Acceptable Use Policy

1. Scope

This Acceptable Use Policy (AUP) applies to every Customer, user, agent, contractor, and system that installs a probe, calls our APIs, or uses the inbox. It supplements the Terms of Service. If they conflict on a prohibition, the stricter rule wins.

2. Hard prohibitions

You may not, and may not allow others to:

• Use the Service to violate any law, regulation, export control, or sanctions regime.
• Probe, scrape, or attack systems you do not own or lack written permission to test.
• Capture, store, or transmit payment card data, government ID numbers, health data, or children’s data through the probe unless you have a separate written agreement with us that expressly allows it.
• Upload malware, ransomware, credential dumps, or exploit kits.
• Attempt to reverse engineer, bypass rate limits, defeat auth, or access another customer’s workspace.
• Use the Service to spam, phish, stalk, harass, dox, or defraud anyone.
• Misrepresent AethelLayer as endorsing your product, or remove our notices from SDKs we publish.
• Resell, sublicense, or white-label the Service without a written reseller agreement.
• Train competing foundation models on our prompts, drafts, or UI copy.
• Use automated agents to exhaust free tiers, create fake workspaces, or evade billing.
• Instrument competitors’ products without written authorization from that product’s owner.
• Dump secrets, session cookies, or production customer PII into probes “for context.”
• File or threaten chargebacks as leverage in a product dispute.

3. Your content and your liability

You are solely responsible for Customer Data, including stacks, logs, messages, and anything developers type into a thread. You represent that you have all rights and consents needed to send that data to us. If a third party sues us because of your data or your use of the Service, you will defend us and pay the damages, costs, and reasonable attorneys’ fees, to the fullest extent allowed by law.

4. Enforcement

We may investigate suspected abuse. We may remove content, throttle APIs, revoke keys, suspend workspaces, terminate accounts, keep fees already paid, refuse future signups, and cooperate with law enforcement. We do not owe you prior notice. We are not liable for any action taken under this AUP, including mistaken suspension we reverse in good faith. Restoration is discretionary. We do not provide a post-mortem of enforcement unless law requires it.

5. Reporting

Report abuse to abuse@aethellayer.com. Include URLs, timestamps, API keys involved (redact secrets), and evidence. We may not respond to anonymous or incomplete reports.