Acceptable Use Policy
This Acceptable Use Policy (“AUP”) explains the rules and restrictions that apply when you access or use Asiyst, including the Asiyst website, applications, APIs, SDKs, CLI tools, AI services, hosted infrastructure, and other services provided by Asiyst (“Services”). By using the Services, you agree to comply with this AUP. This AUP forms part of the Asiyst Terms of Service.
1. Permitted Use
You may use the Services only for lawful purposes and in accordance with:
- Applicable laws and regulations.
- The Asiyst Terms of Service.
- This Acceptable Use Policy.
- Any applicable API, SDK, or service-specific documentation.
- Any restrictions communicated by Asiyst regarding particular Services.
You are responsible for your use of the Services and for ensuring that your applications, content, data, integrations, and users comply with these requirements.
2. Prohibited Activities
You may not use the Services to:
2.1 Illegal Activities
- Violate any applicable law, regulation, court order, or legal requirement.
- Facilitate, encourage, or materially assist unlawful activities.
- Create or distribute content intended to facilitate criminal activity.
- Circumvent applicable legal, regulatory, or contractual restrictions.
2.2 Fraud, Deception, and Impersonation
- Commit or facilitate fraud, scams, phishing, or other deceptive activities.
- Impersonate another person, organization, service, or authority in a misleading manner.
- Create fraudulent documents, records, credentials, or communications.
- Misrepresent the origin, identity, affiliation, or authorization of an application or service.
2.3 Unauthorized Access and Security Abuse
You may not:
- Attempt to gain unauthorized access to Asiyst systems, accounts, networks, APIs, databases, or infrastructure.
- Access another user's account or data without authorization.
- Circumvent authentication, authorization, rate limits, access controls, or security mechanisms.
- Probe, scan, or test systems for vulnerabilities without authorization.
- Exploit security vulnerabilities for unauthorized purposes.
- Deploy malware, ransomware, spyware, viruses, worms, or other malicious software.
- Conduct denial-of-service or distributed denial-of-service attacks.
- Interfere with the availability, integrity, or operation of the Services.
2.4 Abuse of APIs and Infrastructure
You may not:
- Excessively consume resources in a manner that adversely affects the Services or other users.
- Circumvent usage limits, quotas, rate limits, or technical restrictions.
- Use multiple accounts, credentials, API keys, or other mechanisms to evade limits or enforcement measures.
- Generate automated traffic intended to overload or disrupt the Services.
- Reverse engineer or attempt to extract protected credentials, secrets, system prompts, private infrastructure information, or non-public components of the Services, except where expressly permitted by applicable law.
- Use the Services to interfere with another customer's application or infrastructure.
2.5 Harmful or Abusive Content
You may not use the Services to create, distribute, or facilitate content that:
- Credibly facilitates imminent physical harm.
- Encourages or meaningfully facilitates violent wrongdoing.
- Facilitates the exploitation or sexual abuse of minors.
- Involves non-consensual sexual imagery or sexual exploitation.
- Facilitates trafficking or exploitation of people.
- Provides instructions intended to enable serious wrongdoing or harm.
Nothing in this section is intended to restrict lawful discussion, research, education, journalism, or other legitimate uses that do not facilitate prohibited conduct.
2.6 Privacy and Personal Data
You may not use the Services to:
- Collect, process, disclose, or use personal data unlawfully.
- Violate applicable privacy or data-protection laws.
- Obtain or expose another person's private information without appropriate authorization.
- Use the Services to conduct unauthorized surveillance or tracking.
- Circumvent privacy controls or access restrictions.
You are responsible for obtaining any permissions, notices, consents, or other legal bases required for your processing of personal data.
2.7 Intellectual Property
You may not use the Services to knowingly:
- Infringe another person's intellectual-property rights.
- Distribute copyrighted, trademarked, patented, or otherwise protected material without appropriate authorization.
- Remove or circumvent copyright-management information or other rights-management mechanisms.
- Misuse another person's trademarks, branding, or proprietary materials.
You are responsible for ensuring that content and materials you provide to Asiyst or process through the Services are legally authorized for that use.
