Acceptable Use Policy

1. Purpose

This policy is part of our Terms of Service. It applies to you, your team members and any software that integrates with Aroli. If you're unsure whether a use is allowed, ask us first at [email protected].

2. Prohibited software

You may not use Aroli to authenticate, license or distribute software that:

• is malware, ransomware, a botnet, a remote-access trojan, a credential stealer, a crypto-miner deployed without consent, or similar;
• is stalkerware or spyware - software designed to covertly monitor a person, read their communications or track their location without their informed consent;
• is designed to cheat in online games in a way that harms other players, or to evade anti-cheat systems;
• facilitates fraud, phishing, account takeover, spam or the sale of stolen accounts or data;
• exploits or harms minors, or is otherwise illegal where it is distributed or used.

3. Licensing and intellectual property

• Don't use Aroli to circumvent, crack, bypass or resell access to other people's licensing or copy-protection systems.
• Don't license or distribute software you don't have the rights to, including modified or repackaged versions of others' software.
• Don't sell or distribute license keys for products you are not authorized to sell.

4. Abuse of the platform

• Don't attempt to access data belonging to other customers or applications, or probe for weaknesses outside the rules in section 6.
• Don't overload, disrupt or work around rate limits, plan limits or other technical restrictions, including by creating multiple accounts.
• Don't use the API for purposes unrelated to authenticating and licensing your software, such as general-purpose file hosting.
• Don't point webhooks at systems you don't control or use them to attack third parties.
• Don't share, sell or publish secret API keys.

5. Treating end users fairly

• Tell your end users what data your software collects through Aroli and why, as required by law.
• Use device identifiers only for licensing and security - not to track people across products or sell their data.
• Don't store sensitive categories of data (such as health data or government IDs) in variables or files unless you have a lawful basis and appropriate safeguards.

6. Security research

We welcome good-faith security research on your own account and applications. Don't access other customers' data, degrade the service for others, or use social engineering. Report findings privately to [email protected] and give us reasonable time to fix them before disclosure.

7. Enforcement

If we believe this policy has been violated, we may remove content, disable API keys, suspend an application or terminate an account. Where appropriate and lawful, we will tell you what happened and give you a chance to fix it first. We may cooperate with law enforcement where required by law.

8. Reporting abuse

To report software or behaviour that violates this policy, contact us: