Acceptable Use Policy

This Acceptable Use Policy (“AUP”) governs your use of the ShiftGraph Service and is part of our Terms of Service. It exists to keep the Service safe and lawful for everyone. Capitalized terms have the meaning given in the Terms.

1. Authority to observe your traffic

ShiftGraph observes the third-party API and SDK traffic of your own software in order to profile the behavior of your dependencies. You are responsible for having the authority to do this. You represent and warrant that you own or operate the software whose outbound traffic you monitor with ShiftGraph, or are authorized by the owner or operator to do so, and that your monitoring complies with all applicable laws, including wiretap, electronic communications, computer-fraud, and privacy laws, and with your agreements with the providers whose APIs you call. You will not use ShiftGraph to intercept, observe, or analyze communications you are not authorized to access.

2. Prohibited uses

You will not, and will not permit anyone to:

• use the Service to observe traffic or systems you do not own or are not authorized to monitor, or to intercept the communications of others unlawfully;
• submit to the Service any request or response values, bodies, headers, cookies, credentials, secrets, or personal data in the payload; the Service is value-free, and you must not attempt to defeat, bypass, or overload the ingest gate that enforces this;
• violate, or use the Service to violate, any law, regulation, or third party’s rights, including intellectual-property, privacy, and contractual rights;
• probe, scan, or test the vulnerability of the Service, or breach or circumvent authentication, rate limits, tenant isolation, or other security or access controls, except under an authorized program we operate;
• access the Service to build a competing product, benchmark it for a competitor, or reverse engineer it except to the extent that restriction is prohibited by law;
• introduce malware or malicious code, or use the Service to store or transmit it;
• interfere with or disrupt the integrity or performance of the Service, or impose an unreasonable or disproportionately large load on it;
• misrepresent your identity or affiliation, share credentials, or resell, sublicense, or make the Service available to any third party except as the Terms allow;
• use the Service to harass, defame, or harm others, or for any high-risk activity where failure could lead to death, personal injury, or environmental damage.

3. Your account and content

You are responsible for all activity under your account, for keeping credentials and second factors secure, and for your users’ compliance with this AUP. You are responsible for the metadata you submit and for ensuring you have the rights and authority to submit it.

4. Enforcement and suspension

If you violate this AUP, we may, consistent with the suspension and termination provisions of the Terms, suspend or limit the Service, remove offending content, or terminate the Agreement. Where the threat is not severe, we will use reasonable efforts to give notice and an opportunity to cure first; where there is a risk of imminent harm, a legal requirement, or a threat to the security or integrity of the Service or others, we may act immediately. We may report unlawful activity to authorities where appropriate. Suspension for a violation does not entitle you to a refund.

5. Reporting abuse

To report a violation of this AUP or a security concern, contact security@shiftgraph.dev. We may update this AUP as described in the Terms.