Acceptable Use Policy

1. Purpose

1.1This Acceptable Use Policy sets out what Bridgemont will and will not sell, what may and may not be supplied to Bridgemont, and what may and may not be published, transmitted, or done through the Bridgemont Sites, together with the action Bridgemont Technologies LLC may take when those limits are exceeded. Bridgemont is the seller on every sale made through the Bridgemont Sites: it buys Digital Products from Suppliers and resells them to Buyers in its own name.

1.2Its purpose is to protect Buyers from harm and deception, to ensure that Bridgemont, as the seller of every Digital Product, sells only what it may lawfully and properly sell, to protect Suppliers and their products from abuse, to protect the licensed payment institutions and other financial partners engaged by Bridgemont, to preserve the security and availability of the Bridgemont Sites, to reduce fraud, and to enable Bridgemont to meet its obligations under Applicable Law and under the rules of the payment card networks.

1.3This Policy is not exhaustive. Conduct may be unacceptable without being named here, and Bridgemont may act against conduct that defeats the purpose of this Policy even where no specific clause addresses it.

2. Scope

2.1This Policy forms part of, and is incorporated by reference into, the Supplier Terms and the Buyer Terms. Accepting either document constitutes acceptance of this Policy.

2.2This Policy binds every User, including Suppliers, Buyers, Integrators, persons accessing the API, persons administering an Account for another person, and employees and contractors of a User acting in that capacity.

2.3This Policy applies to all use of the Bridgemont Sites, including Product Pages, Checkout, the Dashboard, the API, Digital Products offered or supplied to Bridgemont or sold by Bridgemont, Content uploaded or transmitted, communications sent through features of the Bridgemont Sites, and any Order placed with Bridgemont.

2.4Compliance with this Policy is not a substitute for compliance with Applicable Law. A User remains responsible for its own legal and regulatory obligations, and permission granted under this Policy does not constitute advice that particular conduct is lawful.

2.5Where this Policy conflicts with the Supplier Terms, the Buyer Terms, or the Supplier Agreement, those documents prevail. Where it conflicts with a mandatory requirement of Applicable Law or of a payment card network, that requirement prevails.

3. Definitions

Account: an account created on or through the Bridgemont Sites, including a Supplier’s Dashboard account, a Buyer account, a guest record generated at Checkout, and any API or administrative credential issued by Bridgemont.
API: any application programming interface, webhook, software development kit, or programmatic interface Bridgemont makes available for access to the Bridgemont Sites. Bridgemont does not currently offer a public API.
Applicable Law: any law, regulation, rule, sanctions measure, export control, payment card network rule, or binding order of a competent authority applying to Bridgemont, to a User, or to a transaction.
Bridgemont: Bridgemont Technologies LLC, a limited liability company organised under the laws of Wyoming, United States (state entity number 2026-002090864), with its principal place of business at 1309 Coffeen Avenue, Suite 20769, Sheridan, WY 82801, United States, the seller on every sale made on the Bridgemont Sites. Bridgemont buys Digital Products from Suppliers and resells them to Buyers in its own name. “we”, “us”, and “our” refer to Bridgemont.
Bridgemont Sites: the websites Bridgemont operates for its own sales: bridgemont.io, and the Product Pages and Checkout on checkout.bridgemont.io, together with order confirmation and delivery.
Buyer: any natural or legal person who places, or attempts to place, an Order with Bridgemont through the Bridgemont Sites.
Buyer Terms: the Bridgemont Buyer Terms, which govern each sale by Bridgemont to a Buyer. The Buyer’s contract is with Bridgemont only.
Checkout: the payment step operated by Bridgemont on checkout.bridgemont.io, reached from a Product Page, through which Bridgemont accepts Orders and takes payment from Buyers, by card, in its own name.
Content: any material a User uploads, publishes, transmits, stores, links to, or makes available through the Bridgemont Sites, including Digital Products and the files and licence keys comprising them, product descriptions, images, and other product information supplied to Bridgemont, communications sent through features of the Bridgemont Sites, and User Content.
Dashboard: the private developer dashboard in which an invited Supplier deals with Bridgemont as its vendor: uploading licence keys and files, submitting draft product descriptions and price requests, declaring Supplier Websites, and seeing purchase statements and payments.
Digital Product: a digital product of a type listed in clause 12.1 — such as an app or utility, a licence key or activation code, a game mod (sold only where the game’s publisher allows it, as clause 12.5 provides), gaming overlay software as defined in clause 12.1(e), a plugin, a template, theme or UI kit, an e-book or guide, or a downloadable course — delivered by electronic means and sold as a one-time purchase, that a Supplier supplies or offers to supply to Bridgemont, or that Bridgemont sells to a Buyer, through the Bridgemont Sites. Bridgemont sells no physical goods.
Enforcement Action: any measure taken by Bridgemont under clause 51, including removal of Content, ceasing to sell a Digital Product, restriction of a feature, imposition of limits, suspension, termination, declining or cancelling an Order, refusing or suspending a Supplier Website, and holding or withholding payment of the wholesale price owed to a Supplier to the extent permitted under the Supplier Agreement.
Integrator: a person who builds, integrates, or operates software that interacts with the Bridgemont Sites or the API, whether on their own behalf or for another User. A Supplier is not an Integrator only because it makes the Digital Products it supplies.
Malicious Code: any software, script, or instruction designed or reasonably capable of impairing, damaging, disabling, gaining unauthorised access to, exfiltrating data from, or covertly monitoring a system, device, network, or account without the informed consent of the person entitled to control it, including viruses, worms, ransomware, spyware, stalkerware, keyloggers, rootkits, credential harvesters, remote access trojans, exploit kits, and botnet or command-and-control tooling.
Order: a Buyer’s request to purchase one or more Digital Products from Bridgemont, submitted through Checkout.
Out-of-Scope Product: any product or service other than a Digital Product, which Bridgemont does not buy or sell, as described in clause 12.
Personal Data: any information relating to an identified or identifiable natural person, as defined in Regulation (EU) 2016/679 (the General Data Protection Regulation), and any information treated as personal information under other data protection law that applies.
Policy: this Acceptable Use Policy, as amended from time to time in accordance with clause 58.
Product Page: Bridgemont’s public page for a single Digital Product, hosted by Bridgemont on checkout.bridgemont.io, on which Bridgemont offers that Digital Product for sale in its own name, shows its price in US dollars and that it is sold by Bridgemont, and from which the Buyer goes to Checkout. Every Digital Product Bridgemont sells, and its Supplier, is listed on Bridgemont’s Approved developers page. Buyers usually reach a Product Page from the Buy button on a Supplier Website. The Supplier does not operate the Product Page, and every sale made through it is made by Bridgemont.
Prohibited Product: any product, service, or Content falling within clause 11, which may not be offered or supplied to Bridgemont, sold, or transmitted through the Bridgemont Sites in any circumstances, and for which no approval is available.
Restricted Party: any person, vessel, entity, or body designated under Sanctions, owned or controlled by such a person to the extent that ownership or control causes the designation to extend to them, or located in or ordinarily resident in a territory subject to comprehensive Sanctions.
Sanctions: economic, financial, or trade sanctions, embargoes, or restrictive measures administered or enforced by the United States (including by the Office of Foreign Assets Control of the US Department of the Treasury and by the US Department of State) or by the United Nations Security Council, and, where they apply to Bridgemont or to a transaction, by the European Union or the United Kingdom.
Supplier: a company, or a sole trader aged 18 or over trading as a business, that makes software or holds the right to sell it, has been invited by Bridgemont to supply it, sells licences for Digital Products to Bridgemont at a fixed wholesale price per product set in its purchase agreement, and grants Bridgemont a licence to resell them. A Supplier is Bridgemont’s vendor. It is not the seller, does not take the Buyer’s payment, has no contract with the Buyer, gets no Buyer data, and does not contact Buyers.
Supplier Agreement: the agreement between a Supplier and Bridgemont governing the supply of Digital Products to Bridgemont, the fixed wholesale price Bridgemont pays, payment, the reserve, refunds, chargebacks, adjustments, and the rules for Supplier Websites.
Supplier Website: any website, app, Discord server, YouTube channel, or other channel operated by or for a Supplier that links to a Product Page. Each Supplier Website must be declared to Bridgemont, and accepted by it, before it links to a Product Page, as clause 6.10 requires.
User: any person who accesses or uses the Bridgemont Sites in any capacity, including a Supplier, a Buyer, an Integrator, a person accessing the API, a person administering an Account, and an employee or contractor of a User acting in that capacity.
User Content: any review, rating, comment, image, or other material a User submits, uploads, or transmits to or through the Bridgemont Sites.

