Courtesy translation. In case of any discrepancy, the Spanish version at `/legal` prevails.
Last updated: 20 July 2026
This Acceptable Use Policy (hereinafter, the "Policy") describes the uses that are not permitted on the Camaleonic Survey platform, provided by Camaleonic ads 2020 S.L., a Spanish company (European Union) operating under the commercial brand Camaleonic Survey. Its purpose is to preserve the lawfulness, security, and trustworthiness of the Service, as well as to protect the individuals who respond to surveys created through it.
This Policy is an integral part of, and must be read together with, the Terms of Use (Terms and Conditions of Service), the Privacy Policy, the Data Processing Terms, and the Responsible AI page. In the event of any discrepancy regarding the content of the sections listed here, the provisions of the Terms of Use shall prevail.
1. Scope of application
This Policy applies to:
- The Customer (the organization or professional that contracts the Service and creates surveys), who acts as the data controller for the responses of its respondents. Under the Service's role model, Camaleonic Survey acts as the data processor on behalf of the Customer with respect to those responses, in accordance with the Data Processing Terms.
- All users whom the Customer authorizes to access its account (team members).
- Any content, survey, invitation, distribution, or use generated or carried out through the Service.
The Customer is responsible for ensuring that any person to whom it grants access to its account knows and complies with this Policy.
2. General principle
The Service must be used in a lawful, fair, and transparent manner, respecting the rights of third parties, data protection regulations (in particular Regulation (EU) 2016/679, the General Data Protection Regulation, GDPR, and Organic Law 3/2018, LOPDGDD, Spain's data protection and digital rights guarantee act), the information society services regulations (Law 34/2002, LSSI-CE, Spain's Information Society Services and Electronic Commerce Act), Regulation (EU) 2024/1689 (the AI Act), and any other legislation applicable in the jurisdiction of the Customer and of its respondents.
Any use that is not expressly permitted by the Terms of Use and that contravenes this Policy or the law is prohibited.
3. Prohibited uses
Without prejudice to other restrictions set out in the Terms of Use, it is expressly prohibited to use the Service for any of the conduct described below.
3.1 Sending spam or unsolicited communications
- Sending survey invitations, reminders, or any communication through the Service to recipients who have not given their consent, or with whom the Customer does not have a prior lawful relationship supporting such sending under applicable regulations, in particular Article 21 LSSI-CE.
- Sending mass, repetitive, or abusive communications, concealing the sender's identity, or falsifying the headers or origin of invitations.
- Omitting, hindering, or failing to honor opt-out or unsubscribe mechanisms when legally required.
- Acquiring, renting, or using contact lists obtained without a valid legal basis to send invitations through the Service.
3.2 Collecting data without a legal basis or by deceptive means
- Collecting respondents' personal data without a valid legal basis (Articles 6 and, where applicable, 9 GDPR) or without having adequately informed them of the processing (Articles 13 and 14 GDPR).
- Using the Service to obtain data through deception, concealment of the true purpose, decoy surveys (phishing), false pretenses, or any technique that misleads the respondent as to who is collecting the data, for what purpose, and with what consequences.
- Requesting through surveys access credentials, passwords, full payment card details, official identification numbers, or other information especially suited to impersonation or fraud (credential harvesting or phishing).
- Using surveys as an instrument for the mass collection of personal data (harvesting) with no connection to a legitimate, declared research or analysis purpose.
- Claiming that a survey is anonymous when it is not, or misleading respondents as to the actual degree of anonymity or identification of their responses.
- Collecting more data than strictly necessary for the stated purpose, contrary to the principle of data minimization.
- Collecting data from minors below the applicable digital age of consent (14 years old in Spain, Article 7 LOPDGDD) without the consent of their legal representatives.
3.3 Collecting special categories of data without the safeguards required by Article 9 GDPR
- Collecting special categories of data (racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data intended to uniquely identify a natural person, data concerning health, or data concerning sex life or sexual orientation) without meeting one of the exceptions under Article 9.2 GDPR (for example, explicit consent) and without the appropriate safeguards that such processing requires.
The free-text field in responses may inadvertently contain special category data. The Customer must design its surveys to avoid requesting this type of data when no enhanced legal basis is present, and must inform Camaleonic Survey when a survey is intended to process such data. Including questions aimed at obtaining Article 9 data without the required enhanced legal basis and without the required safeguards constitutes a prohibited use of the Service.
3.4 Unlawful, defamatory content or content infringing third-party rights
- Creating, distributing, or disseminating, through surveys, invitations, or any other content, material that is unlawful, defamatory, insulting, slanderous, obscene, threatening, or discriminatory, or that incites hatred, violence, or the commission of crimes.
- Infringing intellectual or industrial property rights, rights to one's image, honor, or privacy, or any other right of third parties.
- Violating trade secrets, confidentiality obligations, or any legal or contractual duty owed by the Customer to third parties.
3.5 Scraping, reverse engineering, or overloading the Service
- Carrying out automated data extraction (scraping), indexing, or mass collection of information from the platform or of the data hosted on it by unauthorized means.
- Applying reverse engineering, decompiling, disassembling, or attempting to obtain the source code, algorithms, or underlying logic of the Service, except to the extent mandatorily permitted by law.
- Engaging in actions that jeopardize the security, integrity, or availability of the Service: denial-of-service attacks, injection of malicious code, evasion of rate limits or anti-abuse measures (such as anti-bot verification), unauthorized penetration testing, or any abnormal or disproportionate load on the infrastructure.
