Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs all access to and use of the Scytala platform, website, agent sessions, and all related services (collectively, the "Service"), operated by Hector Antonio Jasso Garza, based in Monterrey, Nuevo León, Mexico ("Scytala," "we," "us," or "our").

This AUP is incorporated into and forms part of our Terms of Service (the "Terms"). Capitalized terms not defined here have the meanings given in the Terms. By accessing or using the Service, you agree to comply with this AUP. Any violation of this AUP is also a violation of the Terms and may result in immediate enforcement action as described below.

The Scytala agent acts on your connected resources — including GitHub repositories, databases, logs, environment variables, and an outbound HTTP allowlist routed through a zero-trust security proxy — at your direction. You are solely responsible for ensuring that everything you connect, and everything you instruct the agent to do, complies with this AUP, the Terms, and all applicable law.

1. Your Responsibility for Use of the Service

You are solely responsible for:

• All activity conducted through your account and your agent sessions, whether by you, by anyone you authorize, or by the agent acting on your instructions.
• Every action the agent takes on your connected systems at your direction, and for the consequences of those actions.
• Ensuring you own, or are fully authorized to access and use, every repository, database, credential, endpoint, dataset, and third-party account you connect to or reach through the Service.
• Reviewing, testing, and validating all agent-generated code, changes, and outputs before relying on them or deploying them to any environment.

You agree to use the Service only for lawful purposes, in good faith, and in accordance with this AUP.

2. Prohibited Uses

You may not use the Service, and may not use the agent or its access to your connected systems, to do or attempt any of the following. This list is illustrative, not exhaustive.

2.1 Illegal, Fraudulent, or Infringing Activity

• Violate any applicable law or regulation, including the laws of Mexico and any jurisdiction in which you or your users operate.
• Infringe, misappropriate, or violate any third-party right, including intellectual property, privacy, confidentiality, or contractual rights.
• Engage in or facilitate fraud, phishing, social engineering, money laundering, or any other deceptive or unlawful financial activity.

2.2 Unauthorized Access

• Use the Service, or the agent's access, to reach, probe, or interact with any system, network, repository, database, account, or data that you do not own or are not expressly authorized to access.
• Connect, or instruct the agent to use, any credential or access token that you are not authorized to provide or that grants broader access than you are entitled to use.
• Access, tamper with, or interfere with the accounts, data, sessions, or resources of any other customer of the Service.

2.3 Attacks, Abuse, and Overload

• Conduct unauthorized scanning, vulnerability probing, or penetration testing of the Service or of any third-party system.
• Launch or facilitate denial-of-service or distributed denial-of-service attacks, rate-limit evasion, brute-force attempts, or other abusive traffic against the Service or any third party.
• Perform automated scraping, bulk data extraction, or operations that overload, degrade, or disrupt the Service, its infrastructure, or any third-party system the agent can reach.

2.4 Malware and Harmful Code

• Generate, store, distribute, or deploy malware, viruses, ransomware, exploits, or other malicious or harmful code.
• Use the agent to develop, test, or deploy code intended to harm, compromise, or gain unauthorized access to any third-party system, person, or data.

2.5 Circumventing Platform Controls

• Circumvent, disable, or attempt to bypass the zero-trust security proxy, credential isolation and encryption, session tokens, the outbound HTTP allowlist, or any other security or access control of the Service.
• Evade, tamper with, or attempt to falsify usage limits, credit caps, metering, or billing mechanisms.
• Reverse-engineer, decompile, or disassemble any part of the Service, except to the extent this restriction is prohibited by applicable law.

2.6 Sharing, Reselling, and Provider Terms

• Resell, sublicense, rent, lease, or otherwise share access to the Service, or share your account credentials with unauthorized individuals.
• Create accounts by automated means, or operate multiple accounts to evade limits, suspensions, or fair-use controls.
• Use the Service in any manner that violates the terms, policies, or acceptable-use rules of your own connected providers (including GitHub, Slack, OpenAI, Anthropic, Amazon Web Services, and your database or hosting provider).

2.7 Sensitive and Regulated Data

• Submit to, or process through, the Service any highly sensitive or specially regulated data that the Service is not designed to handle — for example, payment card data subject to PCI-DSS, protected health information, or other data whose processing would impose specific legal, security, or compliance obligations on us — unless we have agreed in writing to support that use.

2.8 Interference with the Platform

• Interfere with, disrupt, or degrade the Service or its integrity, or the experience of other customers.
• Take any action that we reasonably determine threatens the security, availability, or lawful operation of the Service.

3. Responsibility and Indemnification

You — and not Scytala — are solely responsible for your use of the Service, for the resources and credentials you connect, and for all actions the agent takes on your connected systems at your direction. We do not control, monitor, or endorse what you instruct the agent to do, and we are not responsible for the consequences of your use of the Service or your violation of this AUP.

To the maximum extent permitted by applicable law, you agree to indemnify, defend, and hold us harmless from and against any and all claims, demands, damages, losses, liabilities, costs, and expenses arising out of or related to your violation of this AUP, in accordance with the indemnification obligations set out in the Terms of Service.

4. Enforcement

We may, at our sole discretion and to the extent permitted by applicable law, investigate any actual or suspected violation of this AUP. In response to an actual or suspected violation, or to a risk we reasonably believe the Service or your activity poses to the Service, to other customers, or to third parties, we may:

• Issue a warning or request that you remediate the issue;
• Throttle, restrict, suspend, or terminate your sessions, account, or access to the Service or any part of it;
• Take any of the foregoing actions immediately and without prior notice where we reasonably determine the violation or risk warrants it; and
• Preserve, and disclose to competent authorities, information about you or your use of the Service where we are required to do so by law or legal process.

We may take these actions without liability to you, to the maximum extent permitted by applicable law. Nothing in this AUP excludes or limits any right you may have that cannot be excluded or limited under applicable law, including any non-waivable rights you may have as a consumer under the laws of Mexico.

5. Reporting Abuse

If you become aware of any violation of this AUP, or of abuse or misuse of the Service, please report it to us at abuse@scytala.com. We investigate reports we receive and take the action we consider appropriate.

6. Changes to This Policy

We may update this AUP from time to time. We will update the "Last updated" date above when we do. Your continued use of the Service after an update takes effect constitutes your acceptance of the revised AUP.