3.1In this Policy, the capitalised terms below have the meanings given. Terms defined in the singular include the plural and vice versa, and a reference to a clause is a reference to a clause of this Policy unless stated otherwise.

3.2Several terms defined below are also defined in the Buyer Terms. Because this Policy binds Users who are not Buyers, a definition below may be drawn more widely than its counterpart there. The definition below governs the application of this Policy to every User. The Buyer Terms definition governs the construction of the Buyer Terms, and prevails in any question arising under that document.

3.3In this Policy, a reference to the Bridgemont Sites includes the Dashboard, unless the context requires otherwise.

4. General Principles

4.1Bridgemont applies this Policy according to substance rather than form. Conduct is assessed by what it does and what it is for, not by how it is labelled, categorised, or described in a product description.

4.2Bridgemont enforces this Policy proportionately. Where the circumstances allow, a first or minor breach attracts notice and an opportunity to remedy the breach before further action is taken. Serious, deliberate, repeated, or unlawful breaches attract immediate action.

4.3Bridgemont may act immediately and without prior notice where it reasonably considers that doing so is necessary to protect a Buyer, a Supplier, a third party, the Bridgemont Sites, or a payment partner from harm, to prevent or limit a breach of Applicable Law, to comply with a binding order, or to preserve evidence.

4.4Apart from the review Bridgemont carries out before a Supplier’s products go on sale, and its checks of each Supplier Website before its Buy links work and every month after that, Bridgemont does not generally monitor Content, and is under no general obligation to do so. Nothing in this Policy imposes on Bridgemont an obligation to detect a breach, and Bridgemont’s failure to act on a breach it has not identified is not a waiver of any right. This clause does not limit Bridgemont’s obligations to Buyers under the Buyer Terms.

4.5A failure or delay by Bridgemont in exercising a right under this Policy does not waive that right, and a single or partial exercise of a right does not prevent its further exercise.

5. Lawful Use

5.1A User must use the Bridgemont Sites only for lawful purposes and in compliance with Applicable Law.

5.2A User must comply with the law of the United States, with the law of the jurisdiction in which it is established, and with the law of each jurisdiction into which it offers, supplies, or markets a Digital Product. Where those requirements differ, the User must satisfy each of them.

5.3A User must hold every registration, licence, authorisation, permit, and consent required for its activity, must maintain them in force, and must provide evidence of them to Bridgemont on request.

5.4A User must not use the Bridgemont Sites to do indirectly anything it is prohibited from doing directly, and must not use the Bridgemont Sites to assist, facilitate, procure, or conceal a breach of Applicable Law by any person.

6. Supplier Responsibilities

6.1Bridgemont is the seller of each Digital Product and is responsible to the Buyer for the sale. A Supplier is responsible to Bridgemont for the Digital Product it supplies, including its description, its licence terms, its fitness for the purpose described, its conformity, its lawfulness, and the intellectual property rights in it, in each market into which Bridgemont sells it. A Supplier that misdescribes a Digital Product exposes Bridgemont directly, because Bridgemont sells on the strength of the description the Supplier writes.

6.2A Supplier must describe each Digital Product it supplies to Bridgemont accurately and completely, including what is supplied, what is not supplied, any licence restriction, the duration of any time-limited licence, any system requirement, and any material limitation or dependency, so that Bridgemont can present that information to Buyers before purchase. Each Digital Product has a fixed wholesale price set in the Supplier’s purchase agreement. Bridgemont alone sets the retail price, and a Supplier’s price request is advice only.

6.3A Supplier must not publish refund, cancellation, or guarantee terms to Buyers. Bridgemont’s Refund Policy governs refunds and cancellations on every sale, and Bridgemont honours the mandatory statutory rights a Buyer holds under the Buyer Terms. A Supplier must not state or imply to any person that a Buyer’s refund or cancellation rights depend on the Supplier.

6.4A Supplier must identify itself accurately to Bridgemont, including its legal name, legal form, registered address, and, for a company, its registration and beneficial owners, must not conceal or misrepresent the identity of the person who is in fact supplying the Digital Product, and must not present itself to any person as the seller of a Digital Product Bridgemont sells.

6.5A Supplier must be able to supply what it offers to Bridgemont. It must not offer Bridgemont a product it cannot supply, does not intend to supply, or has no right to supply.

6.6A Supplier must not use a Product Page, or a link to one, to obtain payment for goods or services supplied outside the Bridgemont Sites, and must not offer a product to Bridgemont in order to disguise the supply of anything else, whether to evade a Bridgemont policy, a card network rule, a verification requirement, or a legal obligation.

6.7Bridgemont answers all Buyer support. A Supplier gives Bridgemont technical help behind the scenes: it must provide the information and technical support Bridgemont reasonably requests about what it supplies, answering in Bridgemont’s helpdesk within 72 hours, and must maintain a functioning contact channel for Bridgemont. A Supplier never contacts Buyers about Bridgemont’s sales and never promises a Buyer a refund. Where a Buyer contacts a Supplier about an Order, the Supplier refers the Buyer to Bridgemont at [email protected] and tells Bridgemont. Enquiries, complaints, refunds, and disputes are handled by Bridgemont.

6.8A Supplier must comply with the Supplier Agreement in respect of verification, payment of the wholesale price, the reserve, refunds, chargebacks, and adjustments, and must comply with the Intellectual Property Policy in respect of infringement claims.

6.9Bridgemont works with a small, closed group of Suppliers, by invitation from its waiting list, and accepts as Suppliers only companies and sole traders established in the European Union, the United Kingdom, or the United States. Bridgemont verifies every Supplier before any of its Digital Products goes on sale: it verifies the Supplier’s identity and, for a company, its registration and beneficial owners, and screens it against sanctions lists. Bridgemont screens the Supplier, and the wallet it pays, again before each payment.

6.10A Supplier must follow the website rules in clause 13 of the Supplier Agreement for every Supplier Website. In short: the Supplier declares each Supplier Website to Bridgemont, and Bridgemont must accept it, before it links to a Product Page, and Bridgemont lists it with its acquirer; each Buy button, or other link to buy a Digital Product Bridgemont sells, links only to that Digital Product’s Product Page, and the exact seller line the Supplier Agreement sets out appears right next to it; and a price is shown only through Bridgemont’s live price badge, or not at all. The Supplier must not place a Product Page in a frame or popup, and must not publish refund, cancellation, or guarantee terms of its own for a Digital Product Bridgemont sells, or licence terms other than a licence Bridgemont has approved under the Supplier Agreement. A Supplier Website must itself comply with this Policy. Bridgemont checks each Supplier Website before its Buy links work, and again every month.

6.11A Supplier must upload into Bridgemont, before a Digital Product goes on sale, the licence keys, activation codes, or files Bridgemont delivers from, and must keep them valid and sufficient for expected sales. A key uploaded to Bridgemont must not be sold, given away, or activated elsewhere. Key generation by the Supplier’s own server at the moment of sale is not offered at launch.

7. Buyer Responsibilities

7.1A Buyer must provide accurate, current, and complete payment and contact information, and must use only a payment method it is authorised to use.

7.2A Buyer must comply with the licence terms applying to each Digital Product it acquires, including any restriction on copying, redistribution, resale, sublicensing, or the number of permitted users or devices.

7.3A Buyer must not acquire a Digital Product for the purpose of infringing the rights of the Supplier or a third party, of extracting and redistributing its contents, or of circumventing a technical protection measure applied to it.

7.4A Buyer must not abuse refund, dispute, or chargeback processes, and should raise a complaint with Bridgemont at [email protected] before initiating a chargeback, without limiting any right the Buyer holds under clause 16.4 of the Buyer Terms. A Buyer brings refunds and complaints to Bridgemont, and never needs to contact the Supplier first.

7.5A Buyer must not misuse features of the Bridgemont Sites, including by submitting User Content that breaches any of clauses 25 to 44, by harassing a Supplier, or by attempting to obtain a Digital Product without payment.

8. Account Security

8.1A User is responsible for all activity conducted through its Account, including activity by its employees, contractors, and any person to whom it grants access, whether or not that activity was authorised.

8.2A User must keep its credentials confidential, must not share them, must not sell, transfer, rent, or lend an Account, and must enable multi-factor authentication where Bridgemont makes it available.

8.3A User must issue individual credentials to each person requiring access, must not use shared or generic accounts for administrative functions, and must revoke access promptly when a person ceases to require it.

8.4A User must protect any API key, access token, webhook secret, or signing key issued to it, must not embed such a credential in client-side code or in a public repository, and must rotate it promptly on suspicion of exposure.

8.5A User must notify Bridgemont at [email protected] without undue delay on becoming aware of any unauthorised access to, or compromise of, its Account or credentials.

