Suffle Online

Operated by Naucera Travel Private Limited

1. Purpose and Scope

This Acceptable Use Policy sets the rules for lawful, secure, responsible and authorised use of Suffle Online.

It applies to customers, sellers, administrators, visitors and other users of the Suffle website, marketplace, accounts, AI features, connected services, messaging tools, document systems and other platform functionality.

It supplements the Terms & Conditions and specialised Suffle policies.

2. Company and Contact

Suffle Online is operated by Naucera Travel Private Limited.

Website: www.suffleonline.com

General Support / Grievance Email: info@flyshoppy.com

Grievance Officer: Mr. Roopal Jain, Managing Director

Grievance Officer Mobile: 9707669981

Grievance Officer Email: info@flyshoppy.com

Address: 707, N. T. Road, Nalbari-781435 (Assam), India.

3. Core Acceptable Use Principles

Users must use Suffle lawfully, honestly, responsibly and only for purposes they are authorised to perform.

Users must respect the rights, privacy, security and property of Suffle, other users, sellers, providers and third parties.

Users must not interfere with the platform or use it to facilitate fraud, abuse, unlawful activity or harm.

4. Lawful Use

Users must comply with applicable Indian law and other laws that apply to their activities on Suffle.

Users must not use Suffle to facilitate unlawful transactions, evade legal requirements or misrepresent the legality or origin of goods, services, payments or documents.

5. Account Security and Authorisation

Users may access only accounts, records, documents, connected services and features for which they have legitimate authority.

Users must protect their account credentials and must not share passwords, authentication codes or other security credentials.

Users must promptly report suspected unauthorised access or account compromise.

6. Prohibited Credential Handling

Users must not submit or request another person's passwords, OTPs, UPI PINs, CVV, ATM PINs, banking passwords or similar sensitive authentication/payment secrets through Suffle.

Suffle must not intentionally expose such credentials to AI systems, sellers, support personnel or other users.

7. No Unauthorised Access

Users must not attempt to bypass authentication, authorisation, access controls, session controls, paywalls, account restrictions or other security mechanisms.

Users must not access another customer, seller or administrator's private information or systems.

8. No Security Bypass

Users must not bypass CAPTCHA, MFA, OTP, provider security controls, rate limits or other protective measures.

Connected services must be accessed only through legitimate supported authorisation mechanisms.

9. Marketplace Integrity

Users must not manipulate marketplace listings, search results, product availability, seller status, reviews, ratings, prices, inventory, serviceability or other marketplace data.

Users must not create artificial transactions or other activity intended to distort marketplace performance or discovery.

10. Seller Acceptable Use

Sellers must provide accurate product, brand, pricing, inventory, tax, fulfilment, return and compliance information.

Sellers must not list counterfeit, prohibited, restricted or unlawfully supplied products.

Sellers must comply with applicable seller verification, product approval, fulfilment, customer-service and marketplace rules.

11. Prohibited Products and Transactions

Users must not use Suffle to sell, advertise, distribute or facilitate products or transactions prohibited by applicable law or Suffle's Prohibited & Restricted Products Policy.

This includes counterfeit goods, unlawfully sourced goods, fraudulent documents and other restricted categories identified by Suffle or applicable law.

12. Fraud and Deception

Prohibited conduct includes identity fraud, payment fraud, fake orders, fake refunds, chargeback abuse, coupon abuse, referral abuse, false seller claims, fabricated documents and misleading commercial representations.

Users must not impersonate Suffle, Naucera Travel Private Limited, a seller, courier, payment provider or another person.

13. Payment Abuse

Users must not manipulate payment flows, exploit payment errors, create fraudulent transactions or attempt to obtain goods, refunds or credits without valid entitlement.

Users must not falsely claim that a payment was completed based solely on a screenshot, frontend message or other unverified evidence.

Marketplace and WhatsApp subscription payment systems must not be intentionally confused or manipulated.

14. Order, Return and Refund Abuse

Users must not submit false cancellation, return, replacement, damage, non-delivery or refund claims.

Repeated or coordinated abuse of return/refund systems may result in investigation and appropriate action.

Refund outcomes must be based on actual order and payment records.

15. Review and Rating Abuse

Users must not post fake, fabricated, purchased, manipulated or misleading reviews or ratings.

Users must not threaten sellers or customers to obtain a favourable review.

Review manipulation is governed additionally by the Reviews & Ratings Policy.

16. Intellectual Property

Users must not upload, reproduce, sell, distribute or use content they do not own or have permission to use.

Prohibited conduct includes copyright infringement, trademark misuse, counterfeit branding, pirated material and unauthorised use of photographs, descriptions, logos or designs.

Intellectual-property complaints and enforcement are governed by the Intellectual Property Policy.

17. Uploaded Documents and Files

Users must not upload malware, malicious code, forged certificates, fraudulent invoices, stolen documents or content they are not authorised to use.

