Acceptable Use Policy

1. Your Responsibility

You are responsible for all activity under your VibeKey account and API keys. This includes activity by anyone who uses your keys, projects, or account, whether authorized or not. Keep your API keys confidential and rotate them if you suspect compromise.

2. Third-Party Providers

VibeKey routes requests to third-party model providers including but not limited to OpenAI, DeepSeek, and future providers. Use of VibeKey is also subject to the usage policies, terms, and data handling practices of each underlying provider. You are responsible for reviewing and complying with those policies before using VibeKey to access their models.

If an underlying provider prohibits a use case, that use case is also prohibited through VibeKey.

3. Prohibited Uses

You may not use VibeKey for any of the following:

• Illegal activity, including but not limited to fraud, money laundering, or violation of applicable law.
• Generating, distributing, or hosting malware, viruses, exploits, or weaponized code.
• Phishing, credential theft, social engineering, or unauthorized access to systems or data.
• Attempts to obtain, generate, or misuse secrets, API keys, passwords, access tokens, private keys, or credentials.
• Sending spam, unsolicited messages, or harassing, threatening, or abusive content.
• Exploitation of minors or vulnerable individuals.
• Unlawful surveillance, monitoring, or data collection without consent.
• Attempts to bypass VibeKey rate limits, spend caps, provider safeguards, security controls, or project settings.
• Abuse of payment systems, including use of stolen credit cards, fraudulent chargebacks, or payment disputes without valid basis.
• Sending secrets, passwords, regulated data, protected health information, payment data, or sensitive personal data unless your project settings, provider agreements, and applicable laws allow it.
• Any use that violates the acceptable use policies of underlying model providers.

4. Enforcement

VibeKey may suspend accounts, revoke API keys, block requests, refuse service, or preserve relevant metadata when we reasonably believe that usage:

• Violates this Acceptable Use Policy, our Terms of Service, or applicable law.
• Violates the usage policies of underlying model providers.
• Violates payment rules or creates payment fraud risk.
• Creates risk to VibeKey, our providers, our users, or third parties.
• Interferes with the operation or security of VibeKey services.

We may take immediate action when needed to protect VibeKey, our providers, users, payment systems, or third parties.

We reserve the right to investigate potential violations and cooperate with law enforcement or legal authorities as required.

5. Reporting Abuse

To report a violation of this policy, security concerns, or suspected abuse, contact us at security@usevibekey.com.

6. Changes

We may update this Acceptable Use Policy from time to time. Material changes will be communicated through the VibeKey website or dashboard. Continued use after changes take effect constitutes acceptance of the updated policy.