8.6Bridgemont may require a credential reset, may invalidate a session or key, and may impose additional authentication requirements where it reasonably suspects compromise.

9. Integrity of the Bridgemont Sites

9.1A User must not interfere with, degrade, or attempt to circumvent the operation, security, or integrity of the Bridgemont Sites, or with any other User’s use of them.

9.2A User must not circumvent or attempt to circumvent a fraud control, risk score, velocity limit, verification step, authentication requirement, rate limit, quota, entitlement check, licence enforcement mechanism, or geographic restriction.

9.3A User must not access, or attempt to access, an area of the Bridgemont Sites, an Account, a Product Page, or data it is not authorised to access, whether by exploiting a defect, by manipulating a request, by enumerating identifiers, by escalating privilege, or by any other means.

9.4A User must not create an Account, or procure another person to create an Account, in order to evade an Enforcement Action previously applied to it or to a business it controls, and must not operate multiple Accounts to disguise the scale, nature, or ownership of its activity.

9.5A User must not misrepresent its relationship with Bridgemont, must not present itself as the seller of a Digital Product Bridgemont sells or as Bridgemont’s agent, partner, or representative, must not state or imply that Bridgemont endorses or certifies it or its products, and must not use Bridgemont’s name, marks, or branding except as expressly permitted.

10. Prohibited Conduct

10.1A User must not use the Bridgemont Sites to defraud, deceive, or mislead any person, whether as to the nature, origin, quality, price, availability, or legality of a Digital Product, or as to the identity of the person supplying it.

10.2A User must not use the Bridgemont Sites to harass, threaten, stalk, intimidate, defame, or extort any person, or to incite another person to do so.

10.3A User must not use the Bridgemont Sites to infringe the intellectual property, privacy, publicity, confidentiality, or contractual rights of any person.

10.4A User must not use the Bridgemont Sites to distribute Malicious Code, to compromise a system or account, or to provide a service whose purpose or predominant use is to enable another person to do so.

10.5A User must not use the Bridgemont Sites to conduct, facilitate, or conceal money laundering, terrorist financing, sanctions evasion, tax evasion, bribery, or any other financial crime.

10.6A User must not use the Bridgemont Sites to distribute material that sexually exploits or endangers a child, that promotes terrorism, or that incites violence or hatred.

10.7A User must not use the Bridgemont Sites in a manner that damages Bridgemont’s reputation or that of its financial partners, or that exposes Bridgemont or a financial partner to regulatory censure, network fines, or termination of a partner relationship.

10.8A User must not attempt, assist, commission, or conspire in any of the foregoing, and conduct is prohibited whether carried out directly, through an agent, or through an automated system.

11. Prohibited Products

11.1The following may not be offered or supplied to Bridgemont, sold, promoted, or transmitted through the Bridgemont Sites in any circumstances, and no approval, exception, or condition is available for them.

11.2Counterfeit and infringing material: counterfeit goods; goods bearing an unauthorised trademark or a mark confusingly similar to one; pirated, cracked, keygenned, or otherwise unlawfully modified software; unauthorised copies of media, courses, ebooks, fonts, templates, or datasets; licence keys, serial numbers, or activation codes obtained or distributed without the rightsholder’s authority; and services or tools whose purpose is to defeat licensing, digital rights management, or technical protection measures.

11.3Compromised access: stolen, hacked, or otherwise unlawfully obtained accounts or credentials; account or subscription sharing sold in breach of the underlying provider’s terms; access tokens, cookies, or session data belonging to another person; leaked or scraped credential databases; and services offering to obtain, recover, or resell another person’s account.

11.4Malicious and offensive tooling: Malicious Code of any kind, including ransomware and ransomware-as-a-service, spyware, stalkerware, keyloggers, remote access trojans, and rootkits; credential-theft tools; exploit kits and weaponised exploits offered for offensive use; botnets, booters, stressers, and denial-of-service services; phishing kits, phishing pages, and phishing-as-a-service; SIM-swap, one-time-password interception, and services that get around multi-factor authentication; carding tools, card generators, card checkers, and bulk lists of payment credentials; and hacking, account-takeover, or intrusion services offered against systems the purchaser does not control.

11.5Falsified identity and documents: forged, altered, or fraudulently obtained identity documents, passports, driving licences, residence permits, or visas; counterfeit diplomas, certifications, professional qualifications, or employment records; fake utility bills, bank statements, invoices, or proof-of-address documents; synthetic identity packages; and services producing, supplying, or assisting with any of them, including for the purpose of defeating an identity or age verification control.

11.6Unlawful distribution of protected content: services or subscriptions providing unauthorised access to television, film, sport, or music, including unlicensed streaming services, restream credentials, and configured devices or playlists; and any Digital Product whose predominant purpose is to enable copyright or trademark infringement.

11.7Controlled and regulated substances: illegal drugs; novel psychoactive substances; precursor chemicals; medicines of any kind, whatever authorisation is held; and products marketed as circumventing drug testing.

11.8Financial and investment abuse: pyramid, Ponzi, chain-letter, matrix, and cash-gifting schemes; multi-level marketing whose returns derive predominantly from recruitment; investment schemes offering guaranteed, risk-free, or implausible returns; signal, copy-trading, or portfolio services that constitute regulated investment advice or portfolio management, whatever authorisation is held; romance, advance-fee, recovery-room, and impersonation-based fraud in any form; and tooling, scripts, templates, or datasets marketed for use in such schemes.

11.9Deceptive artificial-intelligence products: models, applications, prompts, datasets, or services marketed or predominantly usable for identity fraud, voice or likeness cloning intended to deceive, synthetic identity documents, non-consensual intimate imagery, automated social engineering, examination or verification circumvention, or the mass generation of deceptive reviews, comments, or personas.

11.10Unlawfully restricted goods: goods, software, or technology whose supply to the recipient would breach Sanctions or export controls; items subject to a comprehensive embargo; child sexual abuse material and any material sexualising a minor; terrorist content; and any product, service, or Content the offering of which is a criminal offence under US federal or state law or the law of the market into which it is offered.

11.11Gambling: gambling, betting, lotteries, prize competitions involving a stake, and social casino products.

11.12Adult content and services: adult content and adult services, including sexual services, escort services, and anything facilitating human trafficking.

11.13Weapons: weapons, ammunition, and related components and technology.

11.14Tobacco, alcohol, and cannabinoids: tobacco, nicotine, alcohol, and cannabinoid products.

11.15Health products: pharmaceuticals, medical devices, products making health claims subject to regulatory control, and nutritional supplements making therapeutic claims.

11.16Regulated financial services: payment services, electronic money, credit, insurance, investment services, and crypto-asset services, and any product through which such a service is offered.

11.17Other businesses: marketplaces on which third parties sell their own goods or services; virtual private network, proxy, and anonymisation services; ticket resale; telemarketing and outbound calling services; data brokerage; debt collection, credit repair, and debt advice; and charitable and political fundraising.

12. Products Outside Bridgemont’s Scope

12.1Bridgemont sells only these digital products, each supplied by electronic means as a download, a licence key or an activation code, and each sold as a one-time purchase: (a) software, including licence keys and activation codes; (b) templates, themes and UI kits; (c) e-books and guides; (d) courses and tutorials supplied as downloadable files; and (e) gaming overlay software, meaning software that shows information on screen using only data the game or platform officially exposes (for example performance, stream, chat or voice overlays), that does not read or modify game memory, inject code, automate input or give a competitive advantage, and whose use the game publisher’s terms allow. It does not buy or sell any other product or service — including physical goods, services, subscriptions, memberships, access passes or other grants of access to a hosted service, accounts of any kind, gift cards and vouchers, and in-game items or in-game currency — and there is no approval process through which an Out-of-Scope Product can be brought within scope.

12.2A Supplier that offers Bridgemont an Out-of-Scope Product, whether on its own or bundled with a Digital Product, is declined, and the Out-of-Scope Product will not be sold. A Digital Product within scope remains subject to clause 11 and to every other clause of this Policy.

12.3Bridgemont may decline any Supplier, and any product, that it cannot support, whether for legal, regulatory, risk, reputational, or operational reasons or because its licensed payment partners will not support it. Bridgemont need not give reasons save where Applicable Law requires them, and is under no obligation to buy or sell any product a Supplier offers.

12.4Any approval, permission, or exception previously given by Bridgemont for a product or activity that now falls within clause 11 or outside the scope described in clause 12.1 is withdrawn.

12.5Apps, utilities, plugins and game mods are software within clause 12.1(a). A game mod is a file or program that changes or adds to a game, such as new maps, skins, missions or interface changes. Bridgemont sells a game mod only where the game publisher’s terms allow it, and only if it gives no advantage over other players in online play. Software that shows information on screen over a game is gaming overlay software and must also meet clause 12.1(e).

