Instaflow Acceptable Use Policy
Last updated: 11 November 2026
This policy sets out what you must not do with Instaflow, and what must not appear on pages you build or publish with it. In short: keep it legal, sell only what you are allowed to sell, and be honest with shoppers. That means no fake reviews, fake countdown timers, fake "was" prices or unproven health claims. Don't copy other brands, don't misuse our AI, and don't abuse the platform or try to get around its limits. If you break these rules, we may warn you, take content down or suspend your account. We will tell you why, and you can appeal. Anyone can report a page that breaks these rules at /report-content or abuse@instaflow.ai.
1. About this policy
1.1 This Acceptable Use Policy (the "AUP") forms part of the Instaflow Terms of Service at /terms (the "Terms"). Words with capital letters have the meanings given in the Terms.
1.2 This AUP applies to the Customer and every Authorised User. It covers everything you do with the Service, including your prompts, briefs and uploaded files, the Output you generate, your Pages and Published Pages, and the products and services those Pages promote. You are responsible for any breach by your Authorised Users, and for anyone you help or encourage to break this AUP.
1.3 The examples in this AUP are not a complete list. If something is illegal where you sell, or where your Visitors are, it is not allowed even if it isn't listed here. Where a rule depends on local law, the stricter law applies to Pages shown to Visitors in that country.
1.4 When we apply this AUP, we consider context. This includes any educational, artistic, documentary, scientific or public-interest value, and whether content is clearly satire or fiction.
2. Illegal and harmful content
Do not create, publish or promote content that:
- (a) is illegal under the law that applies to you, your Visitors or us;
- (b) sexually exploits or endangers children in any way, including child sexual abuse material. We report it to the authorities;
- (c) shares intimate images of anyone without their consent, including AI-generated or altered images;
- (d) promotes, supports or glorifies terrorism or violent extremism, or is published on behalf of a terrorist organisation designated by the EU or the UN;
- (e) incites violence or hatred against a person or group, including based on race, ethnicity, nationality, religion, disability, sex, gender identity, sexual orientation or age;
- (f) harasses, bullies, threatens or defames anyone;
- (g) encourages or instructs self-harm, suicide or eating disorders;
- (h) shows graphic violence or animal cruelty for shock value;
- (i) is sexually explicit or pornographic; or
- (j) is designed to deceive people about elections or other civic processes.
3. Intellectual property and copying other brands
3.1 Do not use the Service to infringe or misappropriate anyone's intellectual property or other rights. This includes trade marks, copyright, design rights, database rights, trade secrets, and personality or image rights.
3.2 Do not use the Service to copy another business's store, landing page or brand. In particular, do not:
- (a) ask the AI to copy or closely imitate another brand's page design, layout, copy, product photos, logos, packaging or claims;
- (b) upload another business's pages, screenshots, product images or copy as reference material for the purpose of copying them, unless you own the rights or have permission;
- (c) use another brand's name, logo or trade mark in a way that suggests a link with, or endorsement by, that brand, or that could confuse Visitors; or
- (d) register or connect a domain that imitates another brand to mislead Visitors.
Our AI agents are instructed not to copy other brands, but they can make mistakes. You must check that your Pages are your own before you publish them. Taking general inspiration from common design patterns is fine. Copying a specific competitor is not.
3.3 Do not publish content you don't have the rights to use, such as photos, fonts, music, videos or reviews taken from elsewhere without a licence.
3.4 Rights holders can report infringement by email to abuse@instaflow.ai, as explained at /report-content.
4. Prohibited and restricted goods and services
4.1 Prohibited. Do not use the Service to sell, promote or link to:
- (a) counterfeit or replica goods, or goods that infringe intellectual property rights;
- (b) stolen goods, or goods obtained or sold through fraud;
- (c) hazardous or unsafe goods, including recalled products, products that don't meet EU product safety rules, and products banned under EU or national law;
- (d) weapons, including firearms, firearm parts and kits, ammunition, explosives, fireworks for the public where restricted, stun guns, pepper spray where restricted, and knives or other items that are illegal to sell or carry where you sell;
- (e) illegal drugs and drug paraphernalia, controlled substances, new psychoactive substances ("legal highs"), and products marketed as legal alternatives to illegal drugs;
- (f) prescription-only medicines, and any medicines or medical devices that you are not licensed or authorised to sell to the public online where you sell them;
- (g) tobacco products, e-cigarettes, vapes, refill liquids and nicotine pouches;
- (h) adult content and sexual services, including pornography, escort services and live sexual content;
- (i) gambling, including betting, casino games, lotteries and sweepstakes that require payment, unless you hold every licence required in each country where the Page is shown and we have agreed in writing;
- (j) pyramid schemes, Ponzi schemes and "get rich quick" schemes, including multi-level marketing where pay comes mainly from recruiting others;
- (k) financial products or services you are not authorised to provide, including unregulated investments and crypto-asset offerings that breach the law;
- (l) fake documents, such as fake IDs, diplomas, certificates or reviews for sale; or
- (m) anything else that is illegal to sell, advertise or supply where you sell it or where your Visitors are.
