MarketHK Acceptable Use Policy

1.Purpose and scope

This Policy exists to prevent fraud, unsolicited marketing, network abuse and security threats, and to let us reasonably suspend, limit or terminate service when misuse occurs. It applies to you and anyone you authorise to use MarketHK, including actions via API, webhooks, CSV import, campaigns, templates, TOTP / Verify and managed sending.

• Products: Notify, Verify, Managed and related billing / analytics features
• Channels: Email, SMS / MMS, WhatsApp, App / Web Push, TOTP and future channels
• You must ensure downstream customers / agents (if any) meet the same or stricter standards

2.Required rights and consent

Before sending, you must lawfully own or be authorised to use the relevant data and assets, and be able to produce reasonable records. Do not use the platform to send without the required consent, authorisation or rights.

• Lawful source and right to use recipient contact data
• Consent, unsubscribe and sender identification required for commercial electronic messages (as applicable)
• Rights to sender names, domains, brands, trademarks, templates, media and system access
• WhatsApp / mailbox / telecom accounts and approvals (e.g. official templates)
• Accurate, auditable consent ledgers and suppression / opt-out lists

3.Prohibited content

You must not create, store, transmit or attempt to transmit the following through MarketHK (including links, attachments, media or click-bait content):

• Illegal, fraudulent, deceptive, defamatory, hateful, harassing, threatening or obscene content
• Phishing, fake login pages, credential harvesting, malware, ransomware or social-engineering attacks
• Content that infringes intellectual property, privacy or other rights
• Unlawful promotion of regulated goods / services (e.g. unauthorised drugs, weapons, gambling, as applicable)
• Child sexual exploitation or any content that exploits minors
• Content designed to evade filters, approval gates or provider policies

4.Prohibited messaging and list practices

MarketHK is not an unrestricted blast tool. The following are prohibited:

• Buying, renting, scraping or otherwise obtaining non-consented lists for marketing / commercial messages
• Direct marketing without required consent (including PDPO, UEMO or improper do-not-call use)
• Impersonating government, banks, e-commerce, logistics, employers or other trusted brands / persons
• SMS pumping or artificial traffic to consume wallet balance or provider quotas
• Bombarding or harassing recipients, or continuing after unsubscribe / complaint
• Concealing, forging or misleading sender identity, reply address or unsubscribe path
• Using OTP / verification channels for marketing or non-verification content

5.Prohibited technical and security conduct

Do not attack, probe or circumvent security and usage controls of the platform, providers or recipient systems.

• Unauthorised access, privilege escalation, lateral movement or probing other tenants’ data
• Bypassing MFA, dual approval, rate / budget caps, emergency pause or account restrictions
• Credential stuffing, brute force, or publishing / selling API keys
• Denial-of-service or replay attacks against webhooks, APIs, queues or login endpoints
• Reverse engineering to defeat security controls (except interoperability permitted by law)
• Automated mass account / fake workspace creation to evade review

6.Channel-specific requirements

In addition to the general rules:

• Email: maintain reasonable complaint / bounce rates; configure SPF / DKIM / DMARC; do not mix marketing and transactional traffic to evade gates
• SMS / MMS: use only for critical, urgent, OTP / fallback or authorised use cases; follow #Sender ID and carrier rules where applicable
• WhatsApp: use only approved templates and allowed conversation windows; follow Meta / WhatsApp Business policies
• TOTP / Verify: do not use for phishing, social engineering, or to bypass your own authentication
• API: honour documented quotas, idempotency and error handling; do not retry known illegal / rejected requests to create load

7.Hong Kong and other applicable law

You must comply with all applicable laws, including the Hong Kong Personal Data (Privacy) Ordinance (PDPO), the Unsolicited Electronic Messages Ordinance (UEMO), and electronic messaging, consumer and telecom rules in recipient jurisdictions. You remain primarily responsible for list sources, consent evidence, message content and regulatory enquiries.

8.Monitoring, investigation and evidence

We may use automated and human methods to detect abuse signals (e.g. unusual volume, high failure / complaint rates, provider alerts, recipient reports). We may require consent records, list-source explanations, template purpose statements and a remediation plan. To protect networks, we may share necessary information with channel providers, telecom partners and, where required or permitted by law, law enforcement / regulators.

9.Enforcement

If we reasonably believe you violated this Policy or present a risk, we may take one or more of the following steps with no notice or limited notice:

• Rate limiting, quota reduction, wallet freeze or mandatory dual approval
• Suspension of specific channels, templates, campaigns, API keys or the whole workspace
• Emergency send pause (kill switch) with retained audit records
• Require deletion / correction of offending content or lists before restoration
• Terminate the account and refuse cash refund of channel costs / wallet spent due to abuse (per the Terms)
• Notify affected recipients, providers or authorities where legally required or reasonably necessary

10.Reporting abuse

If you see suspected phishing, spam, impersonation or a security incident involving MarketHK, contact us promptly via the consultation / support channel and mark the message “Abuse” or “Acceptable Use”. Include message samples, send time, workspace / campaign identifiers and recipient impact where possible. Do not submit passwords, OTPs or API secrets in public forms.

11.Changes

We may update this Policy from time to time to reflect product, provider or regulatory changes. We will use reasonable efforts to give prior notice of material adverse changes. If you disagree, stop using the Service; continued use constitutes acceptance (unless a written MSA provides otherwise).

12.Contact

For abuse reports, enforcement appeals or compliance questions, contact iGears Technology Limited via the website consultation / support channel and mark the message “Acceptable Use”, including relevant workspace details.