Acceptable Use Policy

Last updated: June 23, 2026

This Acceptable Use Policy ("AUP") governs your use of RecallStream. It is incorporated into and forms part of the Terms of Service. We reserve the right to investigate, suspend, or terminate any account that violates this AUP. Capitalised terms used here have the meanings given in the Terms of Service.

RecallStream is a recall monitoring platform. The "content" you create within the Service consists primarily of watchlist entries (brand names, supplier names, keywords), webhook endpoint URLs, and API key identifiers. You must ensure that your use of the Service does not involve, facilitate, or enable any of the following:

Illegal content: watchlist entries or downstream use of recall data that violates applicable law, including regulations on data protection, trade sanctions, or export controls.
Harmful or harassing use: using recall alert data to target, harass, or intimidate individuals named in government recall notices (for example, firm representatives whose contact details appear in an official notice).
Deceptive use: misrepresenting the source, accuracy, completeness, or currency of recall data delivered by RecallStream. You must not present RecallStream's feed as an official government publication or as a legally authoritative source of recall information.
Attribution stripping: if you redistribute data originating from the EU Safety Gate, you must comply with the Creative Commons Attribution 4.0 International (CC BY 4.0) licence. You must not remove or obscure the required attribution to the European Commission Safety Gate (RAPEX).
Infringing content: content that infringes any patent, trademark, copyright, trade secret, or other intellectual property right of any person.

EU Safety Gate redistribution: Any product, service, or publication that incorporates EU Safety Gate data sourced through RecallStream must include attribution: "Source: European Commission Safety Gate (RAPEX), licensed under CC BY 4.0."

Rate-limit circumvention: do not attempt to exceed your plan's API rate limits by creating multiple accounts, rotating IPs, or any other technique designed to bypass access controls.
Automated scraping: do not use automated tools to systematically copy or scrape recall data from RecallStream's web interface. Use the API, which is designed for programmatic access, instead.
Bulk corpus redistribution: do not attempt to download or export the entire recall corpus for the purpose of redistribution or resale without a separate commercial licence from RecallStream. This applies even where individual records are public-domain, because the aggregation, normalisation, and delivery infrastructure is proprietary.
Reverse engineering: do not attempt to reverse-engineer, decompile, or disassemble the RecallStream platform or its APIs.
Security probing: do not perform penetration testing, vulnerability scanning, or other security testing against RecallStream systems without prior written authorisation. To report a vulnerability, see our Security page.
Account sharing: API keys and credentials are for use within your own organisation only; do not share them with third parties.
Interfering with the Service: do not transmit malware, introduce denial-of-service attacks, or take any action that unreasonably burdens RecallStream's infrastructure.

Recall data originates from government agencies — openFDA, CPSC, NHTSA, EU Safety Gate, France RappelConso, Health Canada, and UK OPSS. RecallStream normalises and re-delivers this data but does not independently verify its accuracy, completeness, or currency.
RecallStream's feed is a monitoring supplement, not a substitute for your own compliance program. You must not represent RecallStream's output as a complete, real-time, or legally authoritative source of all recalls affecting your products or markets.
The absence of a recall in the RecallStream feed does not mean no recall exists. Agency publication delays, API outages, and data normalisation limitations all mean that some records may be delayed or missing. You should cross-check critical compliance decisions against the originating agency's official publication.
You are solely responsible for the decisions you make based on recall data received through the Service, including any regulatory, legal, or commercial actions you take or do not take.

If RecallStream determines that you have violated this AUP, we may take one or more of the following actions, at our sole discretion and without prior notice where urgency requires:

Issue a written warning requiring you to remedy the violation within a specified period.
Temporarily suspend your access to the Service.
Permanently terminate your account.
Remove or restrict specific content or configurations that violate this AUP.
Report the violation to law enforcement or regulatory authorities where required by law or to prevent harm.

Where feasible, we will provide notice before taking enforcement action and give you an opportunity to respond. Repeated or serious violations may result in immediate termination without warning.