ACCEPTABLE USE POLICY

Effective Date: 22 April 2026

Last Updated: 10 August 2026

This Acceptable Use Policy ("AUP") forms part of the UME.LA Terms of Service. It applies to https://umela.io, https://ume.la, the UME.LA account and link-management application, the Telegram Bot (@referbot), and the Telegram Mini App (together, the "Service").

The Service is operated by Compit Ltd., company number 12484949, of 7 Bell Yard, London, WC2A 2JR, United Kingdom.

1. YOUR RESPONSIBILITY

You are responsible for destination URLs, aliases, custom domains, tags, UTM parameters and other information you submit through your registered account or guest session.

You must not use the Service, or help another person use it, for prohibited content or activity described below.

2. PROHIBITED CONTENT

You must not create, manage or distribute UME.LA links that direct to, promote or facilitate:

• child sexual abuse material, child sexual exploitation or grooming;
• terrorist content or activity;
• content or conduct that is illegal under applicable law;
• phishing, credential theft, malware, ransomware, viruses, trojans, unwanted software or other malicious code;
• fraud, scams, deceptive investment schemes, fake initial coin offerings, pyramid schemes or impersonation;
• the unlawful sale or supply of drugs, weapons, stolen goods or other illegal goods or services;
• human trafficking, exploitation or unlawful immigration facilitation;
• credible threats, incitement to violence or content that materially facilitates violence;
• unlawful hate, harassment or targeted abuse;
• non-consensual intimate material, sexual exploitation, or unlawful pornographic or obscene material;
• content that promotes or meaningfully facilitates suicide or serious self-harm;
• doxxing or unlawful disclosure of another person's private or personal information;
• infringement of copyright, trademark or other intellectual property rights;
• spam or unsolicited commercial communications; or
• content intended to evade a block, warning, court order or lawful enforcement action.

3. PROHIBITED ACTIVITY

You must not:

• use short links to mislead people about the identity, purpose or destination of a link;
• collect passwords, payment details or personal data through deception or without a lawful basis;
• create excessive volumes of links through automated or bulk methods without our authorisation;
• probe, scan, attack or gain unauthorised access to the Service, accounts, infrastructure or data;
• interfere with availability, bypass rate limits, defeat security checks or attempt to conceal malicious activity;
• create additional accounts, guest identities, domains or links to evade a suspension, ban or disabled-link decision;
• impersonate another person or organisation or falsely claim an affiliation;
• use analytics to unlawfully identify, profile, discriminate against, harass or contact short-link visitors;
• publish credentials, access tokens or other information that could compromise an account or system; or
• use the Service in a way that creates an unreasonable security, legal or operational risk.

4. SECURITY SCREENING

Destination URLs are checked against local Google Web Risk threat-list data. If a local hash match requires confirmation, the full destination URL is submitted to the Google Web Risk API. Newly created links are checked when submitted and may be checked again approximately 10 minutes, 30 minutes, 1 hour, 6 hours and 24 hours after creation.

Automated screening is intended to identify malware, social engineering and unwanted software, but it cannot identify every violation and can produce incorrect results. A successful check is not an endorsement or guarantee that a destination is safe or lawful.

5. REPORTING ABUSE

You can report a short link through:

• the web form at https://umela.io/legal/abuse;
• email to abuse@umela.io; or
• the /report command in the Telegram Bot.

The web form asks for your name, email address, the reported URL, an abuse category and an explanation. Provide accurate information and enough detail for us to locate and assess the link. Do not include illegal material in a report unless specifically requested through an appropriate lawful channel; provide the URL and a description instead.

If someone is in immediate danger, contact the appropriate emergency service or law-enforcement authority first.

6. COPYRIGHT AND INTELLECTUAL PROPERTY REPORTS

An intellectual property report should include:

• identification of the protected work, trademark or other right;
• the relevant UME.LA short link;
• the destination and nature of the alleged infringement;
• your name and contact information;
• the basis on which you are entitled to make the report; and
• confirmation that the information is accurate and supplied in good faith.

UME.LA does not host destination content. Disabling a short link does not remove content from the destination website, so you should also contact the destination operator or hosting provider where appropriate.

An affected account holder may request review by emailing abuse@umela.io with the short link and evidence explaining why the decision was incorrect.

7. INVESTIGATION AND ENFORCEMENT

We may use automated results, report information, link and account records, click and security data, provider information and other reasonably available evidence to investigate a suspected violation.

Depending on severity, context, history and risk, we may:

• reject creation of a link;
• mark a link as unsafe;
• disable or delete a link;
• restrict account functionality;
• ban or terminate an account;
• preserve relevant records;
• refer a matter to a provider, destination host, professional adviser or competent authority; or
• take another proportionate step needed to protect users, third parties or the Service.

We may act without prior notice where notice could increase harm, enable evasion, compromise an investigation or conflict with law. Where practicable and safe, you may request review at abuse@umela.io. We may require verification and supporting evidence before changing a decision.

Repeated violations, deliberate evasion, phishing, malware, fraud, child sexual exploitation, terrorism-related activity and credible threats are treated as serious violations and can result in immediate account action.

8. AUTHORITIES AND ILLEGAL CONTENT

We may preserve and disclose information to competent authorities where required or permitted by applicable law. If duties under the Online Safety Act 2023 or related CSEA reporting regulations apply to the Service and relevant content is detected, we will make the reports required by law.

Nothing in this AUP is a statement that the Service has a particular regulatory classification. Our response will depend on the content, available evidence, applicable law and any risk of immediate harm.

9. CHANGES AND CONTACT

We may update this AUP as threats, Service functions or legal requirements change. The current version will be available at https://umela.io/legal/aup.

Compit Ltd.

7 Bell Yard, London, WC2A 2JR, United Kingdom

Abuse and enforcement: abuse@umela.io

General support: support@umela.io