Acceptable Use Policy

This Acceptable Use Policy describes activities that are prohibited when using TinTorch Account and the TinTorch product suite. It exists to keep the Services secure, reliable and fair for everyone. This policy supplements our Terms of Service.

You must not use the Services to:

• Violate any applicable law or regulation, or infringe the rights of others.
• Gain or attempt to gain unauthorized access to accounts, systems or data.
• Probe, scan or test the vulnerability of our systems except through an authorized disclosure process.
• Circumvent authentication, single sign-on, rate limits or other security controls.
• Distribute malware, phishing content or other malicious code.
• Impersonate another person or misrepresent your affiliation.
• Engage in fraud, including the use of stolen credentials or payment instruments.
• Interfere with or disrupt the integrity or performance of the Services.

You are responsible for safeguarding your credentials, recovery codes and connected accounts. Sharing accounts in a way that undermines security controls, or reselling access without authorization, is prohibited.

Automated access is permitted only through our published APIs and in accordance with their documentation and rate limits. You must not scrape, overload or abuse the Services, and you must keep API keys and webhook secrets confidential.

If you become aware of a violation of this policy or a security vulnerability, please report it to abuse@tintorch.com.

We may investigate suspected violations and may suspend or terminate access, remove content, or take other action we consider appropriate, including notifying law enforcement where required. We may update this policy from time to time.