Acceptable Use Policy

The Service must be used lawfully, in compliance with Italian and EU law, third-party rights and the principles of good faith. The Customer is responsible for the conduct of its Users on the platform.

The following are prohibited:

• Violating laws, regulations, intellectual-property or privacy rights of third parties.
• Uploading, distributing or transmitting unlawful, defamatory, obscene, discriminatory, fraudulent or child-harming content.
• Attempting to compromise the security, integrity or availability of the platform or other Customers' data (penetration tests, exploits, DoS/DDoS, malware, supply-chain attacks).
• Mass scraping, reverse engineering, or unauthorized copying of the software, data or interfaces.
• Abusing APIs disproportionately to normal use, circumventing rate or concurrency limits.
• Using the platform to send spam, unsolicited communications, or phishing.
• Reselling, sublicensing or making the Service available to third parties without written authorization.
• Uploading personal data in violation of the GDPR and employer/controller obligations (e.g. biometric or geolocation data without compliance with Italian Workers' Statute Art. 4).

The Customer must:

• Safeguard credentials and enable multi-factor authentication where available.
• Diligently manage roles and permissions of its Users.
• Promptly notify Duckday of any suspected unauthorized access or security incident.

Any abuse may be reported to [email protected] (platform misuse) or [email protected] (vulnerabilities — responsible disclosure).

In case of violation of this AUP, Duckday may — depending on the severity — issue a warning, temporarily suspend the account, restrict specific features, or terminate the agreement, without prejudice to claims for damages and reports to competent authorities.