Terms of Service

"MASK," "we," "us," and "our" refer to MASK, the link management platform operated at mask.pk. "Service" refers to the MASK platform, including all features such as short links, bio pages, QR codes, analytics dashboards, campaign management, API access, webhook integrations, and any related services. "User," "you," and "your" refer to any individual or entity accessing the Service. "Content" refers to any links, bio pages, QR codes, slugs, text, images, or other materials created through the Service. "Workspace" refers to an organisational unit within the platform under which resources are managed. "Personal Data" has the meaning ascribed to it under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable data protection legislation.

By creating an account, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service and our Privacy Policy. If you do not agree to these terms, you must not use the Service.

If you are accessing the Service on behalf of a company, organisation, or other legal entity, you represent and warrant that you have the authority to bind that entity to these terms. In such cases, "you" and "your" shall refer to both you individually and the entity you represent.

To access certain features of the Service, you must register for an account by providing accurate, current, and complete information. You are solely responsible for maintaining the confidentiality of your account credentials, including passwords, API keys, and two-factor authentication recovery codes.

You are responsible for all activities conducted under your account, whether or not authorised by you. You must notify us immediately at security@mask.pk upon becoming aware of any unauthorised access to or use of your account. MASK shall not be liable for any loss or damage arising from your failure to safeguard your account credentials.

We reserve the right to suspend or terminate accounts that contain inaccurate registration information, remain inactive for an extended period, or are reasonably suspected of being compromised.

You agree to use the Service only for lawful purposes and in compliance with all applicable local, national, and international laws and regulations. You shall not use the Service to:

• Create, distribute, or facilitate access to malware, phishing schemes, ransomware, or any form of malicious software.
• Redirect users to harmful, illegal, deceptive, or fraudulent destinations.
• Send unsolicited communications, spam, or bulk messaging.
• Infringe upon or violate the intellectual property rights, privacy rights, or other proprietary rights of any third party.
• Engage in activities that violate any applicable sanctions, export controls, or anti-money laundering regulations.
• Attempt to gain unauthorised access to the Service, other user accounts, or any systems or networks connected to the Service.
• Interfere with, disrupt, or impose an unreasonable burden on the Service infrastructure, including through automated scraping, denial-of-service attacks, or similar activities.
• Impersonate or falsely represent an affiliation with any person, government body, law enforcement agency, military organisation, corporation, public institution, brand, or other entity.
• Create content that misleads others into believing it is officially endorsed by, affiliated with, or authorised by any organisation, institution, or public figure.

Violation of this Acceptable Use Policy may result in immediate content removal, account suspension, or permanent termination, at our sole discretion and without prior notice.

All links, bio pages, QR codes, and other content created through the Service must comply with these Terms and all applicable laws. Content must not redirect to, host, or promote harmful, illegal, deceptive, or age-restricted material without appropriate safeguards.

You are solely responsible for the content you create, publish, and distribute through the Service. MASK does not pre-screen content but reserves the right to review, monitor, and remove content at any time for any reason.

MASK maintains a registry of reserved slugs encompassing, without limitation, system routes, technical paths, platform feature identifiers, country and city names, government and institutional terms, brand identifiers, and other designations necessary for the secure operation and future development of the platform. Users may not register, claim, or use any reserved slug. The registry of reserved slugs is subject to modification at any time without prior notice. A current list of reserved slugs is available within the platform for reference.

MASK publishes a blog, changelog, and documentation as part of the Service. Content published by MASK on these pages is provided for informational purposes only and does not constitute professional, legal, or financial advice. We reserve the right to modify, update, or remove such content at any time without notice.

MASK reserves the right, at its sole and absolute discretion, to remove, disable, suspend, or reassign any link, bio page, QR code, slug, or other user-created content under any of the following circumstances:

• Technical necessity. The content interferes with, or has the reasonable potential to interfere with, the platform's current operations, system infrastructure, security protocols, performance, or any planned or future technical integrations, features, or development.
• Policy violation. The content violates these Terms of Service, our Acceptable Use Policy, or any applicable law or regulation.
• Impersonation or misrepresentation. We receive reports or otherwise become aware that content is being used to impersonate, falsely represent, or create a misleading impression of affiliation with any organisation, brand, public figure, government body, or institution.
• Abuse or safety concerns. The content is associated with spam, phishing, malware distribution, fraud, or any activity that poses a risk to our users, our platform, or third parties.
• Slug reclamation. A slug is required for platform operations, reserved namespace expansion, or has been identified as conflicting with the platform's technical requirements.

Such actions may be taken without prior approval, notice, or obligation to the affected user. Where practicable, we will make reasonable efforts to notify the account holder after action has been taken. Affected users may submit a review request through our support channels at support@mask.pk within thirty (30) days of the action.

You acknowledge and agree that MASK shall not be liable for any loss, damages, lost revenue, or business disruption arising from the exercise of these rights.

The Service is offered under multiple subscription tiers, each with defined usage limits, feature entitlements, and pricing. Free accounts are subject to restricted functionality and usage quotas as detailed on our pricing page.

Paid subscriptions are billed on a recurring basis (monthly or annually) according to the plan selected at the time of purchase. All fees are denominated in United States Dollars (USD) unless otherwise stated. Payments are processed through our third-party payment provider, and you agree to their terms of service as applicable.

You may upgrade, downgrade, or cancel your subscription at any time through your workspace billing settings. Downgrades and cancellations take effect at the end of the current billing period. No pro-rata refunds are provided for partial billing periods unless required by applicable consumer protection law. We reserve the right to modify pricing or plan structures with a minimum of thirty (30) days advance written notice.