2.8 Spam and Unsolicited Communications
You may not use the Services to:
- Send unlawful spam or bulk unsolicited communications.
- Facilitate phishing campaigns or credential-harvesting campaigns.
- Circumvent email, messaging, or communications-provider restrictions.
- Generate or distribute deceptive mass communications.
- Use purchased, scraped, or unlawfully obtained contact information for prohibited communications.
2.9 Circumvention and Abuse of Accounts
You may not:
- Create accounts for fraudulent or abusive purposes.
- Share credentials in a manner that violates applicable account restrictions.
- Sell, transfer, or misuse API keys or authentication credentials except where expressly permitted.
- Attempt to evade account suspension, termination, usage restrictions, or other enforcement actions.
- Use another person's account or credentials without authorization.
2.10 Automated Data Collection and Scraping
You may not use Asiyst or its infrastructure to conduct unauthorized scraping, crawling, harvesting, or automated extraction that:
- Violates a third party's terms or applicable law.
- Circumvents technical access controls.
- Places unreasonable load on third-party systems.
- Collects personal or confidential information without appropriate authorization.
3. Third-Party Services
If you connect Asiyst to third-party services, APIs, websites, data sources, AI providers, plugins, or other systems, you are responsible for complying with their applicable terms and policies.
You must have appropriate authorization to connect Asiyst to third-party systems and must not use Asiyst to circumvent restrictions imposed by those services.
4. API Keys and Credentials
You are responsible for protecting your Asiyst API keys, provider credentials, access tokens, and other authentication information.
You must not:
- Publish private credentials in public repositories.
- Intentionally expose credentials to unauthorized persons.
- Use credentials belonging to another person or organization without authorization.
- Use compromised credentials.
- Attempt to obtain credentials that do not belong to you.
If you believe an API key or credential has been compromised, you should revoke or rotate it as soon as reasonably possible.
5. Security Research
Security testing of Asiyst systems is permitted only where expressly authorized by Asiyst.
Unless Asiyst provides explicit authorization, you must not conduct penetration testing, vulnerability scanning, exploitation, denial-of-service testing, credential testing, or similar activity against Asiyst infrastructure.
If you discover a security vulnerability, you should report it through the security contact or vulnerability-reporting process provided by Asiyst rather than exploiting it.
6. Responsibility for Your Applications
If you use Asiyst to build, operate, or distribute an application, website, agent, avatar, API integration, or other software, you are responsible for:
- The application's functionality.
- The content it generates or displays.
- The data it processes.
- Your users' activities.
- Your compliance with applicable laws.
- Your third-party integrations.
- Providing appropriate disclosures and notices where required.
- Implementing appropriate security and access controls.
Asiyst does not make you compliant with applicable laws merely by providing the Services.
7. Monitoring and Enforcement
Asiyst may use reasonable technical and administrative measures to detect abuse, protect the Services, investigate security incidents, enforce this AUP, and comply with legal obligations.
Where appropriate, Asiyst may:
- Investigate suspected violations.
- Restrict or suspend access to particular features.
- Rate-limit requests.
- Revoke API keys or credentials.
- Suspend or terminate accounts.
- Remove or restrict access to content.
- Preserve information where legally required or reasonably necessary for security and enforcement.
- Cooperate with lawful requests from authorities.
Asiyst may take action when reasonably necessary to protect users, third parties, the Services, or Asiyst infrastructure.
8. Reporting Violations
If you believe that an account, application, API integration, or other activity is violating this AUP, you may report it to Asiyst through the designated support or security contact.
Reports should include enough information for Asiyst to understand and investigate the alleged violation.
9. Changes to This Policy
Asiyst may update this Acceptable Use Policy from time to time to reflect changes to the Services, applicable law, security requirements, or operational practices.
When material changes are made, Asiyst may provide notice through the Services or other appropriate means.
The updated version will become effective on the date stated in the revised policy.
10. Contact
For questions regarding this Acceptable Use Policy, contact:
Asiyst Website: https://asiyst.com Email: support@asiyst.com