Acceptable Use Policy

Purpose

This Acceptable Use Policy sets out activities that are not permitted when using Squillify.

It applies to all users, tenants, administrators, members, applications, scripts, agents, automations, integrations, and third-party tools acting under your account, tenant, credentials, or API keys.

This policy is part of the Squillify Terms of Service. If there is a conflict between this policy and a written agreement signed by Squillify, the signed agreement controls for that customer.

Customer responsibility

You are responsible for all activity performed through your account, tenant, API keys, access tokens, credentials, agents, applications, scripts, automations, and integrations.

You are responsible for ensuring that any data submitted to Squillify by you, your users, your agents, or your applications is lawful, authorized, and permitted under your own policies, contracts, and applicable laws.

You must not submit, process, transform, transmit, or attempt to access data unless you have the legal right and authority to do so.

You are responsible for configuring your agents, applications, API keys, permissions, scopes, rate limits, and operational controls in a way that prevents misuse.

Prohibited activities

You may not use Squillify to, or attempt to use Squillify to:

Illegal or unlawful activity

• Violate any applicable law, regulation, court order, administrative order, contractual obligation, or third-party right.
• Facilitate, encourage, conceal, or enable unlawful activity.
• Process, transmit, generate, transform, or distribute unlawful content, unlawful instructions, or unlawful material.
• Infringe intellectual property rights, privacy rights, data protection rights, confidentiality obligations, contractual rights, or other rights of any person or organization.

Unauthorized access and security abuse

• Gain, attempt to gain, or help others gain unauthorized access to Squillify, another tenant, another user's account, any system, network, device, application, database, repository, or service.
• Bypass, disable, weaken, probe, attack, exploit, or circumvent authentication, authorization, tenant isolation, API key scoping, rate limits, quota limits, billing controls, abuse-prevention systems, logging, monitoring, security controls, or technical restrictions.
• Probe, scan, stress test, penetration test, fuzz, exploit, or test the vulnerability of Squillify except as expressly permitted by the Squillify Vulnerability Disclosure Policy.
• Interfere with, disrupt, degrade, overload, or attempt to impair the availability, performance, integrity, or security of Squillify or any third-party infrastructure.
• Use Squillify to conduct denial-of-service attacks, distributed denial-of-service attacks, brute-force attacks, credential stuffing, password spraying, token guessing, API key guessing, enumeration, scraping of protected resources, or similar abuse.

Malware, exploitation, and harmful code

• Create, host, execute, transmit, transform, distribute, or facilitate malware, ransomware, spyware, worms, trojans, botnets, exploit kits, malicious payloads, command-and-control infrastructure, or code intended to compromise systems or data.
• Use Squillify to generate, test, improve, obfuscate, deploy, or operationalize malicious code or exploit instructions.
• Use Squillify to evade detection, hide malicious activity, bypass security tools, or assist attacks against third parties.

Credential, token, and secret abuse

• Steal, collect, validate, test, expose, decode, sell, trade, misuse, or attempt to obtain credentials, passwords, API keys, tokens, session cookies, private keys, recovery codes, authentication secrets, or other access mechanisms.
• Use Squillify to facilitate phishing, impersonation, fraud, social engineering, account takeover, credential harvesting, or deceptive access attempts.
• Submit secrets to Squillify unless you are authorized to do so and the relevant microskill is appropriate for that use.

Data misuse and unauthorized processing

• Submit, process, transform, enrich, extract, infer, combine, or transmit third-party data without proper authorization.
• Harvest, scrape, exfiltrate, reconstruct, re-identify, profile, track, or monitor individuals or organizations without a lawful basis and required authority.
• Use Squillify for unlawful surveillance, unlawful profiling, unlawful monitoring, stalking, harassment, doxxing, or unauthorized intelligence gathering.
• Use Squillify to evade privacy, data protection, confidentiality, employment, financial, medical, consumer protection, or sector-specific obligations.
• Submit data that you are prohibited from submitting under law, contract, regulation, internal policy, confidentiality obligation, or professional duty.

