Acceptable Use Policy

Scope

This Policy applies to every Konvoa workspace, application, customer integration, team member, reseller, automation credential, API request, SDK, and file-link record. It forms part of the Terms of Service.

Unlawful or harmful use

You may not use Konvoa to operate, license, distribute, or facilitate software or services that are unlawful, infringe intellectual-property or privacy rights, steal credentials or data, deploy malware or ransomware, enable unauthorized surveillance, exploit or harm people, or deceive users about the origin or purpose of software.

You may not use Konvoa to facilitate content or transactions that you are prohibited from offering under applicable law, court order, sanctions, or binding platform rules.

Security abuse

You may not probe, scan, exploit, disrupt, or gain unauthorized access to Konvoa, another workspace, an application, a customer account, or a provider connected to the service. Do not bypass authentication, signatures, device policy, rate limits, account scope, or plan limits; replay captured requests; introduce malicious payloads; or test a vulnerability without prior written authorization.

This Policy is not a security-research safe harbor. The Operator must publish a monitored vulnerability-reporting channel and disclosure policy before inviting external testing.

Platform integrity and resource use

Do not create accounts or traffic to evade suspension, exhaust capacity, interfere with availability, scrape private surfaces, automate browser endpoints in place of documented APIs, or use the service in a way that imposes unreasonable load. Do not misrepresent billing, license consumption, reseller balances, customer references, or idempotency keys.

Credentials, licenses, and reseller delivery

Do not sell, share, publish, or embed workspace passwords, private device keys, bearer tokens, reseller API secrets, or other credentials except through an intended authorized workflow. License keys and reseller deliveries must be issued only for products, subscriptions, quantities, and customers you are authorized to serve.

You must revoke compromised credentials promptly and must not use device binding or session controls to exceed a license grant, unlawfully restrict a device owner, or conceal access that a customer is entitled to understand.

Privacy and end-user treatment

You must collect and submit only data needed for a legitimate application purpose, provide accurate privacy notices, honor applicable rights, and obtain consent where required. Do not put sensitive personal information, payment-card data, health records, government identifiers, private keys, or service credentials in free-form variables, file metadata, release notes, usernames, reseller references, or other fields not designed for that information.

External file links

Konvoa does not host or inspect your linked files. You must control or be authorized to use every URL you register and must maintain a lawful takedown path at that host. Links must not resolve to malware, infringing or unlawful material, deceptive installers, credential harvesters, or content that changes after publication to evade an integrity or safety review.

You remain responsible for access control at the external host. Konvoa authorization metadata does not make a disclosed static URL private.

Enforcement

The Operator may investigate suspected violations and may restrict an application, revoke credentials, remove unsafe link metadata, preserve relevant evidence, or suspend an account when reasonably necessary to protect users, the service, or comply with law. Enforcement may consider severity, repetition, intent, harm, and remediation. Immediate action may occur when delay would create material security, legal, or safety risk.

Reporting concerns

Report abuse, unlawful external links, or security concerns to [email protected] for abuse and security reports. Include the Konvoa application or file ID, relevant URL, the reason for the report, and a safe way to follow up. Do not send passwords, bearer tokens, private keys, or complete license keys.