Skip to content
WebUplink

Acceptable Use Policy

Version 2 — July 2, 2026

This Acceptable Use Policy ("AUP") applies to all use of the WebUplink API, SDK, MCP server, and related services ("Services"). By using the Services, you agree to comply with this AUP in addition to our Terms of Service and Privacy Policy. When you enable login automation in the dashboard, you attest to the version of this policy shown above.

1. Scope

This AUP applies to all customers, users, and automated agents that interact with the Services, whether via the REST API, TypeScript SDK, Python SDK, MCP server, or any other integration method.

2. Permitted Uses

You may use the Services to:

  • Browse and extract publicly available content from websites
  • Interact with web pages through structured tool definitions (clicking, typing, selecting)
  • Fill forms and complete multi-step workflows on sites you are authorized to access
  • Sign in to your own accounts, once login automation is enabled (Section 3)
  • Test and develop automated web interaction pipelines
  • Execute batch operations within your plan's concurrency and rate limits

3. Login Automation (Verification-Gated)

Automating sign-in flows on dedicated authentication and identity-provider domains (for example accounts.google.com or login.microsoftonline.com) is locked by default on every plan. It unlocks per account — not per plan — once you:

  • Verify your identity with a card on file (a $0 verification — you are not charged), and
  • Explicitly attest to this AUP from the dashboard.

Once enabled:

  • Your accounts only.You may automate sign-ins only for accounts you own or are expressly authorized to operate. Signing in to anyone else's account is prohibited.
  • Target-site terms are your responsibility.Enabling login automation grants you no rights on third-party websites. You are solely responsible for ensuring that your automation complies with the target site's terms of service and with applicable law.
  • Abuse suspends the capability. Unusual login activity (such as high failure rates or rapid-fire login targets) automatically suspends login automation on your account pending manual review.
  • Restricted domains stay blocked. Banking/finance, streaming, and ticketing sites (Section 6) remain blocked for everyone, regardless of this entitlement.

4. Credential Handling

When you pass credentials (passwords, tokens, cookies, or authentication data) as tool parameters:

  • Transient only. Credentials exist only in the ephemeral browser session and are destroyed when the session ends. WebUplink never stores, logs, or persists credentials at rest.
  • Your responsibility. You must have proper authorization to use any credentials you provide. Unauthorized use of third-party credentials is strictly prohibited.
  • No cross-tenant sharing. Credentials must not be shared, reused, or transferred between different WebUplink tenants or accounts.

5. CAPTCHAs and Bot Detection

WebUplink does not solve CAPTCHAs and does not circumvent bot-detection mechanisms — CAPTCHA solving is disabled in the browsing engine. You must not use the Services to attempt to solve CAPTCHAs, defeat bot-detection systems, or bypass access controls on any website. If a target site challenges or blocks a session, the request fails; do not attempt to work around the block through the Services.

6. Prohibited Uses

You must not use the Services to:

  • Access websites in violation of their Terms of Service or robots.txt directives
  • Perform unauthorized credential use, account takeover, or credential stuffing attacks
  • Solve CAPTCHAs or circumvent bot-detection mechanisms or access controls (Section 5)
  • Scrape, collect, or store personally identifiable information (PII) without proper consent
  • Send spam, conduct phishing, distribute malware, or facilitate fraud
  • Launch denial-of-service attacks or deliberately degrade the performance of any service
  • Access restricted domains, including but not limited to banking/finance (Chase, Bank of America, Wells Fargo), streaming (Netflix, Hulu, Disney+), and ticketing platforms (Ticketmaster, StubHub) — these are blocked for all plans
  • Probe internal networks, cloud metadata endpoints, or private IP ranges via SSRF
  • Violate any applicable local, state, national, or international law or regulation

7. Automated Data Collection

  • Respect robots.txt.While WebUplink does not automatically enforce robots.txt, you are responsible for ensuring your use complies with target websites' crawling policies.
  • Rate-limit courtesy.Even within your plan's rate limits, exercise reasonable courtesy when making repeated requests to the same domain. Avoid patterns that could be interpreted as abusive by the target site.
  • Data retention. You are responsible for the data you collect through the Services. WebUplink does not retain page content from browsed sessions.

8. Infrastructure Provider Compliance

WebUplink operates on third-party managed infrastructure, including a specialist browser-infrastructure provider whose terms require lawful use exclusively for the platform's intended purpose. Your use must comply with both this AUP and those requirements; the conduct rules in this policy encompass them, and we will communicate any additional provider restriction that affects your use with reasonable notice. In the event of a conflict, the more restrictive provision applies.

9. Enforcement

Violations of this AUP may result in immediate and temporary suspension of your account, rate limiting, or permanent termination at our sole discretion. We reserve the right to investigate suspected violations and cooperate with law enforcement authorities where required.

Specifically, we may:

  • Immediately suspend API access without prior notice for severe violations
  • Suspend the login-automation capability automatically when abuse telemetry triggers
  • Reduce rate limits or concurrency for accounts exhibiting suspicious patterns
  • Permanently terminate accounts for repeated or egregious violations
  • Report illegal activity to the appropriate law enforcement agencies

10. Reporting Violations

If you believe someone is violating this AUP, or if you have questions about whether your intended use is permitted, contact us at support@webuplink.ai. We take all reports seriously and will investigate promptly.

11. Changes to This Policy

We may update this AUP from time to time; each revision increments the version number shown at the top of this page. Material changes will be communicated via email or through the dashboard, and may require re-attestation to keep login automation enabled. Continued use of the Services after changes constitutes acceptance of the updated policy.