Acceptable Use Policy

This Acceptable Use Policy (“AUP”) governs your use of the Fairlead platform and services provided by Allyx, Inc. (“Allyx”), including any related applications, agents, APIs, integrations, and documentation (collectively, the “Service”). This AUP is incorporated by reference into the Allyx Terms of Service or other agreement governing your use of the Service (the “Terms”). Capitalized terms not defined in this AUP have the meanings given in the Terms. In this AUP, “you” means the Customer and includes its Authorized Users and any other person accessing or using the Service through the Customer’s account or credentials. Allyx may update this AUP in accordance with the modification and notice provisions of the Terms. Unless a shorter period is required by law or reasonably necessary to address security, abuse, or operational risks, Allyx will provide at least thirty (30) days’ notice of material changes to this AUP.

1. Authorized Use

You may use the Service only:

in accordance with the Terms, any applicable Order Form, the Documentation, and this AUP;
for systems, applications, repositories, environments, source code, data, and accounts that you own, control, or are expressly authorized to access and test; and
in compliance with applicable laws and regulations.

The restrictions in this AUP do not prohibit the intended use of the Service’s documented testing, instrumentation, code-analysis, automation, and integration functionality against systems, repositories, and environments that you are authorized to access and test.

2. Prohibited Uses

2.1 Illegal, Harmful, or Infringing Activities

You must not use the Service to:

violate any applicable local, state, national, or international law or regulation;
facilitate fraud, identity theft, phishing, deception, impersonation, or unauthorized access to another person’s systems, accounts, or data;
transmit, store, or process content that is unlawful, fraudulent, threatening, abusive, defamatory, or that infringes or misappropriates another person’s intellectual property, privacy, confidentiality, or other legal rights; or
export, re-export, access, or use the Service in violation of applicable export-control, trade-restriction, or economic-sanctions laws.

2.2 Unauthorized Systems, Code, and Credentials

Because the Service may instrument applications, access source code, execute tests, and interact with connected environments, you must use it only against authorized targets. You must not:

instrument, test, scan, access, or direct the Service at any application, system, endpoint, environment, repository, source code, or account that you do not own, control, or have express authorization to access and test;
use the Service to probe, scan, penetration-test, attack, overload, disrupt, or gain unauthorized access to any third-party system;
use the Service as a vector for a denial-of-service attack or any similar disruptive activity;
provide the Service with source code, data, credentials, API keys, access tokens, or other materials that you are not authorized to provide or use;
misrepresent the scope of your authorization to access, test, instrument, or modify any system, repository, environment, or source code; or
use the Service to circumvent or defeat an access control, authentication mechanism, rate limit, bot or anti-automation protection, CAPTCHA, or similar safeguard on any system that you do not own or are not authorized to test.

You are responsible for obtaining and maintaining all permissions required for the systems, environments, code, credentials, and integrations you connect to the Service.

2.3 Security and Service Integrity

You must not:

attempt to gain unauthorized access to the Service, Allyx’s infrastructure, another customer’s account or data, or any related system or network;
probe, scan, or test the vulnerability of the Service or any Allyx system without Allyx’s prior written authorization;
knowingly introduce, transmit, execute, or store malware, ransomware, viruses, Trojan horses, worms, destructive code, or other technology intended to compromise, damage, or disrupt the Service or any third party;
circumvent, disable, compromise, or interfere with any security, authentication, authorization, or access-control feature of the Service;
interfere with or disrupt the integrity, performance, operation, or availability of the Service or Allyx’s infrastructure;
exceed documented API rate limits or impose an unreasonable or disproportionate load on the Service;
use the Service for cryptocurrency mining or other compute-intensive activity unrelated to the documented purpose of the Service; or
circumvent, manipulate, disable, or interfere with usage metering, billing measurement, subscription limits, storage limits, or other technical restrictions applicable to the Service.

2.4 Data Protection and Restricted Data

You must not:

submit or make available through the Service any personal data for which you do not have all rights, permissions, notices, consents, and legal bases required under applicable data protection law;
use the Service to violate another person’s privacy or confidentiality rights;
use production personal data in a test environment unless necessary for authorized testing, permitted by applicable law, and protected by appropriate safeguards (data minimization, masking, de-identification, encryption, access controls); or
use the Service to process personal data concerning children where such processing is prohibited by applicable law or is not expressly permitted by the applicable Order Form and Documentation.

“Restricted Data” means:

protected health information regulated under HIPAA or similar health-privacy laws;
payment-card account data, including full payment-card numbers and sensitive authentication data;
bank-account credentials or other credentials that permit access to a financial account;
government-issued identification numbers;
biometric or genetic data used to identify a person;
special-category personal data or personal data concerning criminal convictions or offenses;
personal data concerning children where additional legal authorization or safeguards are required; and
any other information subject to industry-specific or regulatory requirements that the Service is not expressly designed or documented to support.

