Legal

Acceptable use policy

What you may and may not do with CVRLanding: the pages you publish, how you use AI, tracking and email, and how we enforce these rules.

Draft — pending legal reviewLast updated October 14, 2026

This document is a draft

We wrote it for the CVRLanding preview build. It has not yet been reviewed by legal counsel for the countries we serve, and it will change before launch. It is not legal advice.

On this page

Purpose and scope

This policy is part of the Terms of service. It covers everything you do with CVRLanding: the pages and content you create and publish, how you use the AI features, the tracking you set up and the email the service sends for you.

Deceptive pages hurt visitors, get ad accounts suspended and put every customer on a shared platform at risk. You are responsible for your workspace members and for anyone else you let use your account.

Where the policy of an ad platform that sends traffic to your page is stricter than this one, the stricter rule applies to that traffic.

Deceptive content

Do not publish anything that misleads visitors. In particular, do not use:

  • invented reviews, testimonials, ratings, customer counts or results, or paid ones presented as independent

  • false endorsements, awards, certifications, accreditations, licenses or “as seen in” logos

  • fake scarcity: stock notices without a real inventory source, or countdowns that reset or have no real deadline

  • fake recent-purchase or live-visitor notifications

  • hidden costs, misleading prices or discounts, or bait-and-switch offers

  • health, financial or legal claims you cannot substantiate, such as cure claims or promised income

  • guarantees of results you cannot honor

  • impersonation of another brand, person, government body or organization

  • phishing, or pages that collect passwords, card details or other credentials under false pretenses

CVRLanding’s widgets are built to avoid these patterns: countdowns follow a real expiry rule, stock notices read a real inventory source, and the AI does not write reviews or testimonials. Do not work around these safeguards.

Cloaking and redirects

A published page must show the same content to every visitor, ad reviewer and search crawler. Do not:

  • serve different content depending on whether a visitor looks like a reviewer, a bot or a crawler

  • redirect the URL of an approved ad to a different page, offer or domain

  • swap a page’s content after its ad is approved to show something the platform would reject

  • use CVRLanding slugs, redirects or custom domains to hide where traffic really ends up

To send ad traffic somewhere else, change the ad’s final URL on the ad platform so the ad is reviewed again. Controlled A/B experiments are allowed: each variant must be a genuine version of the same offer, assigned at random and never by whether the visitor is a reviewer or a crawler.

Prohibited products and content

Do not use CVRLanding to promote, sell or distribute:

  • illegal goods or services, or anything illegal where the page is shown

  • weapons, ammunition or explosives

  • illegal drugs, or prescription medicines without the required license

  • malware, spyware or tools for hacking or fraud

  • content that sexualizes, exploits or endangers minors, or any other sexual exploitation

  • hate speech, harassment, or content that promotes violence, terrorism or self-harm

  • counterfeit goods, or content that infringes copyright, trademarks or other rights

  • gambling, lending, investment or crypto-asset services without the licenses they require

  • pyramid or Ponzi schemes, or other schemes that pay mainly for recruiting people

Also do not publish anything that the ad platform sending traffic to the page prohibits, even if it is not listed here.

Sensitive data and targeting

  • Do not collect sensitive personal data, such as health, biometric or genetic data, racial or ethnic origin, religious or political beliefs, sexual orientation or anything else the law treats as sensitive, unless you have a lawful basis and a genuine need.

  • Do not use forms to collect passwords or full payment card numbers; take payments through a proper payment provider.

  • Do not build audiences or target ads based on protected characteristics or inferred medical conditions, including from quiz answers or form data.

  • Do not direct pages at children or knowingly collect their personal data.

By default, quiz analytics leave out sensitive answers and session replay masks form inputs. Do not send sensitive data to ad platforms through event parameters or custom events.

Security and abuse of the service

Do not:

  • access, or try to access, another workspace, its data or its pages

  • probe, scan or test the security of CVRLanding without our written permission

  • bypass plan limits, rate limits, credit checks or other usage controls

  • send forged or automated tracking events, or inflate analytics, conversions or experiment results

  • import URLs from sites you have no right to copy, or use URL import to get around paywalls, logins or robots rules

  • overload the service, or use it to attack other systems

  • share one login among several people, or open several trial accounts, to get around plan limits

  • upload malicious files, or use published pages to host files unrelated to the page

If you find a security vulnerability, report it to support@cvrlanding.com and give us reasonable time to fix it before you disclose it.

AI use

  • Do not try to extract system prompts, credentials, API keys or other customers’ data from the AI, including through instructions hidden in pages, files or URLs.

  • Do not use the AI to create content this policy prohibits, or to get around the safeguards described above.

  • Do not automate requests to drain, resell or share credits outside your workspace.

  • Do not present AI output as verified fact, expert advice or a real customer’s words without checking it.

Imported pages, uploaded files and prompts are treated as untrusted input, never as instructions to the system. Attempts to abuse the AI may lead to suspension.

Email and notifications

CVRLanding sends transactional email through Resend: account and security messages, billing notices, and the lead, booking and order notifications or confirmations you configure. Do not:

  • use notification or confirmation emails to send marketing or bulk messages

  • add recipients who have not agreed to receive those notifications

  • put misleading subjects, sender names or links in any email the service sends for you

If an address bounces or a recipient reports spam, we may stop sending to it.

Enforcement

We use automated and manual checks to keep the platform safe:

  • pre-publish checks for deceptive patterns, unsupported claims, missing privacy links, malware and phishing

  • review of high-risk pages before or after they go live

  • removal or unpublishing of content that breaks this policy

  • suspension of features, workspaces or accounts for serious or repeated violations

Depending on the severity, we may warn you, ask you to fix a page, or act immediately. We usually tell you what we did and why. If you think we got it wrong, appeal through support@cvrlanding.com and a person will review the decision.

We may report illegal content to the relevant authorities, and keep related records, where the law requires or allows it.

Reporting abuse

To report a page that breaks this policy, email support@cvrlanding.com with ‘Abuse report’ in the subject. Include the page URL, what you saw and, if you can, screenshots.

We review every report. We may not be able to share the outcome, especially when it concerns another customer’s account.

Questions about this document? Email support@cvrlanding.com.