Home/Acceptable Use Policy

Legal

Acceptable Use Policy

Last updated: 19 June 2026

In plain language

Use Wink honestly and lawfully. Don’t break the law, harm others, post deceptive or infringing content, abuse the API or AI access, manufacture or misattribute bookings, or attack the platform’s security. This policy is part of our Terms of Service; breaking it can lead to content removal, suspension or termination. This is a summary only — the full policy below governs.

Contents

1. Who this applies to
2. Prohibited content
3. Prohibited conduct
4. Platform integrity and security
5. API, MCP and AI agent use
6. Booking and marketplace integrity
7. Partner and creator conduct
8. Data and privacy
9. Enforcement
10. Reporting abuse
11. Changes to this policy

1. Who this applies to

This Acceptable Use Policy (“AUP”) applies to everyone who uses the Wink platform — travelers, hotels, partners, creators, developers and AI agents — and forms part of our Terms of Service. Capitalized terms have the meaning given in the Terms.

2. Prohibited content

You must not submit, publish or transmit any content that:

• is unlawful, fraudulent, deceptive or misleading;
• infringes anyone’s intellectual-property, privacy or other rights;
• is defamatory, harassing, hateful, or promotes violence or discrimination;
• is obscene, exploits or endangers minors, or is otherwise harmful or objectionable;
• contains malware, or links to harmful or deceptive material; or
• misrepresents a hotel, rate, availability, offer, or your identity or affiliation.

3. Prohibited conduct

You must not:

• violate any applicable law, regulation or third-party right;
• impersonate any person or entity, or misrepresent your affiliation with Wink, a Hotel or anyone else;
• use the Platform to send spam or unsolicited communications;
• collect or harvest personal data about others without a lawful basis and consent where required;
• interfere with another user’s use of the Platform; or
• use the Platform to compete unfairly, including building a competing supply database from our data.

4. Platform integrity and security

You must not:

• access, probe or scan the Platform, accounts or systems without authorization, or attempt to circumvent authentication, rate limits or other technical or access controls;
• introduce malware, or attempt to disrupt, overload, or impair the Platform (including denial-of-service activity);
• reverse engineer or attempt to extract source code, except to the extent the law prohibits that restriction; or
• access data, accounts or bookings that are not yours.

If you discover a security vulnerability, report it responsibly to [CONFIRM security contact — e.g. [email protected]] and do not exploit or publicly disclose it before we have addressed it.

5. API, MCP and AI agent use

If you use the REST API, MCP server, SDKs or operate an AI Agent, you must:

• authenticate as required and keep credentials and tokens confidential;
• use only the access, scopes and approvals granted to you, and respect documented rate limits and usage;
• not scrape, cache or harvest beyond your granted access, and not use Platform data to build or train a competing supply or pricing database [CONFIRM your position on model training / data reuse and state it explicitly];
• ensure an AI Agent creates bookings and takes payment only with the relevant Traveler’s authorization, and remain responsible for the Agent’s actions;
• not misrepresent live availability or pricing, or present stale data as current; and
• not circumvent technical controls, quotas or attribution.

We may change, deprecate, rate-limit, suspend or revoke API, MCP or Agent access at any time to protect the Platform, Hotels or Travelers.

6. Booking and marketplace integrity

To keep the marketplace fair and trustworthy, you must not:

• create fake, fraudulent, speculative or test bookings on the live system, or manipulate bookings to earn or inflate commission;
• engage in cookie-stuffing, self-referral, forced clicks, or otherwise misattribute or manufacture attribution;
• misrepresent a Hotel, its supply, rates, inclusions or availability; or
• (as a Hotel) publish supply you cannot honour, or fail to honour confirmed bookings on the terms shown at booking.

7. Partner and creator conduct

If you promote hotel supply as a Partner or Creator, you must:

• promote honestly and avoid false, misleading or unsubstantiated claims;
• clearly and conspicuously disclose commercial and affiliate relationships as required by law (for example, the U.S. FTC endorsement guidelines and equivalent rules);
• not bid on, or use, Wink or Hotel trademarks in paid search or domains where prohibited; and
• not use spam, deceptive redirects, incentivized clicks, or other practices that degrade trust or misattribute bookings.

8. Data and privacy

You must handle any personal data you access through the Platform — including traveler or guest data — only as permitted by the Terms, our Privacy Policy and applicable law, use it solely for the purpose for which it was shared, keep it secure, and not sell it or use it for unrelated marketing without a lawful basis and any required consent.

9. Enforcement

We may investigate suspected violations and take any action we consider appropriate, including removing or disabling content, throttling or revoking access, withholding or reversing commission, suspending or terminating accounts, and reporting unlawful activity to the authorities. We may act immediately where conduct creates risk to the Platform, Hotels, Travelers or others. Nothing here limits other rights or remedies available to us under the Terms or at law.

10. Reporting abuse

To report a violation of this policy, content that breaches it, or suspected fraud or security issues, contact us at [CONFIRM abuse/contact address — e.g. [email protected] or [email protected]].

11. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new “Last updated” date, and your continued use of the Platform after changes take effect constitutes acceptance.