You must not (and must not allow others to) use the Services to:

A. Break the law or facilitate wrongdoing

• Violate any applicable law or regulation, including data protection, anti-spam/marketing, consumer protection, and telecommunications laws.

• Engage in fraud, deception, impersonation, or misleading practices.

• Promote or facilitate illegal products, services, or transactions.

B. Abuse, harass, or harm others

• Harass, threaten, defame, bully, or otherwise abuse any individual or organization.

• Promote hate, violence, or discrimination.

• Exploit or endanger minors, or enable any form of exploitation.

C. Security violations and malicious activity

• Attempt to gain unauthorized access to any account, data, system, or network.

• Probe, scan, or test vulnerabilities, bypass access controls, or defeat security mechanisms without written permission.

• Introduce malware, spyware, ransomware, worms, or any harmful code.

• Interfere with or disrupt the Services, including via denial-of-service attacks, excessive automation, deliberate error generation, or abusive load.

D. Spam, phishing, and deceptive communications

• Send or facilitate unsolicited messages or unlawful marketing communications.

• Conduct phishing, scams, deceptive offers, or attempts to obtain credentials/payment information through the Services.

• Use purchased, rented, scraped, or unlawfully obtained contact lists where required consents/permissions are not present.

• Evade opt-out mechanisms, filtering, abuse detection, or provider/carrier policies.

E. Privacy violations and unlawful data processing

• Collect, use, or share personal data without a valid legal basis and required notices/consents (where applicable).

• Deploy embedded forms or links in a way that fails to provide required disclosures (e.g., privacy notice links where legally required).

• Use the Services for covert tracking or unlawful monitoring.

F. Restricted and highly sensitive data (unless expressly permitted)

Unless iClosed has explicitly agreed in writing (e.g., via Order Form, DPA, or written approval) and you have implemented appropriate safeguards and complied with applicable law, you must not upload, submit, or process through the Services:

• Special Categories of Personal Data (GDPR) and similar sensitive categories under applicable law (e.g., health data; genetic data; biometric data used for unique identification; data revealing racial or ethnic origin; religious or philosophical beliefs; trade union membership; sex life or sexual orientation).

• Sensitive Personal Information and equivalents under applicable law (e.g., precise geolocation; government identifiers; account log-in credentials combined with security codes; contents of communications where restricted).

• Regulated datasets such as HIPAA/health “PHI,” GLBA/NPI, PCI “cardholder data” (including PAN, CVV, track data), student education records (FERPA), or criminal justice data (CJIS), unless expressly approved in writing.

• Government-issued identifiers (e.g., SSN, national ID, passport, driver’s license) except where strictly necessary and lawful, and only with appropriate protections.

Customer is responsible for configuring the Services and its internal processes to minimize collection and to restrict access on a least-privilege basis.

G. Misuse of iScore or decisioning-related features

You must not use iScore (or any scoring, enrichment, or similar feature) in a way that:

• Violates applicable consumer protection, privacy, or credit/eligibility laws; or

• Makes legally binding or similarly significant decisions about individuals (e.g., employment, housing, insurance, credit) without having a lawful basis/permissible purpose and providing all notices, rights mechanisms, and dispute processes required by law.

• Treat iScore/scoring outputs as informational only. Do not use them as the sole basis for decisions that produce legal or similarly significant effects on individuals (including where restrictions apply under GDPR Art. 22 or similar laws) without appropriate safeguards, notices, and mechanisms for human review where required.

• You must not use iScore as a “consumer report” or for consumer eligibility determinations (e.g., credit, employment, housing, insurance) unless you have an independent lawful basis and all required compliance obligations are met.

• You must not sell, resell, license, distribute, publish, or otherwise make available iScore outputs (including score values/bands, indicators, labels, or derived insights) to any third party as a standalone product, dataset, report, or derivative offering.

• You must not use iScore outputs for background checks, tenant screening, employment screening, or similar consumer-reporting purposes. If you believe your use case may fall under consumer reporting or eligibility laws (e.g., FCRA or similar), you are solely responsible for ensuring full compliance and obtaining all required notices, authorizations, and providing rights mechanisms.

Customer is solely responsible for determining whether its use case is permitted and compliant.

H. Intellectual property and rights violations

• Upload or share content you do not have the right to use or authorize iClosed to process.

• Infringe or misappropriate intellectual property, privacy, publicity, or other rights.

• Remove or obscure proprietary notices.

I. Reverse engineering, scraping, and competitive misuse

• Reverse engineer, decompile, or attempt to derive source code or underlying components, except to the extent such restrictions are prohibited by law.

• Copy, scrape, harvest, or extract data from the Services (including via automated means) except as explicitly permitted by iClosed in writing.

• Use the Services to benchmark, compete with, or build a competing product using non-public aspects of the Services, except where explicitly permitted in your agreement.

J. Circumvention, account sharing, and misuse of access

• Share login credentials, sell access, or allow unauthorized access to Customer accounts.

• Circumvent plan limits, feature gating, technical restrictions, or access controls.

• Misrepresent identity or affiliation to gain access to restricted features or data.

K. Misuse of integrations and third-party services

• Use integrations in violation of third-party terms, policies, or applicable law.

• Route prohibited traffic/content through iClosed to bypass enforcement by email/SMS carriers, providers, or other platforms.

L. Sanctions and export controls

You must not use the Services in violation of applicable trade sanctions or export control laws. The Services may not be used by (or for the benefit of) any person or entity subject to sanctions, or in any embargoed or comprehensively sanctioned jurisdiction, where prohibited by law.