Reservly Acceptable Use Policy

Last updated: April 26, 2026

The short version

Reservly is a professional booking platform. Use it to run legitimate services, events, or rentals.
Prohibited uses. Adult / sexual services, illegal drugs, regulated healthcare, content that incites violence or hatred against any group, violence or weapons trafficking, human trafficking, unlicensed gambling, and any illegal activity. Full list in § 3.
Respect your users. Don't spam them, don't abuse their data, don't deceive them.
Enforcement is real. Violations can mean immediate termination, no refund, and forfeiture of any Founding Member pricing. See § 7.
Reporting violations. support@reservly.io subject line "AUP Report".

This Acceptable Use Policy is part of, and enforceable under, the Reservly Terms of Service. Breach of this policy is breach of the Terms.

1. Scope

This policy applies to:

Businesses (Customers): subscribers who use Reservly to operate a booking page, run services, or accept customer bookings.
End users (Visitors): people who book through a Reservly-hosted page.
Everyone else who interacts with reservly.io, the dashboard, the API, or any Reservly-hosted booking page.

2. How we think about enforcement

Reservly's default is generous — we don't want to be the policy police, and the vast majority of businesses using the platform are doing completely legitimate work. This policy exists so that when something is genuinely out of scope, we have a clear basis for saying so.

Where a rule in this policy could be read narrowly or broadly, we will apply it in the way a reasonable professional-services operator would read it. Edge cases are resolved by contacting support@reservly.io before you act, not after.

3. Prohibited content and services

You may not use Reservly to operate, host, promote, book, or receive payment for any of the following. The list is not exhaustive; it sets a direction.

3.1 Adult / sexually explicit services

Pornography, erotic services, escort or companion services, strip clubs, "massage with extras" or GFE-style listings, creator-booking services built around sexual content (whether advertised openly or via euphemism), and any service where the transaction's primary purpose is sexual. Non-sexual services that incidentally involve the human body (fitness, non-medical massage, yoga, cosmetic spa, modelling for legitimate art/fashion) are fine.

3.2 Prostitution and sex trafficking

Full prohibition. No combination of words or service descriptions changes the result.

3.3 Controlled substances and drug paraphernalia

Sale, brokering, or booking of any service whose primary purpose is to distribute, deliver, or facilitate the use of controlled substances under US federal law, the law of the customer's jurisdiction, or the law of the end user's jurisdiction. This includes legal-under-state-law cannabis dispensaries — because of US federal-law conflicts and payment-provider constraints, Reservly does not support cannabis dispensary bookings at launch. Nicotine/alcohol retailers operating lawfully in their jurisdiction are fine.

3.4 Occult or satanic services sold commercially

Booking of satanic rituals, occult ceremonies, spellcasting-as-a-service, and similar practices offered commercially. Fortune tellers, tarot readers, astrologers, and other traditionally entertainment-framed services that don't claim to cause or prevent real-world outcomes may use Reservly.

3.5 Content that incites violence, hatred, or harassment against any group

You may not use Reservly to operate, promote, or book services that incite violence, hatred, or harassment against:

Any religious group — including but not limited to Christian communities, Catholic communities, Jewish communities, Muslim communities, Hindu communities, Buddhist communities, and adherents of every other faith or the absence of any.
Any racial, ethnic, or national-origin group.
Any gender, sexual orientation, or gender identity group.
Any group defined by disability.
Any group defined by political or ideological belief, to the extent that belief is lawfully protected.

Open criticism, satire, scholarship, art, and religious or political advocacy that does not cross into incitement to violence or harassment are not prohibited by this clause. The line we enforce is incitement, not disagreement.

3.6 Violence, weapons trafficking, paramilitary services

Private security services that operate lawfully under their local regulatory framework are fine. Unlawful weapons sales, paramilitary training, mercenary services, and similar activities are not.

3.7 Hate groups and designated terrorist organisations

No use by organisations designated as terrorist or hate groups by the United States, the European Union, the United Kingdom, or the United Nations Security Council. No bookings, no events, no services.

3.8 Human trafficking and exploitation

Full prohibition. Any service that commodifies, coerces, or traffics a human being falls within this clause.

3.9 Unlicensed gambling

No gambling-related bookings without the operator holding every licence the applicable jurisdiction requires. Licensed operators must state the licence authority and licence number on their booking page.

