This Acceptable Use Policy ("AUP") governs your use of the AirStrings service (the "Service") and is incorporated by reference into the Terms of Service. Capitalized terms have the meaning given there. A violation of this AUP is a material breach of the Terms.
We keep this AUP short and concrete. It exists to protect the Service, our customers, third parties, and the shared infrastructure that keeps costs and delivery sustainable for everyone. You are responsible for your own conduct and for that of your Users and anyone using your account or API keys.
1. Prohibited content
You must not use the Service to store, deliver, or process content that:
1.1 is illegal, or promotes or facilitates illegal activity;
1.2 infringes the intellectual property, privacy, publicity, or other rights of any third party;
1.3 is child sexual abuse material (CSAM) or exploits or endangers minors;
1.4 is defamatory, harassing, threatening, or promotes violence or discrimination against individuals or groups;
1.5 is non-consensual intimate imagery;
1.6 contains malware, exploit code, or other harmful code intended to damage or gain unauthorized access to systems, except where handled responsibly for legitimate, authorized security research; or
1.7 contains personal data that you have no lawful basis to process, or special-category data, contrary to the Terms and DPA.
2. Prohibited conduct
You must not, and must not permit anyone to:
2.1 access or use the Service without authorization, or probe, scan, or test the vulnerability of the Service or breach its security or authentication without our prior written consent;
2.2 interfere with or disrupt the integrity or performance of the Service, including denial-of-service (DoS/DDoS) attacks or flooding;
2.3 reverse engineer, decompile, or disassemble the Service, or attempt to derive source code, except to the extent this restriction is prohibited by mandatory law;
2.4 resell, sublicense, or provide the Service to third parties as a service bureau, or use it to build or benchmark a competing product, without our prior written consent;
2.5 impersonate any person or entity, or misrepresent your affiliation;
2.6 send spam, phishing, or fraudulent communications through or using the Service;
2.7 circumvent, disable, or evade any usage limits, rate limits, billing limits, quotas, or security or authentication measures, including by creating multiple accounts to exceed Free-tier or Plan limits;
2.8 forge or manipulate identifiers, headers, or signing metadata to disguise the origin of content or to defeat signature verification; or
2.9 use the Service in violation of applicable export-control or sanctions laws.
3. Resource abuse
The Service delivers signed bundles over a CDN backed by object storage and compute that carry real cost. You must not use the Service, its API, storage, bandwidth, or compute to:
3.1 mine cryptocurrency or other digital assets;
3.2 run torrents or operate as a peer-to-peer file-sharing node;
3.3 resell, redistribute, or sublet compute, storage, or bandwidth resources;
3.4 evade or circumvent usage or billing limits (see also §2.7);
3.5 operate open proxies, VPNs, anonymization services, or relays;
3.6 run bots, crawlers, or scrapers that place an undue burden on the Service, or perform automated access outside the documented API and rate limits; or
3.7 use storage or delivery for content unrelated to the Service's purpose (remote string management and localization delivery), such as general-purpose file hosting, media distribution, or bulk data warehousing.
We may set and enforce reasonable technical limits to protect the Service and other customers.
4. Email-sending rules
If you use Service features that send email on your behalf (for example, team invitations or notifications), you must comply with the following, which flow down from our email provider's requirements. Breach can cause our provider to suspend our sending, so we enforce these strictly:
4.1 send only to recipients who have a genuine relationship with you and, where required, have opted in; do not use purchased, rented, scraped, or cold-contact lists;
4.2 keep your spam-complaint rate below 0.08% and your bounce rate below 4%;
4.3 include a valid, accurate sender identity and make clear why the recipient is being contacted;
4.4 honour unsubscribe and opt-out requests, and stop sending, within 7 days;
4.5 do not send email for prohibited or high-abuse verticals where restricted by our email provider (for example, adult/escort services, illegal pharmaceuticals, gambling, multi-level marketing, debt-relief, payday loans, or list-broking/engagement-selling); and
4.6 do not use the email features to send spam, phishing, or malware.
We may throttle, suspend, or disable email features that exceed these thresholds or generate abuse signals, immediately and without prior notice where necessary to protect our sending reputation.
5. Security and vulnerability reporting
If you discover a security vulnerability in the Service, report it responsibly to support@airstrings.com (subject: "Security"). Do not exploit it, access data that is not yours, or disclose it publicly before we have had a reasonable opportunity to remediate. Good-faith security research reported this way will not be treated as an AUP violation.
6. Enforcement
6.1 If we reasonably believe you have violated this AUP, we may take action proportionate to the violation, including removing or disabling content, throttling, suspending, or terminating access, and reporting to authorities where required by law.
6.2 For violations that create a security, legal, or abuse risk (including anything in Sections 1, 2.1, 2.2, 3, or 4), we may act immediately and without prior notice. For other violations, we will, where practicable, give you notice and an opportunity to cure as described in the Terms.
6.3 We may cooperate with law-enforcement and regulatory authorities and preserve or disclose information where legally required.
6.4 Suspension or termination under this AUP does not entitle you to a refund, except as provided in the Terms.
7. Changes
We may update this AUP. Material changes take effect on at least 30 days' notice as described in the Terms; changes required to address security, legal, or abuse risks may take effect immediately.