1. Purpose & Scope
This Acceptable Use Policy ("AUP") defines the technical boundaries and prohibited operational behaviors governing access to ZoraGram Android application endpoints, application programming interfaces (APIs), web servers, and related digital infrastructure.
By accessing our services, you agree not to misuse platform infrastructure or engage in activities that compromise service availability, user data confidentiality, or software integrity.
2. System & Network Integrity
You may not engage in any activity that damages, degrades, or overburdens ZoraGram servers or networks, including:
- Launching Distributed Denial of Service (DDoS) attacks or sending excessive concurrent API calls designed to exhaust server memory or bandwidth.
- Probing, scanning, or testing vulnerabilities of system ports, endpoints, or databases without prior written authorization.
- Intercepting, forging, or tampering with HTTP headers, authorization tokens, or session identifiers.
- Injecting malicious software, Trojans, keyloggers, or unauthorized script payloads into user profile fields or post captions.
3. Data Scraping & Automated Access
User privacy and server stability are critical:
- No Automated Scraping: You may not use bots, spiders, crawlers, or headless browsers to harvest user profiles, photographs, reels, comments, or contact directories.
- No Unofficial Clients: Accessing ZoraGram through unauthorized third-party emulators or custom API wrappers not distributed by us is prohibited.
- No Rate Limit Circumvention: Rotating IP proxies or spoofing device identifiers to bypass API rate limiting is a direct violation of this policy.
4. Reverse Engineering & APK Tampering
The ZoraGram Android package (com.zoragram.friendship) is protected by intellectual property laws:
- You may not decompile, disassemble, reverse-engineer, or attempt to derive the source code of our Android application or internal microservices.
- Distributing modified, patched, or "cracked" APKs claiming to unlock verification badges, disable advertising, or access private profiles is illegal.
5. Authorized Security Research
We welcome responsible security researchers who assist in identifying system vulnerabilities. Please adhere strictly to our coordinated disclosure guidelines outlined in our Security & Vulnerability Reporting Policy. Do not access or alter real user data during research.
6. Violations & Legal Remedies
Violations of this AUP may result in immediate revocation of API access, IP address blocking, permanent device bans, and where applicable, civil or criminal referral under applicable cybersecurity and computer fraud statutes.