3.10 Illegal activity — general

You may not use Reservly to commit or facilitate any activity that is illegal under (a) US federal law, (b) Wyoming state law, (c) the law of the Business's jurisdiction, or (d) the law of the end user's jurisdiction, whichever of those are applicable to the specific transaction.

3.11 Catch-all

Any service or content that the preceding clauses reasonably suggest is out of scope for a professional booking platform. Enforcement under this clause is at Reservly's sole discretion; we do not pre-publish an exhaustive list of edge cases, but we will explain our reasoning in any enforcement action we take.

3.12 Copyright and trademark infringement

You may not use Reservly to upload, display, transmit, or otherwise make available content that infringes the copyright, trademark, trade dress, trade secret, or other intellectual property rights of any third party.

Copyright. You must own or have a licence for every image, photograph, illustration, logo, written description, video clip, audio file, and other creative work that you upload to your Reservly booking page or dashboard. Stock-photo terms, artist agreements, and photographer contracts typically include restrictions on commercial use; it is your responsibility to ensure your use falls within your licence.

Trademark. You may use brand names and logos on your booking page where you are an authorised dealer, licensee, or franchise operator, or where the use is nominative (referring to the brand as the subject of your service). You may not use a third party's trademark in a way that falsely implies sponsorship, endorsement, or affiliation.

Your own marks. You are responsible for ensuring that the business name, logo, and branding you register in Reservly do not infringe any third party's trademark.

Consequences. Content found to infringe intellectual property rights will be removed under our DMCA / DSA procedure (DMCA page). Repeated infringement is grounds for account termination under § 7.4 of this policy and 17 U.S.C. § 512(i).

3.13 UK consumer protection compliance

If you use Reservly to accept bookings from customers located in the United Kingdom, your booking page and the services you promote through it must comply with applicable UK consumer-protection law, including the Consumer Rights Act 2015, the Consumer Protection from Unfair Trading Regulations 2008 (CPUTRs), and the Digital Markets, Competition and Consumers Act 2024 (DMCCA) as it comes into force. In particular:

Service descriptions must be accurate, clear, and not misleading.
Pricing must be displayed inclusive of all mandatory charges (no drip pricing).
Pre-contractual information required by the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 must be provided before a UK consumer is bound by a booking.
Cancellation and refund rights under the Consumer Contracts Regulations must be honoured where applicable.

Reservly is a platform provider and is not the merchant of record for your service bookings; you bear primary responsibility for compliance with UK consumer-protection law in your bookings.

4. Regulated healthcare — separate prohibition

Reservly is not designed to meet sector-specific health-data or patient-records requirements in any jurisdiction. You may not use Reservly to store, transmit, or process health data, medical records, clinical notes, diagnoses, treatments, or other special-category personal data as defined under HIPAA (US), GDPR Article 9 (EU / UK / EEA), PHIPA / PIPEDA (Canada), LGPD (Brazil), the Privacy Act 1988 (Australia), or similar laws.

This prohibition applies globally — a Croatian dentist, a US psychotherapist, a Brazilian physiotherapist, and a Canadian chiropractor who bills insurance are all equally excluded under their respective laws. Non-medical wellness services that are not regulated as healthcare under their local law — fitness, yoga, pilates, personal training, nutrition coaching, aesthetic medspa, massage therapy, cash-only acupuncture, cash-only wellness services practised outside a regulated medical context — are welcomed globally.

Full scope and rationale are in Terms of Service § 9.

4A. COPPA — businesses accepting bookings from children under 13

The US Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506) imposes special requirements when an operator collects personal information from children under 13. If your Reservly booking page is directed to children under 13, or if you knowingly collect personal information from a child under 13 through your booking form, you bear independent COPPA obligations — Reservly does not bear these obligations on your behalf.

Your COPPA obligations as the operator include, but are not limited to:

Posting a clear and comprehensive privacy policy describing your information practices for children.
Obtaining verifiable parental consent before collecting, using, or disclosing personal information from children under 13.
Providing parents with notice and choice about use and disclosure.
Not conditioning a child's participation in an activity on providing more personal information than is reasonably necessary for that activity.
Implementing reasonable procedures to protect the security of children's personal information.

