Acceptable Use Policy

Effective Date: October 4, 2026

This Acceptable Use Policy ("Policy") establishes the rules and standards governing your use of MaxX Holdings Inc., including our websites, applications, platforms, products, services, systems, networks, APIs, communication channels, and other digital services (collectively, the "Services").

By accessing or using our Services, you agree to comply with this Policy and all applicable laws and regulations.

This Policy applies to users worldwide. Where the laws of your country or region provide mandatory rights or protections that cannot legally be excluded or restricted, those rights remain unaffected.

1. Purpose

The purpose of this Policy is to:

• Protect our users, employees, systems, services, and business partners.
• Promote safe, lawful, respectful, and responsible use of our Services.
• Prevent fraud, abuse, security threats, and unlawful activity.
• Protect personal information and confidential information.
• Maintain the availability, integrity, and security of our Services.
• Establish standards for acceptable user conduct.

2. Acceptable use

You may use our Services only for lawful and legitimate purposes.

You agree to:

• Comply with applicable local, national, and international laws.
• Provide accurate information where information is required.
• Maintain the security of your account and credentials.
• Respect the rights and privacy of other users.
• Use our Services only for their intended purposes.
• Follow applicable documentation, technical requirements, and service-specific rules.
• Respect intellectual-property rights.
• Avoid interfering with the operation or security of the Services.
• Cooperate reasonably with legitimate security and abuse investigations.

3. Prohibited activities

You must not use our Services to engage in, facilitate, encourage, promote, or assist unlawful, fraudulent, abusive, harmful, or malicious activities.

Prohibited activities include, but are not limited to:

3.1 Illegal activities

• Violate applicable laws or regulations.
• Facilitate criminal activity.
• Encourage or assist another person in committing a crime.
• Circumvent legally required restrictions or controls.
• Conduct unlawful transactions.
• Misrepresent the legality or purpose of an activity.

3.2 Fraud and deception

• Commit or facilitate fraud.
• Impersonate another person or organization.
• Create deceptive accounts or identities.
• Use stolen payment information.
• Conduct phishing or social-engineering schemes.
• Misrepresent products, services, affiliations, or credentials.
• Manipulate transactions, reviews, ratings, promotions, or referral systems.
• Use our Services to obtain property or services through deception.

3.3 Cybersecurity abuse

• Gain unauthorized access to systems, accounts, networks, or data.
• Circumvent authentication or security controls.
• Introduce malware, ransomware, viruses, worms, spyware, or other malicious code.
• Conduct denial-of-service or distributed denial-of-service attacks.
• Scan or probe systems without authorization.
• Exploit security vulnerabilities without appropriate authorization.
• Interfere with networks or infrastructure.
• Steal credentials, authentication tokens, or access keys.
• Deploy botnets or other malicious infrastructure.
• Distribute tools or services primarily intended to facilitate unauthorized access or attacks.
• Conduct credential stuffing, brute-force attacks, or similar unauthorized activity.

Good-faith security research should be conducted only within the scope of any applicable security-research or vulnerability-disclosure program and must not cause unnecessary harm.

3.4 Unauthorized access and account abuse

• Access another user's account without authorization.
• Share, sell, transfer, or misuse account credentials where prohibited.
• Attempt to bypass account restrictions.
• Create accounts for the purpose of evading suspension or enforcement.
• Use automated methods to obtain unauthorized access.
• Exploit authentication or authorization weaknesses.

You are responsible for taking reasonable steps to protect your account credentials.

4. Spam and unwanted communications

You must not use our Services to distribute:

• Unsolicited bulk messages.
• Spam.
• Malicious links.
• Phishing messages.
• Fraudulent advertisements.
• Repeated unwanted communications.
• Messages intended to evade spam or abuse controls.

Marketing communications must comply with applicable electronic-communications, advertising, and privacy laws.

5. Harassment, threats, and abuse

You must not use our Services to:

• Threaten violence or physical harm.
• Harass or intimidate others.
• Engage in targeted abuse.
• Stalk or repeatedly contact someone against their wishes.
• Encourage violence against individuals or groups.
• Publish private information for the purpose of harassment or intimidation.
• Engage in discriminatory or hateful conduct where prohibited by applicable law or our service rules.

