Legal

6.3 ACCEPTABLE USE AND ABUSE POLICY

7 min read

Effective Date: August 15, 2026

1. PURPOSE

This Acceptable Use and Abuse Policy ("Policy") defines prohibited activities and establishes the standards governing use of the Platform, Services, infrastructure, and associated systems.

The objectives of this Policy are to:

  • protect the security, integrity, availability, and performance of the Platform;

  • ensure compliance with applicable laws and regulatory obligations;

  • safeguard third-party providers, partners, and network ecosystems;

  • prevent misuse of computational resources, artificial intelligence capabilities, storage systems, and communication tools; and

  • enable rapid enforcement actions where risk is identified.

Compliance with this Policy is a condition of continued access to the Services.

2. SCOPE

This Policy applies to all customers, users, resellers, affiliates, API consumers, and any party accessing the Platform directly or indirectly.

Customers are responsible for all activity originating from their accounts, including activity performed by employees, contractors, agents, integrations, automated systems, or end users.

The Policy applies regardless of whether misuse is intentional, negligent, automated, or results from failure to implement commercially reasonable security controls.

3. GENERAL USE STANDARD

Customers must use the Services in a lawful, responsible, and commercially reasonable manner.

Use of the Platform must not:

  • threaten platform stability or performance;

  • create disproportionate infrastructure load;

  • expose the Platform to legal or regulatory risk;

  • interfere with other customers’ use of the Services; or

  • damage the reputation of the Platform, its providers, or network partners.

3.1 Derivative Risk Standard

The Platform reserves the right to restrict or suspend activity that presents a credible risk to infrastructure stability, legal compliance, provider relationships, security posture, or network reputation, even where such activity is not explicitly prohibited by this Policy.

4. PROHIBITED ACTIVITIES

4.1 Illegal Content and Conduct

Customers may not use the Services to create, store, process, transmit, or distribute content that:

  • violates applicable law;

  • infringes intellectual property rights;

  • constitutes fraud, deception, or misrepresentation;

  • promotes violence, exploitation, or criminal activity; or

  • is subject to regulatory restriction without required authorization.
    The Platform may remove such content without prior notice.

4.2 Storage Abuse

The Services are not intended for disproportionate archival use or as a substitute for dedicated backup infrastructure unless expressly authorized.

Prohibited behaviors include:

  • using the Platform primarily for bulk file storage unrelated to active workflows;

  • maintaining excessive inactive data;

  • attempting to bypass storage quotas;

  • replicating datasets across multiple accounts to evade limits;

  • operating public file repositories without authorization.
    The Platform may impose technical controls, throttle usage, or require migration to an appropriate service tier.

4.3 Artificial Intelligence and Compute Misuse

Customers may not use the Platform to:

  • generate unlawful, harmful, or deceptive automated content;

  • conduct automated disinformation campaigns;

  • create deepfakes intended to mislead;

  • perform large-scale scraping or dataset harvesting in violation of law;

  • execute uncontrolled high-intensity compute workloads;

  • probe model behavior for safety circumvention; or

  • resell AI capabilities without authorization.
    The Platform may implement rate limits, suspend workloads, or restrict model access where risk is detected.

4.4 Spam, Messaging Abuse, and Malicious Distribution

Use of the Services for unsolicited communications or abusive distribution is prohibited, including:

  • bulk unsolicited email;

  • SMS spam;

  • automated outreach without lawful basis;

  • malware distribution;

  • phishing infrastructure;

  • command-and-control systems;

  • traffic laundering;

  • reputation cycling.
    The Platform may immediately suspend implicated resources.

4.5 Security Violations

Customers must not:

  • attempt to gain unauthorized access to systems;

  • scan or probe networks without authorization;

  • exploit vulnerabilities;

  • interfere with service operation;

  • deploy malware;

  • conduct denial-of-service activity;

  • circumvent authentication controls; or

  • attempt to reverse engineer security mechanisms.
    Good-faith security research requires prior written authorization.

4.6 Resale and Platform Replication

Customers may not resell, white-label, sublicense, or commercially redistribute the Services without explicit written authorization.

Operating a competing platform, shared service, bureau model, or multi-tenant environment on top of the Platform is prohibited unless expressly permitted by written agreement.

4.7 Bot Networks and Automation Abuse

Unauthorized large-scale automation is prohibited, including:

  • bot farms;

  • artificial traffic generation;

  • engagement manipulation;

  • automated account creation;

  • resource mining;

  • queue flooding.
    The Platform may deploy automated detection systems to enforce this provision.

4.8 Payment, Identity, and Account Abuse

Customers may not:

  • provide false identity information;

  • use stolen payment instruments;

  • create accounts to evade enforcement;

  • manipulate trials or promotional programs;

  • engage in coordinated refund behavior; or

  • maintain accounts on behalf of sanctioned parties.
    Accounts may be suspended pending verification.

4.9 Sanctions and Export Compliance

Customers may not use the Services in violation of applicable export controls, trade sanctions, or economic restrictions. The Platform may restrict or terminate access where necessary to comply with such obligations.

