Acceptable Use Policy

This policy applies to every nameTheGhost account, every site key you create, and anyone you allow to use your account. You are responsible for what happens under your account, including use by your employees, contractors, and agencies.

You accept this policy when you add a site. Continuing to use the service means you accept the current version of it.

You may install the nameTheGhost snippet only on websites that you own or operate, and only where you have the authority to add code to the site and to set its privacy notice.

You may not:

• Install your site key on a domain you do not control, including a client's site without their written permission.
• Share, sell, or sublicense your site key, or let another business run it on their traffic.
• Inject the snippet through a browser extension, an ad tag, an iframe, or any other method that places it on someone else's page.

If you are an agency running nameTheGhost for clients, each client site needs its own site key and its own documented permission.

You may use the business contact details we return to reach out about your own product or service, in a business context, to a person whose role plausibly relates to what you sell. That is the entire intended purpose of the service.

You may store those details in your own CRM, enrich your own records with them, and share them internally with colleagues who need them for that outreach.

• Resell or redistribute the raw data. You may not sell, license, syndicate, or give away the identified records we return, in bulk or individually, and you may not use them to build or improve a contact database, data product, or list that you offer to anyone else.
• Make decisions that affect someone's life. You may not use identified data as a factor in employment, housing, credit, insurance, education, or any similar decision about a person. This service is not a consumer reporting agency and its output is not a consumer report.
• Target individuals. No harassment, stalking, intimidation, doxxing, or building a profile of a specific person outside a normal sales context.
• Combine it with private consumer data. Do not attempt to match identified business contacts to home addresses, personal financial records, health records, or data obtained from a breach.
• Re-identify people who have opted out. Do not try to work around a suppression, and do not use another service to re-identify someone who asked us to stop.

Some sites reveal something about a visitor that they did not choose to tell you. Naming a visitor in those contexts is off limits regardless of who owns the site.

Do not run nameTheGhost on pages whose subject matter would reveal, or strongly imply, a person's:

• Health condition, diagnosis, treatment, disability, or pregnancy
• Sexual orientation or gender identity
• Religious or political belief, or union membership
• Addiction, recovery, or use of crisis, counseling, or support services
• Financial distress, debt, bankruptcy, or legal or immigration trouble
• Criminal record or status as a victim of a crime

Also off limits: adult content, gambling, firearms and weapons sales, and any site directed at children under 13.

If a general business site has a small number of pages that fall into the above, keep the snippet off those pages rather than off the whole site.

Outreach based on an identification must:

• Identify you and your business honestly, with accurate sender details and subject lines.
• Include a working way to unsubscribe, and honor it promptly.
• Be truthful about how you came to contact them if they ask.
• Comply with the marketing and privacy laws that apply to you, including CAN-SPAM and applicable state privacy laws.

Do not claim a prior relationship that does not exist, imply the person filled in a form when they did not, or send outreach that a reasonable recipient would experience as surveillance rather than as a sales approach.

Anyone we identify can ask to be suppressed, and we honor that across the service. You must too.

• If a person asks you to stop contacting them, stop, and suppress them in your own systems.
• If a person asks you to delete the data you hold about them, delete it, unless you have an independent lawful reason to keep it.
• Forward requests you cannot resolve yourself to us so we can apply them at the source.

Your website needs a privacy policy that accurately describes what happens on it, including that you use a third-party service to identify business visitors, what you do with that information, and how a visitor can opt out. Keeping that notice accurate and current is your responsibility, not ours.

nameTheGhost identifies United States business traffic. Do not deploy it expecting to identify visitors elsewhere, and do not use it in a way that requires consent you have not collected in jurisdictions that demand it.

Treat identified records as confidential business data. Limit access to people who need it, protect exports and CSV downloads the way you would protect your customer list, and delete data you no longer have a reason to hold.

We may investigate suspected violations and we may pause a site key, suspend an account, or terminate service. Where the risk is serious, including anything in section 5, we will act first and discuss afterwards.

Suspension for a violation does not waive fees already incurred. We may also be required to report certain conduct to our data suppliers or to law enforcement.

If you believe your account was suspended in error, contact us and we will review it.

We will update this policy as the product and the law develop. Material changes will be announced to account holders before they take effect. The version on this page is always the current one.

To report misuse, ask to be suppressed, or raise anything else about this policy, get in touch. We treat opt-out and misuse reports as urgent.