Acceptable Use Policy

This Policy applies, without exception, to each and every natural or legal person that (i) browses, loads, renders, caches, or navigates any public-facing page of the Platform; (ii) registers for, logs into, or maintains any account or sub-account on the Platform, whether as a Creator, Brand, visitor, administrator, staff member, vendor, contractor, investor, auditor, or third-party beneficiary; (iii) transmits, receives, generates, aggregates, or consumes any data to, from, or through any Orno API, webhook, SDK, or other programmatic interface; (iv) embeds, frames, syndicates, mirrors, or scrapes any content served by the Platform; or (v) otherwise obtains any benefit, service, or utility therefrom, whether authorized or unauthorized (each, a “User”).

By accessing the Platform in any manner whatsoever, the User expressly acknowledges, agrees, and consents to be bound by every provision of this Policy, whether or not the User has read it, and whether or not the User has affirmatively assented by clickwrap, browsewrap, or other manifestation of assent. Continued use of the Platform following publication of any amendment to this Policy shall constitute affirmative re-acceptance of the Policy as so amended.

This Policy is binding and enforceable to the fullest extent permitted by applicable law and operates in addition to, and not in lieu of, any and all other contractual, statutory, common-law, or equitable obligations owed by the User to Orno, to other Users, or to third parties.

Capitalized terms used in this Policy shall have the meanings ascribed below. Terms defined in the singular include the plural, and vice versa; and any reference to any statute, regulation, or guide includes all amendments, successor provisions, and implementing instruments thereto.

Each User shall use the Platform (a) only in a lawful manner and in strict compliance with every Applicable Law; (b) only for the purposes for which access has been granted and for which the Platform is designed; (c) with reasonable care, diligence, and good-faith regard for the rights, safety, privacy, property, reputation, and legitimate commercial interests of Orno, of other Users, and of third parties; (d) without interference with, degradation of, or damage to the integrity, security, performance, availability, or administration of the Platform; and (e) without imposing any undue, unreasonable, or disproportionate burden on the Platform’s infrastructure or Orno’s personnel.

The enumeration of specific Prohibited Activities in Sections 4 through 8 is non-exclusive. The absence of a given act or omission from those enumerations shall not be construed as an affirmative authorization thereof; conduct that falls outside the letter but within the spirit of a Prohibited Activity is itself prohibited. Where ambiguity exists concerning whether a given activity is permitted, the User shall resolve such ambiguity in favor of abstention and, where appropriate, shall request written authorization from Orno prior to engaging in the contemplated activity.

Without limiting the generality of Section 3, each User is strictly prohibited from engaging in, attempting to engage in, assisting any third party in engaging in, or inducing any third party to engage in any of the following technical acts or omissions with respect to the Platform:

• Operating, deploying, or permitting the operation of any robot, spider, crawler, scraper, headless browser, offline reader, data harvester, or analogous automated agent to access, index, extract, mirror, or process any portion of the Platform, except with the prior express written consent of an authorized officer of Orno and strictly in accordance with the conditions of any such consent (consent given for one purpose does not extend to any other);
• Accessing, attempting to access, or inducing access to any non-public area of the Platform, including administrative consoles, staff tools, internal dashboards, or any resource not explicitly exposed to the User’s account tier;
• Circumventing, disabling, evading, or otherwise interfering with any rate limit, throttling control, quota, security control, authentication mechanism, access-control list, content-security policy, CAPTCHA, anti-abuse heuristic, or equivalent safeguard, whether by header manipulation, IP rotation, CAPTCHA-solving services, credential cycling, or otherwise;
• Launching, participating in, facilitating, or financing any denial-of-service attack, distributed denial-of-service attack, reflection attack, amplification attack, Slowloris attack, SYN flood, UDP flood, HTTP flood, application-layer flood, or any other conduct reasonably calculated to degrade, overload, disrupt, or render unavailable the Platform or any component thereof;
• Injecting, uploading, transmitting, or causing to be executed any malicious code, including without limitation computer viruses, worms, trojans, rootkits, bootkits, logic bombs, time bombs, spyware, adware, ransomware, cryptominers, credential stealers, remote-access trojans, or any other program designed to damage, disable, overburden, impair, exfiltrate data from, or gain unauthorized access to the Platform, another User’s system, or any third party’s system;
• Conducting, attempting, or causing SQL injection, NoSQL injection, command injection, template injection, LDAP injection, or any other injection attack against any Orno interface, endpoint, query, or data store;
• Conducting, attempting, or causing any cross-site scripting (XSS), stored XSS, reflected XSS, DOM-based XSS, cross-site request forgery (CSRF), clickjacking, UI redress, or similar front-end exploitation of the Platform or of any User thereof;
• Conducting, attempting, or causing any credential-stuffing, password-spraying, brute-force, dictionary, rainbow-table, or credential-replay attack against any authentication surface exposed by the Platform;
• Reverse engineering, decompiling, disassembling, tracing, instrumenting, debugging, patching, emulating, or otherwise attempting to derive the source code, algorithms, keys, secrets, or internal architecture of the Platform, except to the limited extent such activity is expressly permitted by non-waivable Applicable Law;
• Extracting, scraping, or otherwise accumulating credentials, session tokens, API keys, webhook signatures, CSRF tokens, or any other secrets by any means, whether technical or social;
• Using the Platform to host, relay, proxy, or tunnel malicious traffic, including use as a command-and-control channel, exfiltration endpoint, or phishing redirector;
• Introducing any feature, function, or code path designed to disable, degrade, or destroy the Platform or any data thereof at any future time or upon the occurrence of any condition;
• Performing security testing, vulnerability research, or penetration testing against the Platform outside the scope of Orno’s published Responsible Disclosure program and without the prior written authorization of Orno’s security team.