You must not submit Restricted Data to the Service unless the applicable processing is expressly permitted by the Documentation, an Order Form, and any additional agreement required by Allyx. Passwords, private keys, API keys, access tokens, and other secrets required for an authorized integration may be provided only through the Service’s designated credential-management functionality. You must not intentionally place such secrets in source code, prompts, logs, issue descriptions, test data, or other free-form fields submitted to the Service.

2.5 High-Risk Uses

You must not use the Service in connection with a system where the failure, fault, error, or output of the Service could reasonably be expected to directly cause death, serious bodily injury, or substantial physical or environmental damage. Prohibited uses include use in connection with:

medical devices or clinical systems where errors could directly affect patient safety;
aircraft, aviation, navigation, or human mass-transportation control systems;
nuclear, chemical, or critical energy-infrastructure control systems;
weapons targeting, launch, or control systems; or
autonomous vehicle control software used in a production environment.

You must not rely on the Service as the sole testing, validation, approval, or safety-control mechanism for any safety-critical system.

2.6 Unauthorized Commercial and Competitive Use

Except as expressly permitted under the Terms or an applicable Order Form, you must not:

resell, sublicense, distribute, rent, lease, provide, or otherwise make the Service available to a third party;
use non-public features, interfaces, technical information, or Allyx Confidential Information to replicate the Service or develop a substantially similar competing commercial service;
publicly disclose, publish, or distribute benchmark tests, comparative performance results, or competitive analyses concerning the Service without Allyx’s prior written consent; or
frame or mirror the Service on another website, application, or platform.

This Section does not restrict your use of Service Output to the extent permitted under the Terms.

2.7 Reverse Engineering and Unauthorized Automated Access

Except to the extent expressly permitted by applicable law, you must not:

reverse engineer, decompile, disassemble, decode, or otherwise attempt to derive the source code, underlying structure, models, methods, or algorithms of the Service;
access the Service through interfaces, credentials, methods, or means other than those provided or authorized by Allyx;
use bots, scrapers, crawlers, or other automated means to extract data or content from the Service, except through an API, agent, CLI, SDK, integration, or other automated method provided or expressly authorized by Allyx; or
copy, modify, or create derivative works of any portion of the Service except as expressly permitted under the Terms.

2.8 Misrepresentation

You must not:

impersonate Allyx, an Allyx employee, another customer, or any other person or entity in connection with the Service;
misrepresent your identity, organization, affiliation, authority, or permissions to obtain access to the Service or any connected system or data; or
use false, misleading, stolen, or unauthorized account or payment information in connection with the Service.

3. Responsibility for Accounts and Users

You are responsible for:

ensuring that your Authorized Users comply with this AUP;
safeguarding your account credentials and integration credentials;
configuring and using the Service in accordance with the Documentation and your legal, security, and compliance obligations; and
activity conducted through your account, credentials, environments, and integrations, except to the extent that unauthorized activity results from Allyx’s breach of its obligations under the Terms.

You must promptly notify Allyx if you become aware of: compromised account or integration credentials; unauthorized access to or use of the Service; a material violation of this AUP; or activity involving the Service that presents a material legal, security, privacy, or operational risk.

4. Monitoring and Enforcement

Allyx may investigate suspected violations of this AUP. If Allyx reasonably determines that a violation has occurred, Allyx may:

request that you stop or remediate the prohibited activity;
issue a warning or impose reasonable use restrictions;
remove, disable, isolate, or quarantine content, code, tests, configurations, credentials, or integrations that Allyx reasonably believes violate this AUP or present a security or operational risk;
restrict or suspend access to affected functionality or to the Service where reasonably necessary to protect the Service, Allyx, another customer, or a third party;
terminate your account or subscription in accordance with the Terms; or
preserve or disclose relevant information, or report suspected unlawful activity, to law-enforcement agencies, regulators, or other appropriate authorities as permitted or required by applicable law.

Allyx may take immediate action without prior notice where reasonably necessary to address an urgent security, legal, privacy, or operational risk. For non-urgent violations, Allyx will use reasonable efforts to provide notice and an opportunity to address the violation before suspending or terminating the Service.

5. Reporting Violations

If you become aware of activity involving the Service that may violate this AUP, please report it promptly to: security@fairleadhq.com. Please include sufficient information to help Allyx investigate and address the reported activity.

6. Relationship to the Terms

This AUP is incorporated into and governed by the Terms. If this AUP conflicts with the Terms, the Terms control unless this AUP expressly states otherwise. A violation of this AUP constitutes a violation of the Terms and may result in restriction, suspension, or termination of access to the Service as provided in the Terms.

fairleadhq.com/legal/aup