsolicited Communications

• Sending unsolicited bulk emails (spam) or SMS messages through any Webility-managed infrastructure
• Using email addresses or contact lists in violation of anti-spam laws, including:
  • Canada's Anti-Spam Legislation (CASL)
  • CAN-SPAM Act (USA)
  • GDPR consent requirements for electronic marketing (EU/UK)
  • Any other applicable anti-spam law
• Operating open mail relays or proxies that facilitate spam

5.5 Deceptive & Manipulative Practices

• Operating phishing websites, scam pages, or fraudulent business fronts
• Publishing false, misleading, or deceptive information designed to deceive consumers or investors
• Using Webility-built AI systems to generate deceptive content (deepfakes, fabricated testimonials, AI-generated disinformation) without appropriate disclosure
• Engaging in consumer fraud, advance fee scams, or any other form of financial deception
• Using dark patterns — UI/UX design techniques intended to manipulate users into unwanted decisions — in ways that would violate applicable consumer protection law

5.6 Hate Speech & Harmful Content

• Publishing content that promotes, incites, or glorifies violence against individuals or groups based on protected characteristics (race, ethnicity, religion, gender, sexual orientation, disability, national origin, etc.)
• Publishing content that harasses, intimidates, or threatens specific individuals
• Distributing content that promotes terrorism, genocide, or mass violence

5.7 Security & System Abuse

• Using Webility-hosted infrastructure to attack, probe, or exploit third-party systems
• Hosting command-and-control (C2) servers for malware or botnets
• Mining cryptocurrency without disclosure and explicit consent from affected users
• Deliberately overloading shared hosting resources in a way that degrades service for other clients (resource abuse)
• Intentionally circumventing security controls implemented by Webility

5.8 AI System Misuse

Clients who engage Webility to build AI-powered systems must not use those systems for:

• Generating or distributing disinformation, propaganda, or fabricated news
• Creating synthetic media (deepfakes) designed to deceive people about the identity or statements of real individuals without their consent
• Automated surveillance, profiling, or tracking of individuals without consent
• Discriminatory decision-making based on protected characteristics (where unlawful)
• Generating content that sexualizes minors
• Facilitating social engineering, phishing, or fraud
• Any use that violates applicable AI regulations, including the EU AI Act for high-risk AI systems

6. Content Standards

Content published on Webility-hosted platforms must comply with the following standards:

6.1 Accuracy

Content must not be deliberately false, misleading, or likely to deceive a reasonable person. Claims about products, services, credentials, or results must be substantiated.

6.2 Legal Compliance

Content must comply with all applicable laws in the jurisdictions where it is accessible, including:

• Consumer protection and advertising standards laws
• Privacy and data protection laws
• Financial services regulations (if making investment-related claims)
• Healthcare regulations (if making medical claims)
• Intellectual property laws
• Defamation and libel laws

6.3 Age-Restricted Content

Content intended for adults only (e.g., alcohol, adult entertainment, gambling where legal) must implement appropriate age verification mechanisms and legal disclosures. Publishing such content on platforms accessible to minors without appropriate controls is prohibited.

6.4 Offensive Content

While Webility does not make content judgments about lawful adult content, content that would be considered harmful to the community (extreme violence, graphic imagery without appropriate gates) is subject to review and may result in removal at Webility's discretion.

7. Hosting Resource Use

Clients using Webility-managed hosting must not:

• Consume excessive server resources (CPU, memory, bandwidth, storage) disproportionate to their plan in a way that impairs other clients' service
• Host files, databases, or applications that are not related to the Client's stated business purpose
• Use hosting infrastructure as a general-purpose file-sharing or content distribution platform without written agreement
• Exceed storage or bandwidth limits specified in their hosting plan without a plan upgrade

Webility reserves the right to throttle, suspend, or terminate hosting access for resource abuse after providing notice where practicable.