No User may upload, transmit, store, display, link to, solicit, traffic in, or otherwise disseminate through the Platform any Content that falls within any of the following categories, irrespective of the User’s subjective intent or the asserted social, artistic, political, journalistic, or commentary value of the Content:

• Content that is unlawful, tortious, defamatory, libelous, slanderous, or trade-libelous under any Applicable Law, or that facilitates, solicits, conspires to, or aids and abets any crime or civil wrong;
• Content that infringes, misappropriates, or otherwise violates any patent, trademark, trade secret, copyright, right of publicity, right of privacy, moral right, or any other intellectual property or proprietary right of any person;
• Counterfeit goods, unauthorized replicas, knock-offs, or items bearing unauthorized marks, logos, designs, or branding of any third party;
• Drugs, controlled substances, prescription medications, novel psychoactive substances, anabolic steroids, kratom, “research chemicals,” or drug paraphernalia, except where the User is a duly licensed dispensary, pharmacy, or other authorized vendor and has obtained Orno’s prior written approval;
• Weapons, firearms, ammunition, silencers, conversion devices, auto-sear components, 3-D-printable weapon files, explosives, destructive devices, or instructions for the manufacture thereof, except where the User is a duly licensed federal firearms licensee or authorized vendor and has obtained Orno’s prior written approval;
• Tobacco, vaping, e-cigarette, nicotine-pouch, or alcohol-related products promoted to minors or in any manner inconsistent with FDA, TTB, or state alcoholic-beverage-control regulations;
• Gambling, sports-wagering, prediction-market, lottery, or games-of-chance products other than as expressly authorized by Orno in writing and in compliance with Applicable Law;
• Any Content that depicts, describes, solicits, encourages, advertises, or otherwise pertains to the sexual exploitation, sexual abuse, or sexualized depiction of a minor, including any material that would be unlawful under 18 U.S.C. §§ 2251–2260A (federal child-sexual-exploitation statutes). Orno reports suspected child sexual abuse material (“CSAM”) to the National Center for Missing & Exploited Children (“NCMEC”) in accordance with 18 U.S.C. § 2258A and cooperates fully with law-enforcement investigations thereof;
• Non-consensual intimate imagery (“NCII”), including so-called “revenge porn,” “upskirts,” covertly-recorded intimate content, or AI-generated nude, semi-nude, or sexualized imagery of any identifiable natural person without such person’s verifiable and informed consent;
• Content that incites, glorifies, or celebrates violence, terrorism, mass casualty events, or the imminent harm of any person or group;
• Hate speech, slurs, or content that dehumanizes, threatens, harasses, or vilifies any individual or group on the basis of race, color, ethnicity, national origin, religion, caste, sex, gender, gender identity, sexual orientation, disability, serious disease, age, veteran status, or any other protected characteristic under Applicable Law;
• Content that exploits, endangers, or facilitates harm to minors, including grooming, enticement, sextortion, or the trafficking of persons;
• Personally identifiable information of any natural person disclosed without authorization (“doxing”), including home addresses, government identification numbers, financial account numbers, login credentials, or geolocation of non-public spaces;
• Content designed or used to harass, stalk, or intimidate any person;
• Content that falsely represents, impersonates, or materially misleads as to the identity, affiliation, endorsement, or source of origin of the Content or its author.

