1. Purpose and Scope
This Acceptable Use Policy ("AUP") governs access to and use of the services provided by MIRRORMAZE COMMUNICATIONS Ltd. ("MMC", "we", "us"), including Skylight:One, hosted browsers, virtual desktops, mobile devices, proxies, telecommunications services, APIs and associated software and documentation ("Services").
It applies to customers, individual subscribers, authorised users, integration developers and anyone accessing the Services on their behalf. Customers must ensure that their authorised users comply with this AUP. It supplements the applicable service agreement and does not override rights that cannot lawfully be excluded.
2. Lawful and Authorised Use
You must use the Services lawfully, within your subscription entitlements, agreed account and device allocations, usage limits and any applicable written authorisations. You must comply with laws, regulations, carrier requirements and contractual obligations applicable to your activities.
Privacy-enhancing features, remote infrastructure and alternative routing do not grant permission to access systems or information unlawfully. You remain responsible for obtaining any necessary permissions and establishing a lawful basis for collecting and processing information.
3. Accounts and Credentials
Individual user subscriptions must not be shared between people. Keep passwords, API keys, authentication tokens and recovery credentials confidential. Use strong, unique passwords, protect devices used to access the Services, and enable multi-factor authentication wherever supported.
Promptly revoke or rotate credentials suspected of compromise, terminate affected sessions where possible, and notify MMC without undue delay. Follow any additional authentication requirements communicated by MMC.
4. Software and Intellectual Property
Except as expressly permitted by your agreement or applicable law, you must not copy, modify, mirror, republish or distribute MMC software or documentation; reverse engineer, decompile, disassemble or decrypt it; or remove proprietary notices.
You must not resell, sublicense, rent, transfer or provide unauthorised third-party access to the Services, or use MMC software or documentation to reproduce proprietary features or develop a competing service. These restrictions do not prevent authorised integrations, normal use of supplied applications, or permitted exports of your own data and research outputs.
5. Infrastructure and Security
Use supported applications and appropriately secured devices and connections. Do not introduce malicious code, deploy unauthorised integrations, bypass platform security controls, interfere with another customer's environment, or overload or disrupt services.
Do not attempt unauthorised access, intercept another person's communications, conduct denial-of-service attacks, or perform vulnerability scanning, penetration testing or network probing without the relevant system owner's permission. Testing MMC infrastructure additionally requires MMC's prior written authorisation. Customer-installed tools must remain within the capabilities and permissions of the relevant service.
6. Mobile Numbers and Messaging
Where the Services provide telephone numbers, SMS or other messaging capabilities, you must comply with applicable telecommunications laws, operator requirements and messaging rules. Unsolicited bulk messaging, unlawful spam, fraudulent communications, deceptive caller identification and traffic intended to evade carrier restrictions are prohibited.
Number availability and message delivery depend on third-party networks. MMC may restrict, suspend or reassign numbers or channels where required by an operator or authority, or where reasonably necessary to address suspected misuse.
Where restrictions result from your breach of this AUP, contractual charges remain payable to the extent permitted by your agreement and applicable law. Credits, refunds and replacement numbers are not automatic; nothing in this AUP excludes mandatory statutory rights.
7. Data and Communications
You are responsible for having the rights and permissions necessary to upload, access, process or share information through the Services. Protect confidential and personal information using appropriate access controls, encryption and secure transmission methods.
MMC-supplied outbound messaging, notification and email facilities must be used for authorised, legitimate business purposes. They must not be used for unrelated personal traffic, abuse or unlawful distribution. Do not use the Services to host or distribute malicious content or facilitate unlawful activity.
8. Prohibited Content and Conduct
You must not use the Services to create, promote, distribute or facilitate unlawful content or activity, including fraud, threats, unlawful harassment or discrimination, infringement of intellectual property or privacy rights, or harm to people, property or computer systems. Child sexual abuse material and activities involving the exploitation or abuse of children are strictly prohibited.
Lawful, authorised investigative work may involve encountering harmful or offensive material. Such work must remain within applicable law, appropriate safeguards and any service-specific restrictions; it does not authorise unlawful possession, collection, distribution or access. Contact MMC before undertaking work that may require specialist handling arrangements.
9. Remote Working and Incident Reporting
Use encrypted connections and secure remote-access methods. Protect devices and workspaces against unauthorised physical access and viewing, lock unattended sessions, and avoid exposing confidential information.
Report suspected account compromise, exposed API keys, unauthorised access or misuse promptly through the Contact us function in Skylight or your agreed support channel. Provide relevant details without sending passwords, secret keys or unlawful material. Preserve relevant evidence where lawful and cooperate with reasonable containment measures.
10. Monitoring and Enforcement
MMC may record and review service activity, API calls, account usage and relevant communications or content where lawful and reasonably necessary for service operation, security, abuse prevention or compliance. Processing must be consistent with applicable data protection law, the Privacy Notice and contractual commitments. This clause does not imply that MMC routinely reads every communication or can access all encrypted content.
Where MMC reasonably suspects a breach, it may investigate, restrict functionality, revoke credentials, suspend access or terminate Services in accordance with the applicable agreement and law. Immediate action may be necessary to contain harm or comply with legal or carrier requirements. MMC may refer suspected unlawful activity to the appropriate authorities; prosecution is a matter for those authorities.
Where lawful and practicable, MMC will explain the restriction and provide an opportunity to respond through the agreed support channel.