Acceptable Use Policy

1. Purpose and Scope

1.1 The purpose of this AUP is to protect the security, integrity, and reliability of the Platform; to protect the privacy and safety of all users, including businesses and their customers; to ensure compliance with applicable laws and regulations; and to promote a safe, trustworthy, and professional environment for Caribbean businesses.

1.2 This AUP applies to all uses of the Platform, including but not limited to: the web application, mobile applications, APIs, embedded booking widgets, e-signature collection, customer-facing pages, AI assistant interactions, email and SMS communications sent through the Platform, and all data processing activities.

1.3 Violation of this AUP may result in warnings, suspension, or termination of your account, as described in Section 8 of this AUP, and may also result in legal action where appropriate.

2. Prohibited Activities

You must not, and must not permit any Authorised User or any third party to, engage in any of the following activities when using the Platform:

2.1 Illegal Content and Activities

• (a) Using the Platform to promote, facilitate, or engage in any activity that is illegal under the laws of Trinidad and Tobago, Jamaica, Barbados, or any other applicable Caribbean or international jurisdiction.
• (b) Posting, sharing, or distributing content that is illegal, including but not limited to: content that incites violence, promotes terrorism, depicts child sexual abuse material, or facilitates the sale of illegal drugs, weapons, or stolen goods.
• (c) Operating a business through the Platform that is unregistered or unlicensed where local law requires registration or licensing (such as food service establishments, health clinics, or financial service providers).
• (d) Using the Platform to facilitate gambling or lottery activities that are not licensed by the relevant Caribbean gaming authority.

2.2 Fraud and Deception

• (a) Using the Platform to defraud, mislead, or deceive other users, customers, or third parties.
• (b) Falsifying business information, including business name, registration status, location, services offered, or pricing.
• (c) Creating fake or fraudulent bookings, reviews, testimonials, or accounts.
• (d) Using the Platform to conduct phishing, social engineering, or pretexting attacks against other users or their customers.
• (e) Processing fraudulent payments, using stolen payment cards, or engaging in any form of payment fraud.
• (f) Falsifying or manipulating booking records, transaction data, or financial reports.

2.3 Spam and Unsolicited Communications

• (a) Sending unsolicited bulk emails, SMS messages, WhatsApp messages, or other communications through the Platform, in violation of the CAN-SPAM Act, the Privacy and Electronic Communications (EC Directive) Regulations 2003, or equivalent Caribbean legislation.
• (b) Purchasing, renting, or harvesting email addresses, phone numbers, or contact lists for the purpose of sending unsolicited communications through the Platform.
• (c) Using the Platform's communication tools to send messages to individuals who have not consented to receive communications from your business.
• (d) Masking, spoofing, or falsifying the sender identity in any email, SMS, or other communication sent through the Platform.
• (e) Sending messages that contain misleading subject lines, headers, or content designed to trick recipients into opening the message.

2.4 Malware and Harmful Code

• (a) Uploading, distributing, or transmitting any malware, viruses, trojans, worms, ransomware, spyware, adware, or other malicious, harmful, or unauthorised software or code.
• (b) Intentionally introducing corrupted data, files, or inputs designed to disrupt, damage, or degrade the Platform's functionality.
• (c) Using the Platform to host, distribute, or link to malware, exploits, or other harmful software.

2.5 Data Scraping and Unauthorised Data Extraction

• (a) Using automated tools, bots, crawlers, scrapers, spiders, or similar technology to extract, harvest, collect, or download data from the Platform, including but not limited to: business listings, customer reviews, pricing information, service descriptions, or user profiles.
• (b) Using the Platform's APIs or interfaces to access data in excess of the rate limits or in a manner inconsistent with the intended use of the API.
• (c) Compiling, aggregating, or creating derivative databases from data accessed through the Platform without our prior written consent.
• (d) Scraping or extracting data from other businesses' CariHub listings, customer records, or profiles.

2.6 Reverse Engineering and Intellectual Property Infringement

• (a) Reverse engineering, decompiling, disassembling, or otherwise attempting to discover the source code, underlying algorithms, or proprietary technology of the Platform.
• (b) Removing, altering, or obscuring any proprietary notices, labels, or marks on the Platform or in its output.
• (c) Creating derivative works based on the Platform's software, user interface, or design without our prior written consent.
• (d) Using the Platform in a manner that infringes the intellectual property rights of any third party, including but not limited to: uploading, sharing, or distributing copyrighted content without authorisation; using unlicensed trademarks, logos, or brand elements; or using patented technology without a licence.

