Acceptable Use Policy

Quick read: WebForger hosts websites for lawful businesses around the world. We do not host content that endangers people, breaks the law, or jeopardises our infrastructure providers. Some regulated industries are welcome to host with us with a simple attestation, even where we cannot manage paid advertising for them. We act on credible reports promptly. Severe breaches (CSAM, malware, fraud, infrastructure abuse) result in immediate termination without refund.

1. How this policy applies

This Acceptable Use Policy ("AUP") applies to anyone who creates a WebForger account, uses our hosted sites, embeds our forms, sends email through our systems, or otherwise consumes the service. By using WebForger you agree to comply with this AUP and to require the same of anyone you authorise to use your account (employees, contractors, agencies, AI agents).

We rely on Cloudflare as our hosting and content-delivery provider. Your use of WebForger must also stay within Cloudflare's terms of service and acceptable use policy; if Cloudflare requires us to remove content, we will. This AUP can be stricter than Cloudflare's, but it cannot be more permissive.

Where we provide managed advertising (for example, the SEMForge service inside the Custom plan), additional restrictions apply because Google, Meta and other ad platforms enforce their own policies on our advertiser accounts. A business may be welcome to host with us and still be ineligible for our managed advertising.

2. Always prohibited (hosting, ads, any plan)

The following content, products and conduct are prohibited on WebForger regardless of plan, jurisdiction or attestation. Severe breaches (especially the safety items below) result in immediate termination without notice or refund and may be reported to law enforcement.

2.1 Safety and exploitation

• Child sexual abuse material (CSAM), child grooming content, or any material that sexualises minors. We report to authorities.
• Human trafficking, sexual servitude, forced labour, or escort/prostitution services.
• Content that incites or facilitates violence against any person or group, terrorism, or organised crime.
• Doxxing, stalking, non-consensual intimate imagery ("revenge porn"), or harassment campaigns.
• Hate speech, dehumanising content, or material that promotes discrimination on protected characteristics.

2.2 Fraud, deception and financial harm

• Phishing pages, brand impersonation, fake login portals, fake government or bank sites.
• Multi-level marketing, pyramid schemes, Ponzi schemes, "matrix" or chain referral programs.
• Cryptocurrency exchanges aimed at retail customers, ICOs / token sales, NFT mints, "rug-pull" projects, paid memecoin promotion, and unlicensed crypto custody services.
• Foreign-exchange or futures signals advertising guaranteed returns; "copy trading" without proper licensing; binary options targeting retail traders.
• Investment, securities or financial advice without the licence required in the customer's and the audience's jurisdiction.
• Predatory or misrepresented "get rich quick" courses, recruitment-driven coaching schemes.
• Counterfeit goods, pirated software, ROMs, cracked media, brand replicas.

2.3 Weapons, drugs and dangerous goods

• Sale of firearms, ammunition, explosives, untraceable firearm components or 3D-printable firearm files to consumers. (Licensed industry suppliers operating B2B in compliant jurisdictions may apply for review.)
• Recreational cannabis where it is illegal in the customer's jurisdiction; psychoactive substances marketed for euphoric use; designer drugs and "research chemicals".
• Unlicensed pharmaceuticals, controlled substances, prescription medication sold without verifying prescriptions.
• Tobacco sales to minors under any circumstance; misleading "smoking-cessation" claims for nicotine products.

2.4 Infrastructure abuse and hacking tools

• Malware, spyware, stalkerware, ransomware, keyloggers; tools designed to bypass authentication or DRM.
• "Stresser" / "booter" / DDoS-for-hire; credential-stuffing tools; account checkers; phishing kits.
• Fake-account farms, like/follower farms, review-fraud services, fake-engagement marketplaces.
• Open mail relays; SMS or voice services used for fraud, OTP interception or impersonation.
• Cryptocurrency mining (browser-side or server-side) on hosted pages or worker functions.
• Use of WebForger as an open proxy, scraping intermediary, or to conceal an attack origin.
• Probing, port-scanning, vulnerability scanning, or attempting to bypass platform limits.

2.5 Adult content and unlawful gambling

• Pornography or sexually explicit imagery; adult cam sites; adult dating; "sugar dating".
• Online casinos, sportsbooks, poker rooms, lotteries, sweepstakes or skill-prize sites operating without the licence required by the audience's jurisdiction.

2.6 Academic and professional fraud

• Essay mills, ghost-writing for academic submissions, exam-cheating services.
• Fake or unaccredited diploma sales; sale of fake credentials, professional certifications, or identity documents.

Reservation of judgement. The categories above are guidance, not limits. We may classify a site as prohibited where its objective effect matches one of these categories regardless of how it is described in marketing copy. We will provide a brief reason on request, but we do not negotiate the underlying classification.

3. Welcome to host with attestation (no managed advertising)

The following industries are permitted on WebForger hosting when you attest that you hold the required licences and operate lawfully in your audience's jurisdictions. We do not, however, run managed advertising for these categories on your behalf because Google, Meta and other ad platforms restrict the advertiser accounts we use to deliver them.

• Vaping, e-cigarette, nicotine pouch and tobacco retail, where age-gating and product-information laws are met.
• Alcohol e-commerce and retail, where licensed and where age-verification is performed at point of sale.
• Medicinal cannabis or CBD products lawful under the customer's local regime (for example, NZ medicinal cannabis scheme).
• Adult novelty (non-pornographic) retail.
• Short-term and "payday" consumer lending where licensed; consumer credit brokerage with disclosure.
• Online pharmacy and telemedicine where the operator and prescribers are licensed in the audience jurisdiction.
• Astrology, tarot, psychic or spiritual paid services, with the disclaimers required by local consumer-protection law (NZ Fair Trading Act, AU Australian Consumer Law).
• Firearms-related licensed retail B2B (accessories, training, range services) in jurisdictions where it is lawful and properly disclosed.

