Skip to main content
Policies and compliance

Acceptable use in plain words

Use Datafuel to collect public web data and to run your own legitimate traffic; do not use it to attack, defraud or harm anyone. That is the whole policy in one sentence. The legal version is Schedule B of the Terms; this page says what it means day to day.

Written By Carmine Cella

Last updated 1 day ago

Use Datafuel to collect public web data and to run your own legitimate traffic; do not use it to attack, defraud or harm anyone. That is the whole policy in one sentence. The legal version is Schedule B of the Terms; this page says what it means day to day.

Not allowed, ever

Fraud, phishing, DDoS and other network attacks, credential stuffing, brute forcing, malware, spam, unauthorised access to systems, harassment, child sexual abuse material, sanctions or export-control violations, and anything unlawful where you are or where the target is. Using the service to get around a court order or a lawful security control is in the same list.

Restricted until verified

Some things are blocked by default and opened only after identity verification (KYC) and approval:

  • Mail ports 25, 110, 143, 993 and 995 (and other ports blocked by default, listed in the docs).
  • Government and .gov websites, banks, and other restricted domains.

Ask in the chat bubble at the bottom right of the dashboard, or with Open A Ticket in the left menu; verification runs through Sumsub or Stripe Identity and takes minutes. Verification does not make an unlawful use lawful. On a residential plan you can also block domains yourself under Settings → Blocked Domains, so a script never spends traffic where you do not want it to.

Fair use on static IPs

ISP and datacenter plans have no traffic cap. Sustained very high throughput is rate-limited to protect the hardware the IP shares, and support contacts you before that happens; guaranteed throughput from 300 Mbit/s to 100 Gbit/s is a custom plan.

What happens if the policy is broken

Warnings, blocked targets, limits, suspension or termination, depending on the case; immediate suspension when there is a security, legal or safety risk. No refund is due for a service suspended for a breach. On rotating products we keep 14 days of connection metadata (timestamp, your IP, bytes, target domain) for investigations; static products keep no connection logs; we do not inspect content.

Reporting abuse

Website operators and carriers can write to abuses@datafuel.ai with the IP, the timestamp with timezone, the target and evidence; we aim to answer within 24 business hours.

Was this helpful?

Still need help? Ask the team