- Circumventing isolation between organizations or attempting to access data, accounts, or areas of the Service for which the user is not authorized.
3.6 Misuse of artificial intelligence features
The Service's AI features (for example, assisted survey generation, summaries, and response analyses) are subject, in addition to the provisions of this Policy, to the Responsible AI page and to the AI Credits Policy. It is prohibited to use such features to:
- Generate content that is unlawful, harmful, fraudulent, or deceptive, or content intended to manipulate, spread disinformation, harass, or impersonate people or organizations.
- Use AI-generated results to send spam or deceive recipients, or to present as legitimate research what constitutes a commercial communication or another concealed purpose.
- Attempt to extract training data from the models, reconstruct their internal instructions, or circumvent the security measures of the AI systems.
- Carry out prompt injection against the Service: introducing into surveys, responses, or text fields instructions aimed at altering the AI's behavior, obtaining information from other organizations, or evading the Service's controls.
- Adopt, relying exclusively on the Service's AI and without qualified human intervention, decisions with legal or similarly significant effects on individuals (their rights, financial situation, employment, or access to essential services).
- Provide or obtain individualized legal, financial, or medical advice.
- Profile individuals by racial or ethnic origin, religion, health, sexual orientation, or other protected attributes; carry out social scoring, prediction of criminal behavior, or emotion inference in the cases prohibited by law.
- Any of the practices prohibited under Article 5 of Regulation (EU) 2024/1689 (the AI Act).
- Conceal the artificial origin of content generated or assisted by AI where transparency is required, or mislead individuals as to whether they are interacting with an AI or with a human being. The Customer must comply with the labeling of AI-generated content and the transparency obligations under Article 50 of the AI Act, and must not present such content as exclusively human-made where doing so could be misleading.
- Feed back into the AI special category data or information that the Customer is not entitled to process.
3.7 Impersonation
- Impersonating another person, organization, brand, or entity, or falsely claiming an affiliation with them.
- Misrepresenting the identity of the sender of invitations or the nature, origin, or sponsorship of a survey.
- Posing as Camaleonic Survey, its personnel, or any of its providers.
3.8 Other prohibited uses
- Reselling, sublicensing, or transferring access to the Service to third parties without express authorization.
- Using the Service to compete by developing a substitute product or service based on its functionality or data.
- Any other use that violates the law or applicable regulations, or that contravenes the Terms of Use.
3.9 Excessive use, circumvention of limits, and resale of capacity
AI features and platform capacity are subject to the reasonable use defined in the Terms of Use. In particular, it is prohibited to:
- Make use that significantly exceeds the average usage patterns of the contracted plan and that degrades the performance or availability of the Service for other customers.
- Artificially inflate the usage of AI features or of the platform through repetitive or automated requests, or requests with no real purpose.
- Circumvent the limits of the account or plan by creating additional accounts, registering with disposable email addresses, or equivalent mechanisms.
- Resell or make available to third parties the AI or platform capacity as if it were the Customer's own service, outside the uses authorized by the contracted plan.
These situations may lead to rate limiting of requests (throttling) or to suspension of the affected functionality in accordance with Section 5, with advance notice where reasonably possible and endeavoring to limit the scope and duration of the measure.
4. Customer responsibility
The Customer is solely responsible for the content of its surveys, their distribution, and the purposes for which it uses the data collected, as well as for ensuring it has a valid legal basis and has duly informed its respondents. Camaleonic Survey, in its capacity as data processor with respect to the responses, acts on the Customer's instructions and does not carry out prior or systematic review of the content the Customer publishes. Nevertheless, it may act in accordance with Section 5 when it becomes aware of a use contrary to this Policy or to the law.
5. Consequences of non-compliance
Breach of this Policy is considered a breach of the Terms of Use and may give rise, proportionately to the severity of the facts and depending on the circumstances, to:
- A request to the Customer to cease the conduct or remedy the infringement within a specified period.
- Temporary suspension, in whole or in part, of access to the account, to a survey, or to a specific feature (including AI features, through the corresponding per-organization kill switch).
- Removal or blocking of the affected content or survey.
- Termination of the contract and closure of the account, with immediate effect in the case of a serious breach (unlawful use, fraud, risk to third parties, or risk to the security of the Service), in accordance with the Terms of Use.
Where there is a serious and imminent risk to the security of the Service, to third parties, or to compliance with the law, Camaleonic Survey may adopt immediate precautionary measures, informing the Customer as promptly as possible. All of the foregoing is without prejudice to any legal liability the Customer may incur and to any actions available to Camaleonic Survey or to injured third parties, as well as to any reports to the competent authorities where legally required.
6. How to report abuse
Any person (respondent, customer, or third party) who becomes aware of a use of the Service contrary to this Policy may report it to:
To enable the report to be processed as quickly as possible, it is recommended to include information identifying the affected survey or invitation (for example, its link), a description of the facts, and, where applicable, the reporting party's contact details. Camaleonic Survey will review the reports received and adopt the measures appropriate under Section 5.
7. Amendments
Camaleonic Survey may update this Policy to reflect legal, technical, or Service changes. The version in force will be the one published on this page, indicating its last-updated date. Continued use of the Service after an updated version takes effect implies acceptance of it.
8. Contact
For any inquiry related to this Acceptable Use Policy:
- Email: [email protected]
- Provider: Camaleonic ads 2020 S.L. (commercial brand: Camaleonic Survey), Spain (European Union).
This Policy is complemented by the Terms of Use, to which it refers and which prevail in the event of conflict.