Acceptable Use and Abuse Policy

*This is an English translation of the Spanish text. If the two versions differ, the Spanish version prevails.*

Forklink shortens and measures links. A link shortener can be used to deceive people, so this policy defines what is not allowed and how we act. It applies to the links, subdomains, domains and QR codes created with Forklink and to any destination they point to.

1. Phishing and impersonation: pages or links that imitate banks, payment gateways, social networks, public bodies or other brands in order to obtain credentials, money or data; subdomain names that impersonate a brand or institution.
2. Malware and malicious software: distributing or linking to viruses, ransomware, spyware or deceptive downloads.
3. Fraud and scams: fake investments, fraudulent sales, pyramid schemes, fake job offers, technical-support impersonation.
4. Spam: unsolicited bulk sending, lists obtained without authorisation, evading filters by using our domains.
5. Illegal or harmful content: sexual exploitation of minors, content that incites violence, human trafficking, sale of illegal substances or goods, infringement of intellectual property rights or of personal data rights.
6. Chaining redirects to other shorteners or pointing to private networks or internal services.
7. Evading controls: opening multiple accounts to get around limits or suspensions, manipulating analytics, hiding the real destination with deceptive redirects, or interfering with the service.
8. Using the platform to attack: penetration testing, scanning or denial of service without written authorisation.

We review the destinations of links when they are created and periodically, using reputation lists (including Google Safe Browsing), we apply stricter limits to new accounts, and we handle reports from individuals and organisations. Flagged links may show a warning page before continuing.

Use the public report form at forklink.co/abuso or write to abuse@customy.ai. Give the short URL, what is happening and, if you can, a screenshot or the destination. Reports can be made without an account. The data you give us is used only to handle the report (see the Privacy Policy). We review each report within a maximum of 2 business days; phishing or malware cases are handled with priority.

Depending on severity: warn the owner, show a warning page, suspend the link, suspend the subdomain or the account and, where the law requires it or the risk is serious, inform the authorities. We may act without prior notice when there is a risk to third parties. A single report does not automatically suspend a link: it goes through review.

If you believe we suspended something by mistake, write to admin@customy.ai explaining the case. We review appeals and reply within 5 business days. Confirmed phishing or malware cases are not reinstated.

Accounts with serious or repeated abuse are permanently closed and their subdomain names may be blocked.

This policy is provided in Spanish and English. If there is any discrepancy between the two versions, the Spanish version prevails.