Acceptable Use Policy

1. Scope

This Acceptable Use Policy (the "policy") governs use of the services provided by Swiftlet Labs Ltd ("Swiftlet Labs", "we", "us"). It is incorporated into and forms part of the Terms of Service, and terms defined there have the same meaning here.

A breach of this policy is a breach of the Terms of Service, and may result in suspension or termination of your account under Section 5 of those Terms.

This policy applies to you, to anyone using the services under your account, and to anyone to whom you provide access to a service you hold.

2. General standard

You may not use the services to harm others, to conduct or facilitate unlawful activity, or to impair the integrity, security, or availability of the services or of the infrastructure on which they operate.

The conduct described in this policy is prohibited in all cases. That enumeration is illustrative and not exhaustive. Conduct offending the standard set out above is prohibited whether or not it appears below, and we will treat it accordingly.

Where you are uncertain whether an intended use is permitted, contact abuse@swiftletlabs.com before proceeding.

3. Unlawful and harmful conduct

You must not use the services to engage in, promote, or facilitate:

• Any activity that is unlawful in a jurisdiction that applies to you or to us
• The creation, storage, or distribution of child sexual abuse material, which we report to the appropriate authorities in every instance without exception
• Threats of violence, incitement to violence, or the promotion of terrorism or violent extremism
• Harassment, stalking, or the targeting of any person with abusive or intimidating communications
• Conduct that vilifies or discriminates against a person or group on the basis of a protected characteristic
• The distribution of material that infringes the intellectual property rights of another person
• Fraud, deception, or the misrepresentation of your identity or affiliation for the purpose of obtaining money, credentials, or information
• The sale or distribution of goods or services that it is unlawful to sell or distribute

4. Messaging and unsolicited communications

This section applies to any service capable of transmitting messages to recipients, whether or not messaging is that service's primary function.

You must not use the services to send unsolicited bulk or commercial messages. You must not send messages to any recipient who has not consented to receive them, or who has withdrawn consent. The burden of demonstrating that consent exists rests with you.

You must not:

• Send, transmit, or relay unsolicited bulk messages, whether commercial or otherwise
• Send messages that falsify, forge, or obscure the sender, the routing information, or the origin of the message
• Harvest or scrape addresses, or acquire address lists from third parties for the purpose of sending messages to them
• Operate a mailing list without a functioning and honoured means of unsubscribing
• Conduct deliverability testing, reputation warming, or engagement inflation, including the use of seed lists or of accounts created to generate artificial interaction with your messages
• Transmit high volumes of automated, machine-generated, or transactional traffic where the service is not provided for that purpose
• Use the services to send messages promoting a site, product, or service that is itself advertised through unsolicited messaging sent elsewhere

5. Use of shared infrastructure

The services operate on shared infrastructure, and the usage of any one account affects the others hosted alongside it. We apply operating limits to the services and we enforce them.

Operating limits are not published in this policy. Limits vary between services and are subject to change as our capacity changes. Where limits are published in respect of a particular service, they are documented with that service. Absent a published limit, your use of a service must be consistent with the use for which that service is provided.

You must not:

• Consume resources in a manner that degrades the performance or availability of the services for other customers, whether intentionally or through a misconfiguration you have failed to remedy
• Circumvent, or attempt to circumvent, any limit, quota, or restriction we apply, including by distributing activity across multiple accounts
• Generate automated traffic that does not correspond to genuine use of the service, including scripted access designed to resemble human activity
• Operate an account principally as a relay, proxy, or endpoint for traffic originating elsewhere, except where the service is provided for that purpose
• Register accounts by automated means, or maintain multiple accounts in order to obtain a benefit intended to be available once

Where your use exceeds an applicable limit without causing material harm, we will ordinarily provide notice and an opportunity to remedy. Where your use is causing material harm to the services, to our infrastructure, or to other customers, we may suspend access immediately and provide notice thereafter.

6. Security and integrity

You must not:

• Access, or attempt to access, any account, system, or data you are not authorised to access
• Probe, scan, or test the vulnerability of the services or of any related system, except under the terms of Section 9
• Interfere with, disrupt, or attempt to disrupt the services or the access of any other user, including by denial of service
• Introduce malware, or any code or mechanism intended to damage, disable, or gain unauthorised access to any system or data
• Circumvent, disable, or interfere with any security or authentication feature of the services
• Reverse engineer, decompile, or disassemble any part of the services, except to the extent that restriction is prohibited by law

7. Accounts and resale

You must not sell, transfer, rent, or lend your account to any other person, or share your credentials, except where a service expressly provides for shared or delegated access.

You must not resell, sublicense, or otherwise make the services available to third parties as a service of your own, except under a written agreement with us providing for it.

You must not use the services principally as a means of registering for, or authenticating to, third-party services in a manner inconsistent with the purpose for which we provide them.

8. Monitoring and enforcement

We may monitor use of the services to enforce this policy. Such monitoring is directed at traffic patterns, volumes, system telemetry, and abuse signals. The Privacy Policy governs what information we retain and for how long.

Where we determine that this policy has been breached, we may take any of the following steps, selecting the one proportionate to the circumstances:

• Contact you and require that the conduct cease
• Apply a rate limit or other restriction to the account
• Suspend the affected feature, or the account, in whole or in part
• Terminate the account
• Remove or disable access to material, where the law requires it or where the material is unlawful
• Report the matter to law enforcement or to another competent authority

We will ordinarily provide notice and a reasonable opportunity to remedy before suspending or terminating an account. We may act immediately and without prior notice where the conduct is unlawful, involves unsolicited bulk messaging, presents a security risk, or is causing active harm to the services or to other customers.

An account terminated for breach of this policy is not eligible for a refund. The Refund Policy sets out the position in full.

Our decision not to act in a particular instance does not waive our right to act in respect of the same or similar conduct subsequently.

9. Reporting

Report misuse of the services, including unsolicited messages originating from them, to abuse@swiftletlabs.com. Include the material necessary to identify the conduct, such as full message headers where the report concerns a message.

Report suspected security vulnerabilities to security@swiftletlabs.com. We will not pursue a claim against a researcher who investigates and reports a vulnerability in good faith, who does not access, modify, or delete data belonging to another person, who does not degrade the services, and who gives us a reasonable opportunity to remedy the issue before disclosing it.

10. Changes to this policy

We may amend this policy in accordance with Section 13 of the Terms of Service. The version in effect at the time of your use of the services governs that use, and the date at the top of this document reflects the current version.