You will be asked, before launch, to confirm: that your business holds the required licences; that you maintain age and identity verification where applicable; that you take responsibility for advertising claims, taxation and regulatory compliance on your own site; and that we are providing hosting and tooling only. The attestation, your business name, and the date of confirmation are stored with your account record.

4. Hosted and managed-advertising eligible (with attestation)

Most regulated professional services are welcome to host with us and to use our managed advertising services, with attestation that you hold the required licence and follow local advertising rules. Examples:

• Health, fitness and weight-management coaching that does not make medical claims.
• Health supplements with no disease-treatment claims and with the substantiation required by local fair-trading law.
• Immigration and education-abroad consultancies licensed by the relevant regulator (for example, NZ IAA, AU MARA).
• Legal, accounting, financial planning and tax services run by licensed practitioners.
• Real-estate sales, letting and property management.
• Second-hand luxury or collectibles retail with disclosed authentication procedures.
• Insurance brokerage, mortgage brokerage, and other licensed financial intermediation.

5. Email, forms and unsolicited messages

WebForger transmits transactional emails (account, login, password, lead-form receipts) and limited marketing emails on your behalf. You agree that:

• You will not use our forms or our outbound email to send unsolicited bulk email, "cold" sales blasts, or messages obtained from purchased lists.
• Lead-form notifications you collect are sent to addresses you control and not used to bulk-mail third parties.
• You comply with applicable anti-spam law: the New Zealand Unsolicited Electronic Messages Act 2007, the Australian Spam Act 2003, the EU GDPR / e-Privacy framework, and the United States CAN-SPAM Act, depending on your audience.
• You honour opt-out requests promptly and you do not impersonate other senders.

We may rate-limit or disable outbound email if we observe high bounce, complaint or abuse rates on your account, including before contacting you, where doing so protects platform reputation.

6. Resources, content type and platform fit

WebForger is built for HTML / CSS / image content delivered via Cloudflare. Use that does not fit this profile, including but not limited to:

• Hosting primarily as a video-streaming or audio-streaming endpoint, file-locker, or torrent index.
• Embedding very large media (typically > 50 MB per file or > 50 GB monthly egress on Free / Pro) without a managed plan.
• Using the platform as a software-update endpoint, package CDN, or game asset CDN.
• Running a public proxy, VPN exit, scraper farm, or AI-content scraping endpoint.
• Cryptocurrency mining of any kind, in any context, in browser or in serverless functions.

We may rate-limit, cache-bust, or disable hosting that materially exceeds the typical resource profile of a paid plan, and we will tell you why.

7. Account, refund and free-tier abuse

• One person or business should operate one account. Multiple accounts to evade plan limits, refund history, suspension or anti-fraud controls are abuse.
• The 30-day money-back option in the Terms of Use is for genuine dissatisfaction. A pattern of refund-then-resubscribe across the same person, business, payment instrument or device is abuse and may result in permanent denial of future paid service.
• Free accounts are intended for evaluation and small static sites. Mass account creation, automated provisioning, "free-tier farming" to extract bulk AI generations or storage, and flipping subdomains commercially are prohibited.
• You will not use stolen or non-consensual payment methods, identity, or business details to pay for the service.

8. Reporting violations

If you believe a WebForger-hosted site is breaching this AUP, send a report to abuse@webforger.ai with the URL, a brief description of the issue, and your contact details if you are willing to be contacted for clarification. Copyright complaints follow the separate Copyright & Takedown process. We acknowledge reports promptly and act based on credible evidence; we may not always confirm the outcome to the reporter.

9. Enforcement

When we identify a breach, we choose the response proportionate to the risk and the customer's history:

• Notice and correction. For first-time, low-risk breaches we usually contact you with a description of the issue and a reasonable time to remove or correct the affected content.
• Targeted suspension. We may disable a specific page, form, asset, or feature while keeping the rest of the account online.
• Account suspension. We may suspend the account pending investigation; the site may continue serving cached content briefly, then be taken offline.
• Termination without notice. Reserved for severe breaches: CSAM and exploitation, active phishing or malware, fraud or counterfeit operations, infrastructure attack, harassment campaigns, or repeated or wilful breaches after warning. Termination under this clause does not entitle you to a refund.
• Cooperation with authorities. Where required by law, or where the breach involves serious crime, we may preserve and disclose account records to the relevant authority.

10. Appeals and reinstatement

If your account has been suspended or terminated and you believe it was in error, reply to the action notice or email hello@webforger.ai with a short explanation. We aim to respond to good-faith appeals within five business days. We may keep an account suspended during the appeal where there is a continuing risk to users, payment partners, or our infrastructure providers.

11. Changes to this policy

We may update this AUP as the platform evolves and as third-party policies (Cloudflare, Stripe, Google Ads, Meta, Resend) change. Material changes will be announced in the dashboard and by email at least 14 days in advance, except where the change is required to address an imminent security or legal risk. Continued use of the service after a change takes effect means you accept the new version.

12. Contact

Abuse and AUP reports: abuse@webforger.ai
Account, billing and appeals: hello@webforger.ai
Always Digital Limited (trading as HornTech / WebForger), Auckland, New Zealand.

Document version: 1.0 — 29 April 2026.