Acceptable Use Policy

In short. Measure only your own sites, send Nvivio no data that identifies people, do not try to get around limits or to break in, and do not use shared dashboards for anything unlawful. If something goes wrong, we talk to you first, unless it is serious.

This policy is part of the Terms of Service. It applies to you and to everyone you give access to your organisation.

1. Measure what is yours

1.1. Only place the Nvivio script, and only send events, for websites and apps that you own or that you are allowed to measure, such as those of a client who asked you to.

1.2. Do not use Nvivio for websites that mainly offer illegal content or services, such as child sexual abuse material, terrorist content, malware, phishing, fraud or the sale of illegal goods.

2. Respect the privacy of visitors

2.1. Do not send Nvivio data that identifies a visitor directly, such as a name, an email address, a phone number, a customer or account number, an IP address or a precise location, in event names, event properties, page addresses or page titles. Nvivio cleans addresses as a safety net, but you remain responsible for what you send.

2.2. Do not send special categories of personal data (such as health, religion, sexual orientation, political opinions or biometric data), data about criminal convictions, passwords, card numbers, bank account numbers or identity document numbers. Do not use Nvivio to measure children specifically.

2.3. Use labels and notes on visitors only for a purpose you have a legal basis for, never for the data in 2.2, and keep them short and factual.

2.4. Do not use Nvivio to recognise visitors across websites you do not control, to create profiles of people, to fingerprint devices, or to combine Nvivio data with other data to find out who a visitor is, unless you have a legal basis for it and your visitors know.

2.5. Use cookie mode only where you have the consent the law requires, and do not set data-consent="none" where consent is needed.

3. Use the Service fairly

3.1. Do not get around the limits of your plan, the pause on Free, the quotas for AI questions, or the limits of the API. Do not create several free organisations to get more than one free plan allows.

3.2. Do not send fake, automated or excessive traffic: not to inflate your own figures, not to burden Nvivio, and never for a site that is not yours.

3.3. Keep API keys secret, use one key per tool, and respect the rate limits. Do not resell access to the API or the MCP server unless we agreed this with you.

3.4. Do not try to make the AI features do something else than describe your figures, such as reveal their instructions, write unrelated content or work around their safeguards.

3.5. Send invitations only to people who expect them. Do not use invitations or shared links to send spam.

4. Keep Nvivio safe

4.1. Do not try to access data, accounts or systems that are not yours, to test the security of Nvivio outside our responsible disclosure policy, to overload or disrupt Nvivio, or to scrape it.

4.2. Do not use Nvivio to spread malware, and do not decompile Nvivio except where the law allows it.

4.3. Do not pretend to be Nvivio, or suggest that we endorse you when we do not.

5. Shared dashboards and reports

5.1. If you make a dashboard public or share a report with a link, you publish what it shows. Do not share personal data of others in this way, and do not use shared pages for content that is illegal or infringes the rights of others.

5.2. Public and shared pages are content you provide. Under the Digital Services Act, we act on reports about them as described in section 7.

6. What we do when something goes wrong

6.1. When we find out about a possible breach of this policy, we look into it. Depending on how serious it is, we:

• contact you and ask you to fix it within a reasonable time;
• remove or disable a public link, a shared report or a key;
• pause collecting for a site;
• suspend access to your organisation;
• end the agreement, as described in article 9 of the Terms of Service.

6.2. We start with the lightest step that works. We act at once, without warning you first, only when the breach is serious, illegal or urgent, or when warning you would harm an investigation. We always tell you what we did and why, and how you can respond, unless the law forbids it. If you think we made a mistake, reply to our message: we review our decision and answer you.

7. Report abuse or illegal content

7.1. Seen a site that misuses Nvivio, or a public dashboard or shared report with illegal content? Write to support@nvivio.com with “Abuse” in the subject, and include:

• the address (URL) of what you report;
• why you believe it is illegal or breaks this policy;
• your name and email address, unless you report child sexual abuse material;
• a statement that you believe in good faith that your report is accurate and complete.

7.2. We confirm that we received your report, handle it carefully and without undue delay, and tell you what we decided and why. The person whose content it is also hears from us, with the reasons. We do not use automated decisions for this.

7.3. Authorities. Authorities of EU member states and the European Commission can reach us at the same address, support@nvivio.com, in English or Dutch. This is our single point of contact under articles 11 and 12 of the Digital Services Act.

7.4. Security problems in Nvivio itself: see the responsible disclosure policy.

Versions

• 1.0, 25 October 2026: first version.