Acceptable Use Policy

Draft. This document is a draft for review and is not yet in force. [TBD: legal review]

This Acceptable Use Policy ("Policy") sets out what you may not do with the SpanDock website at https://spandock.com, your account, and the SpanDock software and licenses provided by Nolatech Ltd ("we", "us"). It forms part of our Terms of Service. It applies to you and to everyone who uses the Service through your account or licenses.

1. Licenses

You may not:

• share your license key outside your organisation, publish it, or let others use it to activate installations that are not yours;
• use a license beyond the limits of its tier, for example by running more servers, satellites or clients than it allows;
• modify, forge, re-sign or tamper with license keys, or create keys yourself;
• circumvent, disable, block, spoof or interfere with license checks, including by changing the counts they report, faking installation IDs, or blocking checks to stay in the grace period indefinitely;
• remove or work around feature or usage limits in the software;
• create multiple accounts or Free licenses to avoid the limits of a tier.

2. Reselling and redistribution

You may not sell, resell, sublicense, rent, lease or redistribute the software or licenses, or offer SpanDock as a hosted or managed service to third parties, without a written agreement with us. Contact sales@spandock.com about partnerships.

3. The website and its APIs

You may not:

• exceed or try to get around rate limits, or send automated traffic to the website or its APIs other than the license checks the software makes;
• scrape the website, or use it to collect data about other users;
• probe, scan or test the website for vulnerabilities, except as described in section 6;
• interfere with or disrupt the website, its servers or networks, or overload them;
• access accounts, licenses or data that are not yours;
• use sign-up, contact or email features to send spam or unsolicited messages;
• impersonate any person or organisation, or misrepresent your affiliation.

4. Monitoring people lawfully

SpanDock observes how AI coding tools are used: sessions, tool calls, model calls, tokens, cost and, depending on your configuration, other details. When you deploy it on machines used by other people, you are responsible for doing so lawfully.

You must:

• inform your staff, contractors and other users that their AI tool usage is monitored, as required by applicable law, including employment, privacy and data protection law;
• have a valid legal basis for the monitoring and, where required, obtain consent or consult employee representatives;
• respect the rights of the people whose activity is recorded, including requests to access their data;
• configure retention, destinations and content recording in line with your obligations.

You may not use SpanDock to monitor people covertly or illegally, to install it on machines you are not authorised to manage, or to collect data about people without their knowledge where the law requires that they be told.

5. Unlawful and harmful use

You may not use the Service:

• in violation of any applicable law or regulation, including export control and sanctions laws;
• to infringe intellectual property or privacy rights;
• to distribute malware, or to gain unauthorised access to any system;
• to build a competing product by copying the software, its design or its documentation, or to benchmark it for publication without our consent [TBD: confirm benchmarking clause].

6. Security research

We welcome good-faith security research. If you find a vulnerability in the software or the website, report it to support@spandock.com with enough detail for us to reproduce it. Please:

• give us reasonable time to fix the issue before you disclose it;
• avoid privacy violations, data destruction and service disruption;
• test only against your own installations and accounts;
• not use social engineering, physical attacks or denial of service.

If you follow these rules, we will not pursue legal action against you for the research. [TBD: safe harbor wording and any bounty program]

7. Enforcement

If we reasonably believe you have broken this Policy, we may, depending on the seriousness of the breach:

• contact you and ask you to stop;
• limit features, rate-limit or block requests;
• revoke or replace license keys;
• suspend or close your account;
• report illegal activity to the authorities.

Where practical, we will tell you before acting and give you a chance to fix the problem. For serious breaches, such as license tampering, attacks on the website or illegal monitoring, we may act immediately. Fees already paid are not refunded when we act because of a breach, except where the law requires.

8. Reporting abuse

To report a breach of this Policy, email support@spandock.com.

9. Changes

We may update this Policy. Material changes are announced as described in the Terms of Service.