Ethics Policy

Our principles

Open-source intelligence is a legitimate and valuable discipline. Security researchers, journalists, fraud investigators, legal professionals, and compliance teams rely on OSINT every day for lawful purposes. OsintGo exists to make professional-grade intelligence accessible — not to enable harm.

We built this platform with the conviction that the tool itself is neutral; the ethics lie entirely in how it is used. This policy draws a clear line.

Permitted use

• Security research: Vulnerability discovery, threat intelligence, malware analysis, and defensive security work.
• Fraud & AML investigation: Due diligence, KYC verification, anti-money-laundering compliance, and financial crime investigation.
• Journalism & public interest: Investigating matters of genuine public concern where the information is already publicly accessible.
• Legal & compliance: Background checks, asset tracing, litigation support, and regulatory compliance — where permitted by applicable law.
• Corporate security: Protecting an organisation's own assets, personnel, and infrastructure from external threats.
• Academic research: Published or supervised research with appropriate ethical oversight.

Prohibited use

The following uses are strictly prohibited and will result in immediate account termination and, where required by law, reporting to authorities:

• Stalking & harassment: Using OsintGo to locate, monitor, or intimidate individuals, including tracking an individual's physical location or movements.
• Doxxing: Publishing private personal information about individuals with the intent to harm, intimidate, or expose them.
• Targeted discrimination: Profiling individuals based on race, religion, ethnicity, sexual orientation, gender identity, or political views.
• Social engineering attacks: Gathering personal information to deceive individuals, impersonate them, or facilitate fraud against them.
• Unauthorised surveillance: Monitoring employees, partners, or individuals without legally required consent or court authority.
• Child safety violations: Any use involving the exploitation, identification, or location of minors for harmful purposes.
• Sanctioned entity evasion: Using intelligence data to assist entities or individuals subject to international sanctions.

Legal compliance

Use of OsintGo must comply with all applicable laws in your jurisdiction, including but not limited to:

• GDPR and national data protection laws (EU/UK)
• Computer Fraud and Abuse Act (CFAA) and state equivalents (US)
• Electronic Communications Privacy Act (US)
• Investigatory Powers Act and Computer Misuse Act (UK)
• Applicable privacy and surveillance laws in your country

OsintGo does not provide legal advice. If you are unsure whether a specific use is lawful in your jurisdiction, consult qualified legal counsel before proceeding.

Responsible disclosure

If you discover a vulnerability in OsintGo's infrastructure or data sources, we ask that you disclose it responsibly by submitting an Ethics Concern via the support form before publishing any details. We commit to acknowledging reports within 48 hours and resolving confirmed issues within 30 days.

Enforcement

We monitor for abuse patterns through automated systems and manual review. Violations result in:

1. Immediate API key suspension pending investigation
2. Permanent account termination without refund
3. Where legally required: reporting to law enforcement

To report abuse by another user, submit an Ethics Concern via the support form.

Updates to this policy

This policy may be updated to reflect changes in law, our services, or the threat landscape. Significant changes will be communicated via the dashboard. Continued use after the effective date constitutes acceptance.