Acceptable Use Policy

Effective October 23, 2026. This policy applies to everyone who uses Substratal, its API, the Hub apps, and Applications built on it. It’s part of the Terms of Service.

Don’t use Substratal to

• break the law, or help anyone else break it;
• harass, threaten, defame, or abuse anyone, or promote violence or hatred against people based on protected characteristics;
• exploit or harm children in any way;
• infringe intellectual property, privacy, or publicity rights;
• send spam or unsolicited bulk messages, including through notifications, invitations, or email the Service sends;
• distribute malware, or phish for credentials or personal information;
• impersonate a person or organization, or misrepresent your affiliation;
• collect personal information about people without the authorization and notice the law requires.

Don’t attack or misuse the Service

• Don’t access accounts, data, or systems you aren’t authorized to, or probe, scan, or test our systems for vulnerabilities, except as allowed by our Security and Vulnerability Disclosure policy.
• Don’t interfere with the Service: no denial-of-service attacks, and no load meant to degrade it.
• Don’t get around access controls, entitlements, rate limits, usage limits, or billing, including by creating multiple accounts or keys.
• Don’t use API Keys from a browser or distributed app, or share credentials outside your organization.
• Don’t reverse engineer the Service except where the law expressly allows it.
• Don’t resell or provide the Service to others as a standalone product without our written agreement.

Enforcement

We may remove content, disable an Application, revoke credentials, or suspend or terminate accounts that violate this policy, and report illegal activity to the authorities. Where practical we’ll tell you what happened and give you a chance to fix it. Report abuse to legal@substratalapps.com and vulnerabilities to security@substratalapps.com.