Kilo Acceptable Use Policy
This Acceptable Use Policy (the "AUP") governs your use of the Kilo Services. It is incorporated into and forms part of the Terms of Service and uses the same defined terms (for example, Customer, End User, Link, QR Code, Destination, Services, Slug, Door). Where this AUP and the Terms conflict, the Terms control, except that this AUP controls on the specific subject of prohibited use.
Plain-English summary (non-binding). Don't use Kilo Links or QR Codes to point at, host, or promote anything illegal or abusive - no CSAM (zero tolerance), phishing, malware, scams, spam, illegal goods, hate/harassment, impersonation, non-consensual intimate imagery, or IP theft. Don't play redirect tricks to dodge our safety systems, don't stuff personal data into Slugs, and don't inflate scans with bots. If you break these rules we can disable Links, pause or ban your account without notice, reclaim Slugs, and keep any fees. Report bad Links at /abuse. The grey summary boxes are explanations, not the binding text.
Each numbered section begins with a plain-English summary in a quote box. Those summaries are non-binding. Only the numbered provisions are binding.
1. Your Responsibility
In short. You're responsible for every Link, QR Code, Destination, page, and file you create or route through Kilo - and for your End Users' use of them.
1.1 You are responsible for all Customer Content, Destinations, Links, QR Codes, Slugs, hosted pages, and files you create, manage, or transmit through the Services, and for ensuring they comply with this AUP, the Terms, and all applicable laws. You are also responsible for use of the Services by your Authorized Users.
2. Prohibited Content and Conduct
In short. These are the categories that are flatly off-limits, whether they're the Destination a Link points to, content you host with us, or something you promote through Kilo.
You must not use the Services to create, host, link to, redirect to, distribute, promote, or facilitate any of the following:
2.1 Child sexual abuse material (CSAM) - zero tolerance. Any content that sexually exploits or endangers minors. We report CSAM to the appropriate authorities and/or the National Center for Missing & Exploited Children (NCMEC) or equivalent, preserve related records as required by law, and permanently terminate the responsible Account.
2.2 Phishing and credential theft. Content designed to deceive users into revealing credentials, financial details, or other sensitive information, or that impersonates a brand, service, or person to defraud.
2.3 Malware and command-and-control. Viruses, worms, ransomware, spyware, or other malicious code, and infrastructure used to distribute malware or to operate botnet command-and-control (C2).
2.4 Scams and fraud. Fraudulent schemes, deceptive commerce, fake giveaways, advance-fee fraud, investment/crypto fraud, or other content intended to defraud or mislead for gain.
2.5 Spam and unsolicited messaging. Using Links or QR Codes in unsolicited bulk or commercial messaging (email, SMS, messaging apps, or comment/forum spam), or in a manner that violates anti-spam laws.
2.6 Illegal goods and services. Content offering or facilitating illegal drugs, weapons, stolen goods, counterfeit items, fraudulent documents, or other unlawful goods or services.
2.7 Hate, harassment, and violence. Content that incites or promotes hatred, harassment, threats, or violence against individuals or groups, or that facilitates terrorism or violent extremism.
2.8 Impersonation. Falsely impersonating any person, brand, or organization, or misrepresenting your affiliation with them.
2.9 Non-consensual intimate imagery (NCII). Intimate or sexually explicit images or recordings of a person shared without their consent, and sexual extortion.
2.10 Intellectual-property infringement. Content that infringes or misappropriates copyrights, trademarks, patents, trade secrets, or other rights. See Terms Section 21 for takedowns.
2.11 Privacy and unlawful data. Content that unlawfully discloses others' personal data (doxxing) or facilitates unlawful surveillance or data collection.
2.12 Adult content on shared Kilo domains. Sexually explicit or pornographic content is prohibited on Kilo-operated shared domains (for example qr2r.com and Kilo-provided vanity/inner domains). [Open policy decision - Section 6.4: whether lawful adult content may be permitted on a Customer's own verified BYOD Custom Domain, subject to age-gating and legal compliance. Current default: prohibited on all Kilo surfaces.]
2.13 Other unlawful or harmful use. Any use that violates applicable law, infringes third-party rights, or is otherwise harmful, abusive, or objectionable in our reasonable judgment.
3. Redirect- and QR-Specific Prohibitions
In short. Don't use redirect tricks to hide bad destinations or dodge our safety checks, don't hide personal data in Slugs, don't fake scan volume with bots, and don't abuse the file host.
You must not:
3.1 Cloak or chain redirects to evade detection. Use cloaking, user-agent or geo-based switching, or chained/multi-hop redirects to present different Destinations to Kilo's safety systems, scanners, or reviewers than to End Users, or otherwise to disguise the true Destination.
