Acceptable Use Policy

This Acceptable Use Policy ("AUP") is incorporated into and forms an integral part of the agreement between you, whether an individual or an entity ("User", "Customer", "you", "your"), and DATA TOWER TRADE AND SERVICES LLC-FZ ("Data Tower", "Company", "we", "our", "us"). By using our Platform, you agree to comply with this AUP.

Violation of this AUP may result in immediate account termination, legal action, and referral to law enforcement authorities, including UAE Federal Authorities.

1. Definitions and Interpretation

Capitalized terms used but not defined in this AUP shall have the meanings given to them in our General Terms and Conditions of Use and Privacy Policy. For the purposes of this AUP, the following terms shall have the meanings set forth below.

Child Digital Safety Law means UAE Federal Decree-Law No. 26 of 2025 Regarding Child Digital Safety.

CSAM means Child Sexual Abuse Material, including any visual depiction (photograph, video, digital image, computer-generated image, or any other medium) that depicts a minor (under 18) engaged in sexually explicit conduct.

PDPL means UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Platform means collectively all Lampyre Tools, websites, and services provided by Data Tower.

UAE Cybercrime Law means UAE Federal Decree-Law No. 34 of 2021 on Combatting Rumors and Cybercrimes.

User means any individual or entity accessing or using the Platform.

Website or Site means the websites used to access the Company's products and services, hosted at lampyre.io and account.lampyre.io, and any associated sub-domains.

2. Prohibited Activities

You may not use the Platform for any activity that violates applicable laws, including but not limited to the laws of the United Arab Emirates, your local jurisdiction, or international law. Special attention is drawn to the Child Digital Safety Law, which imposes strict obligations regarding any content or activity that may harm children.

2.1. Illegal Content and Activities

Prohibited activities include, but are not limited to posting, sharing, or processing content that is illegal under UAE law, including content related to:

• terrorism, extremism, or incitement to violence;

• child sexual abuse material (CSAM);

• human trafficking, forced labor, or modern slavery;

• drug trafficking, illegal weapons, or sanctioned goods;

• defamation, hate speech, or incitement to discrimination;

• fraud, phishing, or financial scams;

• money laundering or terrorist financing.

2.2. Data Protection Violations

You are strictly prohibited from using the Platform in any manner that violates the PDPL, the Child Digital Safety Law, or any other applicable data protection legislation. Prohibited activities include, but are not limited to:

• processing without legal basis: collecting, storing, or otherwise processing personal data without a lawful basis as required under article 4 of PDPL. This includes processing of personal data relating to UAE citizens without complying with the specific requirements of the PDPL;

• re-identification of anonymized data: attempting to reverse-engineer, de-anonymize, or re-identify any anonymized or aggregated data provided by Data Tower. Any such attempt constitutes a material breach of this AUP and may also violate the PDPL;

• unauthorized sharing of personal data: sharing, selling, renting, or otherwise disclosing any personal data obtained through the Platform to any third party without (a) a valid legal basis under the PDPL, and (b) explicit written authorization from Data Tower where required;

• violation of data subject rights: taking any action that impedes, prevents, or interferes with the ability of a data subject to exercise their rights under articles 13–18 of PDPL, including the rights to access, rectify, erase, or restrict processing of their personal data.

2.3. Security and System Integrity

You are strictly prohibited from engaging in any activity that compromises, degrades, or interferes with the security, integrity, availability, or performance of the Platform. Prohibited activities include, but are not limited to:

• bypassing security controls: attempting to bypass, disable, or circumvent any access controls, authentication mechanisms, encryption, firewalls, or other security measures implemented by Data Tower;

• unauthorized vulnerability testing: scanning, probing, fingerprinting, penetration testing, or otherwise testing the vulnerability of our systems, networks, or infrastructure without explicit prior written authorization from Data Tower. Any unauthorized testing will be treated as a hostile act;

• launching attacks from the Platform: Using the Platform as a vector to launch attacks against third-party systems, including but not limited to credential stuffing, password spraying, or any other form of cyberattack.

2.4. Child Digital Safety Law Compliance

In compliance with the Child Digital Safety Law, you are strictly and absolutely prohibited from engaging in any of the following activities. This section carries zero tolerance – no warnings, no exceptions:

• harmful content: accessing, uploading, sharing, storing, transmitting, or distributing any content that is harmful to children as defined under articles 8, 9, and 10 of the Child Digital Safety Law, including but not limited to content that promotes violence, self-harm, eating disorders, substance abuse, sexual exploitation, or any other content that endangers the physical, mental, or emotional well-being of a minor;

• grooming and solicitation: using the Platform to contact, communicate with, groom, lure, solicit, or meet any individual you know or reasonably believe to be a minor for any purpose that is sexual, exploitative, or harmful, as prohibited under article 14 of the Child Digital Safety Law;

• bypassing age verification: Bypassing, disabling, tampering with, or attempting to circumvent any age verification mechanisms, parental controls, or other protective measures implemented on the Platform, as required under article 11 of the Child Digital Safety Law;

• failure to report: Failing to report to Data Tower any known or suspected violation of the Child Digital Safety Law that you encounter on the Platform. Under article 15 of the Child Digital Safety Law, online platforms and their users have a mandatory obligation to report such violations;

• CSAM (Child Sexual Abuse Material): any activity involving child sexual abuse material (CSAM) is absolutely prohibited. This includes uploading, sharing, storing, requesting, linking to, or otherwise facilitating access to CSAM, as well as using the Platform to conduct research, analysis, or AI training on CSAM (no exceptions for academic or law enforcement purposes without a valid UAE court order).

Consequences of violation

3. Enforcement

If we determine that you have violated this AUP, we may take one or more of the following actions, in our sole discretion:

We reserve the right to investigate any suspected violation. We may access, preserve, and disclose your data to law enforcement if required by law (including the Child Digital Safety Law) or if we reasonably believe it is necessary to prevent harm.

No refund policy for violations: If your account is terminated due to an AUP violation, you are not entitled to any refund for unused services.

4. Reporting Violations

If you become aware of any violation of this AUP, please report it immediately to support@lampyre.io.

We will investigate all reports promptly.

What to include in your report:

• your name and contact information (optional for anonymous reports);

• description of the violation;

• username or identifier of the alleged violator;

• URLs, screenshots, or other evidence;

• date and time of the incident.

We will acknowledge receipt within Three (3) business days and take appropriate action.

5. Monitoring and Logging

Data Tower may monitor activity on the Platform for security and compliance purposes, including compliance with the Child Digital Safety Law. This includes:

• logging IP addresses, access times, and actions taken;

• scanning for known malware or malicious patterns;

• reviewing reports and comments for prohibited content, including content harmful to children.

We do not actively monitor for AUP violations without cause, but we reserve the right to audit any account at any time.

6. No Waiver

Our failure to enforce any part of this AUP does not waive our right to enforce it later. We may update this AUP at any time. Continued use of the Platform after changes constitutes acceptance of the updated AUP.

7. Governing Law

This AUP is governed by the laws of the United Arab Emirates, including PDPL, UAE Cybercrime Law and Child Digital Safety Law.

8. Contact Information

Website: https://lampyre.io

Email: support@lampyre.io

Mail address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, the UAE.

Other contact details: https://lampyre.io/contact-us