Acceptable Use Policy
Draft — this document is pending legal review and may change before it takes effect.
This Acceptable Use Policy is part of our Terms of Service. It applies to everyone who uses RepoHelpdesk: account owners, the people they invite, and end users of a Customer Assistant or Guide. Account owners are responsible for making sure their users follow it.
1. Use only what you're authorized to use
- Connect only repositories, databases, tickets and other systems that you own or have permission to use this way. That includes any license or contract covering third-party code or data.
- Don't point the Agent, a Playbook or a script at systems, networks or accounts you aren't authorized to access.
- Security testing of your own systems through the Service is fine. Security testing of RepoHelpdesk itself is allowed only within our responsible disclosure terms: report findings to security@repohelpdesk.com, don't access other customers' data, and don't degrade the Service.
2. Prohibited uses
Don't use the Service to:
- Break any law or regulation, or help someone else do so.
- Infringe or misappropriate anyone's intellectual property, privacy or other rights, for example by connecting code you have no right to use.
- Create, distribute or run malware, or gain unauthorized access to, disrupt, or damage any system or data.
- Harass, threaten, defraud, spam or mislead people.
- Process special categories of personal data, such as health, biometric or financial-account data, or data about children, unless you have a legal basis to do so and have agreed appropriate terms with us in writing.
- Make decisions that have legal or similarly significant effects on people, such as decisions about credit, employment, housing or insurance, based on AI Output without meaningful human review.
- Generate content that violates the usage policies of the AI provider processing it, including Anthropic's and OpenAI's.
- Present AI Output to your end users as if a human wrote it, where the law requires you to disclose that it's AI-generated.
3. Protecting the Service
Don't:
- Probe, scan or test the Service's vulnerabilities, except as allowed in section 1, or bypass its security, authentication, rate limits, usage limits or redaction.
- Overload the Service or interfere with other customers' use of it, for example with automated traffic beyond normal use of our APIs.
- Try to get the assistant to reveal data, repositories or instructions you aren't permitted to see, for example through prompt injection.
- Resell, sublicense or rent the Service, or offer it as part of your own product, without a written agreement with us. Using the Customer Assistant or Guide to support your own customers is allowed.
- Share accounts or seats between people, or create accounts to get around plan limits.
- Scrape the Service, reverse-engineer it, or use it or its Output to build a competing product.
4. Enforcement
If we believe this policy has been violated, we may remove or disable access to the content involved, suspend a user, Agent, integration or Playbook, or suspend or end the account, as described in the Terms. Where it's practical and safe, we'll tell you first and give you a chance to fix the issue. We may report illegal activity to the authorities.
5. Reporting abuse
To report misuse of RepoHelpdesk, email legal@repohelpdesk.com. To report a security vulnerability, email security@repohelpdesk.com.