Acceptable Use Policy

Who this applies to
Prohibited content
Prohibited conduct
Platform integrity and security
API, MCP and AI agent use
Booking and marketplace integrity
Partner and creator conduct
Data and privacy
Enforcement
Reporting abuse
Changes to this policy

1. Who this applies to

This Acceptable Use Policy (“AUP”) applies to everyone who uses the Wink platform — travelers, hotels, partners, creators, developers and AI agents — and forms part of our Terms of Service. Capitalized terms have the meaning given in the Terms.

2. Prohibited content

You must not submit, publish or transmit any content that:

is unlawful, fraudulent, deceptive or misleading;
infringes anyone’s intellectual-property, privacy or other rights;
is defamatory, harassing, hateful, or promotes violence or discrimination;
is obscene, exploits or endangers minors, or is otherwise harmful or objectionable;
contains malware, or links to harmful or deceptive material; or
misrepresents a hotel, rate, availability, offer, or your identity or affiliation.

3. Prohibited conduct

You must not:

violate any applicable law, regulation or third-party right;
impersonate any person or entity, or misrepresent your affiliation with Wink, a Hotel or anyone else;
use the Platform to send spam or unsolicited communications;
collect or harvest personal data about others without a lawful basis and consent where required;
interfere with another user’s use of the Platform; or
use the Platform to compete unfairly, including building a competing supply database from our data.

4. Platform integrity and security

You must not:

access, probe or scan the Platform, accounts or systems without authorization, or attempt to circumvent authentication, rate limits or other technical or access controls;
introduce malware, or attempt to disrupt, overload, or impair the Platform (including denial-of-service activity);
reverse engineer or attempt to extract source code, except to the extent the law prohibits that restriction; or
access data, accounts or bookings that are not yours.

If you discover a security vulnerability, report it responsibly to [CONFIRM security contact — e.g. [email protected]] and do not exploit or publicly disclose it before we have addressed it.

5. API, MCP and AI agent use

If you use the REST API, MCP server, SDKs or operate an AI Agent, you must:

authenticate as required and keep credentials and tokens confidential;
use only the access, scopes and approvals granted to you, and respect documented rate limits and usage;
not scrape, cache or harvest beyond your granted access, and not use Platform data to build or train a competing supply or pricing database [CONFIRM your position on model training / data reuse and state it explicitly];
ensure an AI Agent creates bookings and takes payment only with the relevant Traveler’s authorization, and remain responsible for the Agent’s actions;
not misrepresent live availability or pricing, or present stale data as current; and
not circumvent technical controls, quotas or attribution.

We may change, deprecate, rate-limit, suspend or revoke API, MCP or Agent access at any time to protect the Platform, Hotels or Travelers.

6. Booking and marketplace integrity

To keep the marketplace fair and trustworthy, you must not:

create fake, fraudulent, speculative or test bookings on the live system, or manipulate bookings to earn or inflate commission;
engage in cookie-stuffing, self-referral, forced clicks, or otherwise misattribute or manufacture attribution;
misrepresent a Hotel, its supply, rates, inclusions or availability; or
(as a Hotel) publish supply you cannot honour, or fail to honour confirmed bookings on the terms shown at booking.

7. Partner and creator conduct

If you promote hotel supply as a Partner or Creator, you must:

promote honestly and avoid false, misleading or unsubstantiated claims;
clearly and conspicuously disclose commercial and affiliate relationships as required by law (for example, the U.S. FTC endorsement guidelines and equivalent rules);
not bid on, or use, Wink or Hotel trademarks in paid search or domains where prohibited; and
not use spam, deceptive redirects, incentivized clicks, or other practices that degrade trust or misattribute bookings.

8. Data and privacy

You must handle any personal data you access through the Platform — including traveler or guest data — only as permitted by the Terms, our Privacy Policy and applicable law, use it solely for the purpose for which it was shared, keep it secure, and not sell it or use it for unrelated marketing without a lawful basis and any required consent.

9. Enforcement

We may investigate suspected violations and take any action we consider appropriate, including removing or disabling content, throttling or revoking access, withholding or reversing commission, suspending or terminating accounts, and reporting unlawful activity to the authorities. We may act immediately where conduct creates risk to the Platform, Hotels, Travelers or others. Nothing here limits other rights or remedies available to us under the Terms or at law.

10. Reporting abuse

To report a violation of this policy, content that breaches it, or suspected fraud or security issues, contact us at [CONFIRM abuse/contact address — e.g. [email protected] or [email protected]].

11. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new “Last updated” date, and your continued use of the Platform after changes take effect constitutes acceptance.

Contents