4.2 Restricted. You may sell the following only if the sale and its advertising are legal everywhere your Page is shown, you hold every licence required, and your Page shows all required warnings and information and uses any age checks the law requires:
- (a) alcohol;
- (b) food supplements, vitamins, sports nutrition and weight-loss products;
- (c) CBD and hemp products;
- (d) cosmetics, and over-the-counter medicines and medical devices you are authorised to sell;
- (e) adult products that are not sexually explicit in their presentation, such as sexual wellness products; and
- (f) knives, tools and similar items that are legal to sell but restricted by age.
We may ask for proof that you are allowed to sell restricted goods, and we may remove Pages if you can't provide it.
5. Deceptive commerce practices
Shoppers must be able to trust what your Pages say. Do not use the Service to mislead Visitors. In particular, do not do any of the following.
5.1 Fake reviews and testimonials. Do not:
- (a) publish reviews, ratings, testimonials or customer counts that are invented, generated by AI, bought, or written by you, your staff or anyone paid or rewarded to write them, while presenting them as genuine customer opinions;
- (b) edit reviews to change their meaning, or show only positive reviews while suggesting they are all your reviews; or
- (c) say reviews come from real buyers unless you have taken reasonable and proportionate steps to check that they do.
AI-generated "example" reviews must never be published as if they were real.
5.2 Fake urgency and scarcity. Do not:
- (a) use countdown timers that reset, restart for each Visitor, or end without the offer actually ending;
- (b) say a product or price is available only for a limited time when that isn't true; or
- (c) show false stock levels ("only 2 left"), false demand ("27 people are viewing this") or false sales notifications.
5.3 Fake "was" prices and discounts. When you announce a price reduction, the reference ("was") price must be the lowest price you applied to that product in at least the 30 days before the reduction, as EU price indication law requires (Article 6a of Directive 98/6/EC, as amended by the Omnibus Directive (EU) 2019/2161, and the national laws that implement it). Do not:
- (a) show a "was", "RRP" or "compare at" price that you never actually charged, or that is higher than the lowest price in the previous 30 days;
- (b) show a permanent "sale"; or
- (c) hide compulsory costs, such as fees or shipping charges, until the end of checkout, or show prices without taxes where the law requires taxes to be included.
5.4 Health, medical and supplement claims. Do not make claims that:
- (a) a product can prevent, treat or cure a disease or medical condition, unless it is an authorised medicine or medical device and the claim is within its authorisation;
- (b) are health or nutrition claims about food or supplements that are not authorised under EU law (Regulation (EC) No 1924/2006) or that go beyond the authorised wording;
- (c) cannot be backed up by evidence you hold, such as claims about weight loss, performance, anti-ageing or "clinically proven" results; or
- (d) use doctored or unrepresentative before-and-after images, or misleading statements that contradict established medical guidance.
5.5 Fake certifications, badges and endorsements. Do not:
- (a) show trust badges, certifications, quality marks, awards, "as seen in" logos or test results you have not genuinely earned or are not authorised to use;
- (b) suggest that a public body, professional, expert or organisation has approved or endorsed your product when it hasn't; or
- (c) make generic environmental claims (such as "eco-friendly" or "climate neutral") or sustainability labels that you cannot substantiate, or that EU law does not allow.
5.6 Unauthorised use of real people. Do not use the name, image, voice or likeness of a real person, including celebrities, influencers and public figures, to sell or promote a product without their permission. This includes AI-generated images or videos that look like a real person and fake quotes.
5.7 Pyramid and recruitment schemes. Do not promote schemes where people pay to join and are rewarded mainly for recruiting others rather than for selling products.
5.8 Subscription traps and hidden terms. Do not:
- (a) sign shoppers up to subscriptions or recurring payments without clearly telling them, before they order, the price, how often they will be charged, the minimum term and how to cancel;
- (b) describe something as "free" or a "free trial" if the shopper must pay more than unavoidable delivery costs, or if it turns into a paid subscription without clear disclosure;
- (c) make cancelling harder than signing up; or
- (d) use pre-ticked boxes or other dark patterns to add products, subscriptions or charges.