8. Security Responsibilities

Clients are responsible for:

(a) Maintaining the security of all login credentials for Webility-managed systems (b) Promptly notifying Webility of any known or suspected unauthorized access (c) Not sharing admin credentials with unauthorized personnel (d) Installing security updates on any self-managed components of their system in a timely manner (e) Not disabling or circumventing security measures implemented by Webility (firewalls, WAF rules, rate limiting, etc.) without Webility's written consent

9. Reporting Violations

9.1 Security Vulnerabilities

If you discover a security vulnerability in any Webility system or a Webility-hosted client website, please report it responsibly:

Security contact: security@webility.local Subject line: "Responsible Disclosure — [Brief Description]"

We request that you:

• Do not exploit the vulnerability beyond what is necessary to confirm it
• Do not access, modify, or delete data that does not belong to you
• Report the vulnerability promptly and give us reasonable time to remediate before public disclosure

We will acknowledge receipt within 2 business days and provide updates as the issue is investigated.

9.2 AUP Violations

To report a suspected AUP violation by a Webility client or third party using Webility's infrastructure:

Email: abuse@webility.local Subject: "Abuse Report — [Brief Description]"

Please provide: the URL or system involved, a description of the suspected violation, and any supporting evidence. We will investigate all reports in good faith.

10. Consequences of Violations

10.1 Enforcement Actions

Webility reserves the right to take the following actions in response to AUP violations, in proportion to the severity of the violation:

10.2 Immediate Termination

Webility may terminate services immediately and without notice for:

• Any conduct that violates criminal law
• Publication or distribution of CSAM
• Active cyberattacks originating from Webility infrastructure
• Conduct that creates imminent harm to third parties
• Any violation designated as "zero-tolerance" in this Policy

10.3 Termination for Cause

For violations that do not require immediate action, Webility will:

1. Issue a written notice of violation to the Client's primary contact
2. Give the Client [3–5] business days to cure the violation (where the violation is curable)
3. If not cured, terminate services in accordance with the MSA

10.4 No Refund for Violation-Based Termination

Clients whose services are terminated due to AUP violations are not entitled to a refund of any fees paid, including deposits and pre-paid retainer amounts.

10.5 Legal Action

Webility reserves the right to pursue civil legal action against individuals or organizations whose conduct causes damage to Webility, our clients, or third parties. Webility will cooperate with law enforcement in the investigation of criminal activity.

11. Disclaimer of Liability for Client Content

Webility is a hosting and technology services provider. We do not proactively monitor the content published on client websites beyond the scope of our maintenance services.

Webility is not responsible for content published by clients or their end users on Webility-hosted platforms, provided that Webility takes appropriate action upon becoming aware of AUP violations.

Clients are solely responsible for ensuring that all content on their platform complies with this AUP, applicable law, and the rights of third parties.

12. Multi-Jurisdiction Compliance

Webility serves clients internationally. This AUP is designed to reflect the most protective standards across our operating jurisdictions. Where local law imposes additional requirements:

• Clients are responsible for identifying and complying with all laws applicable in their jurisdiction
• Webility may apply additional restrictions where required to comply with the laws of specific jurisdictions in which Webility operates
• Nothing in this AUP limits Webility's right to refuse or terminate services that would cause Webility to violate applicable law

13. Changes to This Policy

Webility may update this AUP at any time to reflect changes in our services, technology, applicable law, or industry standards.

Material changes will be communicated to active clients with 15 days' notice before taking effect for ongoing retainer agreements. For new engagements, the current version at time of signing applies.

Continued use of Webility services after the effective date of any update constitutes acceptance of the revised AUP.

14. Contact

For questions about this Acceptable Use Policy:

Webility — Legal & Compliance Email: legal@webility.local

To report abuse: abuse@webility.local To report security vulnerabilities: security@webility.local

This Policy is a client-facing and public-facing document. It is not a substitute for legal advice. Clients with complex compliance environments should consult qualified legal counsel.

Webility — WBL-POL-AUP-v1.0 | Effective [DATE] | Last Revised 2026-02-19