Acceptable Use Policy

1. Purpose

This Acceptable Use Policy protects customers, upstream providers, networks, and ThrottleProxy. It applies to every account, workspace, API key, request, invitation, support submission, and automated integration.

2. Prohibited activity

• Unauthorized access, credential theft, scanning, exploitation, malware, phishing, spam, denial-of-service activity, traffic amplification, reflection, or evasion of security controls.
• Using ThrottleProxy as an open proxy or to reach localhost, private, reserved, metadata, internal, or otherwise unauthorized destinations.
• Circumventing provider quotas, bans, geographic controls, authentication, contracts, robots directives, or rate limits in violation of law or provider terms.
• Submitting unlawful, infringing, deceptive, harassing, discriminatory, or privacy-invasive content or traffic.
• Sharing, reselling, or exposing API keys or accounts outside authorized workspace users.
• Attempting to discover another customer's data, workspace, configuration, diagnostics, audit events, support cases, or billing information.
• Using the service for safety-critical systems where failure could cause death, physical injury, or catastrophic damage without a separately signed agreement.

3. Customer safeguards

• Allow only destinations you own or are authorized to access.
• Keep ThrottleProxy keys separate from upstream-provider credentials.
• Use least privilege, rotate keys after exposure, and promptly deactivate unused access.
• Set request and usage controls appropriate to the upstream provider and your application.
• Do not place secrets, personal data, or raw customer request bodies in support or assistant messages.

4. Enforcement

We may investigate suspected abuse and rate-limit, block, suspend, or terminate activity when reasonably necessary to protect customers, providers, networks, or law. Where appropriate, we may request remediation or additional verification. Serious threats may be reported to affected providers or authorities as permitted or required by law.

5. Reporting abuse

Report suspected abuse or security issues to info@throttleproxy.com. Include only the minimum information needed to investigate and never email passwords, API keys, provider secrets, invitation tokens, or payment-card data.