Acceptable Use Policy

ProxyCrown's infrastructure is designed to support a wide range of legitimate professional and commercial applications. Permitted uses include, but are not limited to: web data collection and structured data extraction for business intelligence purposes; search engine results page (SERP) monitoring and SEO rank tracking; digital advertising verification and ad fraud detection; brand protection, trademark monitoring, and unauthorised reseller detection; market intelligence and competitive pricing research; cybersecurity assessments, penetration testing, and vulnerability research conducted against systems you own or have explicit written authorisation to test; quality assurance and functional testing of web applications; API endpoint testing and performance benchmarking; academic or commercial research involving publicly accessible data; privacy protection for individuals and organisations wishing to protect their legitimate online activity from tracking; content delivery validation and geographic access testing. All permitted uses must comply with applicable law, the terms of service of any third-party platform you access, and all other provisions of this AUP.

The following activities are strictly prohibited: conducting or facilitating phishing attacks, vishing, smishing, or any form of social engineering designed to deceive individuals into disclosing credentials, financial information, or personal data; credential stuffing, password spraying, brute-force authentication attacks, or account takeover operations against accounts you do not own; deploying, distributing, hosting, or propagating malware, ransomware, spyware, adware, trojans, or any other malicious software; operating command-and-control infrastructure for botnets or any network of compromised devices; conducting carding, payment fraud, gift card abuse, refund fraud, or any manipulation of payment systems; identity theft or impersonation of individuals, businesses, or government entities; creating or operating fraudulent websites, fake invoices, or counterfeit documents.

The following network-targeting activities are strictly prohibited: launching or facilitating distributed denial-of-service (DDoS) attacks, volumetric floods, or amplification attacks against any target; port scanning, vulnerability scanning, or network enumeration against systems you do not own or have explicit written authorisation to test; exploiting, bypassing, or circumventing security controls, authentication mechanisms, rate-limiting systems, or access controls without authorisation; conducting man-in-the-middle attacks or traffic interception; exploiting unpatched vulnerabilities in production systems without authorisation; accessing, exfiltrating, or tampering with data stored on systems belonging to third parties without authorisation.

The following communication-related activities are strictly prohibited: sending unsolicited commercial email (spam) in violation of the CAN-SPAM Act, GDPR, CASL, or any other applicable anti-spam regulation; operating email harvesting tools that collect email addresses from websites without consent; conducting automated SMS or messaging campaigns to individuals who have not consented to receive them; scraping or compiling personal contact data (email addresses, telephone numbers, physical addresses) for unsolicited outreach; operating mass account registration bots or fake-profile creation tools on social media platforms or forums.

The following content-related and transactional activities are strictly prohibited: distributing, hosting, or accessing child sexual abuse material (CSAM) or any content depicting the sexual exploitation of minors; operating or facilitating darknet markets, illegal drug marketplaces, or platforms for trafficking in controlled substances, weapons, or stolen goods; conducting transactions, facilitating payments, or providing services to entities on OFAC's Specially Designated Nationals list, HM Treasury's Consolidated Sanctions List, or equivalent lists maintained by the EU, UN, or other competent authorities; promoting, facilitating, or engaging in human trafficking or sexual exploitation; operating investment fraud schemes, Ponzi schemes, cryptocurrency pump-and-dump operations, or fraudulent initial coin offerings (ICOs); gambling operations in jurisdictions where such activity is prohibited without a licence; any other activity that violates applicable criminal law in any jurisdiction.

The following intellectual property-related activities are prohibited: scraping, reproducing, or redistributing copyrighted content (including text, images, video, and code) in quantities or in a manner that exceeds fair use, constitutes copyright infringement, or violates the rights holder's terms of service; automated extraction of database content protected under database rights in a manner that conflicts with the database owner's rights; circumventing technical protection measures on digital content (including DRM systems) in violation of the Digital Millennium Copyright Act (DMCA) or equivalent legislation; systematic downloading or mirroring of paywalled content without authorisation.

ProxyCrown actively monitors network activity for patterns consistent with AUP violations. We employ automated abuse detection systems and review reports submitted by third parties. Where a violation is detected or credibly reported, ProxyCrown may: immediately suspend network access for the relevant account or IP range; permanently terminate the account without refund; preserve and disclose traffic logs and account data to law enforcement or network abuse teams as required by law or in our legitimate interest; report identified violations to relevant authorities, internet service providers, and industry abuse-reporting bodies (including Spamhaus, APWG, and IC3). To report abuse of ProxyCrown's infrastructure, email abuse@proxycrown.com with as much detail as possible, including timestamps, affected IPs, and the nature of the abuse.

ProxyCrown may update this Acceptable Use Policy at any time to address emerging threats, regulatory changes, or changes to our service offering. Material updates will be announced via email and a notice in the dashboard at least 14 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the revised policy. If you have questions about whether a specific use case is permitted, email compliance@proxycrown.com before proceeding — we are committed to supporting legitimate use cases and will respond within 2 business days.