About This Policy
This Acceptable Use Policy ("AUP") governs use of the PrivateStack platform and related services (the "Service") provided by Data Science & Engineering Experts, Inc. ("DSE," "we," "us," or "our"). This AUP is incorporated into and forms part of our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service. In the event of a conflict, the Terms of Service control.
By accessing or using the Service, each tenant and each of its Authorized Users agrees to this AUP. We may update this AUP from time to time; material changes will be posted with an updated effective date and take effect on posting.
1. Who This Applies To
This AUP applies to the tenant organization (the "Tenant"), the Tenant's administrators ("Tenant Admins"), and every end user the Tenant provisions or permits to access the Service ("Authorized Users"). The Tenant is responsible for ensuring that all of its Authorized Users comply with this AUP.
2. Prohibited Uses
You may not use the Service, and you may not permit any Authorized User or third party to use the Service, to:
2.1 Unlawful, Harmful, or Infringing Content and Activity
- Violate any applicable law, regulation, or third-party right.
- Create, store, transmit, or distribute content that is unlawful, defamatory, fraudulent, harassing, threatening, or that infringes intellectual-property, privacy, or publicity rights.
- Produce or distribute child sexual abuse material (CSAM), content that sexualizes minors, or content that promotes terrorism, violent extremism, or illegal weapons or drugs.
- Upload, store, or process data you do not have the lawful right to provide, or that violates a confidentiality or contractual obligation.
2.2 Regulated and Sensitive Data
- Process protected health information (PHI), payment-card data (PCI), or other specially regulated data without first executing the required agreement (for example, a Business Associate Agreement for PHI) and confirming with us that your configuration supports it.
2.3 Malware and Malicious Activity
- Introduce, transmit, or store malware, ransomware, worms, viruses, or any code intended to disrupt, damage, or gain unauthorized access to systems or data.
- Use the Service to phish, spoof, or conduct credential-harvesting or social-engineering campaigns.
2.4 Abuse of AI Features
- Use the Service's AI or model features to generate, facilitate, or distribute prohibited outputs, including CSAM, content that incites violence or self-harm, targeted harassment, unlawful discrimination, malware or exploit code, or disinformation intended to deceive.
- Attempt to circumvent safety, content, or usage controls, including through prompt injection, jailbreaking, or model-extraction techniques.
- Use outputs in a manner that violates applicable AI, consumer-protection, or sector-specific laws, or that misrepresents AI-generated content where disclosure is required.
2.5 Security Testing and Platform Integrity
- Perform penetration testing, vulnerability scanning, load or stress testing, or any other security testing of the Service without our prior written authorization. Authorized testing, where permitted, must be limited to your own tenant and must not target other tenants or shared infrastructure. See our Security Overview for how to submit a responsible-disclosure report.
- Probe, scan, or test the vulnerability of any system or network, or breach or circumvent any authentication, authorization, isolation, or security measure.
- Attempt to access another tenant's data, accounts, or resources, or any data, account, or resource you are not authorized to access.
- Interfere with, disrupt, or degrade the integrity or performance of the Service, including through denial-of-service activity.
2.6 Commercial and Account Misuse
- Resell, sublicense, rent, or otherwise make the Service available to third parties except under a written reseller or partner agreement with DSE.
- Share, transfer, or misuse credentials, or exceed the seats, entitlements, or usage tiers provisioned to your Tenant.
- Misrepresent your identity or affiliation, or use the Service to impersonate any person or entity.
- Reverse engineer, decompile, or attempt to derive source code or underlying models, except to the extent this restriction is prohibited by law.
3. Tenant-Admin Responsibility
The Tenant, acting through its Tenant Admins, is responsible for:
- Managing its own Authorized Users, including provisioning, roles, and timely de-provisioning.
- Enforcing this AUP among its Authorized Users and for content its users create, upload, or process.
- Securing its own credentials and administrator accounts, and configuring the Service consistent with its own compliance obligations.
- The lawfulness of the data it submits and the outputs it uses.
DSE provides the platform and the security controls described in our Security Overview; the Tenant is the controller of its users and its data and is responsible for their conduct.
4. Fair Use and Rate Limits
The Service is subject to reasonable rate limits, quotas, and fair-use expectations to protect platform stability and all tenants. We may apply, adjust, or enforce technical limits (including request rates, storage, and compute) and may throttle, queue, or restrict activity that, in our reasonable judgment, is excessive, abusive, automated beyond permitted use, or that threatens the availability or integrity of the Service. Entitlements specific to your plan are set out in your order or subscription.
5. Enforcement, Suspension, and Termination
We take a risk-based approach to enforcement and reserve broad rights to protect the Service, our other tenants, and third parties. Without limiting any other remedy available to us under the Terms of Service or at law, we may, at our sole discretion and with or without prior notice:
- Investigate suspected violations, including reviewing metadata and, where necessary and lawful, content, to enforce this AUP.
- Remove, disable, or quarantine content or configurations that violate this AUP.
- Throttle, suspend, or restrict any Authorized User, Tenant Admin, or the entire Tenant account.
- Suspend or terminate access immediately and without notice where we reasonably believe there is a risk of harm to persons, data, the Service, or other tenants, a violation of law, or a material breach of this AUP.
- Preserve and disclose information where required by law, legal process, or to protect the rights, property, or safety of DSE, our tenants, or the public.
We are not liable for any loss arising from action taken in good faith under this AUP, and suspension or termination for a violation does not entitle the Tenant to a refund. The Tenant remains responsible for fees accrued and for the acts and omissions of its Authorized Users. Our right to enforce this AUP is not waived by any delay in enforcement.
6. Reporting Violations
To report a suspected violation of this AUP, abuse of the Service, or a security concern: