← Back to Home

Acceptable Use Policy

Last Updated: October 10, 2026

This Acceptable Use Policy sets out what you may and may not do with Sootru (the "Service"). It is part of, and incorporated into, our Terms of Service. If you breach it we may remove content, restrict features, suspend, or terminate access, and, where appropriate, report the matter to the authorities.

Sootru's purpose is to prove that media is authentic and unaltered. Several rules below exist specifically to protect the integrity of that proof and the safety of the people who rely on it, including journalists, sources, and verification subjects.

1. You are responsible for your Content and conduct

You are solely responsible for the Content you capture, submit, upload, or verify, and for complying with the laws that apply to you. Becvora does not pre-screen Content and does not judge whether what media shows is true. Capturing or verifying media does not make it lawful to possess, share, or publish.

2. Prohibited content

Do not capture, upload, submit, or verify Content that:

  • is unlawful, or depicts or facilitates serious crime, including child sexual abuse material, terrorism or violent extremism, human trafficking, or incitement to violence;
  • you have no right to, including material that infringes copyright, trademark, or other intellectual property, or that breaches confidentiality or a non-disclosure obligation;
  • invades privacy or breaches data-protection or recording-consent law, including recording or sharing images of people where the law requires their consent;
  • is defamatory, harassing, threatening, or intended to intimidate, stalk, or endanger a person;
  • contains malware, or is designed to harm, probe, or interfere with any system.

3. Prohibited conduct toward the Service

Do not:

  • forge, alter, or fabricate verification data, signatures, or watermarks, or copy a watermark or signature from one file onto another;
  • manipulate a device clock, GPS, or sensors, use mock-location tools, or otherwise feed false capture context into the Service (this is especially serious in address verification, where it is a fraud attempt);
  • reverse engineer, decompile, or tamper with the app, extract signing secrets, or defeat security, attestation, or integrity controls, except to the limited extent the law allows despite the Terms;
  • use bots, scripts, or scrapers to access the Service or mass-download data, or exceed or circumvent rate limits or usage quotas (including by rotating IPs or devices);
  • attack the Service or its providers (for example by denial-of-service, injection, or credential attacks), or probe or scan systems without authorisation;
  • access another organization's or user's data, impersonate another person or organization, or misrepresent your affiliation or the origin of Content.

4. Submitting to organizations

If you submit media to an organization:

  • submit in good faith and only to organizations you intend to engage with;
  • provide accurate information; do not spam, flood, or send irrelevant or deliberately misleading submissions;
  • understand that the receiving organization decides whether to review, accept, reject, or flag your submission, and that your optional contact details are shared with it only for that submission.

5. Rules for organizations and their team members

If you use the dashboard on behalf of an organization:

  • Handle submitter and agent data responsibly. Use contact details only for the specific submission or verification they relate to, keep them confidential, do not add people to marketing lists, and do not disclose a submitter's or agent's identity without their consent. These obligations are set out in the Privacy Policy and the Data Processing Addendum.
  • Do not resell or redistribute submitted media or metadata, and do not use it to train artificial intelligence or machine-learning models, without the submitter's explicit consent.
  • Use blocking and rejection fairly. Block, flag, or reject submissions only for genuine editorial, safety, or legal reasons, never on discriminatory grounds or to target an individual unfairly.
  • Use Address Verification lawfully. If you enable Address Verification, you are the controller of the agent data, you must have a lawful basis and the agent's consent to participate, you must keep a human in the loop (fraud signals and reputation scores are decision support, not an automated rejection), and you must give the agent a way to contest an outcome.
  • Keep accounts secure. Protect credentials, do not share them outside your team, and use the security measures we require (including multi-factor authentication for internal administrators).
  • Do not claim endorsement. You may say you use Sootru; you may not claim to be endorsed, certified, or approved by Sootru or Becvora without our written consent.

6. Fair use and limits

The Service applies reasonable limits (for example capture, verification, detection, and API rate limits) to protect availability and prevent abuse. Do not attempt to evade them. We may adjust them.

7. Reporting abuse

To report content or conduct that breaches this policy, or a security issue, contact support@becvora.com (or legal@becvora.com for legal matters). For a suspected security vulnerability, please describe the issue without publicly disclosing a working exploit, so we can address it responsibly. For copyright specifically, use our Copyright and Takedown Policy.

8. Enforcement

We may investigate suspected breaches and take any action we consider appropriate, including removing or disabling access to Content, restricting features, suspending or terminating accounts, preserving and disclosing information where legally required, and pursuing legal remedies. We try to act proportionately, but we may act immediately where there is a risk to people, to the Service, or of legal liability.

Last reviewed: October 2026