Abuse of agents, automations, and integrations

• Configure or operate agents, scripts, bots, automations, or integrations in a way that causes unlawful, unsafe, abusive, deceptive, excessive, or uncontrolled use of Squillify.
• Allow an agent or automated system to make requests that you would not be permitted to make manually.
• Use Squillify to automate harassment, spam, deception, phishing, scraping, credential abuse, circumvention, or other prohibited conduct.
• Hide, misrepresent, or disguise the source, purpose, tenant, account, user, agent, or application responsible for requests.

Spam, deception, and abusive communications

• Send, generate, facilitate, optimize, or automate spam, unsolicited messages, abusive communications, deceptive communications, phishing messages, scam content, or fraudulent campaigns.
• Impersonate any person, organization, service, authority, Squillify representative, or third party.
• Misrepresent your identity, affiliation, authorization, source of requests, or purpose of use.

Harmful, abusive, or unlawful content

• Generate, transform, host, transmit, distribute, or facilitate content that is unlawful, fraudulent, defamatory, exploitative, harassing, threatening, abusive, discriminatory where prohibited by law, or otherwise harmful to the rights or safety of others.
• Use Squillify to facilitate exploitation, abuse, coercion, threats, violence, trafficking, child sexual abuse material, terrorist content, or extremist violence.
• Use Squillify to evade content safety systems, reporting mechanisms, moderation systems, law enforcement requests, or regulatory obligations.

Platform abuse and economic abuse

• Resell, sublicense, proxy, rent, expose, wrap, or provide Squillify services to third parties without written authorization from Squillify.
• Use Squillify as an undisclosed backend for a competing service, bulk resale service, public proxy, shared API gateway, or abusive automation layer without written authorization.
• Abuse free tiers, trials, credits, promotions, refunds, rate limits, quota systems, billing systems, or account creation flows.
• Create multiple accounts, tenants, API keys, identities, payment methods, or organizations to evade limits, enforcement, pricing, suspension, or termination.
• Scrape, copy, mirror, bulk extract, benchmark at scale, or systematically harvest the Squillify catalog, documentation, metadata, APIs, responses, or service behavior except as permitted by documentation or written agreement.

Misuse of documentation, trust claims, and labels

• Misrepresent Squillify's data handling, security, privacy, availability, compliance status, skill behavior, or external service usage.
• Remove, obscure, alter, or misstate required notices, labels, attribution, warnings, restrictions, or data handling information.
• Claim that a use case is approved, certified, endorsed, compliant, secure, or suitable for sensitive data unless Squillify has expressly confirmed this in writing.

Vulnerability testing

Security research is only allowed under the Squillify Vulnerability Disclosure Policy.

You must not conduct vulnerability testing, scanning, probing, exploitation, load testing, social engineering, or destructive testing against Squillify without following that policy and any applicable authorization requirements.

Good-faith vulnerability reports should be sent to [email protected].

Enforcement

Squillify may investigate suspected violations of this policy.

Where necessary to protect Squillify, customers, users, infrastructure, providers, or third parties, Squillify may immediately suspend, restrict, throttle, block, revoke, quarantine, or terminate access to any account, tenant, API key, request flow, skill, feature, integration, or service.

Squillify may also remove or disable access to content, files, metadata, accounts, tenants, or integrations where necessary to address suspected abuse, unlawful activity, security risk, operational risk, legal risk, or policy violations.

Serious, repeated, unlawful, fraudulent, deceptive, harmful, or security-impacting violations may result in termination without prior notice.

Squillify may report suspected unlawful activity to competent authorities where required or appropriate under applicable law.

Cooperation

You agree to cooperate with reasonable investigations into suspected violations, including by providing relevant account, tenant, application, agent, integration, request, or configuration information where lawfully requested.

You must promptly remediate misconfigurations, compromised credentials, exposed API keys, abusive agents, excessive traffic, or other risks identified by Squillify.

No waiver

Failure by Squillify to enforce this policy in a specific case does not waive Squillify's right to enforce it later or in other cases.

Changes to this policy

Squillify may update this policy to reflect changes in law, regulation, platform functionality, security risks, abuse patterns, business terms, or operational requirements.

Material changes will be communicated through appropriate channels, such as the Squillify website, dashboard, documentation, or email where applicable.

Reporting abuse

To report abuse, suspected misuse, unlawful activity, or policy violations, contact [email protected].

For security vulnerabilities, contact [email protected].

For general support questions, contact [email protected].