Reservly's role: Reservly is an interactive computer service on which you host your booking page. Reservly is not the operator of the children-directed content you create. If you configure a booking page directed at children under 13, you are the operator subject to COPPA, and Reservly's child-data restrictions in § 5.7 impose additional platform-level restrictions on impermissible data collection.

5. Prohibited uses of the platform itself

Beyond content, the following operational behaviours are prohibited:

5.1 Deceptive or manipulative practices

Misleading service descriptions, fake reviews, fake scarcity (for example, counterfeit "only X spots left" scarcity banners).
Bait-and-switch pricing: prices on the booking page must match what the customer is charged.
Dark-pattern cancellation obstruction — your cancellation flow must be at least as accessible as your booking flow.

5.2 Spam

You may not use Reservly to send unsolicited bulk email or SMS.
Transactional messages (booking confirmations, reminders) must remain transactional in content. Piggybacking marketing content onto transactional messages to recipients who haven't opted in is a violation.
End users must be able to unsubscribe from marketing messages you send them. Unsubscribe links must work.

5.3 Data abuse

You may not scrape data from Reservly through the UI, the API, or any other means, beyond what's needed to operate your own booking page.
You may not resell, license, transfer, or otherwise commercialise end-user personal data you receive through Reservly to any third party, other than your own direct service providers who are bound by confidentiality and data-protection obligations.
You may not use end-user personal data for any purpose outside the scope of the booking the user consented to, plus reasonable operational needs (reminders, retention, compliance). Using a booking email address to add the user to an unrelated marketing list, without consent, is a violation.

5.4 Impersonation

Do not impersonate another business, another person, or Reservly itself. Do not claim endorsements you don't have.
Do not claim to be an official Reservly partner, reseller, or affiliate unless we have given you written authorisation.

5.5 Interference with the platform

No denial-of-service attempts.
No attempts to probe, scan, or test the vulnerability of Reservly's infrastructure, except under the Responsible Disclosure programme.
No attempts to bypass rate limits, paywalls, or access controls.
No attempts to reverse-engineer, decompile, or extract source code from the Service.

5.6 API abuse

The API Terms of Service lay out fair-use limits, burst tolerance, and the enforcement ladder for sustained abuse. In short: use the published rate limits, follow the published headers, and use webhooks instead of polling. Sustained use of the API at maximum rate, or use that crosses the line into denial-of-service pattern, is an AUP violation.

5.7 Impermissible customer data

You may not configure custom form fields or use integrations to collect:

Government-issued identification numbers beyond what's necessary for a specific regulatory reason (for example, photo-ID upload for age-restricted events).
Payment card data outside the Stripe Elements or PayPal inline-button flows that Reservly provides.
Passwords, API keys, or credentials of any kind.
Biometric identifiers or information as defined under the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14) or equivalent state or national law, including fingerprints, voiceprints, face or iris scans, or hand geometry. Collecting biometric data via custom form fields without explicit written consent that meets BIPA's requirements (or the requirements of applicable local law) is prohibited and may expose your business to statutory damages of $1,000–$5,000 per violation under BIPA. If your service requires biometric verification (for example, gym access or time-clock integration), use a dedicated compliant solution, not Reservly's general-purpose custom form fields.
Special-category data as defined under applicable privacy law, where the data is processed by a regulated healthcare provider or otherwise triggers the prohibitions in § 4.

5.8 SMS and email messaging obligations

If you use Reservly to send email reminders, follow-up messages, or marketing messages to your Customers, you must:

(a) Obtain consent before sending marketing messages. Marketing content requires prior opt-in consent from each recipient. Booking confirmations and booking-event reminders that contain only booking-related information are transactional and do not require separate marketing consent, but they must not be used as a vehicle to deliver marketing content to recipients who have not opted in.

(b) Honour unsubscribe requests immediately. Any Customer who clicks the unsubscribe link in an email, or contacts you directly to request removal, must receive no further marketing or reminder emails. You may not send a "final" promotional email after receiving an unsubscribe request.

(c) Not send from harvested lists. You may not import email addresses or phone numbers into Reservly for messaging unless you hold documented proof of consent for each address or number under the laws of the recipient's jurisdiction.

(d) Not add Customers to unrelated lists. Using booking-contact data to add a Customer to a mailing list, newsletter, or CRM campaign unrelated to their booking, without separate consent, is a violation.