We support lawful expression while maintaining reasonable measures to protect users and the security of our Services.

6. Harmful or exploitative content

You must not use our Services to create, upload, distribute, request, or facilitate unlawful or exploitative content.

This includes, where prohibited by applicable law:

• Child sexual abuse material or exploitation.
• Content facilitating trafficking or exploitation.
• Content intended to facilitate serious physical harm.
• Malicious or criminal instructions.
• Content that unlawfully exposes another person's confidential or private information.

Nothing in this Policy is intended to restrict lawful reporting, journalism, academic research, legitimate security research, or other legally protected activity.

7. Intellectual property

You must respect copyrights, trademarks, patents, trade secrets, database rights, and other intellectual-property rights.

You must not use our Services to:

• Infringe another person's intellectual-property rights.
• Upload or distribute material without the necessary rights or authorization.
• Circumvent digital-rights-management or access controls unlawfully.
• Misrepresent ownership of content.
• Remove copyright or ownership notices without authorization.

We may respond to valid intellectual-property complaints in accordance with applicable law.

8. Privacy and personal information

You must not use our Services to unlawfully collect, disclose, sell, expose, or misuse another person's personal information.

• Collect personal information without an appropriate lawful basis where required.
• Publish another person's private information without authorization or another lawful basis.
• Attempt to obtain passwords or sensitive credentials.
• Use personal information for unlawful surveillance or harassment.
• Circumvent privacy controls.

9. Automated access, bots, and scraping

Automated access may be permitted where expressly authorized by us or reasonably necessary for legitimate use of the Services.

Unless expressly permitted, you must not:

• Circumvent rate limits.
• Overload our systems.
• Scrape protected or non-public information.
• Use bots to create accounts or conduct transactions deceptively.
• Evade technical controls designed to protect the Services.
• Use automated systems in a manner that materially interferes with other users.

We may implement technical controls to manage excessive, suspicious, or abusive automated traffic.

10. Artificial intelligence and automated systems

Where our Services permit the use of artificial intelligence or automated systems, you must use those capabilities responsibly and lawfully.

You must not use our Services or AI features to:

• Facilitate fraud or criminal activity.
• Circumvent security controls.
• Generate malicious software or harmful payloads where prohibited.
• Conduct impersonation or deceptive activity.
• Violate privacy or intellectual-property rights.
• Generate or distribute unlawful exploitative content.
• Abuse automated systems to harm other users or our infrastructure.

Additional rules may apply to specific AI-powered products or features.

11. Financial and commercial abuse

You must not use our Services to:

• Launder money.
• Facilitate sanctions evasion.
• Conduct fraudulent financial transactions.
• Use stolen payment credentials.
• Manipulate financial or commercial systems unlawfully.
• Operate deceptive investment or financial schemes.
• Circumvent applicable financial restrictions.

Certain regulated activities may be subject to additional terms or may not be permitted through our Services.

12. Export controls and sanctions

You must not use our Services in violation of applicable export-control, trade-sanctions, embargo, or restricted-party laws.

Where applicable, users are responsible for determining whether their intended use, destination, transaction, technology, or recipient is subject to legal restrictions.

13. Circumvention

You must not attempt to circumvent:

• Account restrictions.
• Geographic restrictions.
• Authentication systems.
• Security measures.
• Rate limits.
• Content or access controls.
• Payment restrictions.
• Suspension or termination measures.
• Other technical or contractual controls implemented by us.

14. Interference with services

You must not interfere with or disrupt our Services or infrastructure.

• Excessive or abusive resource consumption.
• Deliberate service disruption.
• Unauthorized modification of systems.
• Attacks against our infrastructure.
• Introducing malicious traffic.
• Attempts to degrade availability or performance.
• Activities designed to prevent legitimate users from accessing the Services.

15. User-generated content

If our Services allow you to submit, upload, publish, transmit, or otherwise provide content, you are responsible for ensuring that your content:

• Does not violate applicable law.
• Does not infringe third-party rights.
• Does not contain malicious code.
• Does not unlawfully expose personal information.
• Does not constitute fraud, spam, or abuse.
• Complies with any additional content rules applicable to the particular Service.

We may moderate, restrict, remove, or disable access to content where permitted or required by applicable law.

