Acceptable Use Policy

1. Scope

This policy applies to Gerai’s website, merchant platform, Gerai-powered storefronts, accounts, content, order workflows, communications, and connected technical interfaces. It applies to merchants, their authorised users, buyers, visitors, and anyone who attempts to access or interact with the Services.

This policy forms part of the Terms of Service. A merchant is responsible for the activity, products, content, and people it authorises on its storefront. Buyers and visitors are responsible for their own interactions with the platform and merchant.

2. Lawful commerce

You must not use Gerai to offer, advertise, arrange, facilitate, or fulfil:

• anything unlawful to possess, advertise, export, import, distribute, or sell;
• stolen, counterfeit, fraudulently obtained, or illegally copied goods;
• weapons, explosives, controlled substances, or regulated items without all required authority and an approved service scope;
• unlicensed financial, gambling, medical, professional, or other regulated services;
• products subject to a recall, safety prohibition, or known material defect that is not properly disclosed;
• items made from or involving unlawful exploitation of people, animals, cultural property, or protected natural resources; or
• transactions designed to conceal proceeds, evade sanctions, launder money, finance crime, or defeat lawful controls.

This list is illustrative, not exhaustive. A merchant must obtain and maintain licences, registrations, warnings, age checks, product information, tax treatment, and other controls required for its catalogue and markets. Gerai may decline a product category or use case even where its legal status is disputed or context-dependent.

3. Harmful and exploitative content

You must not upload, generate, display, transmit, or link to content that:

• sexually exploits or endangers a child, or facilitates child abuse;
• contains non-consensual intimate imagery or sexual deepfakes;
• threatens, encourages, celebrates, or coordinates credible violence;
• supports trafficking, coercion, extortion, or exploitation;
• promotes terrorism or violent extremist recruitment or operations;
• targets a person or protected group with severe harassment, dehumanisation, or incitement to harm;
• publishes private identifying information to intimidate or expose a person to harm; or
• contains malware, credential theft, destructive code, or instructions intended to compromise Gerai or another person’s systems.

Legitimate reporting, education, criticism, or documentation may require context. Do not use that context as a pretext to distribute harmful material unnecessarily. Gerai may restrict access while it assesses a credible safety or legal concern.

4. Deception and impersonation

You must not:

• misrepresent a merchant’s identity, authority, location, affiliation, or product origin;
• impersonate another person, business, public body, or brand;
• create fake orders, reviews, enquiries, payment confirmations, or fulfilment records;
• use misleading scarcity, pricing, product claims, images, or interface patterns;
• conceal material product restrictions, defects, fees, or fulfilment conditions from buyers;
• phish for credentials or induce a person to disclose secrets through false pretences; or
• present AI-generated material as verified human fact when that distinction matters.

Merchants must review their storefront before publication and correct inaccurate catalogue, order, and business information promptly. Gerai’s narrow AI features do not transfer that responsibility away from the merchant.

5. Privacy and communications

You must handle personal data lawfully and in accordance with the role you perform. In particular, you must not:

• collect buyer data without a genuine, disclosed commerce purpose;
• use order data for unrelated surveillance, profiling, resale, or targeting without a lawful basis and required notice;
• access another merchant’s, buyer’s, or user’s data without authority;
• publish private communications or personal information without lawful justification;
• upload sensitive personal data that Gerai has not agreed to process;
• send spam, phishing, abusive, or unlawfully unsolicited messages; or
• continue direct communications after a recipient has lawfully objected or withdrawn permission.

Merchants are responsible for their buyer privacy notices, consent practices, retention, and responses to buyer rights requests. Gerai’s practices are described in the Privacy Policy and Singapore PDPA Notice.

6. Intellectual property

You may only upload or use product images, descriptions, logos, music, video, software, designs, and other material that you own or are authorised to use. You must not sell counterfeit goods, mislead buyers about brand affiliation, remove ownership notices, or use Gerai to distribute infringing copies.

Rights holders may report a specific storefront, product, image, or other material by emailing hello@gerai.shop. A useful report identifies the protected work or mark, the challenged material and URL, the reporter’s authority, the reason for the claim, and reliable contact details. Gerai may ask for verification or additional information before acting.

A merchant whose content is restricted may provide evidence of ownership, licence, authorisation, lawful exception, or mistaken identification. Gerai will assess the available information and any legal obligations that apply; this policy does not promise a particular statutory process in jurisdictions where it does not apply.

7. Platform and account abuse

You must not:

• access or attempt to access an account, system, data set, or function without authorisation;
• share, sell, steal, test, stuff, brute-force, or otherwise misuse credentials;
• bypass authentication, rate limits, merchant separation, payment flows, or security controls;
• probe, scan, exploit, or publicly disclose a vulnerability without Gerai’s prior written authorisation;
• introduce malware or send malformed requests intended to disrupt or compromise a system;
• overload the Services, create artificial traffic, or interfere with another person’s use;
• scrape, harvest, copy, or automate access at scale without written permission;
• reverse engineer the Services except to the limited extent a restriction cannot lawfully apply;
• use Gerai data or outputs to train a model without the rights and written permission required; or
• evade an enforcement measure by creating or using another account, domain, identity, or integration.

Normal buyer browsing, accessibility tools, authorised merchant workflows, and search-engine access that respects published technical controls are not prohibited merely because they are automated. Security researchers must obtain written scope before testing. Vulnerabilities should be reported through the channel on Security at Gerai.

8. AI use

When using an AI-assisted Gerai feature, you must not:

• submit material you lack the right or authority to process;
• request unlawful, exploitative, deceptive, or rights-infringing output;
• remove or obscure an AI label where disclosure is needed to avoid misleading someone;
• rely on output without human review for product accuracy, buyer commitments, safety, legal compliance, or another material decision;
• use generated images or text to impersonate a person or falsely depict a real product; or
• represent that an AI response is guaranteed, independently verified, or professional advice.

AI is narrow, fallible, and intended to escalate to people where judgement or an exception is required. Read the AI Transparency Notice.

9. Reporting

Report suspected misuse to hello@gerai.shop. Include only information relevant to the report. Where available, identify the storefront, merchant, product, order reference, URL, account, date, and the policy concern. Screenshots or other evidence can help, but do not send unlawful material or unnecessary personal data.

Do not knowingly make a false report, submit altered evidence, impersonate a rights holder, or use reporting to harass a merchant, buyer, or other person.

10. Enforcement and review

Gerai may assess the nature, evidence, severity, persistence, reach, legal context, prior conduct, and risk of harm. Depending on the circumstances, action may include asking for information or correction, warning the user, restricting content or a function, pausing an order pathway, suspending access, terminating access, preserving evidence, or making a legally required report.

Where reasonable and lawful, Gerai will seek proportionate action and may give the affected merchant or user an opportunity to explain or correct the issue. Immediate restriction may be appropriate for credible threats, child exploitation, fraud, malware, unauthorised access, severe privacy exposure, legal orders, or other urgent risk.

To ask Gerai to review an enforcement decision, reply to the notice or email hello@gerai.shop with the relevant account or content identifier, the decision being challenged, and evidence showing why it should change. Gerai does not promise a fixed review time or outcome on this public page.

Enforcement does not make Gerai the seller or transfer a merchant’s legal responsibility to Gerai. Gerai cannot guarantee that it will identify every violation before harm occurs.