(e) Include accurate sender identification. Every email sent through Reservly must accurately identify the Business. For Canadian recipients, every commercial electronic message (CEM) must include your full legal name and a valid physical mailing address, as required by CASL s.6(2)(a).

SMS — additional obligations for BYO Twilio

Reservly's SMS feature uses a bring-your-own-Twilio model. You, the Business, are the originating sender of every SMS message sent through your connected Twilio account. Reservly is the facilitator. This means:

(f) You carry primary TCPA liability (for US recipients) for every SMS sent through Reservly's SMS add-on. You must ensure that:

Each US recipient has given prior express written consent to receive automated text messages from you. The Reservly booking form SMS opt-in checkbox satisfies this when properly configured and enabled.
SMS opt-in cannot be a required field. Under TCPA, conditioning a booking on the customer providing SMS consent is prohibited. The SMS opt-in checkbox must be optional; customers must be able to complete a booking without checking it.
Your Twilio account and phone numbers are registered for A2P (Application-to-Person) messaging via Twilio's 10DLC registration programme for US domestic long-code messaging. Failure to register can result in carrier filtering and TCPA exposure.
Every SMS you send via Reservly includes opt-out instructions (e.g., "Reply STOP to unsubscribe"). Reservly's SMS pipeline includes standard opt-out language in default message templates; if you customise templates, you must retain the opt-out instructions.
You handle STOP responses. Any phone number that replies STOP, UNSUBSCRIBE, CANCEL, END, or QUIT must receive no further messages.

(g) You carry primary CASL liability (for Canadian recipients) for SMS commercial electronic messages. Express consent is required; same unsubscribe obligations apply. Each SMS CEM must include your full legal name and physical mailing address (CASL s.6(2)(a)), or a clear path to that information.

(h) You carry primary PECR / ePrivacy Directive liability (for UK and EU recipients) for marketing SMS. Under the UK Privacy and Electronic Communications Regulations 2003 (PECR), sending marketing SMS to an individual subscriber (as opposed to a corporate subscriber) requires their prior opt-in consent. There is no soft opt-in exemption for SMS to individual consumers. Explicit prior opt-in consent is required.

(i) Reservly may suspend SMS. If Reservly receives a complaint from a carrier, Twilio, a regulatory body, or an end user that indicates your SMS use violates TCPA, CASL, or other applicable law, we may suspend your access to the SMS feature under § 7.

Fines for non-compliance are the Business's responsibility. TCPA allows private plaintiffs to recover $500–$1,500 per text message. CASL imposes administrative monetary penalties up to CAD $10 million per violation per day. GDPR allows fines up to €20 million or 4% of global annual turnover. Reservly does not indemnify Businesses for their regulatory exposure.

6. Respect for your users

Every end user who submits personal information through your Reservly page is trusting you with it. You:

Must provide them with an accurate privacy notice — either your own, or one based on the default templates Reservly provides.
Must use their data only for the purposes disclosed.
Must respond to their rights requests (access, deletion, correction) within the time your jurisdiction's law requires.
Must honour any consent-withdrawal request promptly.
Must not retaliate against an end user for exercising a privacy right.

If you use Reservly to send marketing messages (email or SMS) to end users, you must:

Have a lawful basis — for email marketing, this means opt-in consent under ePrivacy/CASL/TCPA or the applicable law of the recipient's jurisdiction. Reservly's booking form marketing opt-in checkbox is designed to capture this consent.
Clearly identify yourself as the sender. Do not use deceptive sender names or impersonate Reservly.
For email: include a working unsubscribe link in every marketing or reminder message. Process unsubscribe requests within 10 business days (CAN-SPAM minimum) or immediately (GDPR/CASL standard). The Reservly platform processes unsubscribes immediately.
For SMS: include opt-out instructions (Reply STOP to opt out, or equivalent) in every message. Process STOP responses and add the number to your suppression list. Do not send further messages to numbers that have opted out.
Not message end users who have unsubscribed or opted out of marketing, regardless of whether new consent was sought through a different channel.
Retain proof of consent for at least 2 years after the last message (CASL), or for the duration of any limitations period applicable in the recipient's jurisdiction (TCPA: 4 years in some circuits).