5.9 Other misleading claims. Do not make false or misleading statements about your identity, location, the product's origin ("made in"), its features, its availability, delivery times, warranties, or shoppers' legal rights. For example, don't say shoppers have no right to return goods when the law gives them one.
6. Phishing, malware, impersonation and spam
Do not use the Service to:
- (a) create phishing pages, or pages that trick people into giving passwords, payment card details, bank details or other personal data;
- (b) collect payment card details on your Pages outside Shopify's checkout;
- (c) host, distribute or link to malware, viruses, ransomware, spyware, cryptojacking scripts or other harmful code;
- (d) impersonate any person, business, brand or public body, or misrepresent your identity or your connection with anyone;
- (e) commit or facilitate fraud, including non-delivery scams, drop-shipping scams where you have no intention of delivering, or fake stores;
- (f) send or promote spam, or drive traffic to Pages through unsolicited messages that break anti-spam law; or
- (g) cloak Pages, meaning showing reviewers or ad platforms different content from what Visitors see, or use redirects to hide where a Page goes.
7. Privacy and data protection
7.1 Collecting personal data. Do not use your Pages to collect personal data unless you have a lawful basis and give Visitors a clear privacy notice. In particular, do not collect special category data, such as data about health, ethnicity, religion, sexual life or orientation, biometrics or genetics, or data about children, unless the law clearly allows it and you have the safeguards it requires.
7.2 Consent for tracking. Do not add tracking scripts, pixels, tags, fingerprinting or other technologies to your Pages that store or read information on a Visitor's device without the consent the law requires. Do not add any that bypass, ignore or work around the Visitor's consent choices, including the choices recorded through Shopify's Customer Privacy API. Do not remove or hide the privacy, cookie preference or opt-out controls that Published Pages show.
7.3 Other people's data. Do not upload other people's personal data to the Service, such as customer lists, unless the law allows it and the Service is designed for it. Do not use the Service to stalk, track or build profiles of individuals, or to reverse-look-up information about other users or Visitors.
7.4 Selling data. Do not sell or share Visitor data collected through your Pages in breach of the law or of Shopify's terms.
8. Abuse of the AI
8.1 Do not use the AI features to:
- (a) generate content that this AUP prohibits, or that the law prohibits, even if you don't intend to publish it;
- (b) "jailbreak" the AI, meaning trying to get around its safety rules, instructions or filters by tricks such as role-play, encoded text or prompt injection, including hiding instructions in uploaded files or web pages;
- (c) try to extract, reveal or reconstruct our system prompts, agent instructions, tools, model settings or other non-public parts of how the AI works;
- (d) try to extract, copy or reverse engineer the underlying AI models or their weights;
- (e) use Output or the Service to develop, train or improve an AI model that competes with Instaflow or with our AI providers;
- (f) access the AI features through scripts, bots or other automated means other than the Service's own interface, unless we agree in writing;
- (g) present Output as created by a person, where the law requires you to disclose that it was generated by AI;
- (h) generate or edit images that show a real person, or look like one, without that person's permission (see section 5.6); or
- (i) generate or edit product images in a way that misleads Visitors about the product, for example by showing features, results, quality, size or contents it doesn't have (see section 5).
8.2 Our AI providers' policies. The Service uses AI models from third-party providers. Your use of the AI features must also follow their usage policies, which form part of this AUP:
| Provider | Policy |
|---|---|
| OpenAI | OpenAI Usage Policies, at https://openai.com/policies/usage-policies |
If our providers change, we will update this table and our subprocessor list at /subprocessors. If a provider's policy and this AUP conflict, the stricter rule applies.
9. Abuse of the platform
Do not:
- (a) get around free limits or credits, for example by creating multiple accounts or teams, using disposable or variant email addresses, sharing logins, or moving work between free accounts to get more free generations or credits than you are entitled to;
- (b) share or rotate logins so that several people use one account;
- (c) scrape, crawl or copy the Service, our templates or other customers' Pages using bots, spiders or other automated means, except for normal search-engine indexing of Published Pages;
- (d) probe, scan or test the security of the Service, including penetration testing, without our prior written permission. If you find a security issue, please report it to support@instaflow.ai;
- (e) load test or overload the Service or Published Pages, or carry out denial-of-service attacks, brute-force attempts or automated scanning;
- (f) resell, sublicense or rent the Service or access to it without our written permission. Agencies may build Pages for their own clients under section 4.6 of the Terms;
- (g) interfere with the sandboxes we use to build and preview Pages. This includes trying to escape them, access other customers' environments or our systems, use them for any purpose other than building your Pages, or use them to attack other systems;
- (h) mine cryptocurrency, run proxies, VPNs or bots, or use our hosting or sandboxes for unrelated computing or file distribution;
- (i) access accounts, data or systems you are not authorised to access, or obtain other users' login details;
- (j) upload or inject malicious code into the Service or into Pages; or
- (k) interfere with the Service or with any other customer's use of it.