16. Reporting abuse

If you believe that someone is violating this Policy or using our Services for harmful or unlawful purposes, please report the issue to:

Email: info@maxxholdingsinc.us

Where possible, include:

• A description of the suspected violation.
• Relevant URLs or account information.
• Dates and times.
• Supporting evidence.
• Any immediate security or safety concerns.

17. Security vulnerability reporting

If you discover a potential security vulnerability, please report it responsibly through:

Email: info@maxxholdingsinc.us

Do not exploit a vulnerability beyond what is reasonably necessary to verify its existence, access unnecessary data, disrupt services, or disclose the vulnerability publicly before giving us a reasonable opportunity to investigate and respond.

18. Monitoring and enforcement

To protect our users, systems, and Services, we may use reasonable technical, administrative, and security measures to detect and investigate abuse.

These measures may include:

• Security monitoring.
• Fraud detection.
• Abuse detection.
• Traffic analysis.
• Account-risk assessment.
• Malware detection.
• Investigation of reported violations.

Any processing of personal information associated with these activities will be handled in accordance with applicable privacy laws and our Privacy Policy.

19. Enforcement actions

If we reasonably believe that this Policy has been violated, we may take appropriate action, including:

• Issuing a warning.
• Requesting corrective action.
• Removing or restricting content.
• Limiting account functionality.
• Restricting access to specific features.
• Temporarily suspending an account.
• Permanently terminating an account.
• Blocking abusive traffic.
• Preserving relevant evidence.
• Reporting suspected unlawful activity to appropriate authorities where legally permitted or required.

20. Emergency situations

Where we reasonably believe there is an immediate risk of serious harm to individuals, systems, or infrastructure, we may take urgent protective measures without prior notice, subject to applicable law.

This may include temporarily suspending accounts, blocking traffic, disabling functionality, or taking other reasonable measures necessary to protect users and the Services.

21. Appeals

If your account or content is restricted because of an alleged violation of this Policy, you may contact us at:

Email: info@maxxholdingsinc.us

Your appeal should explain why you believe the action was incorrect or disproportionate.

22. Worldwide application

This Policy applies internationally, but laws differ between countries.

Where applicable local law provides mandatory rights, protections, or procedures that conflict with this Policy, those legal requirements will prevail.

We may impose additional restrictions where required by the laws of a particular country, region, industry, or service.

Nothing in this Policy is intended to unlawfully restrict freedom of expression, lawful research, legitimate journalism, academic activity, or other legally protected activities.

23. Third-party services

Our Services may integrate with third-party websites, applications, payment processors, hosting providers, communication platforms, or other services.

Third-party services may have their own acceptable-use rules and terms.

You are responsible for complying with applicable third-party requirements when using those services through or alongside our platform.

24. Children's safety

Unless specifically stated otherwise, our Services are not intended for individuals who are below the minimum age permitted under applicable law.

You must not use our Services to exploit, abuse, groom, or otherwise harm children.

Where our Services are specifically intended for children or families, additional child-safety and privacy requirements may apply.

25. No guarantee of availability

We may restrict, suspend, modify, or discontinue portions of the Services when reasonably necessary to:

• Protect security.
• Address abuse.
• Perform maintenance.
• Comply with law.
• Prevent fraud.
• Protect users.
• Respond to emergencies.

We will seek to minimize unnecessary disruption where reasonably practicable.

26. Relationship with other policies

This Policy should be read together with our other applicable policies and agreements, including:

• Terms and Conditions.
• Privacy Policy.
• Cookie Policy.
• Refund Policy.
• Accessibility Statement.

Where a service-specific policy contains additional requirements, those requirements may apply in addition to this Policy.

27. Changes to this policy

We may update this Acceptable Use Policy from time to time to reflect:

• Changes in our Services.
• Changes in technology.
• Changes in security risks.
• Changes in applicable laws.
• Changes in industry standards.
• Changes in our operational practices.

The updated Policy will be published with a revised effective date.

28. Contact information

For general questions about this Policy:

MaxX Holdings Inc.
Email: info@maxxholdingsinc.us
Website: https://maxxholdingsinc.us
Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States

29. Acknowledgment

By accessing or using our Services, you acknowledge that you have read and understood this Acceptable Use Policy and agree to use our Services responsibly, lawfully, and in a manner that does not harm other users, our systems, or the wider community.