Legal
Acceptable Use Policy
Last updated 5 November 2026 8 min read
This Acceptable Use Policy ("AUP") sets out the rules for using marabimadeit.co.ke, the Marabi assistant, and any website, application or system that Marabi Made It builds, hosts or operates. It exists to keep our services safe, lawful and reliable for everyone. It forms part of our Terms of Service, and a breach of it is a breach of those Terms.
At a glance
- Use our website, assistant and hosted systems lawfully and in good faith.
- Do not attack, probe or overload our systems, and do not use automation or the assistant to abuse them.
- Do not use anything we build or host for fraud, harassment, spam, malware, infringing content or other unlawful activity.
- If you find a security problem, report it to us under our disclosure policy instead of testing it yourself.
- We respond to breaches in steps, from a warning to suspension, and we tell you why.
This summary is for convenience. The full text below is what applies.
1.Purpose and scope
- 1.1This AUP applies to everyone who uses the Site at marabimadeit.co.ke, anyone who interacts with the Marabi assistant, our clients, and the users of any system that we host, manage or operate for a client ("Hosted Systems").
- 1.2Where we have built a system that the Client hosts itself, the Client is responsible for how that system is used and for enforcing its own rules. We recommend that every system we build has an acceptable use policy of its own, and we can help prepare one.
2.Definitions
- Abuse
- any use that breaches this AUP, the law, or the rights of others.
- Hosted Systems
- websites, applications, databases and other systems that we host, manage or operate for a Client.
- Malicious code
- software or scripts designed to disrupt, damage, gain unauthorised access to, or steal data from, a system or person.
- Automated access
- access by a script, bot, crawler or other tool rather than by a person using a browser in the ordinary way.
- You
- any person or organisation using the Site, the assistant or a Hosted System.
3.General principles
- 3.1You must use our services lawfully, honestly and with respect for others. You must comply with all laws that apply to you and to your use of our services, including the Computer Misuse and Cybercrimes Act, 2018, the Data Protection Act, 2019, the Copyright Act, 2001, the Consumer Protection Act, 2012 and the Penal Code.
- 3.2You must not use our services in a way that harms us, our clients, other users, our infrastructure or our providers, or that could reasonably be expected to.
- 3.3Where a rule is unclear, ask us. We would rather answer a question than resolve a problem.
4.Prohibited content
- 4.1You must not upload, publish, transmit or store, through our services or on a Hosted System, content that: is unlawful, defamatory, threatening, harassing or abusive; infringes copyright, trade marks or other intellectual property; contains or promotes child sexual abuse material, which we report to the authorities; incites violence, hatred or discrimination; is obscene or sexually explicit without lawful purpose and appropriate controls; or discloses another person's personal data without a lawful basis.
- 4.2You must not use our services to publish false or misleading information in a way that deceives consumers, including false product claims, fake reviews, fake prices or counterfeit goods, or to sell goods or services whose sale is unlawful or restricted in Kenya without the required licences.
- 4.3Content that is unlawful, harmful or infringing may be removed without notice where we reasonably need to act quickly to prevent harm.
5.Prohibited conduct
- 5.1You must not attempt to gain unauthorised access to the Site, to any system, account, network or data connected to it, or to other users' accounts, or help anyone else to do so.
- 5.2You must not introduce Malicious code; interfere with or disrupt the operation of our services, for example by denial-of-service attacks or by excessive requests; bypass or circumvent security, rate limits, access controls or consent mechanisms; or use our services to attack others.
- 5.3You must not scan, probe or test the vulnerability of our systems except in line with our Security & Responsible Disclosure policy, which provides a safe way to do so.
- 5.4You must not reverse engineer, decompile or extract source code from the Site or Hosted Systems except as the law allows, or copy the Site's design, 3D cards or code to pass them off as your own.
- 5.5You must not impersonate any person, including our principals, or misrepresent your relationship with us, or use our name or logo in a way that suggests we endorse you.
6.Automated access and the assistant
- 6.1You may browse the Site normally, and ordinary search-engine crawlers that respect our robots.txt file are welcome. You must not scrape the Site, or use automated access at a rate or in a way that degrades the service for others.
