← Back to home

Legal

Acceptable Use Policy

Last updated: July 3, 2026 · Effective date: July 3, 2026

This Acceptable Use Policy (“AUP”) is part of our Terms of Service and governs your use of the Mato CRM service (the “Service”) — contact-form lead capture, the lead inbox, and appointment booking for your website. Capitalized terms used but not defined here have the meanings given in the Terms of Service.

The short version: don’t use Mato to do illegal or harmful things, don’t abuse the Service or other customers, and don’t put regulated data (health, payment-card, children’s data) into your forms or inbox.

1. Prohibited content

You may not use the Service to store, transmit, or process content that:

  • Is illegal under applicable law or infringes intellectual property, privacy, or publicity rights
  • Is defamatory, harassing, threatening, or intended to incite violence
  • Is sexually explicit, sexually exploitative, or involves minors in any sexual context
  • Facilitates or promotes illegal weapons, drugs, or other regulated goods outside of lawful commerce
  • Contains malware, viruses, worms, or similar harmful code
  • Constitutes spam or bulk unsolicited commercial communication in violation of CAN-SPAM or similar laws

2. Prohibited data categories

Mato stores lead and booking data in plaintext so you can read, search, and act on it. It is not a compliance-specific platform. You may not use the Service — including the fields of your own contact or booking forms — to collect or store:

  • Protected Health Information (PHI) subject to HIPAA
  • Cardholder data subject to PCI-DSS (card numbers, CVV, track data, PIN — Mato is not a PCI-compliant environment)
  • Classified government information of any kind
  • Children’s personal information collected in violation of COPPA (information about children under 13)
  • Data subject to export controls (ITAR, EAR) beyond the limits we are authorized to process

If your business handles these categories, Mato is not the right tool. We do not sign Business Associate Agreements (BAAs) or equivalent compliance attestations.

3. Prohibited conduct

You may not:

  • Abuse the intake or booking endpoints. Don’t submit fake leads or bookings to another customer’s forms, flood any intake key with automated submissions, or use the booking widget to hold slots you don’t intend to keep.
  • Probe for vulnerabilities without our written authorization. If you are a security researcher, please coordinate with us first by emailing security@matocrm.com.
  • Scrape or automate access to the Service beyond our documented interfaces (the embed snippet and the booking widget are the documented public surfaces; the dashboard is for humans).
  • Reverse engineer the Service, except to the extent such restriction is prohibited by applicable law.
  • Resell, rent, or sublicense the Service without our written permission. Your subscription covers your business and your website, not repackaging for others.
  • Impersonate another person, company, or entity, or misrepresent your affiliation with any of them.
  • Interfere with the Service — including attempts to disrupt, degrade, or overload our infrastructure, or attempts to interfere with other customers’ use of the Service.

4. Security and authentication

  • Keep your password confidential and do not share login credentials.
  • Notify us promptly at security@matocrm.com if you believe your account has been compromised.
  • Keep your intake key on your own website only; treat it like a posting address for your inbox. If it leaks and attracts spam, contact support@matocrm.com and we will rotate it.
  • Do not attempt to log in to accounts you do not own.

5. Email and outreach conduct

Mato delivers leads and booking confirmations to you and to the people who submit your forms; it is not an email marketing platform. If you use information stored in Mato to contact leads or prospects outside the Service, you agree that your outreach will comply with applicable law, including:

  • CAN-SPAM (US)
  • State anti-spam laws
  • Do-not-call registries where applicable

Using Mato to organize outreach does not exempt you from these obligations.

6. Reporting violations

If you believe another user is violating this AUP, or you have been the target of misuse of the Service (for example, someone flooding your form), contact us at abuse@matocrm.com. We investigate all credible reports.

7. Enforcement

We may investigate suspected violations and take action including:

  • Requesting that you modify or remove content
  • Temporarily suspending your account
  • Terminating your account without refund
  • Notifying law enforcement where required by law

We will generally attempt to contact you before terminating your account, except in cases involving illegal content, security threats, or where law prohibits advance notice.

8. Changes to this Policy

We may update this AUP from time to time to reflect new types of abuse or changes in law. Material updates will be announced by email.

9. Contact

  • General questions: support@matocrm.com
  • Abuse reports: abuse@matocrm.com
  • Security issues: security@matocrm.com