13. Fraud

13.1A User must not use the Bridgemont Sites to obtain money, a Digital Product, Personal Data, or any other benefit by deception.

13.2A Supplier must not place, or procure the placing of, an Order that does not correspond to a genuine purchase by a genuine Buyer, must not use its own payment instruments to buy its own Digital Products from Bridgemont other than for bona fide testing disclosed to Bridgemont in advance, and must not supply to Bridgemont products belonging to another person in order to disguise who is in fact supplying them.

13.3A User must not use a payment instrument it is not authorised to use, must not use stolen, counterfeit, or synthetic payment credentials, and must not test the validity of payment credentials through the Bridgemont Sites.

13.4A User must not supply false, incomplete, or misleading information to Bridgemont at onboarding, during verification, in connection with a dispute, or at any other time, and must correct information that becomes inaccurate.

13.5A User must not structure, split, layer, or route transactions in order to disguise their nature, value, origin, destination, or beneficiary, or to evade a limit, threshold, verification requirement, or reporting obligation.

14. Payment Abuse

14.1A User must not use the Bridgemont Sites to transmit or obtain funds otherwise than in payment for a genuine purchase of a Digital Product from Bridgemont, and must not use the Bridgemont Sites as a money transmission, remittance, escrow, or cash-access mechanism. Bridgemont does not process payments for Suppliers or for anyone else.

14.2A Supplier must not act as a front for another person, must not permit another person to supply products to Bridgemont through its Account, and must not describe or categorise a Digital Product in a way that misstates what the Buyer is paying for.

14.3A User must not manipulate a price, a currency, or a product description in order to obtain a more favourable payment outcome than the genuine sale warrants.

14.4A Supplier must not induce a Buyer who is buying from Bridgemont to pay the Supplier, or anyone other than Bridgemont, for a Digital Product Bridgemont sells, to use an alternative payment method in order to avoid Bridgemont’s controls, or to disguise the nature of a purchase.

14.5This clause supplements, and does not limit, the prohibited payment activity provisions of the Supplier Agreement.

15. Chargeback Abuse

15.1A Buyer must not initiate a chargeback in respect of a transaction it authorised and a Digital Product it received as described, and must not represent to an issuer that a transaction was unauthorised, undelivered, or not as described where that is untrue.

15.2A Supplier must not solicit, encourage, or coordinate chargebacks, must not give Bridgemont false or fabricated evidence for use in a dispute, and must not attempt to deter a Buyer from exercising a legitimate dispute right.

15.3Bridgemont answers every chargeback on its own merchant account. Bridgemont carries card-fraud chargebacks, goodwill refunds and its own promotions. A refund or chargeback caused by a fault in the Digital Product — because it was faulty or not as described — and fraud the Supplier caused are deducted from the Supplier’s next statement under the Supplier Agreement. A Buyer’s refund never waits on that deduction. Where disputes and fraud reports on a Supplier’s Digital Products reach the limits in the Supplier Agreement, Bridgemont may raise the reserve, stop selling the Digital Products concerned, suspend the Supplier, or terminate.

15.4Bridgemont may restrict, suspend, or terminate an Account whose dispute activity indicates abuse, and may decline further Orders from a Buyer whose chargeback history indicates a pattern of unfounded claims.

16. Money Laundering

16.1A User must not use the Bridgemont Sites to launder the proceeds of crime, to finance terrorism, to finance proliferation, or to conceal the origin, ownership, or destination of funds.

16.2A User must not refuse, obstruct, or delay a verification request, must not provide false or forged verification material, and must not conceal the identity of a beneficial owner or of a person on whose behalf it is acting.

16.3Bridgemont carries out the checks on Suppliers described in clause 6.9, monitors activity, and screens transactions to the extent its licensed payment partners and the card network rules require, and to manage its own risk. It may require documentation at onboarding, at any time thereafter, and as a condition of continued payment of the wholesale price.

16.4Bridgemont may report suspected financial crime to the police or another competent authority. Bridgemont is not a financial institution. Card processing and acquiring on Bridgemont’s sales are performed for Bridgemont by licensed payment institutions engaged by Bridgemont, and Bridgemont does not perform those regulated payment services itself.

16.5Bridgemont may suspend an Account, decline an Order, and retain or withhold payment of the wholesale price owed to a Supplier to the extent permitted under the Supplier Agreement, where required to do so by Applicable Law or where it reasonably suspects conduct falling within this clause. Where the law or an order of a competent authority prevents disclosure, Bridgemont may be unable to state the reason for an Enforcement Action taken under this clause.

17. Sanctions Compliance

17.1A User must not use the Bridgemont Sites in breach of Sanctions, and must not be, act for, or transact with a Restricted Party through the Bridgemont Sites.

17.2A User represents on each occasion it uses the Bridgemont Sites that neither it, nor any person owning or controlling it, nor any person for whom it acts, is a Restricted Party, and that no Digital Product it offers or acquires is destined for a Restricted Party or for a use prohibited under Sanctions.

17.3Bridgemont screens transactions, Suppliers, and other counterparties against applicable designation lists, and may block, reject, or freeze a transaction, decline an Order, withhold payment to a Supplier, and restrict or terminate an Account, where required or permitted by Sanctions.

17.4Where Sanctions require funds to be frozen, Bridgemont will freeze them and will deal with them only as the competent authority directs. Bridgemont may be prohibited from releasing frozen funds, from explaining why they were frozen, or from confirming that a freeze has occurred.

17.5Bridgemont gives effect to Sanctions imposed by the United States, first among them those administered by the Office of Foreign Assets Control, and by the United Nations Security Council. It gives effect to the Sanctions of the European Union and the United Kingdom where they apply to Bridgemont or to a transaction, and to other Sanctions regimes only to the extent it may lawfully do so.

18. Export Controls

18.1A User must comply with all export control, re-export, transfer, and technology-transfer restrictions applicable to a Digital Product it offers, supplies, acquires, or accesses through the Bridgemont Sites.

18.2A User must not supply, or make available for download in a controlled destination, software or technology whose export is restricted, including cryptographic software above a controlled threshold, intrusion software, cyber-surveillance items, and dual-use items, without holding every licence and authorisation required.

18.3A User must not supply a Digital Product where it knows or has reason to believe that the product is intended for a prohibited end use, including a military, nuclear, chemical, biological, missile, or internal-repression end use.

18.4Bridgemont may impose geographic restrictions on the availability of a Digital Product, may require a User to evidence its export compliance, and may decline to make a Digital Product available in a market where doing so would place Bridgemont in breach.

19. Intellectual Property Violations

19.1A Supplier must hold every right necessary to supply its Digital Products to Bridgemont, to grant Bridgemont a licence to resell them, and to authorise the reproduction, distribution, and publication of the Content it provides. Every other User must hold every right necessary for the Content it makes available through the Bridgemont Sites.

19.2A User must not infringe copyright, trademark, design right, patent, database right, trade secret, moral right, or any other intellectual property right, and must not offer a Digital Product whose predominant purpose is to enable another person to do so.

19.3A User must not use a third party’s trademark, brand, logo, product name, or trade dress in a manner likely to cause confusion, to imply authorisation or affiliation that does not exist, or to divert traffic or custom.

19.4Claims of infringement in respect of material offered through the Bridgemont Sites are handled under the Intellectual Property Policy, which sets out how to submit a notice, how to submit a counter-notice, and how repeat infringement is treated.

19.5Bridgemont may remove Content, stop selling a Digital Product, and terminate an Account in response to a substantiated infringement claim, and terminates the Accounts of repeat infringers in accordance with the Intellectual Property Policy.

20. Counterfeit Goods

20.1A User must not offer, supply, promote, or facilitate the supply of counterfeit or replica goods, or of any Digital Product bearing or reproducing a mark it is not authorised to use.

20.2A User must not supply artwork, packaging templates, label files, authentication codes, holograms, certificates of authenticity, or design files intended to enable the production or authentication of counterfeit goods.

20.3A User must not offer a service that assists another person in sourcing, importing, advertising, or marketing counterfeit goods, including sourcing agency, marketplace-optimisation, and takedown-evasion services.

20.4A Supplier offering branded or licensed material must be able to evidence its authority to do so, and must provide that evidence to Bridgemont on request. Bridgemont may stop selling the product pending production of satisfactory evidence.

21. Malware

21.1A User must not upload, supply, distribute, host, link to, or transmit Malicious Code through the Bridgemont Sites.

21.2A User must not offer a Digital Product that installs, downloads, or executes Malicious Code, whether as its principal function, as an undisclosed additional function, or through a bundled or subsequently delivered component.

21.3A User must not use the Bridgemont Sites to operate, control, distribute, or provide access to command-and-control infrastructure, a botnet, a dropper, a loader, a packer or crypter marketed for evasion, or a malware distribution channel.

21.4Bridgemont may scan files supplied through the Bridgemont Sites for Malicious Code, may quarantine or remove a file it identifies as malicious or as presenting a material risk, and may suspend the Account from which it was supplied. Bridgemont gives no warranty that its scanning will identify all Malicious Code.

22. Harmful Software

22.1A User must not supply software that is deceptive as to its function, that performs a material undisclosed function, that resists uninstallation, that reinstalls itself after removal, or that alters a system, browser, or network setting without informed consent.

22.2A User must not supply software that collects, transmits, or monetises data about a person or their device beyond what is disclosed and consented to, including undisclosed telemetry, browsing history collection, contact harvesting, location tracking, or cryptomining.

22.3A User must not supply software whose purpose or predominant use is to monitor another person covertly, including tooling marketed for monitoring a partner, family member, or employee without that person’s knowledge. Software marketed for lawful, consented, and disclosed monitoring is not prohibited by this clause, but Bridgemont may decline it under clause 12.3.

22.4A User must disclose, before purchase, any material system requirement, permission required, third-party component, data collection, or network activity that a reasonable purchaser would expect to be told about.

23. Reverse Engineering

23.1A User must not reverse engineer, decompile, disassemble, or attempt to derive the source code, algorithms, models, or underlying structure of the Bridgemont Sites, save to the extent that restriction is prohibited by Applicable Law.

23.2A User must not copy, frame, mirror, or create a derivative work of the Bridgemont Sites or any part of them, and must not use the Bridgemont Sites to build a competing product or service.

23.3A User must not circumvent, disable, or interfere with a technical protection measure, licence enforcement mechanism, entitlement check, or watermark applied by Bridgemont or by a Supplier, and must not distribute the means of doing so.

23.4Where Applicable Law confers a right to decompile for interoperability purposes, a User exercising that right must confine itself to what the right permits, and must notify Bridgemont at [email protected] before doing so where the law permits that requirement.

24. Security Testing

24.1A User must not conduct penetration testing, vulnerability scanning, fuzzing, brute-force testing, or any other security testing against the Bridgemont Sites except in accordance with this clause.

24.2Good-faith security research is welcomed. A researcher must report findings to [email protected], must confine testing to Accounts and data belonging to the researcher, must not access, modify, exfiltrate, or retain data belonging to another person, must not degrade or disrupt the Bridgemont Sites for any other User, and must not publicly disclose a finding before Bridgemont has had a reasonable opportunity to remediate it.

24.3A User must not use a finding to obtain unauthorised access, to extract data, to obtain a benefit, or to extract payment from Bridgemont as a condition of disclosure. Testing conducted for any of those purposes is not good-faith research.

24.4Bridgemont will not pursue civil proceedings against a researcher who complies with clause 24.2 and clause 24.3. That undertaking is given by Bridgemont in respect of its own claims only. It does not bind any third party, and it cannot and does not restrict the powers of a public prosecutor or any other authority.

24.5A User must not conduct security testing against a Supplier’s systems, a Buyer’s systems, or the systems of any third party through or from the Bridgemont Sites.

25. Spam

25.1A User must not use the Bridgemont Sites, or data obtained through them, to send unsolicited commercial communications, and must send marketing communications only where it holds a valid legal basis and, where required, the recipient’s consent.

25.2A User must not send bulk, repetitive, or automated messages through features of the Bridgemont Sites, must not use Order confirmations, receipts, or support channels to deliver unrelated marketing, and must not harvest contact details from the Bridgemont Sites for use elsewhere.

25.3A Supplier must not send marketing communications to a Buyer using Personal Data obtained through the Bridgemont Sites or in connection with a sale by Bridgemont. Any other marketing communication a User sends must identify the sender accurately, must state that it is a commercial communication, and must offer a functioning and cost-free means of opting out that is honoured promptly.

25.4A User must not use the Bridgemont Sites to promote, host, or support a spam operation, including by hosting a landing page, a redirect, a suppression-list service, or a sender-reputation service used for that purpose.

26. Phishing

26.1A User must not use the Bridgemont Sites to conduct, host, support, or facilitate phishing, smishing, vishing, or any other attempt to obtain credentials, payment details, Personal Data, or authentication codes by deception.

26.2A User must not create or supply a product description, page, form, email, or communication that imitates Bridgemont, a financial institution, a public authority, a payment card network, or any other person in order to induce disclosure or payment.

26.3A User must not register or use a domain, product name, or display name that is confusingly similar to that of another person for a deceptive purpose, and must not use a Bridgemont domain, or a link to a Product Page, to direct any person to deceptive material.

26.4Bridgemont may stop selling a Digital Product, remove a Product Page, disable a link, and suspend an Account immediately on identifying phishing activity, and may notify affected parties, the relevant registrar, hosting provider, financial institution, and competent authority.

27. Impersonation

27.1A User must not impersonate another person, must not falsely claim to act for or be affiliated with another person, and must not trade under a name calculated to suggest a connection that does not exist.

27.2A User must not falsely claim endorsement, certification, partnership, authorisation, or approval by Bridgemont, by a public authority, by a certification body, or by any other person.

27.3A User must not offer a service whose purpose is to enable impersonation, including the supply of false credentials, false references, false employment or income verification, or an assumed identity.

27.4Bridgemont may require a User to verify its identity or its authority to use a name, mark, or claim, and may remove the Content or suspend the Account pending verification.

28. False Information

28.1A User must not publish material that is false or misleading in a way likely to cause a person to take a transactional decision they would not otherwise have taken.

28.2In a product description or any other material it provides to Bridgemont, a Supplier must not make an unsubstantiated performance, earnings, health, environmental, or security claim, must not misstate the origin, authorship, or licensing of a Digital Product, and must not misrepresent a price, a discount, scarcity, urgency, or the duration of a licence.

28.3A User must not misrepresent its identity, location, establishment, regulatory status, qualifications, or the nature of its business to Bridgemont, to a Buyer, or to a financial partner.

28.4A User must correct material information that becomes inaccurate, and must provide substantiation for a factual claim to Bridgemont on request. Bridgemont may remove a claim that is not substantiated within a reasonable period.

29. Fake Reviews

29.1A User must not write, commission, solicit, purchase, sell, exchange, or publish a review or rating that does not reflect a genuine purchase and a genuine experience.

29.2A Supplier must not incentivise, condition, or filter reviews of its Digital Products in a manner that distorts them, must not offer a benefit for a positive review or for the removal of a negative one, and must not seek to have genuine negative reviews suppressed or their publication delayed.

29.3A User must not publish a review to disparage a competitor, must not use multiple identities to submit reviews, and must not misrepresent a review as originating from a person who has purchased or used the Digital Product.

29.4Bridgemont may require a Supplier to remove reviews it assesses as inauthentic from a Supplier Website, and treats systemic manipulation as a failure of the website rules in the Supplier Agreement.

29.5Bridgemont does not publish Buyer reviews or ratings on its Product Pages. This clause applies to reviews a User publishes anywhere in connection with a Digital Product Bridgemont sells, including on a Supplier Website.

30. Artificial Manipulation

30.1A User must not artificially inflate or deflate a sales figure, download count, follower count, engagement metric, ranking, conversion rate, or any other metric on the Bridgemont Sites.

30.2A User must not place, or arrange for another person to place, Orders that are not genuine purchases, including self-purchases, circular purchases between connected parties, and purchases made to generate transaction volume, reputation, or eligibility for a benefit.

30.3A User must not offer Bridgemont the same product under multiple names or Accounts, create duplicate or misleadingly categorised products, or otherwise misrepresent to Bridgemont or to Buyers what a Digital Product is.

30.4A User must not sell, supply, or use a service that provides artificial engagement, artificial installs, artificial reviews, or artificial traffic, whether directed at the Bridgemont Sites or at any other service.

31. AI Misuse

31.1A User must not use the Bridgemont Sites, and must not offer a Digital Product, for a purpose prohibited under Applicable Law governing artificial intelligence.

31.2A User must not offer a model, application, dataset, prompt collection, or service whose purpose or predominant use is to generate material for fraud, to clone a person’s voice, likeness, or writing in order to deceive, to produce synthetic identity or verification material, to produce non-consensual intimate imagery, to conduct automated social engineering, to circumvent an examination, an age check, or an identity check, or to generate deceptive reviews, comments, or personas at scale.

31.3Where a Digital Product incorporates an artificial-intelligence function, the Supplier must describe accurately in its product description what the function does, the material limitations of its outputs, whether outputs are generated automatically, the data on which it relies, and whether Buyer inputs are used for training.

31.4Where a Digital Product incorporates such a function, the Supplier must hold the rights necessary for its training data and its outputs, must not train on material it has no right to use, and must not present an output as human-authored where Applicable Law requires disclosure that it is artificially generated.

31.5A User must not use an artificial-intelligence system to generate Content that would breach this Policy if created by a person. The means of creation is immaterial to whether Content is permitted.

31.6Bridgemont may require a Supplier to label artificially generated Content, to disclose the provenance of a model or dataset, and to evidence its compliance with this clause.

32. High-Risk Financial Activities

32.1Regulated financial services are Prohibited Products under clause 11. No authorisation held by a User, and no approval by Bridgemont, brings them within scope.

32.2A User must not offer payment services, electronic money, deposit-taking, lending, credit brokerage, insurance, insurance mediation, investment services, portfolio management, or investment advice through the Bridgemont Sites in any circumstances.

32.3A User must not offer trading signals, copy-trading, automated trading systems, or market analysis in a manner that constitutes regulated investment advice or portfolio management, and must not present speculative products as suitable for retail purchasers where Applicable Law restricts their distribution.

32.4A User must not make a guaranteed-return, risk-free, or capital-protected claim, must not present past performance as indicative of future results, and must include every risk warning Applicable Law requires.

32.5Pyramid, Ponzi, matrix, chain-letter, and cash-gifting schemes, and multi-level marketing whose returns derive predominantly from recruitment rather than from sales to end users, are Prohibited Products under clause 11.

33. Cryptocurrency Restrictions

33.1A User must not offer a crypto-asset service through the Bridgemont Sites in any circumstances, including exchange between crypto-assets and funds, exchange between crypto-assets, custody or administration of crypto-assets, operation of a trading platform, transfer services, or the placing or offering of crypto-assets to the public. Crypto-asset services are Prohibited Products under clause 11, whatever authorisation a User holds.

33.2A User must not use the Bridgemont Sites to sell, distribute, or promote a token offering, an initial coin offering, a token pre-sale, a yield or staking product, or a purported investment in a crypto-asset.

33.3A User must not accept crypto-asset payments from Buyers, or request or facilitate payment in crypto-assets for a Digital Product, and must not offer crypto-asset services through the Bridgemont Sites.

33.4A User must not offer non-fungible tokens or comparable digital assets in a manner that constitutes a regulated financial instrument, an investment, or a collective investment scheme.

33.5Software relating to crypto-assets is not prohibited by this clause where it does not itself constitute a crypto-asset service, does not involve the transfer or custody of crypto-assets, and complies with clause 28 and clause 32.

34. Gambling

34.1Gambling, betting, lotteries, prize competitions involving a stake, social casino products, and any other game of chance played for money or money’s worth are Prohibited Products under clause 11. They may not be offered through the Bridgemont Sites in any circumstances, whatever licence a User holds.

34.2A User must not offer loot boxes, wagering mechanics, or in-product purchases of chance-based rewards where Applicable Law treats them as gambling, and must not offer a mechanism by which virtual items acquired through a Digital Product may be exchanged for money or money’s worth.

34.3No approval is available for a gambling or gambling-adjacent product, and any approval previously given is withdrawn under clause 12.4.

34.4A User must not use the Bridgemont Sites, a Digital Product, or a product description to promote or advertise gambling, or to direct any person to a gambling service.

35. Adult Content

35.1Adult content and adult services are Prohibited Products under clause 11 and may not be offered through the Bridgemont Sites in any circumstances.

35.2A User must not publish, offer, or transmit any material depicting or sexualising a minor, or any person who appears to be a minor, in any circumstances. Clause 42 applies without qualification.

35.3A User must not publish or offer intimate material of any person without that person’s informed and documented consent, must not publish material obtained through coercion, deception, or in breach of confidence, and must not offer material derived from unlawful recording.

35.4No approval is available for adult content or adult services, and any approval previously given is withdrawn under clause 12.4. A Digital Product must not contain, bundle, or provide access to adult content.

35.5A User must not use the Bridgemont Sites to offer sexual services, escort services, or human trafficking in any form, which are Prohibited Products under clause 11.

36. Weapons

36.1A User must not offer firearms, ammunition, explosives, their components, or conversion or manufacturing kits through the Bridgemont Sites.

36.2A User must not supply digital files, designs, schematics, or software whose purpose is to enable the manufacture of a firearm, a firearm component, an untraceable weapon, or a device converting a weapon to automatic fire.

36.3Software, technology, and technical data relating to weapons systems are subject to clause 18. Weapons, ammunition, and related components and technology are Prohibited Products under clause 11, and no approval is available for them.

37. Drugs

37.1A User must not offer illegal drugs, controlled substances, novel psychoactive substances, or precursor chemicals through the Bridgemont Sites.

37.2A User must not offer prescription or non-prescription medicines through the Bridgemont Sites in any circumstances, whatever authorisation it holds.

37.3A User must not offer a product marketed as defeating a drug test, must not offer instructions or equipment for the manufacture of a controlled substance, and must not offer a substance marketed as a legal alternative to a controlled substance.

37.4Pharmaceuticals, medical devices, products making health claims subject to regulatory control, and nutritional supplements making therapeutic claims are Prohibited Products under clause 11. Any health claim made in a product description must comply with clause 28.

38. Dangerous Goods

38.1A User must not offer, or supply instructions for the production of, explosives, incendiary devices, chemical, biological, radiological, or nuclear materials, or toxins.

38.2A User must not supply a Digital Product containing instructions, designs, formulations, or software whose purpose is to enable the production of a device or substance capable of causing mass casualties or serious physical harm.

38.3A User must not supply material whose purpose is to enable the circumvention of a safety mechanism in a physical system, including a vehicle, a medical device, an industrial control system, or critical infrastructure.

39. Hate Speech

39.1A User must not publish, offer, or transmit Content that incites hatred, violence, or discrimination against a person or group by reference to race, ethnicity, national origin, religion, belief, disability, age, sex, sexual orientation, gender identity, or any other protected characteristic.

39.2A User must not publish Content that dehumanises, degrades, or promotes exclusion of a protected group, that denies or grossly trivialises genocide or crimes against humanity, or that promotes an organisation whose purpose is the propagation of such material.

39.3A User must not offer a Digital Product whose purpose is the production or dissemination of such material, and must not use product naming, product descriptions, or imagery to signal affiliation with such an organisation.

39.4This clause applies to Content in every language and format, including imagery, audio, code comments, file names, and material embedded within a Digital Product.

40. Terrorist Content

40.1A User must not publish, offer, transmit, or store Content that incites, solicits, facilitates, glorifies, or provides instruction or training for terrorism, or that solicits participation in or funding for a terrorist organisation.

40.2A User must not use the Bridgemont Sites to raise, transfer, or conceal funds for a terrorist purpose, which is also prohibited under clause 16.

40.3Bridgemont removes terrorist content on becoming aware of it, and complies with removal orders issued by a competent authority within the period the order specifies.

40.4Bridgemont reports terrorist content to the competent authority where Applicable Law requires it, preserves the Content and related records for the period required, and may suspend the Account immediately and without prior notice.

41. Violence

41.1A User must not publish Content that threatens violence against a person or group, that incites others to commit violence, or that identifies a person as a target for violence or harassment.

41.2A User must not publish gratuitous depictions of real violence, injury, or death for entertainment or shock value, and must not publish material glorifying an act of mass violence or its perpetrator.

41.3A User must not offer a Digital Product whose purpose is to facilitate violence, coordinated harassment, doxxing, or the tracking of a person against their will.

42. Child Safety

42.1A User must not publish, offer, transmit, store, link to, or solicit child sexual abuse material, or any material that sexualises a minor, in any form, whether real, drawn, animated, or artificially generated. This prohibition is absolute and admits no exception, defence, or approval.

42.2A User must not use the Bridgemont Sites to groom, solicit, endanger, exploit, or facilitate the trafficking of a minor, and must not offer a Digital Product designed to facilitate contact with a minor for such a purpose.

42.3A Digital Product must not be sold to a person below the minimum age Applicable Law sets for it, and a Supplier must tell Bridgemont of any such minimum age when it offers the product to Bridgemont.

42.4Bridgemont removes such material immediately on becoming aware of it, terminates the Account without notice and without opportunity to remedy, preserves the material and all related records for the period Applicable Law requires or permits, and reports to the competent authorities.

42.5Clause 56 does not apply to a termination under this clause where Bridgemont is prohibited from disclosing the basis of its action, or where disclosure would prejudice an investigation. Bridgemont will provide such information as it is lawfully able to provide.