No User shall engage in any of the following commercial practices in connection with, or by means of, the Platform:

• Deceptive advertising, false claims, bait-and-switch tactics, or any other unfair or deceptive act or practice within the meaning of Section 5 of the Federal Trade Commission Act (15 U.S.C. § 45) or any analogous state UDAP statute;
• Operating, promoting, or participating in any pyramid scheme, chain-letter scheme, “gifting circle,” matrix program, endless-chain scheme, or other multilevel marketing arrangement whose revenue is derived principally from the enrollment of additional participants rather than from the sale of bona fide goods or services;
• Soliciting, purchasing, commissioning, generating, posting, or failing to remove fake, incentivized, misrepresented, or undisclosed reviews, ratings, testimonials, endorsements, or engagement metrics, in violation of the Federal Trade Commission’s Trade Regulation Rule on the Use of Consumer Reviews and Testimonials (16 C.F.R. Part 465);
• Market manipulation, including any act calculated to artificially inflate or depress the apparent demand, popularity, rank, or price of any product, service, Creator, Brand, campaign, or listing on the Platform;
• Unauthorized reselling, sublicensing, or commercial redistribution of access to the Platform, Platform data, or Platform output, whether by API passthrough, white-labeling, screenshot aggregation, scraped datasets, or otherwise;
• Operating any affiliate, referral, or commission-sharing program not sanctioned in advance by Orno in writing, or circumventing Orno’s attribution, tracking, or compensation rules by any means;
• Engaging in any transaction that would require a license, registration, or regulatory approval the User does not hold, including without limitation money transmission, securities dealing, insurance broking, or the provision of regulated professional services;
• Misrepresenting the origin, character, ingredients, efficacy, safety, materials, or compliance status of any product or service offered through the Platform.

No User shall, in connection with any account or authentication context on the Platform:

• Create, maintain, or operate more than one (1) account per natural person, except where Orno has expressly authorized additional accounts in writing (e.g., a formally delegated agency operator or an organizational sub-account);
• Create any account using false, misleading, or stolen information, including without limitation a false legal name, a spoofed date of birth, a synthetic identity, or a third party’s identifying data;
• Impersonate any person or entity, including any Orno employee, moderator, or officer, or misrepresent an affiliation with any person or entity;
• Sell, rent, lease, loan, lend, share, transfer, or otherwise convey any account, account credentials, session cookies, API tokens, verification artifacts, or identity badges to any third party;
• Use, attempt to use, or permit the use of credentials belonging to any other person, whether or not such person has consented;
• Circumvent, attempt to circumvent, or assist any third party in circumventing any suspension, ban, removal, termination, or other enforcement action issued by Orno, including without limitation by creating replacement accounts, using proxy servers, rotating IP addresses, or reappearing under an alternate identity (“ban evasion”);
• Share, post, or otherwise disclose the account or contact information of any other User without such other User’s verifiable and informed consent.

No User shall use the Platform, or use information obtained from the Platform, to transmit or cause the transmission of:

• Unsolicited bulk email, commercial electronic mail, or other unsolicited commercial communications in violation of the Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (15 U.S.C. §§ 7701 et seq., the “CAN-SPAM Act”), Canada’s Anti-Spam Legislation (CASL), the UK Privacy and Electronic Communications Regulations (PECR), or any analogous law of any jurisdiction;
• Unsolicited text messages, autodialed calls, or prerecorded voice messages in violation of the Telephone Consumer Protection Act (47 U.S.C. § 227) and its implementing regulations;
• Phishing, smishing, vishing, pretexting, business-email-compromise messages, or any other communication designed to induce the recipient to disclose credentials, financial information, or other sensitive data, or to transfer funds under false pretenses;
• Chain letters, hoaxes, fraudulent solicitations, or other nuisance communications;
• Any communication that harasses, threatens, defames, or invades the privacy of the recipient;
• Bulk direct messages, private messages, or in-platform communications sent to Users who have not opted in to receive such messages, or to Users who have previously requested that communications cease.

