3. Acceptable Use Policy

Effective date: 14 September 2026

This policy forms part of the Terms of Service. It exists for two reasons: to keep NASST working properly for everyone, and because Amazon requires us to pass certain obligations on to you. Breaching it can end your access, and in serious cases can end the service for everyone.

3.1 Use your own Amazon account

You may only connect an Amazon Selling Partner account that you own or are authorised to act for. Connecting someone else's account without their authority is a breach of this policy and, separately, of Amazon's terms.

If you manage accounts for clients, each account needs its own authorisation from the account holder, and you must have their permission to use a third-party tool with it.

3.2 Data taken from Amazon

Amazon's Data Protection Policy and Acceptable Use Policy govern what may be done with data obtained through the Selling Partner API, and those rules apply to you as well as to us. You must not:

• Share Amazon data with anyone who is not entitled to it
• Combine your Amazon data with another seller's to produce market intelligence
• Sell, license or publish Amazon data obtained through NASST
• Use it for anything other than running your own Amazon business

Amazon's policy specifically prohibits aggregating data across selling partners. We do not do it, and you must not use NASST to do it.

3.3 Do not overload the service

NASST applies rate limits, both to protect Amazon's API and to stop one customer's bulk job slowing everyone else's. You must not:

• Attempt to bypass, evade or defeat rate limits
• Script or automate NASST beyond ordinary interactive use
• Run bulk operations designed to extract the whole catalogue rather than to

research products you are actually considering

• Operate multiple accounts to multiply your allowance

If you have a genuine need for higher volume, ask us. Rate limits are a shared resource, not an obstacle.

3.4 Do not attack or probe the service

You must not:

• Attempt to access another customer's data, or any account that is not yours
• Probe, scan or test the security of NASST without our **prior written

permission**

• Attempt to defeat authentication, session handling or customer separation
• Introduce malware, or attempt to disrupt or degrade the service
• Reverse engineer, decompile or disassemble the software

Reporting a vulnerability is welcome and is not a breach of this policy. If you find a security problem, tell us at info@nasst.co.uk and give us a reasonable chance to fix it before disclosing it. We will not pursue you for a good-faith report made under those conditions.

Do not, under any circumstances, point a security scanner at Amazon's endpoints through NASST. That is our access you would be risking.

3.5 Do not build a competing product from it

You must not use NASST to create a competing or derivative service, extract its data in bulk for that purpose, or resell access.

3.6 Do not misrepresent NASST

You must not claim NASST is endorsed by, affiliated with or provided by Amazon. It is not.

3.7 Lawful use

You must use NASST lawfully, and must not use it to sell counterfeit, stolen, recalled, unsafe or otherwise prohibited goods, or in any way that infringes someone else's intellectual property.

Whether you are permitted to sell a particular product is your responsibility. NASST's eligibility checks report what Amazon said at the time. They are not permission, and they say nothing about whether a sale is lawful.

3.8 What happens if you breach this policy

Depending on severity we may: contact you; apply temporary rate limits; suspend your account; or terminate it.

For anything that puts our Amazon API access at risk, we will suspend first and discuss afterwards. We are sorry to be blunt about it, but the alternative is risking the service for every customer.

Where a breach appears to be a misunderstanding rather than deliberate, we will talk to you first.

3.9 Reporting misuse

If you believe someone is misusing NASST, tell us at info@nasst.co.uk.