10. Enforcement
10.1 How we find out. We don't review Pages before they are published. We act on reports from Visitors, rights holders, authorities and others, and on our own initiative when we become aware of a possible breach, for example through security monitoring. We don't use automated tools to detect or flag content. A person on our team reviews every decision to remove content or restrict an account.
10.2 What we may do. If we reasonably believe that you have broken this AUP or the law, we may take one or more of the following steps:
- (a) issue a warning and ask you to fix the problem by a deadline;
- (b) refuse to process a prompt, or stop an AI agent;
- (c) remove or disable content, or unpublish a Page;
- (d) disconnect a custom domain;
- (e) restrict features, such as AI generation or publishing;
- (f) suspend your account; or
- (g) terminate your account and the Terms.
10.3 A graduated approach. Our response will be proportionate. We consider how serious the breach is, whether it was deliberate, the harm it may cause, whether it is repeated, and the rights of everyone involved, including freedom of expression. For most first breaches, we will warn you and give you a chance to fix the problem first. We may act immediately, without a warning, where content is clearly illegal, where there is a risk of serious harm to Visitors or others, where there is a security risk, for serious or repeated breaches, or where the law requires it.
10.4 Notice and statement of reasons. When we restrict your content or your account, we will tell you, at the latest when the restriction takes effect, unless the law or an authority prevents us. Our statement of reasons will explain:
- (a) what we did, where it applies, and for how long;
- (b) the facts we relied on, including whether we acted on a report or on our own initiative;
- (c) whether we used automated means to detect the issue or make the decision;
- (d) the law or the rule in this AUP or the Terms that we relied on, and why we think the content breaks it; and
- (e) how you can appeal or seek other redress.
10.5 Appeals. If you disagree with our decision, you can appeal by emailing abuse@instaflow.ai from the email address on your account within 6 months of our notice. Explain why you think the decision should be changed, and include anything that supports your appeal. A person will review your appeal, and we will tell you the outcome and our reasons without undue delay. If we got it wrong, we will reverse our decision, for example by restoring the Page. You can also use any certified out-of-court dispute settlement body that may be available to you, or go to court.
10.6 Authorities. We may report suspected illegal activity to the relevant authorities and cooperate with their investigations, including by sharing information about you where the law allows. If we become aware of information suggesting a criminal offence that threatens someone's life or safety, we will inform the authorities as the law requires.
10.7 Fees and liability. If we suspend or terminate your account because you broke this AUP, fees already paid are not refunded, and section 17 of the Terms applies. To the extent the law allows, we are not liable to you for actions we take in good faith under this AUP.
11. Reporting a breach
11.1 How to report. If you see a Page built with Instaflow that you believe is illegal or breaks this AUP, report it by email to abuse@instaflow.ai. Our Report Content page at /report-content explains how we handle reports.
11.2 What to include. To help us act quickly, include:
- (a) the exact web address (URL) of the Page, and where on the Page the content appears;
- (b) why you believe the content is illegal or breaks this AUP;
- (c) your name and email address, unless you are reporting child sexual abuse material, in which case you may report anonymously; and
- (d) a statement that you believe in good faith that the information in your report is accurate and complete.
11.3 EU Digital Services Act notices. If your report concerns illegal content, it may be a notice under Article 16 of the EU Digital Services Act. Please include the information listed in section 11.2, which is what the law asks for. We will confirm that we received your notice, deal with it in a timely, careful and objective way, and tell you our decision and the options for redress.
11.4 Intellectual property. If you are reporting infringement of your intellectual property, please also identify the right you hold (for example, a registered trade mark number or the original work) and confirm that you are the rights holder or authorised to act for them.
11.5 Misuse of reporting. Please don't send reports you know are false or that are designed to harm a competitor. We may ignore reports that are clearly unfounded, and may stop processing reports from people who repeatedly send them.
11.6 Questions. For questions about this AUP, email abuse@instaflow.ai.
12. Changes to this policy
We may update this AUP from time to time. Material changes follow the notice process in section 26 of the Terms. We may make urgent changes with less notice where needed to address illegal content, security risks or new legal requirements.