Files must be relevant to the feature for which they are uploaded and should not contain unnecessary sensitive information.

The Document Policy governs document handling.

18. Malware and Harmful Code

Users must not upload, distribute or execute viruses, ransomware, spyware, worms, trojans, malicious scripts or other harmful code through Suffle.

Users must not use Suffle infrastructure to test, deploy or distribute malware against Suffle or third parties without explicit authorisation.

19. Security Testing and Vulnerability Research

Users must not conduct intrusive security testing, exploitation, scanning, credential attacks or denial-of-service activity against Suffle or connected providers without explicit written authorisation.

Suspected vulnerabilities should be reported through the appropriate Suffle security/reporting channel rather than exploited for personal benefit.

20. Scraping and Automated Access

Users must not scrape, crawl, harvest, bulk-copy or systematically extract Suffle data except where expressly permitted by Suffle.

Automated access must not circumvent rate limits, authentication, robots controls, security measures or technical restrictions.

Publicly visible information must not be treated as permission to harvest private, protected or commercially restricted data.

21. AI Acceptable Use

Users may use Suffle AI for legitimate assistance, discovery, organisation, analysis and other supported purposes.

Users must not use AI to generate fraud, impersonation, malware, deceptive commercial claims, fake reviews, fake documents or other prohibited material.

AI outputs must not be deliberately used to mislead another person about prices, payment, availability, booking, tracking, certification, seller approval or other material facts.

22. No AI Prompt-Based Security Bypass

Users must not attempt to manipulate Suffle AI into revealing system prompts, credentials, secrets, private records, internal security controls or another user's data.

Prompt injection or other techniques must not be used to bypass application-level permissions.

AI follows the same underlying authorisation and privacy boundaries as the platform.

23. Connected Apps and Accounts

Users must connect only accounts and services they are authorised to connect.

Users must not use Suffle to bypass provider terms, authentication, CAPTCHA, MFA, OTP or other security mechanisms.

Connected account use is governed additionally by the Connected Apps & Accounts Policy.

24. Gmail and Email

Users must not use Suffle's email-related features to access mailboxes without authorisation, harvest email addresses unlawfully, impersonate senders or distribute malicious content.

Bulk or promotional communications must comply with applicable messaging, consent and anti-spam requirements.

The Gmail / Email Data Policy and Email Communication Policy also apply.

25. WhatsApp and Business Messaging

Users must not use Suffle's WhatsApp/business messaging functionality for spam, harassment, deceptive campaigns, purchased lists or unauthorised bulk messaging.

Users must respect consent, opt-outs, applicable templates and provider policies.

One active WhatsApp Business connection per account and other subscription/message limits are governed by the applicable Suffle configuration and WhatsApp / Business Messaging Policy.

26. Harassment, Threats and Abuse

Users must not use Suffle to threaten, stalk, harass, intimidate, extort, dox or repeatedly abuse another person.

Legitimate complaints, negative reviews and disputes are permitted when expressed honestly and without prohibited abusive conduct.

27. Privacy and Personal Data

Users must not collect, disclose, sell, publish or misuse another person's personal data through Suffle without lawful authority.

Users must not attempt to use marketplace, seller, support or search functions to discover private contact details or confidential information.

Privacy requirements are governed by the Privacy Policy and applicable law.

28. Child and Vulnerable-Person Protection

Users must not use Suffle to exploit, abuse, target or unlawfully collect information about children or vulnerable persons.

Age-related and child-data protections must not be circumvented.

29. Illegal Financial or Commercial Activity

Suffle must not be used to facilitate money laundering, fraud, unlawful financial activity, deceptive investment schemes or other prohibited commercial activity.

Users must not misrepresent transaction values, business identity, invoices, taxes or source of funds.

30. Seller and Customer Communications

Communications between sellers and customers must remain relevant to legitimate transactions and permitted platform functions.

Users must not use contact information obtained through Suffle to conduct unrelated spam, harassment, scraping or unauthorised marketing.

31. Referral and Rewards Abuse

Users must not create fake accounts, self-refer, manipulate attribution, create artificial purchases or otherwise abuse referral and rewards programmes.

Referral and reward rules are governed additionally by the Referral & Rewards Terms.

32. Subscription and Entitlement Abuse

Users must not manipulate subscription status, payment verification, plan limits, messaging limits or entitlement records.

Only actual verified subscription status should be relied upon for access to paid functionality.

33. Interference with Platform Operation

Users must not overload, disrupt, disable, damage or interfere with Suffle infrastructure, APIs, databases, queues, storage, communication systems or other services.

Users must not attempt denial-of-service attacks, resource exhaustion or deliberate performance degradation.

34. Circumvention of Restrictions

Users must not create replacement accounts, identities, devices or other mechanisms primarily to evade suspension, limits, fraud controls, referral restrictions, messaging limits or other platform safeguards.

Suffle may consider related accounts and activity when investigating suspected circumvention, subject to applicable law and privacy controls.

35. False or Misleading Platform Information

Users must not deliberately submit false information to obtain seller approval, product approval, refunds, rewards, account access, serviceability, payment benefits or other platform advantages.

AI-assisted forms and automated checks do not change the user's responsibility for the accuracy of submitted information.

36. No Manipulation of Tracking or Documents

Users must not alter tracking IDs, screenshots, PDFs, invoices, delivery records, booking documents or other evidence to mislead Suffle or another party.

Automated tracking must not be manipulated to create a false status or claim.

37. Responsible Use of Platform Resources

Users should use storage, messaging, AI, uploads, search and other platform resources reasonably and within applicable plan or technical limits.

Super Admin may configure reasonable limits to protect service availability, security and fair use.

38. Monitoring, Detection and Enforcement

Suffle may use automated systems, AI-assisted checks, logs, security controls and human review to detect suspected violations.

Detection signals are not necessarily final findings; Suffle may investigate relevant evidence before taking action where appropriate.

Suffle may restrict content, suspend features, pause transactions, require verification or suspend/terminate accounts where permitted by applicable terms and law.

39. Immediate Protective Action

Where necessary to protect users, sellers, payment systems, personal data, intellectual property or platform security, Suffle may take temporary protective action while an investigation is ongoing.

Examples may include disabling a listing, restricting an account, pausing a connection or blocking suspicious activity.

40. Reporting Violations

Users may report suspected abuse, fraud, security issues, prohibited products, intellectual-property infringement or other violations through Suffle's support or grievance channels.

Reports should include sufficient information to investigate and should not contain unnecessary passwords, OTPs, payment PINs or other secrets.

41. Appeals and Grievances

Users affected by platform action may use available support or grievance mechanisms to request review.

Where applicable, the Grievance Redressal Policy, specialised policy or relevant account workflow will govern the review process.

42. Third-Party Services

Some Suffle functions depend on payment providers, couriers, connected services, email providers, WhatsApp or other third parties.

Users must comply with applicable third-party rules when using those services through Suffle.

Suffle does not authorise users to bypass third-party security or terms.

43. Relationship with Other Policies

This Policy should be read with the Terms & Conditions, Privacy Policy, Data Security & Protection Policy, Suffle AI Terms, Connected Apps & Accounts Policy, Gmail / Email Data Policy, Email Communication Policy, Reviews & Ratings Policy, Intellectual Property Policy, Prohibited & Restricted Products Policy, Referral & Rewards Terms, WhatsApp / Business Messaging Policy and Grievance Redressal Policy.

44. Policy Updates

Suffle may update this Policy as platform functionality, security threats, marketplace features, AI capabilities or legal requirements change.

The current effective version should be maintained through Suffle's central legal/policy management system.

45. Legal and Implementation Note

This Policy describes Suffle's intended acceptable-use and enforcement framework. Actual enforcement should be proportionate, evidence-based and consistent with applicable law and the platform's contractual terms.

Nothing in this Policy authorises Suffle or users to bypass legal requirements, third-party security controls or provider terms.

This Policy should be reviewed by qualified Indian e-commerce, technology, privacy and legal counsel before publication and periodically thereafter.

Critical Acceptable Use Rules

·       Use Suffle only for lawful, authorised and legitimate purposes.

·       Never attempt to access another person's account, private data, connected service or confidential documents.

·       Do not bypass CAPTCHA, MFA, OTP, provider security, rate limits or other safeguards.

·       Do not upload malware, forged documents, stolen content or infringing material.

·       Do not manipulate payments, orders, refunds, reviews, referrals, tracking, seller/product approvals or marketplace discovery.

·       Do not use Suffle AI to fabricate facts, create fraud, impersonation, fake documents/reviews or bypass platform permissions.

·       Do not use Suffle communication tools for spam, harassment, phishing or unauthorised bulk messaging.

·       Suffle may investigate violations and take proportionate protective or enforcement action based on actual records and applicable rules.

Related Suffle Policies

·       Terms & Conditions

·       Privacy Policy

·       Data Security & Protection Policy

·       Suffle AI Terms

·       Connected Apps & Accounts Policy

·       Gmail / Email Data Policy

·       Email Communication Policy

·       Reviews & Ratings Policy

·       Intellectual Property Policy

·       Prohibited & Restricted Products Policy

·       Referral & Rewards Terms

·       WhatsApp / Business Messaging Policy

·       Grievance Redressal Policy

Enforcement Requirement

The production platform should maintain central abuse-detection, reporting, enforcement and audit mechanisms rather than creating separate enforcement systems for individual modules. Actions should be linked to the relevant account, event, evidence, policy rule and administrative decision where applicable.