API access is provided subject to rate limits and scope restrictions defined by your subscription plan. API keys are confidential credentials and must not be shared, published, or embedded in client-side code. You are responsible for all API usage under your keys.

Webhook endpoints configured within the Service must point to infrastructure under your control. MASK is not liable for data transmitted to your webhook endpoints or any failures in delivery.

We reserve the right to revoke API keys, disable webhook endpoints, or restrict API access immediately and without notice in the event of abuse, excessive usage beyond plan entitlements, security concerns, or violation of these Terms.

The API base URL, authentication methods, rate limits, and endpoint specifications are documented in our API Reference. We reserve the right to modify API endpoints, parameters, or response formats with reasonable advance notice. Breaking changes will be communicated at least thirty (30) days in advance where practicable.

You retain all ownership rights to the content you create on the platform. By using the Service, you grant MASK a limited, non-exclusive, worldwide, royalty-free licence to host, store, cache, transmit, and display your content solely as necessary to operate and provide the Service.

The MASK name, logo, brand identity, platform design, source code, and all associated intellectual property are and shall remain the exclusive property of MASK. No licence or right to use our intellectual property is granted except as expressly stated in these Terms.

If you believe that content on the Service infringes your intellectual property rights, please contact us at legal@mask.pk with a detailed description of the alleged infringement.

Your use of the Service is governed by our Privacy Policy, which forms an integral part of these Terms. By using the Service, you consent to the collection, processing, and storage of data as described in our Privacy Policy.

We process Personal Data in accordance with the General Data Protection Regulation (GDPR) and all other applicable data protection legislation. Where we act as a data processor on your behalf (e.g., analytics data collected from visitors who interact with your links or bio pages), we process such data solely in accordance with your instructions and these Terms.

You represent and warrant that any Personal Data you collect, store, or process through the Service (including through bio page forms, newsletter signups, or contact forms) is obtained lawfully and with appropriate consent, and that your use of such data complies with all applicable data protection laws.

For further information regarding your data protection rights, our lawful basis for processing, data retention policies, and how to exercise your rights under GDPR, please refer to our Privacy Policy.

The Service provides analytics features that collect data about interactions with your links, bio pages, and QR codes. This data may include, without limitation, anonymised IP addresses, approximate geographic location, device type, browser, operating system, referral source, and timestamps.

You acknowledge that by publishing links and bio pages through the Service, visitor interaction data will be collected and made available to you through the analytics dashboard. You are responsible for disclosing this data collection to your visitors in accordance with applicable privacy laws, including GDPR where applicable.

MASK employs bot detection and fraud prevention mechanisms. Clicks or interactions identified as suspicious, automated, or fraudulent may be flagged or excluded from analytics at our discretion.

We endeavour to maintain high availability of the Service but do not guarantee uninterrupted, error-free, or continuous access. The Service is provided on an "as is" and "as available" basis without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

Scheduled maintenance will be communicated with reasonable advance notice where practicable. Enterprise customers with Service Level Agreements (SLAs) are subject to the specific availability commitments set forth in their respective agreements.

MASK shall not be liable for any downtime, service interruption, or data loss resulting from circumstances beyond our reasonable control, including but not limited to force majeure events, third-party service provider failures, network outages, or cyberattacks.

To the maximum extent permitted by applicable law, MASK, its directors, employees, agents, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, goodwill, or revenue, arising out of or in connection with your use of or inability to use the Service, regardless of the theory of liability.

Our total aggregate liability arising out of or relating to these Terms or the Service shall not exceed the total amount paid by you to MASK in the twelve (12) months immediately preceding the event giving rise to the claim, or one hundred United States Dollars (USD 100), whichever is greater.

Nothing in these Terms shall exclude or limit liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded or limited under applicable law.

You agree to indemnify, defend, and hold harmless MASK, its officers, directors, employees, agents, and affiliates from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or related to: your use of the Service; your violation of these Terms; your violation of any applicable law or regulation; your infringement of any third-party rights; or content you create, publish, or distribute through the Service.

You may terminate your account at any time through your account settings or by contacting support@mask.pk. Upon termination, your right to access the Service ceases immediately.

We may suspend or terminate your account or access to the Service immediately, without prior notice, if we reasonably believe you have violated these Terms, engaged in fraudulent or illegal activity, or if your continued use poses a risk to the platform, other users, or third parties.

Following termination, your data will remain available for export for a period of thirty (30) days, after which it may be permanently and irreversibly deleted from our systems. Data deletion will be carried out in accordance with our Privacy Policy and applicable data protection laws. We are not obligated to retain, return, or forward any content or data after the export period has expired.

These Terms shall be governed by and construed in accordance with the laws of Pakistan, without regard to its conflict of law provisions. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of Pakistan.

Before initiating formal legal proceedings, both parties agree to attempt to resolve disputes through good-faith negotiation for a period of not less than thirty (30) days following written notice of the dispute.

We reserve the right to modify, amend, or replace these Terms at any time. Material changes will be communicated to registered users via email or in-app notification at least thirty (30) days before the revised terms take effect.

Your continued use of the Service following the effective date of any modifications constitutes your acceptance of the revised Terms. If you do not agree to the updated Terms, you must discontinue use of the Service and close your account.

If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent.

These Terms, together with our Privacy Policy and any applicable Service Level Agreements or order forms, constitute the entire agreement between you and MASK with respect to the Service and supersede all prior or contemporaneous communications, proposals, and agreements, whether oral or written.

For questions regarding these Terms of Service, please contact:

• General legal enquiries: legal@mask.pk
• Privacy and data protection: privacy@mask.pk
• Security reports: security@mask.pk
• General support: support@mask.pk