We built Humox because we were tired of social-proof apps that lie to shoppers. Our whole pitch — no fake numbers — only works if every merchant on the network plays by the same rule.
If you’d be uncomfortable showing a shopper a screenshot of the raw data behind a widget you’ve configured, you’re using us wrong. Email us and we’ll help you fix it.
What you may not do with our apps
Don’t manufacture data
- Don’t configure Rushly widgets to display counts, sales, or activity that didn’t actually happen in your store.
- Don’t create fake test orders solely to inflate widget numbers visible to real shoppers.
- Don’t pad Emote reaction counts with scripted clicks or paid click farms.
Seeding a brand-new page with a small, manual handful of reactions so it doesn’t show “0” on day one is fine. Scripted inflation is not.
Don’t mislead shoppers
- Don’t display widgets in a way that implies authority you don’t have (e.g. fake “Verified by Humox” badges).
- Don’t pair our widgets with copy that misrepresents what they show — like labeling a Rushly viewer counter as “Live verified orders”.
Don’t use it for prohibited categories
The Service may not be used on stores selling:
- Goods or services illegal where you’re shipping them.
- Sexually explicit content involving minors.
- Weapons, ammunition, or explosives where regulated.
- Live animals.
- Knowingly counterfeit goods.
- MLM, get-rich-quick, or other consumer-fraud schemes.
Adult, firearms, CBD, and similar regulated-but-legal categories are case-by-case — email us before installing.
Don’t abuse the infrastructure
- No automated scraping of widget endpoints beyond normal shopper traffic.
- No bypassing rate limits, plan tiers, or feature gates.
- No load-testing our infrastructure without prior written consent.
- No probing for vulnerabilities outside of the coordinated-disclosure flow below.
Follow Shopify’s rules too
Your use must also comply with Shopify’s own Acceptable Use Policy.
What you may not do with humox.dev
- No scraping the marketing site beyond what
robots.txtallows. - No probing non-public endpoints.
- No misrepresenting yourself as Humox staff anywhere.
What happens if you cross the line
We try to be reasonable. First step is almost always a conversation — we’ll email you, explain what we’re seeing, and give you a chance to fix it.
For serious, repeated, or shopper-harming violations we may, without further notice:
- Suspend or uninstall the app.
- Throttle or block infrastructure access.
We’ll refund the unused prepaid portion of your current billing period when we initiate a suspension, except where the violation involves fraud.
Coordinated security disclosure
Found a security issue? Please don’t post it publicly first. Email [email protected] with:
- A description and steps to reproduce.
- The impact you believe it has.
- Whether you’d like credit in the changelog if we fix it.
We respond within two business days. We won’t pursue good-faith researchers who avoid privacy violations and service disruption, don’t exfiltrate data beyond what’s needed to demonstrate the issue, and give us a reasonable window (typically 90 days) to fix before public disclosure.
Reporting other abuse
If you’re a shopper who thinks a Humox-powered widget is showing false info, or you’ve spotted a merchant breaking this policy, email [email protected] with the store URL and a description (a screenshot helps). We read every report.
Changes
We may update this policy. Material changes are announced to subscribed merchants 30 days before they take effect.