Acceptable Use Policy

This policy applies to everyone who uses LeadGuard, including the public scan flow, the dashboard and the LeadGuard site tag.

You may only use LeadGuard to:

• Assess websites you own or are authorised to assess.
• Install the LeadGuard site tag on websites you control or are authorised to manage.
• Monitor lead pathways and interpret conversion insights for those websites.

You must not:

• Scan or attempt to monitor a website you are not authorised to assess.
• Attempt to bypass access controls, rate limits or abuse-prevention systems.
• Probe, scan or test the vulnerability of LeadGuard infrastructure outside our security-disclosure process.
• Use LeadGuard to send spam, execute denial-of-service activity, or transmit malware or other harmful code.
• Use LeadGuard in a way that infringes intellectual property, privacy or other rights of a third party.
• Use LeadGuard to build a competing product by extracting our data or code.

The LeadGuard site tag is designed not to capture the values people type into forms on customer websites. Do not configure LeadGuard, or your website, to send us the values of form fields, payment-card data, health information, government identifiers or other unnecessary sensitive information. When sending information to Support, do not attach passwords, payment-card details or other sensitive information that is not needed to resolve your ticket.

LeadGuard uses HMAC-hashed technical identifiers and rate limits on the public scan and API surfaces. Circumventing these controls is a breach of this policy.

If we reasonably suspect a breach, we may restrict access to an affected feature, suspend or terminate access and, where required, report activity to authorities. We will act proportionately and, where reasonably practicable, communicate before taking action.

To report abuse of LeadGuard, contact team@upweb.com. To report a security issue, follow the process on the Security page.