Acceptable Use Policy

This policy applies to everyone who uses the hosted Cloudgate console, including every Member and Agent of an Organization. It covers the console, the command-line tool, the MCP endpoint, the Gateway, Bought Servers, and anything you deploy or manage through Cloudgate.

It is part of our Terms of Service. An Organization is responsible for what its Members and Agents do.

Do not use Cloudgate to store, run, publish or send anything that:

• is illegal where you are, where your users are, or where it is hosted;
• sexually exploits or endangers children;
• promotes or incites violence, terrorism or hatred against people;
• harasses, threatens or defames someone, or publishes their private data without a right to;
• infringes someone's copyright, trademark or other rights;
• processes personal data without a lawful basis.

• Do not host or spread viruses, ransomware, spyware, botnet controllers or other malicious code.
• Do not run phishing pages, or sites that pretend to be another person, company or service.
• Do not use Cloudgate for scams, fraud or illegal gambling.

• Do not send bulk or commercial messages to people who did not ask for them.
• Do not fake sender details or hide where a message came from.
• Do not run open mail relays or open proxies.

• Do not launch or take part in denial-of-service attacks.
• Do not scan, probe or test networks, IP addresses or systems that are not yours without permission.
• Do not try to get into accounts, systems or data you are not allowed to reach.
• Do not send traffic with forged source addresses, or run open reflectors that can be used to amplify attacks.

A Bought Server runs in Octabyte's account with its provider, so abuse on it affects us and every other customer. On a Bought Server:

• No cryptocurrency mining, including mining, farming and plotting.
• No use that breaks the infrastructure provider's own rules, which forbid the abuses on this page.
• Keep the machine's software up to date and its services secure, so it cannot be taken over and used for abuse.

• Do not use an Agent, or an agent key, to reach anything outside the grant your Organization gave it.
• Do not share agent keys outside the people and tools that need them, and remove keys you no longer use.
• Do not try to get around the MCP endpoint's rate limits or the Gateway's metering, for example by calling an AI model in a way that skips the Gateway to hide token spend.
• Do not use AI models you run through Cloudgate to produce content this policy forbids.
• Follow the terms of any outside AI provider you set for Cloudgate's own AI features.

• Do not get around your plan's counts, or open several Organizations, accounts or cards to get more than one Free trial.
• Do not try to reach another Organization's data, or break the separation between Organizations.
• Do not test the Hosted instance for security weaknesses without our written permission. If you find one, report it to support@octabyte.io and give us time to fix it.
• Do not overload the Service on purpose, or use it in a way that harms its stability for others.
• Do not resell access to the Hosted instance unless we agree in writing.

Email support@octabyte.io with:

• what is happening, and when it started;
• the address, domain or IP address involved;
• any evidence, such as log lines or message headers;
• how we can reach you.

We read every report. We may share it, without your contact details unless you agree, with the Organization concerned so that it can fix the problem.

• When we receive a report about an Organization, we send it to the Organization's owners and admins and ask for an answer within 24 hours: what caused it and what they did to stop it.
• If there is no answer, or the abuse goes on, we may suspend the Organization. A suspended Organization gets no new work from Cloudgate. Its Bought Servers are deleted 7 days later unless the suspension is lifted.
• For serious or urgent abuse, we may act at once, without waiting, and we may power off a Bought Server.
• We may close accounts that break this policy, and we report illegal content to the authorities where the law requires.

We may update this policy. The date at the top shows the latest version.