43. Privacy Violations

43.1A User must not publish, offer, or transmit Personal Data relating to another person without a lawful basis for doing so.

43.2A User must not publish a person’s home address, telephone number, identification number, financial details, medical information, immigration status, or other private information with intent to harass, intimidate, or expose that person to risk.

43.3A User must not offer a Digital Product whose purpose is to identify, locate, profile, or monitor a person without their knowledge, including facial recognition applied to material scraped from public sources, location tracking tooling, and aggregated identity dossiers.

43.4A User must not record, intercept, or transmit a communication without every consent Applicable Law requires, and must not offer a product whose purpose is to do so.

44. Personal Data

44.1Bridgemont is the controller of Buyers’ Personal Data. Bridgemont does not share a Buyer’s email or other details with a Supplier: the Supplier learns only that a licence key was sold. Where the Supplier’s licence server records the activation of a licence Bridgemont sold, the Supplier processes that activation data only to run the licence, on Bridgemont’s documented instructions, as Bridgemont’s processor, under clause 18 of the Supplier Agreement, and is not a controller of Buyers’ Personal Data. Bridgemont is also the controller of the Personal Data a Supplier provides about itself, including for verification, as described in the Privacy Policy.

44.2A Supplier must not process Buyers’ Personal Data for any purpose of its own, must apply appropriate technical and organisational measures to it, must assist Bridgemont in responding to a Buyer exercising a data protection right, and must delete or return it when it is no longer needed for the licence concerned, save where Applicable Law requires it to be retained.

44.3A Supplier must not sell, license, rent, or otherwise disclose Buyers’ Personal Data to a third party except as Bridgemont instructs, must not use it to market to Buyers, and must not retain it longer than the licence concerned requires.

44.4A User must not offer datasets of Personal Data as a Digital Product, including marketing lists, contact databases, credential dumps, breach data, and enriched identity records.

44.5A Supplier must notify Bridgemont at [email protected] without undue delay on becoming aware of a personal data breach affecting Buyers’ Personal Data or any other data processed through the Bridgemont Sites, and must cooperate in any notification the breach requires.

45. Scraping

45.1A User must not scrape, crawl, index, harvest, or systematically extract data from the Bridgemont Sites, except as their robots directives allow for public pages, through an API Bridgemont has given the User access to and within the limits Bridgemont sets, or with Bridgemont’s written permission.

45.2A User must not extract Product Pages, pricing, product data, Buyer or Supplier identities, reviews, or metrics, whether for competitive analysis, resale, model training, or any other purpose.

45.3A User must not circumvent a technical measure restricting automated collection, including a robots directive, an access control, a rate limit, a challenge, or a bot-detection mechanism.

45.4A User must not use data extracted from the Bridgemont Sites to contact, solicit, or profile another User, or to reconstitute a Bridgemont dataset outside the Bridgemont Sites.

46. API Abuse

46.1A User must use the API only for its documented purpose, in accordance with the documentation, and within the scopes granted to its credentials.

46.2A User must not use an undocumented, internal, or deprecated endpoint, must not manipulate a request or response to obtain data or functionality outside its entitlement, and must not use the API to replicate functionality of the Bridgemont Sites for a third party without Bridgemont’s written consent.

46.3An Integrator acting for another User must act only within the authority that User has granted, must not retain or use data beyond what that authority permits, and must delete data on the withdrawal of that authority.

46.4A User must not use the API to place load on the Bridgemont Sites disproportionate to genuine use, including by polling more frequently than necessary, by retrying without backoff, or by issuing requests in parallel to defeat a limit.

46.5Bridgemont may revoke an API credential, restrict a scope, or suspend API access immediately where it identifies abuse or a security risk.

47. Rate Limiting

47.1Bridgemont applies rate limits, quotas, and concurrency limits to the Bridgemont Sites and the API, and may vary them without notice where necessary to protect availability, security, or another User’s access.

47.2A User must observe published limits, must handle a rate-limit response correctly, must implement exponential backoff on retry, and must not treat a limit as an obstacle to be worked around.

47.3A User must not distribute requests across multiple Accounts, credentials, addresses, or identities in order to obtain capacity beyond the limits applying to it.

47.4Where a User requires capacity beyond its limits, it must request it from Bridgemont rather than obtain it by circumvention. Bridgemont may grant additional capacity on such terms as it sets.

48. Automated Access

48.1A User may access the Bridgemont Sites by automated means only as their robots directives allow for public pages, through an API Bridgemont has given the User access to, or by another method Bridgemont has expressly permitted in writing.

48.2A User must not use a bot, script, headless browser, or automation framework to interact with interfaces of the Bridgemont Sites intended for human use, including Checkout, authentication, and Account management.

48.3A User must not use automation to create Accounts in bulk, to place Orders in bulk, to submit User Content in bulk, to test credentials, or to acquire limited-availability Digital Products at a rate a person could not achieve.

48.4A User operating a permitted automated integration must identify it accurately, including through a descriptive user agent, must publish a contact address for it where Bridgemont requires, and must suspend it promptly on Bridgemont’s request.

49. Availability Attacks

49.1A User must not conduct, commission, or facilitate a denial-of-service or distributed denial-of-service attack against the Bridgemont Sites, against a Product Page, or against any third party.

49.2A User must not generate load intended or reasonably likely to degrade the Bridgemont Sites, exhaust a shared resource, or deny service to another User, including through amplification, resource-exhaustion, algorithmic-complexity, or storage-exhaustion techniques.

49.3A User must not offer a booter, stresser, denial-of-service, or load-generation service through the Bridgemont Sites, which is a Prohibited Product under clause 11.

49.4Bridgemont may apply traffic filtering, blocking, throttling, and isolation measures without notice to protect availability, and may suspend an Account originating harmful traffic.

50. Infrastructure Abuse

50.1A User must not use Bridgemont storage, bandwidth, domains, email, or delivery infrastructure for a purpose unrelated to supplying Digital Products to Bridgemont or acquiring Digital Products from Bridgemont.

50.2A User must not use the Bridgemont Sites as a general file host, a content delivery network for external services, a redirect or link-shortening service, a proxy, a tunnel, or a mail relay.

50.3A User must not consume computing resources for cryptomining, distributed computing, model training, or any other purpose unrelated to its use of the Bridgemont Sites.

50.4A User must not upload material designed to exhaust or destabilise infrastructure, including archive bombs, deeply nested or malformed files, and files crafted to exploit a parser.

51. Enforcement

51.1Where Bridgemont reasonably determines that this Policy has been breached, that a breach is threatened, or that action is required under Applicable Law, it may take any Enforcement Action it considers appropriate.

51.2Bridgemont may stop selling, remove, disable, restrict, or refuse to publish a Digital Product, a product description, a file, User Content, a Product Page, a link, or any other Content; may restrict or withdraw a feature, an integration, or API access; may impose transaction, volume, velocity, or capacity limits; and may require verification or documentation as a condition of continued use.

51.3Bridgemont may decline a Supplier’s application, may decline a Buyer, may decline or cancel an Order and refund the Buyer, may suspend an Account under clause 54, and may terminate an Account under clause 55.

51.4Bridgemont may retain or withhold payment of the wholesale price owed to a Supplier, in each case only on the grounds and subject to the conditions set out in the Supplier Agreement, and may freeze funds where required or permitted by Applicable Law. Nothing in this Policy extends Bridgemont’s rights in respect of amounts owed to a Supplier beyond those the Supplier Agreement confers.

51.5Bridgemont selects an Enforcement Action having regard to the seriousness of the breach, whether it was deliberate, whether it is repeated, the harm caused or risked, and whether it can be remedied. Bridgemont may act immediately and without prior notice in the circumstances described in clause 4.3.

51.6Where Bridgemont stops selling a Supplier’s Digital Product, removes Content, or suspends or terminates an Account, it tells the User what it decided, why, and how to appeal under clause 56, unless the law or an order of a competent authority prevents it.

51.7An Enforcement Action does not relieve a User of an accrued obligation, including liability for chargebacks, refunds, adjustments, and losses arising from its own conduct, and does not limit any other remedy available to Bridgemont.

52. Investigations

52.1Bridgemont may investigate suspected breaches of this Policy, suspected unlawful activity, and activity presenting risk to Buyers, Suppliers, the Bridgemont Sites, or a financial partner.

52.2Bridgemont may examine Account activity, transaction records, Content, delivery records, communications sent through features of the Bridgemont Sites, device and network signals, and material a User has supplied, in each case in accordance with the Privacy Policy and Applicable Law.