2.7 Unauthorised Access

• (a) Attempting to gain unauthorised access to any part of the Platform, other users' accounts, databases, servers, or networks connected to the Platform.
• (b) Exploiting vulnerabilities, security holes, or misconfigurations in the Platform or its underlying infrastructure.
• (c) Sharing or distributing account credentials, API keys, or authentication tokens with unauthorised persons.
• (d) Using another user's account credentials without their explicit permission.
• (e) Circumventing or attempting to circumvent any access controls, authentication mechanisms, or security measures.

2.8 Reselling and Unauthorised Redistribution

• (a) Selling, sublicensing, leasing, renting, or redistributing access to the Platform or any part thereof without our prior written consent.
• (b) Using the Platform to provide competing services to other businesses without our authorisation.
• (c) Offering the Platform as a white-label or embedded service within another product without a written agreement.
• (d) Creating accounts for the purpose of reselling access or features to third parties.

2.9 Plan Limit Compliance and Anti-Circumvention

You must not circumvent Plan limits (including but not limited to bookings-per-month caps, staff-count limits, branch-count limits, communication quotas, and feature gates) by:

• (a) creating multiple Free accounts for a single business operation;
• (b) sharing a single paid account across multiple separate business entities;
• (c) using temporary or disposable phone numbers to bypass phone-verification uniqueness checks;
• (d) using free email providers (gmail.com, outlook.com, yahoo.com, etc.) to create multiple accounts after the first account per email domain;
• (e) automating account creation via scripts, bots, or automated tools;
• (f) any other technique designed to bypass the intended Plan graduation triggers.

CariHub uses phone-number verification, email-domain uniqueness checks, booking-volume pattern analysis, and device fingerprinting to detect circumvention. Remedies for circumvention, in escalating order:

1. First violation: in-app warning + upgrade prompt.
2. Second violation: account merge suggestion (CariHub will offer to merge the duplicate accounts into a single paid account with a 30-day grace period).
3. Third violation: account suspension pending review by CariHub's platform administrative team.
4. Egregious or repeated violations: account termination and permanent ban.

The User may appeal any circumvention finding by contacting CariHub support with evidence that the accounts represent genuinely separate business operations.

2.10 Verification Token Abuse

Users are prohibited from engaging in any of the following activities in connection with the Platform's email-verification feature gate:

• (a) Resend spamming — requesting verification email resends more than once per sixty (60) seconds, or requesting resends after the token has been consumed;
• (b) OTP brute-force — attempting to guess verification codes; the Platform enforces a maximum of five (5) failed attempts per token before locking the verification flow for fifteen (15) minutes;
• (c) Token interception — attempting to intercept, replay, or forge verification tokens or magic links;
• (d) Multi-account verification abuse — using a single email address to register multiple accounts to circumvent the unverified-account feature gate; and
• (e) Circumvention — attempting to bypass the email-verification gate via direct API calls, modified clients, or session tampering.

Violations result in immediate account suspension and may be reported to the relevant authorities. See the Platform Terms of Service §4.14 for consequences.

3. Content Standards

In addition to the prohibited activities above, you must adhere to the following content standards when using the Platform:

3.1 Accurate Business Information

• (a) Your business listing must accurately and truthfully represent your business, including its name, physical address, phone number, email address, website, services offered, operating hours, and pricing.
• (b) You must promptly update your business information when changes occur, including changes to services, pricing, location, or contact information.
• (c) If your business is required to be licensed or registered to provide certain services (such as health, beauty, food, or professional services), your listing must accurately reflect your licensing and registration status.

3.2 Pricing Accuracy

• (a) All prices displayed on the Platform must be accurate, current, and reflect the actual price a customer will pay at the time of booking or purchase.
• (b) Prices must be displayed in the applicable currency and must clearly indicate whether taxes, service charges, or fees are included or additional.
• (c) You must not use deceptive pricing practices, including but not limited to: bait-and-switch pricing, hidden fees, or misleading discount representations.
• (d) Any promotional pricing must clearly state the original price, the discounted price, the duration of the promotion, and any applicable terms and conditions.

3.3 No Impersonation

• (a) You must not create a business listing or account that impersonates another business, individual, or organisation.
• (b) You must not use the name, logo, branding, or other identifying information of another business without their written permission.
• (c) You must not create accounts or listings that are likely to mislead customers into believing they are interacting with a different business.