- 6.2The Marabi assistant is provided for individuals who want help understanding our services and preparing a project brief. You must not use it to send spam, automate enquiries, probe for hidden instructions or internal data, attempt to make it behave in ways it was not designed to, or overload it.
- 6.3We may limit, throttle or block access that we reasonably believe is automated abuse.
7.Messages, spam and marketing
- 7.1You must not use our services, or a Hosted System, to send unsolicited bulk or commercial messages, or messages that are deceptive, harassing or contain Malicious code, whether by email, SMS, WhatsApp or any other channel.
- 7.2Direct marketing to individuals requires a lawful basis and a working opt-out. The Data Protection Act, 2019 gives individuals the right to object to direct marketing, and you must honour that right promptly. Where we build messaging tools for you, you are responsible for obtaining and recording consent from recipients.
8.Payments, fraud and financial crime
- 8.1You must not use a Hosted System or a payment flow we build to commit or facilitate fraud, money laundering, terrorist financing, pyramid or Ponzi schemes, unlicensed deposit-taking or investment solicitation, or to process payments for goods or services you are not entitled to sell.
- 8.2You must comply with the terms of your payment providers, including Safaricom for M-Pesa, and with applicable anti-money-laundering laws. We may suspend a payment integration if we reasonably suspect misuse, and we may be required to report suspicious activity to the authorities.
- 8.3You must not attempt to defraud us, for example by chargebacks made in bad faith, forged proof of payment, or misrepresenting your identity or authority.
9.Additional rules for Hosted Systems
- 9.1If we host a system for you, you remain responsible for its content, for the lawfulness of its use, and for the actions of your users. You must keep your administrator credentials secure and tell us at once if you suspect they have been compromised.
- 9.2You must not use a Hosted System to host content or services unrelated to the work we agreed, run cryptocurrency mining, operate an open relay or proxy, or consume resources in a way that affects other clients on the same infrastructure.
- 9.3We may apply reasonable resource limits to Hosted Systems and will tell you before we do so unless we need to act urgently to protect the service.
10.Respect for intellectual property
- 10.1You must have the right to use any content, image, font, music, code or other material you supply to us or place on a Hosted System. We will remove content that we are told, in good faith, infringes copyright or other rights, and we may suspend repeat infringers.
- 10.2To report infringing content, write to us at the address below with: your contact details; a description of the work and where it appears; a statement that you are the owner or authorised to act for them, and that the use is not authorised; and your signature or name. We will review the notice promptly and may share it with the person who uploaded the content.
11.Reporting a breach
- 11.1If you see content or conduct that breaches this AUP, tell us at marabimadeit@gmail.com with the subject "AUP report". Please include the address of the page or system, a description of what you saw, and any screenshots.
- 11.2If you have found a security weakness, please do not test it further. Report it under our Security & Responsible Disclosure policy.
- 11.3We will acknowledge reports within three Business Days and tell you what action, if any, we have taken, subject to confidentiality and legal limits.
12.Enforcement
- 12.1We take a proportionate approach. Depending on the seriousness, we may: ask you to stop and explain the problem; remove or disable content; limit or throttle access; suspend an account or system; and, in serious or repeated cases, terminate our services under the Terms of Service.
- 12.2We may act immediately and without notice where necessary to protect people, our systems or the law, for example for illegal content, an active attack or a security risk.
- 12.3We may preserve evidence and report illegal activity to the police, the Directorate of Criminal Investigations, the Data Commissioner or other authorities, and cooperate with lawful requests.
- 12.4If we suspend or terminate your access, we will tell you why, unless the law prevents us, and you may reply in Writing and ask us to review our decision. We will respond within seven Business Days.
13.Responsibility and liability
- 13.1You are responsible for what you do with our services and for any loss or damage you cause. You agree to indemnify us as set out in the Terms of Service for claims arising from your breach of this AUP.
- 13.2We do not monitor all content and are not liable for content that others place on Hosted Systems. Our rights under this AUP do not create a duty to monitor or to act.
14.Changes and contact
- 14.1We may update this AUP as the law, our services and the risks change. The current version is at marabimadeit.co.ke/acceptable-use. Last updated 5 November 2026. Questions: marabimadeit@gmail.com.