1. You must not
- Break the law. Don't use the service for anything illegal, or to help others do so.
- Attack or disrupt the platform. No denial-of-service, no attempts to overload, probe, or bypass rate limits, quotas, or security controls.
- Undermine isolation or integrity. Don't attempt to access another organization's data, escalate privileges, or tamper with, forge, or backdate audit records or the hash chain.
- Reverse-engineer or copy. Don't decompile, reverse-engineer, scrape, or resell the service except where the law expressly permits.
- Introduce malware. Don't upload or transmit viruses, worms, or malicious code.
- Misrepresent results. Don't present Foxy Audit output as something it isn't (for example, as a legal certification), or use it to deceive auditors, customers, or regulators.
- Abuse others. No harassment, spam, or unlawful surveillance of individuals.
- Circumvent billing. Don't evade quotas or fees, or share credentials to exceed your plan.
2. Your responsibilities
- Keep your account credentials and API keys secret, and rotate keys you believe are compromised.
- Make sure you have the rights and any consents needed for the AI activity you audit through the service.
- Use the SDK as documented; it hashes prompts and responses on your side so raw content never reaches us — don't attempt to route raw sensitive content to us.
3. Security research
Good-faith security research is welcome. Please follow responsible disclosure and our Report Abuse process rather than exploiting or exposing an issue. Don't access data that isn't yours, run automated attacks against production, or degrade the service for others.
4. Enforcement
If use of the service threatens the platform, other customers, or the integrity of the audit trail, we may throttle, suspend, or terminate the account — immediately where necessary — and, where appropriate, notify the affected parties or authorities. We aim to give notice and a chance to remedy when it's safe to do so.
5. Contact
Questions about this policy, or need to report a violation? Email foxyaudit@gmail.com.