Acceptable Use Policy

1. Scope

This policy is part of our Terms of Service. It applies to everyone who uses Cyborg and to every agent that acts through it. You are responsible for making sure your Users and your agents comply with it.

2. Rules for agents

Agents can act on real systems, so they come with rules of their own. Do not:

• run agents on machines, accounts, networks or systems that you do not own or are not authorized to use;
• give an agent credentials, tokens or access that you are not authorized to share;
• use agents to access data that you are not permitted to see, including other members’ machines, workspace machines or files outside the access you were granted;
• have agents take irreversible or high-impact actions, such as production deployments, data deletion, payments, or messages sent to external parties at scale, without human approval or adequate safeguards such as backups, rollback and limited-scope credentials;
• use agents to break the terms, rate limits or bot rules of third-party services they interact with;
• use agents to impersonate a real person, or to deceive people about whether they are dealing with a human, where disclosure is expected or required by law;
• use agents to make decisions with legal or similarly significant effects on individuals, such as in employment, credit, housing, insurance, education, healthcare or legal matters, without qualified human review and compliance with applicable law; or
• use an AI provider through Cyborg in a way that breaks that provider’s usage policies.

3. Security and abuse

Do not use the Service to:

• create, distribute or deploy malware, ransomware or other harmful code;
• gain or attempt unauthorized access to any system, account or data, including through credential stuffing, phishing or exploiting vulnerabilities;
• scan, probe or test the vulnerability of systems without the owner’s written authorization;
• disrupt or overload any network or service, including through denial-of-service attacks;
• circumvent the Service’s authentication, access controls, approval prompts, usage limits or browser safeguards; or
• mine cryptocurrency on machines that you do not own, or without the owner’s consent.

4. Harm to people

Do not use the Service to:

• create, store or share child sexual abuse material, or exploit or harm minors in any way;
• harass, threaten, bully or incite violence against anyone, or promote hatred on the basis of protected characteristics;
• collect, track or expose personal information without a lawful basis, including doxxing and covert surveillance;
• commit fraud, run scams or phishing, or send spam; or
• develop or deploy weapons capable of mass casualties, or attack critical infrastructure.

5. Law and rights

Do not use the Service to:

• violate any applicable law or regulation, including export control and sanctions law;
• infringe or misappropriate intellectual property or other rights of others; or
• process data that you do not have the right to process.

6. The Service itself

Do not:

• reverse engineer the Service or extract its source code, except where the law allows despite this restriction;
• use the Service to build a competing product, or copy its features or design;
• resell access to the Service without our written agreement; or
• misrepresent your identity or your relationship with Cyborg.

7. Security research

We welcome good-faith security research. Test only against your own accounts and workspaces, do not access or modify other people’s data, do not degrade the Service, and report what you find to s@cyborg7.com. See our Security page for details.

8. Enforcement and reporting

If we believe this policy has been violated, we may remove content, stop or disable agents, disconnect machines, suspend or terminate accounts, and report activity to law enforcement. Where practical, we will tell you first. To report a violation, email s@cyborg7.com.