3.4 Reviews and Testimonials

• (a) You must not fabricate, incentivise, or manipulate customer reviews or ratings in a misleading manner.
• (b) You must not post reviews on your own business from fake accounts or accounts associated with you, your employees, or your family members without disclosing the relationship.
• (c) You may respond to customer reviews but must do so professionally and respectfully, without harassing, threatening, or intimidating the reviewer.

3.5 Professional Conduct

• (a) You must use the Platform in a professional manner that reflects positively on the Caribbean business community.
• (b) You must not use the Platform to harass, threaten, intimidate, or abuse any person, including other users, their customers, or CariHub staff.
• (c) Content that is discriminatory, hateful, or promotes discrimination based on race, colour, ethnicity, national origin, religion, sex, gender identity, sexual orientation, disability, age, or any other protected characteristic is strictly prohibited.

4. AI Usage Rules

The CariHub AI assistant is a powerful tool that uses artificial intelligence models provided by OpenAI, Anthropic, Google, xAI, Mistral, and OpenRouter to help you manage your business. The following rules apply to your use of AI features:

4.1 No Harmful Content Generation

• (a) You must not use the AI assistant to generate content that is illegal, defamatory, discriminatory, harassing, threatening, obscene, or otherwise harmful.
• (b) You must not use the AI assistant to generate content that is designed to deceive, manipulate, or defraud individuals, including deepfakes, misleading disclaimers, or fabricated testimonials.
• (c) You must not use the AI assistant to generate content that violates the intellectual property rights of any third party, including reproducing copyrighted material, trademarks, or trade secrets.

4.2 Human Review Requirement

• (a) All AI-generated content must be reviewed by a human before it is sent to customers, published publicly, or used in any external communication.
• (b) You are solely responsible for the accuracy, appropriateness, and legality of all AI-generated content after your review.
• (c) The AI assistant is a productivity tool, not a substitute for professional judgment. You must use your own knowledge and judgment to verify AI-generated suggestions, recommendations, and content.
• (d) You must not configure automated workflows that send AI-generated content to customers without an intermediate human review step.

4.3 No Automated Legal, Medical, or Financial Decisions

• (a) You must not use the AI assistant to make automated legal decisions that affect the rights or obligations of individuals, such as automatically generating legally binding contracts, waivers, or consent forms without human review by a qualified professional.
• (b) You must not use the AI assistant to provide medical advice, diagnoses, or treatment recommendations to customers. The AI assistant is not a medical professional and must not be used as a substitute for professional medical advice.
• (c) You must not use the AI assistant to make automated financial decisions that could result in financial harm to individuals, such as automatically adjusting prices, processing refunds, or modifying subscription terms without human oversight.
• (d) E-signature documents, consent forms, and waivers generated with AI assistance must be reviewed by a legally qualified professional before being used to collect signatures from customers.

4.4 Respect Opt-Outs and Preferences

• (a) You must respect opt-out requests and do-not-contact preferences when using AI-generated communications. The AI assistant may suggest communications, but it is your responsibility to ensure that the intended recipients have consented to receive such communications.
• (b) You must not use the AI assistant to circumvent any communication preferences, opt-out mechanisms, or frequency limits that apply to your business.
• (c) If a customer has opted out of marketing communications, you must not use AI-generated content to contact them for marketing purposes, even if the AI suggests doing so.

4.5 No AI Model Abuse

• (a) You must not attempt to jailbreak, manipulate, or bypass the safety guardrails of the AI models used by the Platform.
• (b) You must not use the AI assistant for prompt injection attacks or to extract information about the AI model's internal workings.
• (c) You must not submit inputs designed to cause the AI model to generate harmful, illegal, or inappropriate outputs.

5. Payment Processing Rules

The Platform integrates with multiple payment gateways, including Stripe, Fygaro, LuniPay, PayWise, and others, to facilitate payment processing for your business. The following rules apply:

5.1 Prohibited Transactions

• (a) You must not use the Platform to process payments for illegal goods or services, including but not limited to: illegal drugs, weapons, stolen goods, counterfeit products, or any goods or services prohibited by applicable Caribbean or international law.
• (b) You must not use the Platform for money laundering, terrorist financing, or any other financial crime. You must comply with all applicable anti-money laundering (AML) and counter-terrorist financing (CTF) laws and regulations in your jurisdiction.
• (c) You must not use the Platform to process payments for pyramid schemes, Ponzi schemes, or other fraudulent investment schemes.
• (d) You must not process payments for goods or services that infringe the intellectual property rights of any third party.

5.2 Payment Compliance

• (a) You must comply with the terms and conditions, acceptable use policies, and operating rules of all payment gateways you use through the Platform (including Stripe, Fygaro, LuniPay, and PayWise).
• (b) You must be a verified and approved merchant on each payment gateway before processing transactions.
• (c) You must not attempt to circumvent fees, chargebacks, or dispute resolution processes of any payment gateway.
• (d) You must maintain accurate records of all transactions processed through the Platform in accordance with applicable tax and financial regulations.

5.3 Refund and Chargeback Policies

• (a) You must have a clear, transparent, and accessible refund and cancellation policy that is communicated to customers before they make a purchase.
• (b) You must process refund requests in a timely manner in accordance with your stated policy and applicable consumer protection laws.
• (c) You must not discourage, penalise, or retaliate against customers who initiate chargebacks or disputes.

6. Email and Communication Rules

6.1 CAN-SPAM Compliance

All email communications sent through the Platform must comply with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.) and equivalent Caribbean legislation, including but not limited to the Electronic Transactions Act of Trinidad and Tobago. Specifically:

• (a) No Deceptive Headers: The "From," "To," "Reply-To," and routing information in every email must be accurate and not misleading.
• (b) No Deceptive Subject Lines: The subject line must accurately reflect the content of the email.
• (c) Identification: Every email must clearly identify that it is an advertisement or solicitation, where applicable.
• (d) Physical Address: Every email must include a valid physical postal address for your business.
• (e) Opt-Out Mechanism: Every commercial email must include a clear and conspicuous explanation of how the recipient can opt out of receiving future emails from you, and the opt-out mechanism must be functional for at least thirty (30) days after the email is sent.

6.2 Opt-Out Respect

• (a) You must honour opt-out requests within ten (10) business days of receipt.
• (b) Once a recipient has opted out, you must not sell, rent, or transfer their email address to any other party.
• (c) You must not charge a fee, require the recipient to provide any information other than their email address, or make the recipient take any step other than sending a reply email or visiting a single page on your website as a condition for honouring an opt-out request.

6.3 Frequency Limits

• (a) You must not send an excessive volume of emails or SMS messages to any individual recipient. As a general guideline, you should not send more than two (2) marketing emails per week to any individual recipient unless they have explicitly consented to a higher frequency.
• (b) Transactional emails (booking confirmations, reminders, receipts) are not subject to frequency limits but must be proportionate to the relevant transaction or interaction.
• (c) You must not use the Platform to send SMS messages outside of reasonable business hours in the recipient's local time zone, unless the recipient has consented to receiving messages at any time.

6.4 SMS and WhatsApp Rules

• (a) All SMS messages sent through the Platform (via the Platform's shared Twilio account or, where BYOK is enabled, via the Business's own Twilio account) must comply with applicable telecommunications regulations and carrier requirements.
• (b) WhatsApp Business messages must comply with WhatsApp's Business Policy, including the requirement that messages are sent only to users who have opted in to receive messages from your business.
• (c) You must not use SMS or WhatsApp to send spam, unsolicited marketing messages, or messages to individuals who have not consented to receive such messages.

6.5 Bring Your Own Communication Provider (BYOK)

The Platform offers an optional Bring Your Own Key (BYOK) feature that allows a Business to connect its own Resend account (for transactional and marketing email) and/or its own Twilio account (for SMS and WhatsApp messaging) so that outbound communications route through the Business's own provider account rather than the Platform's shared sub-processor accounts. The following rules apply to BYOK:

• (a) Provider Account Responsibility. Messages routed through the Business's own provider account (Resend, Twilio) are processed under the Business's own agreement with that provider. The Business is solely responsible for the provider account's compliance with: (i) the Resend Acceptable Use Policy (https://resend.com/legal/terms) or the Twilio Acceptable Use Policy (https://www.twilio.com/legal/aup), as applicable; (ii) the WhatsApp Business Policy and WhatsApp Business Messaging Policy (https://www.whatsapp.com/legal/business-policy) for WhatsApp messages; (iii) carrier requirements (US PSMS, Jamaican and Trinidadian telecom rules, etc.) for SMS; (iv) email sender reputation, domain authentication (SPF, DKIM, DMARC), and bounce/complaint handling; and (v) the provider's own pricing, sending limits, and account-standing requirements.
• (b) Verification and Domain Setup. Before routing email through its own Resend account, the Business must verify a sending domain with Resend and complete the domain verification step in the Platform. Before routing SMS or WhatsApp through its own Twilio account, the Business must verify its Twilio credentials and (for WhatsApp) confirm WhatsApp Business sender eligibility with Twilio. The Business is responsible for maintaining the validity of its verified domain, sender phone numbers, and WhatsApp Business profile.
• (c) BYOK Credential Confidentiality. The Business must not share, post, publish, or expose BYOK credentials (Resend API keys, Twilio account SID and auth token) outside the Platform's encrypted storage. The Platform stores BYOK credentials encrypted at rest using AES-256-GCM and transmits them to the BYOK provider only at the moment of sending or webhook signature verification. Section 2.7 (Unauthorised Access — credential sharing prohibitions) applies in full to BYOK credentials: a Business must not paste a BYOK API key into unencrypted communications, must not share BYOK credentials with staff members who do not have administrator access to the Platform, and must not reuse BYOK credentials across multiple businesses.
• (d) Spam Prohibitions Apply. Section 2.3 (Spam and Unsolicited Communications) applies in full to BYOK sends. The Business must not use BYOK routing to send unsolicited bulk communications, to bypass suppression lists, or to contact individuals who have not consented. The Platform's consent, suppression-list, and quiet-hours policy gates are enforced upstream of the BYOK routing decision and apply equally to BYOK and Platform-account sends.
• (e) Provider AUP Compliance. The Business is solely responsible for ensuring that the content of BYOK-routed messages complies with the BYOK provider's acceptable use policy. A violation of the BYOK provider's AUP (e.g., Resend's prohibitions on certain content categories, Twilio's prohibitions on certain SMS use cases) is a violation of this AUP, and may result in the enforcement actions described in Section 8 in addition to any enforcement action taken by the BYOK provider against the Business's account.
• (f) Force-Fallback. The Platform may, in limited circumstances, force-fallback outbound routing from the BYOK provider to the Platform's shared account (or suspend BYOK routing entirely) if the Business's BYOK credentials fail authentication, the BYOK provider account is suspended or terminated, the plan feature gating the BYOK channel is downgraded, or the Platform reasonably believes continued BYOK routing would violate this AUP, the BYOK provider's AUP, or applicable law. The Platform will use reasonable efforts to notify the Business of any forced fallback.
• (g) No Circumvention of Plan Quotas. BYOK sends are exempt from the Platform-wide send-limit counter (which protects the Platform's shared sub-processor quota) but the Business's plan-tier communication quota and the Platform's policy gates (consent, suppression list, quiet-hours) remain enforced. BYOK must not be used as a mechanism to circumvent the Business's plan-tier communication quotas, and the anti-circumvention provisions of Section 2.9 apply in full to BYOK.
• (h) Business Communication Usage Panel. The Platform provides a read-only Business Communication Usage Panel showing the Business's per-channel send counts, plan-tier limits, BYOK-active status per channel, provider route (byok / platform / dry-run), and recent CommunicationLog entries. The panel does not include the BYOK provider's own usage counters (e.g., Resend's monthly send count, Twilio's message-segment usage); the Business must consult its BYOK provider's dashboard for provider-side usage, billing, and quota information.
• (i) Indemnity. The Business agrees to indemnify and hold harmless CariHub Business Link from any claim, loss, fine, carrier fee, or expense arising from the Business's BYOK provider's acts or omissions, including AUP violations, sender-reputation damage, carrier suspension, or regulatory action, except to the extent directly caused by CariHub Business Link' breach of this AUP.

6.6 Telephone Consumer Protection Act (TCPA) and 10DLC Compliance

6.6 Telephone Consumer Protection Act (TCPA) and 10DLC Compliance. If Users send SMS or text message communications through the Platform to United States phone numbers, they must comply with the U.S. Telephone Consumer Protection Act (TCPA) and carrier-managed 10-Digit Long Code (10DLC) registration requirements. This includes: (a) obtaining prior express written consent before sending marketing text messages; (b) registering business messaging campaigns through the A2P 10DLC framework; (c) including opt-out instructions in every marketing message; (d) honoring opt-out requests within 10 business days. CariHub is not responsible for TCPA violations committed by Users. Users indemnify CariHub against any TCPA-related claims arising from their messaging campaigns.

7. API Usage

7.1 Rate Limits

• (a) The Platform's APIs are subject to rate limits, which are documented in our API documentation. Rate limits are designed to ensure fair usage and protect the Platform's stability.
• (b) You must not circumvent, bypass, or attempt to defeat rate limits through the use of multiple API keys, rotating IP addresses, or any other method.
• (c) We reserve the right to adjust rate limits at any time based on system load, fair usage, or other factors.

7.2 API Security

• (a) API keys and authentication tokens must be kept confidential and must not be exposed in publicly accessible repositories, client-side code, or any other unsecured location.
• (b) You must use HTTPS for all API calls.
• (c) You must rotate API keys periodically and immediately upon any suspicion of compromise.

7.3 No Circumvention

• (a) You must not use the API in a manner that is inconsistent with its intended purpose or that imposes an unreasonable load on our infrastructure.
• (b) You must not reverse engineer, decompile, or disassemble any part of the API or attempt to discover the underlying implementation details.
• (c) You must not use the API to create tools or services that compete with the Platform or that enable other users to circumvent the Platform's terms, fees, or restrictions.

8. Enforcement

8.1 Detection and Investigation

We actively monitor the Platform for violations of this AUP using a combination of automated systems and manual review. Our detection methods include, but are not limited to: automated content scanning, usage pattern analysis, abuse reports from users and third parties, and security monitoring tools.

8.2 Enforcement Actions

If we determine, in our sole discretion, that you have violated this AUP, we may take one or more of the following enforcement actions, depending on the nature and severity of the violation:

• (a) Warning: We may issue a written warning via email or in-app notification, describing the violation and requiring you to cease the prohibited activity immediately.
• (b) Feature Restriction: We may temporarily restrict access to specific features of the Platform (such as email sending, AI assistant, or API access) while we investigate the violation or while you remedy the issue.
• (c) Content Removal: We may remove or require you to remove any content that violates this AUP, including business listings, communications, or other user-generated content.
• (d) Account Suspension: We may suspend your account, restricting access to all or part of the Platform, for a specified period or until the violation is remedied.
• (e) Account Termination: We may permanently terminate your account and delete your data for severe or repeated violations of this AUP.
• (f) Legal Action: We may pursue legal remedies, including injunctive relief and damages, for violations that cause harm to us, other users, or third parties.
• (g) Reporting to Authorities: We may report violations to relevant law enforcement, regulatory authorities, or payment processors where we believe illegal activity has occurred.

8.3 Factors Considered

When determining the appropriate enforcement action, we consider factors including but not limited to:

• (a) The nature and severity of the violation.
• (b) Whether the violation was intentional or accidental.
• (c) Whether this is a first-time or repeat violation.
• (d) The potential or actual harm caused by the violation.
• (e) Your response to the violation, including cooperation with our investigation.
• (f) Any mitigating circumstances.

8.4 Right of Appeal

If your account is suspended or terminated for an alleged AUP violation, you may submit an appeal to legal@carihub.com within fourteen (14) days of receiving notice of the enforcement action. We will review your appeal and respond within fifteen (15) business days. During the appeal period, the enforcement action will remain in effect.

9. Reporting Violations

9.1 If you become aware of any violation of this AUP by another user of the Platform, please report it to us by contacting abuse@carihub.com. Your report should include:

• (a) A description of the violation.
• (b) The name or identifier of the user or business involved.
• (c) Any supporting evidence, such as screenshots, emails, or URLs.
• (d) Your contact information (which will be kept confidential to the extent permitted by law).

9.2 We will investigate all credible reports of AUP violations and take appropriate action. We may not be able to inform you of the outcome of our investigation due to privacy and confidentiality obligations.

9.3 We will not take adverse action against any user who makes a good-faith report of an AUP violation. We prohibit retaliation against individuals who report violations in good faith.

10. Contact Information

If you have any questions about this Acceptable Use Policy, please contact us at:

CariHub Business Link (Operator of CariHub)

• Email: legal@carihub.com
• Abuse Reports: abuse@carihub.com
• General Support: support@carihub.com
• Website: carihub.com

By using the CariHub Platform, you acknowledge that you have read, understood, and agree to comply with this Acceptable Use Policy.