7. Enforcement

7.1 Ladder

Notice. For non-severe or first-time issues, we contact you describing the concern and giving an opportunity to cure, typically within 7-14 days.
Feature suspension. For non-severe issues not cured in time, or for moderate issues, we may suspend the specific feature (for example, SMS sending, API access, or payment facilitation) while the issue is resolved.
Account suspension. For serious issues, repeated violations, or issues where end users are at risk, we suspend the account while we investigate.
Termination. For severe violations — the § 3 content categories, § 4 regulated-healthcare prohibition, § 3.7 hate-group use, § 3.8 trafficking, § 5.1 deceptive practices, § 5.2 material spam, § 5.3 material data abuse, any illegal activity — we terminate immediately.

7.2 No refund on termination for cause

Termination under this § 7 is for cause. No refund of pre-paid fees is owed, and any Founding Member price lock is forfeit.

7.3 Sole discretion

Enforcement decisions are made at Reservly's sole discretion. We do not pre-commit to specific thresholds for specific behaviours, because bad actors gaming such thresholds is exactly the behaviour this policy aims to prevent. We will always state the basis for an enforcement action to the affected account.

7.4 Repeat intellectual property infringer policy — § 512(i)

As required by 17 U.S.C. § 512(i)(1)(A), Reservly maintains and reasonably implements a policy of terminating, in appropriate circumstances, the accounts of users who are repeat infringers of intellectual property rights. This policy is cross-referenced at /legal/dmca.

How we count: Each DMCA takedown notice we receive that we determine is legally sufficient under § 512(c)(3) — meaning we take down the identified content — counts as a strike against the relevant Business account. Each DSA Article 16 notice resulting in content removal counts similarly.

Thresholds: Two or more valid notices within any rolling 12-month period trigger a mandatory review. The review considers the nature of the content removed, whether the Business filed counter-notices, and whether there is an apparent pattern of wilful infringement.

Outcomes: Following review, we may issue a formal warning, impose a probationary period, or terminate the account. Termination is the required outcome where the pattern is clear and the infringement appears wilful. We will state the basis of the decision in writing to the affected Business.

Effect of termination: Account termination under this policy is termination for cause. No refund of pre-paid fees is owed, and any Founding Member price lock is forfeit, per Terms of Service § 4.5 and § 5.8.

7.5 Cooperation with law enforcement

Where a violation of this policy may also constitute a crime, Reservly may report the matter to the relevant law-enforcement authority and cooperate with investigations subject to our Privacy Policy.

8. Reporting violations

If you see a Reservly-hosted booking page or booking flow that appears to violate this policy, email support@reservly.io with subject line "AUP Report" and:

the URL or Business name;
a brief description of what you observed;
the date and time;
screenshots if possible.

Reservly will acknowledge reports within 5 business days and investigate within 20 business days, in good faith. Reports may be anonymous — we will not identify you to the Business without your consent unless legally required.

9. Appeal

If we take an enforcement action against your account and you believe it's wrong, you may appeal by replying to our enforcement email with subject line beginning "Appeal" within 14 days of the action. We will review the appeal within 15 business days and respond with a reasoned decision. Appeal decisions are final, subject to the dispute-resolution mechanism in Terms of Service § 19.

10. Changes to this policy

We may amend this policy. The Last updated date at the top reflects the latest revision. Material changes will be notified to active Businesses by email at least 30 days before taking effect, unless a shorter period is required to address a security, fraud, or regulator-driven issue.

11. Enforcement transparency

Reservly maintains an internal log of all content-removal actions, DMCA notices received, and enforcement actions taken under this policy. We will make anonymised, aggregate statistics available on request for regulatory or academic research purposes. Individual enforcement decisions are not published; affected parties are notified directly and privately.

EU Digital Services Act: Reservly currently qualifies as a micro or small enterprise under the Annex to Commission Recommendation 2003/361/EC (staff < 50; annual turnover < €10M) and is therefore exempt from the mandatory annual transparency reporting requirement under DSA Article 15. If Reservly's size grows beyond that threshold, we will file annual transparency reports with the relevant Digital Services Coordinator as required by that Regulation.

12. Contact

Reservly c/o Northwestern Registered Agent Services 30 N Gould St Ste R Sheridan, WY 82801 United States

Email: support@reservly.io Report a violation: support@reservly.io (subject line AUP Report) Appeal an enforcement action: reply to the enforcement email (subject line Appeal) Edge-case question before you proceed: support@reservly.io (any descriptive subject)

This Acceptable Use Policy is part of and incorporated into the Reservly Terms of Service.