Acceptable Use Policy
This Acceptable Use Policy ("AUP") governs your use of the online service made available by Byte Imagination Roger Zacharczyk (the "Service", as defined in the Terms of Service). The AUP forms part of the Terms of Service. Capitalised terms not defined here have the meaning given in the Terms.
We may suspend or terminate your access without prior notice if we reasonably determine that you have violated this AUP. Section references in the Terms (Section 14 — termination for cause) apply.
1. Prohibited content and activities
You must not use the Service to store, process, transmit, or generate:
- Illegal content, including content that infringes intellectual property rights, privacy rights, publicity rights, or any other rights, or that violates any applicable law or regulation.
- Malicious code, including malware, ransomware, viruses, worms, trojans, rootkits, or any other code intended to damage, interfere with, or gain unauthorised access to any system.
- Phishing or fraudulent content, including content designed to impersonate any person or entity or to deceive recipients.
- Sexually explicit content involving minors, content that exploits or endangers children, or content that violates child-protection laws of any jurisdiction.
- Content promoting violence, terrorism, hate speech, harassment, or discrimination on the basis of race, ethnicity, national origin, religion, gender, sexual orientation, disability, or any other protected characteristic.
- Personal data of third parties that you do not have the lawful right to process.
2. Prohibited technical behaviour
You must not:
- Circumvent quotas or rate limits, including by creating multiple accounts, sharing API Keys across organisations, rotating IP addresses to evade enforcement, or using automated systems to spread requests across keys you do not control.
- Resell, sublicense, or redistribute access to the Service without our prior written agreement. Building a product that calls the Service on behalf of your own end users is permitted under these Terms; reselling raw API access is not.
- Reverse engineer, decompile, or disassemble the Service except to the extent expressly permitted by mandatory law.
- Attempt to gain unauthorised access to any account, system, or data other than your own, including by probing, scanning, or testing the vulnerability of the Service or any connected system without our prior written authorisation.
- Disrupt or attack the Service, including via denial-of-service attacks, traffic flooding, or any technique intended to overload, degrade, or destabilise the Service or its underlying infrastructure.
- Bypass security or access controls, including authentication mechanisms, encryption, or audit logging.
- Forge or manipulate API headers, identifiers, request envelopes, or other metadata to misrepresent the source or nature of a request.
- Use the Service for cryptocurrency mining, distributed computation unrelated to the Service's stated purpose, or any other workload that abuses shared infrastructure.
- Scrape or harvest data from the Service other than data you submitted or are otherwise entitled to access.
3. Anti-spam and outbound communications
If the Service sends communications on your behalf to recipients (e.g. transactional email triggered through an API), you must:
- have a lawful basis under GDPR or applicable law for sending each communication;
- comply with all anti-spam laws applicable to you and to the recipient (including Directive 2002/58/EC, the Polish Act on the Provision of Services by Electronic Means, the US CAN-SPAM Act, and the Canadian CASL where applicable);
- include accurate sender identification and an unsubscribe mechanism where required;
- not use the Service to send unsolicited bulk messages.
4. Security research
We welcome responsible disclosure of vulnerabilities. Coordinated security testing of the Service is not considered a violation of this AUP, provided you:
- do not access, modify, or destroy data you do not own;
- do not perform tests that degrade the Service for other users (e.g. denial-of-service, sustained load tests);
- do not exfiltrate data beyond the minimum needed to demonstrate the vulnerability;
- report findings to contact@byteimagination.com and allow us a reasonable time to remediate before public disclosure.
We do not currently operate a paid bug-bounty programme.
5. Reporting abuse
To report a violation of this AUP — for example, abuse you observe coming through the Service, or content you believe is unlawful — contact contact@byteimagination.com. Provide enough information to allow us to identify the activity (timestamps, account or content references where possible).
6. Enforcement
Where we identify a violation we may, depending on severity:
- contact you to request remediation;
- suspend the affected API Key or account;
- terminate your access to the Service under Section 14 of the Terms;
- preserve and disclose information to law-enforcement or regulatory authorities where required or permitted by law.
We are not required to monitor Customer Data, and our decision not to act on any particular content does not constitute approval of it.
7. Changes
We may update this AUP from time to time. Material changes are notified by email at least 30 days before the effective date. Changes addressing newly identified abuse patterns may take effect immediately to protect the Service and other users.