Every commercial email transmitted in connection with the Platform shall comply with the CAN-SPAM Act’s affirmative requirements, including without limitation the provision of (a) an accurate and functional header and “from” line; (b) a non-deceptive subject line; (c) a clear identification of the message as an advertisement where applicable; (d) a valid physical postal address of the sender; and (e) a conspicuous and functional opt-out mechanism that is honored within ten (10) business days.

Upon any violation, or reasonably suspected violation, of this Policy, Orno may, in its sole and absolute discretion, with or without prior notice to the User, exercise any one or more of the following remedies:

Orno’s enforcement determinations are made based on the totality of the circumstances and may take into account the nature, severity, duration, and consequences of the conduct; the User’s history and pattern of prior violations; the degree of cooperation and remediation demonstrated; and the reasonably foreseeable harm to Orno, to other Users, and to third parties. Orno’s decisions shall be final and binding upon the User, subject only to such appeal rights as may be expressly set forth in the Community Guidelines or elsewhere.

Users and non-Users alike are encouraged, and in some circumstances are required, to report suspected violations of this Policy. Reports may be submitted in any of the following manners:

Reports should include, to the extent reasonably available, (a) the reporter’s contact information; (b) the account, Content, or URL at issue; (c) a description of the conduct believed to constitute a violation; (d) the date, time, and time zone of the conduct; and (e) any supporting evidence (screenshots, log excerpts, headers, or recordings). Orno may, but is not obligated to, provide status updates concerning reports and may decline to disclose confidential investigative detail.

Orno shall not retaliate against any good-faith reporter of suspected Prohibited Activity. Knowingly false reports made in bad faith, however, are themselves a Prohibited Activity and may be enforced against the reporter.

Orno cooperates with lawful requests from governmental authorities of competent jurisdiction. Such cooperation shall be conducted in accordance with the Electronic Communications Privacy Act (18 U.S.C. §§ 2510 et seq.), the Stored Communications Act (18 U.S.C. §§ 2701 et seq.), and the procedural protections of Applicable Law.

Legal process shall be served on Orno’s registered agent at the address set forth in Section 15. Orno may object to, seek modification of, or decline to respond to any demand that it determines, in good faith, to be unlawful, overbroad, defective in form, or in violation of the constitutional or statutory rights of any User. Where permitted by Applicable Law, Orno may notify Users whose records are the subject of compelled disclosure.

This Policy is entered into solely for the benefit of Orno, and is not intended to, and shall not, confer any rights or remedies (whether at law or in equity) upon any User, consumer, third party, or other person other than Orno. No provision hereof shall be construed to create any third-party beneficiary rights, private right of action, cause of action, or theory of liability against Orno, any User, or any third party. Orno’s election to enforce, or not to enforce, any provision of this Policy in any given circumstance shall not constitute a waiver of the right to enforce the same or any other provision in any other circumstance, and shall not create any duty of uniform enforcement.

Nothing in this Section 12 shall diminish or restrict any independent statutory, common-law, or equitable right or remedy that a User or third party may have against another User, which rights and remedies are preserved in full.

Orno reserves the right, at its sole and absolute discretion, to amend, restate, supplement, or supersede this Policy at any time and from time to time. Amendments shall become effective upon publication of the amended Policy at https://orno.io/legal/acceptable-use or, in the case of material amendments, upon such additional notice (by email, in-product banner, or otherwise) as Orno reasonably determines. The User’s continued access to the Platform following the effective date of any amendment shall constitute the User’s full and unconditional acceptance of the amended Policy. Users who do not agree to an amendment must cease all use of the Platform prior to the amendment’s effective date.

If any provision of this Policy is held invalid, illegal, or unenforceable by a court or tribunal of competent jurisdiction, such provision shall be severed from the Policy, the remaining provisions shall continue in full force and effect, and the severed provision shall be reformed only to the minimum extent necessary to render it enforceable, consistent with the original intent of the parties. The obligations set forth in Sections 4, 5, 6, 7, 8, 9, 11, and 15 shall survive the termination, expiration, or rescission of any User’s access to the Platform for so long as such conduct remains actionable under Applicable Law or for seven (7) years, whichever is longer.

All abuse reports, enforcement inquiries, legal process, subpoenas, and other correspondence concerning this Policy shall be addressed to:

This Policy is effective as of the date first written above and shall remain in effect until expressly rescinded, superseded, or amended in accordance with Section 13. By accessing or using the Platform in any manner whatsoever, each User acknowledges receipt of, consents to, and is bound by every term of this Policy.