1. Purpose
This policy exists so the Service stays safe, lawful and reliable for every tenant sharing the platform.
2. You may only track sites you are authorized to instrument
Only install the tracking snippet on websites you own or have explicit authorization to instrument. Do not use the Service to track visitors to a third party’s website without their consent.
3. Lawful, consensual data collection
You are responsible for choosing a tracking consent mode appropriate to your audience and applicable law, for your own privacy policy and cookie notice, and for not using collected visitor or lead data for a purpose incompatible with the privacy notice you give your own visitors.
4. Platform integrity
Do not attempt to bypass tenant data isolation, rate limits, or plan quotas; reverse-engineer or scrape the Service outside a documented API; interfere with another customer’s data or account; or use the Service to send unsolicited bulk communications (e.g. through the ticketing or CRM email features).
5. Prohibited content and conduct
Do not use the Service to collect or store data in connection with illegal activity, malware distribution, harassment, or content that violates the rights of others.
6. Security research
Good-faith security research is welcome under the Vulnerability disclosure page’s scope and rules. Do not test against production accounts other than your own, or attempt to access another tenant’s data, without prior written permission.
7. Enforcement
A violation of this policy may result in suspension or termination of the account, as described in the Terms of Service, and — for a security or legal risk to other customers — may happen without prior notice.
8. Reporting a violation
Report suspected abuse to abuse@novexapilot.com (placeholder — confirm before launch).