3.2 Circumvent blocklists or safety controls. Use the Services to bypass or evade domain blocklists, reputation systems, filters, or any Kilo safety, review, or enforcement mechanism, or re-create Links, Slugs, or Accounts to evade an enforcement action.
3.3 Embed personal data in Slugs or URLs. Place another person's personal data in a Slug, Link, or URL without a lawful basis and any required consent.
3.4 Inflate or falsify scans/clicks. Generate artificial, automated, bot-driven, or otherwise abusive scan/click volume, or manipulate analytics, campaign caps, or "unlimited" allowances. Legitimate End-User opens are permitted; artificial volume is not. This clause backs any "unlimited scans" allowance with a fair-use standard.
3.5 Abuse file hosting. Upload to the file host any content that violates Section 2, or use it to host malware, executables disguised as documents, or other prohibited files. File uploads are limited by type and size and may be scanned or removed.
3.6 Overload or interfere. Use the Services to launch denial-of-service attacks, to probe, scan, or test the vulnerability of any system without authorization, to circumvent rate limits, or to interfere with the integrity or performance of the Services or others' use of them.
3.7 Scrape or reverse-engineer. Scrape, harvest, or systematically extract data from the Services except as expressly permitted; or reverse-engineer, decompile, or attempt to derive source code, except to the extent this restriction is prohibited by law.
4. Fair Use of "Unlimited" Allowances
In short. "Unlimited" scans, clicks, or edits means unlimited for normal, legitimate use - not for bots or abuse. We can apply reasonable limits to protect the platform.
4.1 Where the Services or our materials describe scans, clicks, edits, or other usage as "unlimited," that allowance is provided on a fair-use basis for legitimate End-User activity. It does not permit automated, artificial, bot-generated, or abusive volume (Section 3.4), and we may apply reasonable technical limits to protect the Services and other customers.
5. Custom Domains (BYOD)
In short. Only connect domains you're allowed to use, and keep them compliant with this AUP too.
5.1 You may connect a Custom Domain only if you own it or are authorized to use it (see Terms Section 7). All content served through a Custom Domain remains subject to this AUP, except as expressly varied for lawful adult content under Section 2.12 if and where a published policy exception permits it.
6. Enforcement
In short. We may scan Destinations, and we may block, disable, pause, lock, reclaim, suspend, or terminate - often without notice, and without revealing why on the public page. We try to reach out first where feasible. No refunds when we terminate for abuse.
6.1 Our rights. We may, in our sole discretion and without any obligation of prior notice, take any of the following actions to enforce this AUP or protect the Services, End Users, or third parties:
- (a) scan, review, and classify Destinations and Customer Content;
- (b) remove, disable, block, or reject any Link, QR Code, Slug, hosted page, file, redirect, or domain;
- (c) apply an administrative lock that the Customer cannot override;
- (d) pause or restrict Links or features;
- (e) reclaim, withhold, or reassign Slugs;
- (f) suspend, restrict, or terminate any Account or Organization; and
- (g) preserve and disclose records as permitted under the Terms and applicable law.
6.2 Non-disclosure of enforcement details. Blocked or locked Links may serve a generic "unavailable" page that does not disclose the reason for the action. We may decline to explain specific enforcement decisions where doing so would undermine safety, security, or ongoing investigations.
6.3 Good-faith contact first, where feasible. Where practical and not counter to safety or legal considerations, we will attempt to contact the Customer before or promptly after taking action, but we are not required to do so, particularly for severe violations (such as CSAM, phishing, or malware).
6.4 No refunds on abuse termination. If we suspend or terminate your Account for a violation of this AUP or the Terms, no refund is due, consistent with Terms Section 11.8.
6.5 Scanning is a right, not a warranty. Our scanning and review are a right we may exercise, not a duty, and do not warrant that any Link or Destination is safe or lawful (see Terms Sections 8.4 and 15.3).
7. Reporting Abuse
In short. See a bad Link or QR Code? Report it at /abuse. Copyright/IP complaints follow the Terms takedown process.
7.1 To report a Link, QR Code, or Destination that you believe violates this AUP, use our public abuse-reporting channel at /abuse (or /report). For copyright or other intellectual-property complaints, follow the takedown process in Terms of Service Section 21 or contact [email protected].
7.2 We review reports and take action at our discretion consistent with this AUP. Submitting knowingly false reports may itself violate the Terms.
8. Changes to This AUP
In short. We may update this AUP; material changes get notice, as described in the Terms.
8.1 We may update this AUP from time to time. Material changes will be handled as described in Terms of Service Section 17.
This AUP is incorporated into the Terms of Service and should be read together with the Privacy Policy.