52.3Bridgemont may require a User to provide identification, business registration, ownership and control information, source-of-funds evidence, licences and authorisations, rights clearances, supplier documentation, substantiation for a claim, and any other information reasonably necessary to the investigation.

52.4A User must respond to a request under clause 52.3 fully, accurately, and within the period Bridgemont specifies, must not destroy or alter relevant material, and must not obstruct the investigation. Failure to respond is itself a ground for Enforcement Action.

52.5Bridgemont may restrict or suspend an Account, stop selling the Digital Products concerned, and retain payment of the wholesale price owed to a Supplier to the extent the Supplier Agreement permits, for the duration of an investigation where it reasonably considers that necessary to prevent harm or to preserve evidence.

52.6Bridgemont may preserve Content, records, and evidence relating to an investigation for as long as necessary for the purpose, or for as long as Applicable Law requires or permits, notwithstanding any deletion request or Account closure.

53. Reporting Violations

53.1Any person may report a problem with a Digital Product Bridgemont sells — for example that it is unlawful, infringes someone’s rights, falls within clause 11, is misdescribed, or is promoted on a Supplier Website in breach of this Policy — by writing to [email protected] with the name of the Digital Product or the address of its Product Page, a description of the problem, and any supporting material. A problem with a Buyer’s own Order goes to [email protected].

53.2A report should say clearly what the problem is and why, and should include the reporter’s name and contact details, except where the report concerns child sexual abuse material or an offence against a minor, where no name is needed.

53.3A person at Bridgemont reviews every report. Bridgemont tells the reporter the outcome, including when it decides to take no action. Where Bridgemont stops selling a Digital Product as a result, it tells the Supplier under clause 51.6.

53.4Copyright and trademark notices, and counter-notices, are handled under the Intellectual Property Policy.

53.5A person must not submit reports that are manifestly unfounded, abusive, or made in bad faith. Bridgemont may stop processing reports from a person who repeatedly does so, after a warning.

53.6Reporting a matter to Bridgemont does not preclude a person from reporting it to a competent authority, and does not constitute legal advice or a determination of any person’s rights.

53.7Any person may also report, to [email protected], a Buy button that uses Bridgemont’s name but does not open a page on checkout.bridgemont.io, or that appears on a website not listed on Bridgemont’s Approved developers page. Bridgemont treats these reports as urgent.

54. Suspension

54.1Bridgemont may suspend an Account, the sale of a Digital Product, a feature, or API access where a User has breached this Policy, where Bridgemont reasonably suspects a breach, where an investigation under clause 52 is proceeding, where verification is outstanding, where required by Applicable Law or by a financial partner, or where clause 4.3 applies.

54.2Bridgemont will notify the User of a suspension and of its reasons in accordance with clause 51.6, except where it is prohibited from doing so or where notification would prejudice an investigation or enable further harm.

54.3During a suspension Bridgemont may stop selling a Supplier’s Digital Products and may retain payment of the wholesale price to the extent the Supplier Agreement permits. Bridgemont remains responsible to Buyers for Orders already placed. A suspension does not of itself terminate the agreement between Bridgemont and the User.

54.4Where a breach is capable of remedy and the circumstances allow, Bridgemont will identify what is required and allow a reasonable period to remedy it. Bridgemont will lift a suspension promptly where the ground for it has been resolved.

54.5Bridgemont may suspend, after issuing a prior warning, access to the Bridgemont Sites for a User that frequently provides Content that is manifestly unlawful or manifestly in breach of this Policy, having regard to the seriousness and frequency of the conduct.

55. Termination

55.1Bridgemont may terminate an Account and the agreement with a User where the User has materially breached this Policy, where a breach is not remedied within the period allowed, where breaches are repeated, where the User’s activity creates unacceptable legal, financial, reputational, or security risk, or where required by Applicable Law or by a financial partner.

55.2Bridgemont may terminate immediately and without prior notice where the breach falls within clause 11, clause 16, clause 17, clause 26, clause 40, or clause 42, where the User has engaged in fraud, or where clause 4.3 applies.

55.3On termination, access to the Dashboard ceases, Bridgemont stops selling the Supplier’s Digital Products, and outstanding obligations survive. A Supplier may export its product data, statements and the list of licence keys sold for any period stated in the Supplier Agreement, unless Bridgemont is legally prevented from providing them. Buyers’ Personal Data, for which Bridgemont is controller, is not exported to a Supplier.

55.4Termination does not affect Bridgemont’s right to retain records and evidence under clause 52.6, its obligations under Applicable Law, or any liability the User has already incurred, including for chargebacks, refunds, adjustments, and indemnified losses.

55.5A User whose Account has been terminated for breach must not open a further Account, and must not procure another person to do so on its behalf, without Bridgemont’s prior written consent.

56. Appeals

56.1A User affected by an Enforcement Action may appeal by writing to [email protected] within six months of being notified of the decision, stating the decision appealed, the grounds of appeal, and any supporting material.

56.2An appeal is decided by a person who was not responsible for the original decision, under human supervision rather than by automated means alone, on the material available and any further material the appellant supplies.

56.3Bridgemont will decide the appeal within a reasonable period, will notify the appellant of the outcome and its reasons, and will reverse the decision where the appeal establishes that the Enforcement Action was unfounded or disproportionate.

56.4A User dissatisfied with the outcome of an appeal keeps the right to bring proceedings before a competent court under clause 59.

56.5This clause does not apply where clause 42.5 applies, or to the extent Bridgemont is prohibited by Applicable Law from disclosing the basis of its decision. In that case Bridgemont will provide such information and such review as it is lawfully able to provide.

57. Cooperation with Authorities

57.1Bridgemont cooperates with competent authorities, including law enforcement, regulators, supervisory authorities, and courts, and complies with lawful orders addressed to it.

57.2Bridgemont may disclose Account information, transaction records, Content, and investigation material to an authority where required by a binding order, where necessary to comply with a legal obligation, where necessary to prevent or detect a serious crime, or where necessary to protect the vital interests of a person, in each case in accordance with the Privacy Policy and Applicable Law.

57.3Bridgemont reports criminal conduct to the competent authorities where Applicable Law requires it, and preserves the material and records that report requires for the period required or permitted.

57.4Bridgemont cooperates with payment card networks, acquiring banks, and other financial partners in the investigation of fraud, dispute abuse, and prohibited activity, and may share information with them where necessary for that purpose and permitted by Applicable Law.

57.5Bridgemont will notify a User of a disclosure made under this clause where it is lawfully able to do so, and where notification would not prejudice an investigation. Where Bridgemont is prohibited from notifying, it will not do so.

58. Amendments

58.1Bridgemont may amend this Policy to reflect changes to the Bridgemont Sites, to its business, to Applicable Law, to payment card network rules, or to the risk environment.

58.2Where an amendment materially affects a User’s rights or obligations, Bridgemont will give at least 30 days’ notice by email or by prominent notice on the Bridgemont Sites or in the Dashboard before it takes effect. Amendments that do not materially affect a User, including corrections, clarifications, and the addition of a category that was already prohibited by Applicable Law, take effect on publication.

58.3Bridgemont may make an amendment effective immediately where it is required by Applicable Law, by a binding order, or by a financial partner, or where a delay would expose Users, the Bridgemont Sites, or a financial partner to material risk.

58.4Continued use of the Bridgemont Sites after an amendment takes effect constitutes acceptance of it. A User that does not accept an amendment must cease using the Bridgemont Sites and may close its Account.

59. Governing Law

59.1This Policy, and any non-contractual obligation arising out of or in connection with it, are governed by the laws of the State of Wyoming, United States.

59.2Any dispute arising out of or in connection with this Policy goes to the state courts located in Sheridan County, Wyoming, or the United States District Court for the District of Wyoming, which have exclusive jurisdiction, save that a User who is a consumer may bring proceedings in the courts of the place where they live, and proceedings may be brought against such a User only in those courts.

59.3Where a User is a consumer, the choice of law in clause 59.1 does not deprive that User of the protection of any mandatory provision of the law of their country of habitual residence that would apply in the absence of that choice. This clause is to be read consistently with the governing law and jurisdiction provisions of the Supplier Agreement and the Buyer Terms, which prevail in the event of any inconsistency.

60. Effective Date

60.1This Policy takes effect on the effective date stated at the head of this document, and applies from that date to all use of the Bridgemont Sites, including use by Users whose Accounts were created before it.

60.2The last updated date stated at the head of this document records when this Policy was last amended. Bridgemont maintains previous versions and will supply an earlier version on request to [email protected].

60.3This Policy supersedes any previous acceptable use policy published by Bridgemont. Conduct occurring before the effective date is assessed against the policy in force at the time it occurred.

Questions about this document?

A person reads every message.

[email protected]