4.10 Coordinated Abuse

The creation or use of multiple accounts to distribute abusive activity, evade enforcement, manipulate limits, or obscure attribution constitutes a material violation of this Policy.

5. RESOURCE GOVERNANCE

The Platform reserves the right to implement technical safeguards, including:

  • rate limiting;

  • workload throttling;

  • storage controls;

  • automated abuse detection;

  • account verification requirements;

  • traffic filtering.
    Customers must not attempt to bypass such controls.

5.1 Commercial Rebalancing

The Platform reserves the right to require migration to an appropriate service tier where usage materially exceeds the intended commercial profile of the subscribed Service.

6. ENFORCEMENT AUTHORITY

The Platform may take any action reasonably necessary to mitigate risk, including:

  • content removal;

  • workload interruption;

  • feature restriction;

  • temporary suspension;

  • immediate termination;

  • traffic blocking;

  • deletion of abusive data where legally permitted.

Where the Platform reasonably believes that customer activity poses an immediate threat to infrastructure, security, legal compliance, or third-party relationships, the Platform may take protective action without prior notice, including service isolation, network blocking, or data access restriction. Such protective actions may be taken without liability to the Platform where reasonably necessary to prevent security, legal, or infrastructure harm.

The Platform shall not be responsible for any data loss resulting from enforcement actions taken in good faith.

Enforcement actions may be taken based on automated detection systems where reasonably necessary to protect the Platform, provided such systems are subject to appropriate oversight and periodic review.

Enforcement actions may consider the cumulative risk presented by related accounts, coordinated activity, shared infrastructure, common ownership signals, or behavioral correlation.

6.1 Abusive Data Removal

The Platform reserves the right to remove, quarantine, or disable access to data reasonably believed to violate this Policy or applicable law. Where legally permitted, such actions may occur without prior notice.

6.2 Emergency Security Authority

The Platform reserves the right to immediately suspend, isolate, or disable access to Services without prior notice where reasonably necessary to:

  • prevent active security threats;

  • stop ongoing abuse;

  • comply with provider directives;

  • mitigate infrastructure instability; or

  • respond to zero-day vulnerabilities or active exploitation.

Such emergency actions may be automated and executed without human review where speed is reasonably required to protect the Platform or third-party systems.

The Platform shall not be liable for service disruption resulting from good-faith emergency security measures.

6.3 Cost Recovery for Abuse

Where customer activity causes measurable infrastructure strain, incident response costs, legal expense, provider penalties, or remediation efforts, the Platform reserves the right to recover reasonable associated costs to the extent permitted by law.

6.4 Right to Preserve Service Integrity

The Platform reserves the right to take any action reasonably necessary to preserve overall service stability, availability, and security, including actions that may prioritize collective platform safety over individual customer continuity.

7. NO REFUND FOR ENFORCEMENT ACTIONS

Consistent with the Platform’s Refund Policy, suspension, restriction, or termination resulting from violations of this Policy does not create refund eligibility unless required by applicable law.

8. DUTY TO COOPERATE

Customers must reasonably cooperate with investigations and remediation efforts.

Failure to cooperate may result in suspension.

The Platform may disclose information or take enforcement action where reasonably necessary to:

  • comply with legal obligations;

  • respond to lawful requests;

  • protect safety;

  • prevent fraud;

  • protect infrastructure and partners.

9.1 Upstream Provider Requirements

Customers acknowledge that the Platform relies on third-party infrastructure, network operators, and technology providers whose acceptable use requirements may exceed those stated in this Policy. The Platform may enforce such upstream requirements where necessary to maintain service availability.

10. GOOD-FAITH DISCRETION STANDARD

The Platform acts under a good-faith, risk-based enforcement model.

Determinations of abuse may consider:

  • infrastructure impact;

  • legal exposure;

  • vendor requirements;

  • network reputation;

  • security posture; and

  • abnormal usage patterns.

Determinations made under this standard are final to the extent permitted by applicable law. The Platform is not obligated to provide detailed forensic findings where disclosure could weaken security controls.

11. NO GENERAL DUTY TO MONITOR

The Platform is not obligated to actively monitor customer activity. Failure to detect or act upon prohibited conduct does not constitute acceptance of such conduct or a waiver of enforcement rights.

The Platform retains the right to monitor use where reasonably necessary for security, legal compliance, fraud prevention, or service protection purposes.

12. RISK-BASED INTERPRETATION

This Policy shall be interpreted in a manner that prioritizes platform security, legal compliance, and service reliability.

13. POLICY UPDATES

This Policy may be updated periodically. Continued use of the Services constitutes acceptance of the updated version unless otherwise required by law.

14. RELATIONSHIP TO MASTER AGREEMENT

This Policy is incorporated by reference into the governing agreement.

In the event of conflict, the Master Services Agreement controls.

15. SURVIVAL

Provisions relating to liability protection, enforcement authority, investigatory rights, and cooperation survive termination of Services.