Acceptable Use Policy

Revision: September 18, 2026. Effective date: September 18, 2026. Contact and security reporting: support@baseloados.com.

1. Scope and authorized use

This policy governs access to the BaseloadOS public site, Map, accounts and MCP. It applies to future Terminal or separate API access only when incorporated into the terms accepted for that product. It does not make an unavailable product available or impose terms merely because a person views a legal page.

Supported MCP automation, agent-assisted research, caching, repeated analysis, bulk queries and high-volume use are permitted within disclosed account permissions, request limits, spending limits and available funds. Lawful model training, resale, raw-data redistribution and competing products are permitted under the MCP data license and applicable source conditions. Competition alone is not abuse.

Any material bulk-export or request-size restriction must be disclosed in the applicable Service Catalogue before purchase. Limits protect the hosted service; they do not withdraw lawful rights in data already delivered.

2. Prohibited access and conduct

Do not bypass authentication, billing, rate limits or disclosed download controls; use accounts or credentials to evade a limit; scrape the public Map to evade paid or otherwise restricted access; interfere with availability; introduce malware; execute unauthorized commands; access another customer's account or confidential information; or use the service unlawfully.

Do not remove required source attribution or represent that BaseloadOS grants rights belonging to a third party. A service-access restriction does not override a separate open-source license or independently held public-domain or data-license rights.

3. Limited security-research authorization

BaseloadOS authorizes good-faith, non-disruptive security testing of its publicly reachable pages and BaseloadOS-owned application endpoints on baseloados.com, using public information or an account and data you control. This authorization does not extend to underlying hosting infrastructure, supplier systems, Clerk, Stripe, email providers, other customers' accounts, or unrelated domains.

Permitted research must minimize requests and data access. Do not conduct denial- of-service or load testing, credential stuffing, phishing, social engineering, persistence, destructive changes, payment manipulation, or circumvention of third-party controls. Do not extract production databases, collect other users' data, or continue once you encounter information you are not authorized to access. Stop, retain only the minimum non-sensitive evidence needed to explain the issue, and report it privately to the security contact above. Do not send secrets or personal data by ordinary email. Request instructions for secure evidence transfer.

Provide affected URLs, a description, minimal reproduction steps and potential impact. Coordinate disclosure to avoid exposing users before remediation. No bounty or payment is promised. For research complying with this authorization, BaseloadOS will not initiate a legal claim or request law-enforcement action solely because of that authorized testing. We cannot bind third parties, waive their rights, or prevent independent government action. If uncertainty arises, stop and request written clarification before continuing.

4. Proportionate enforcement

We may restrict activity reasonably necessary to address a violation, security risk or legal requirement. Where practical, we will explain the affected activity and permit correction or review through support, subject to the General Legal Terms. Restrictions do not confiscate unused paid balances or cancel delivery and refund obligations. Reporting a vulnerability or asking a good-faith question is not itself abuse.