Acceptable Use Policy
This Acceptable Use Policy ("AUP") sets out what you may and may not do with Nib, a software product operated by Secret Key LLC ("Nib", "we", "us"). It expands section 6 of our Terms of Service, forms part of those terms, and applies to every account, plan, API key, client session, and model request that uses our gateway.
Nib is a professional tool for software work. The rules below exist because our access to model providers, our payment providers, and the safety of other people's systems depend on them. If something is not explicitly listed here but clearly defeats the purpose of these rules, treat it as prohibited.
1. Illegal activity
You must not use Nib to break the law or to help anyone else break it. This includes:
- Activity that violates any applicable law or regulation in your jurisdiction or ours.
- Infringing intellectual property, violating trade secrets, or processing data you have no right to process.
- Fraud, phishing, scams, money laundering, sanctions evasion, or the sale of illegal goods and services.
- Harassment, stalking, threats, targeted abuse, or the generation of content intended to intimidate a person or group.
- Processing regulated personal data without a lawful basis, or handling data you are not authorised to access.
2. Malicious code and attacks on systems
You must not use Nib to build, improve, or operate offensive tooling, or to attack systems you do not own or have written permission to test. This includes:
- Generating, obfuscating, or refining malware, ransomware, worms, rootkits, botnets, or droppers.
- Writing or tuning exploits, payloads, or privilege-escalation code for use against third parties.
- Unauthorised access, credential stuffing, password cracking, session hijacking, or bypassing authentication or access controls.
- Denial-of-service attacks, scan-and-exploit campaigns, or automating intrusion attempts against any host.
- Evading detection, antivirus, or logging for malicious purposes, or automating spam and bulk unsolicited messaging.
Legitimate security work is allowed: defensive tooling, your own lab environments, and authorised penetration tests with written scope from the system owner. You are responsible for holding that authorisation.
3. Sexual and explicit content
Nib does not generate sexual or explicit material, and you must not use it to do so. This includes:
- Sexually explicit text, imagery, role-play, or audio, whether generated directly or assembled from outputs.
- Erotic or fetish content, sexualised descriptions of real people, or non-consensual sexual content of any kind.
- Any sexual content involving minors. This is never permitted, in any form, and we report it to the relevant authorities.
- Using Nib to build, staff, or power a product, chatbot, or companion whose purpose is sexual or explicit content.
Model providers apply their own content filters on top of ours. Prompts engineered to defeat those filters are themselves a violation of this policy.
4. Resale of raw API access
Nib subscriptions are sold to the named account holder for their own work. You must not:
- Resell, rent, sublicense, or otherwise redistribute raw access to our gateway, API keys, model endpoints, or credits.
- Operate a competing gateway, proxy, or key-pooling service on top of the service, or expose it to third parties behind your own interface.
- Bundle Nib's model access into a product you offer to others as a substitute for our service.
- Use automated signups, multiple accounts, or plan cycling to obtain allowances beyond what a single account is entitled to.
Building a product that uses Nib internally, as part of your own workflow or software, is fine. Making our raw access the thing you sell to someone else is not.
5. Credential and key sharing
Accounts and keys are personal to the person who created them. You must not:
- Share login credentials, API keys, session tokens, or device approvals with anyone outside your account.
- Publish keys in public repositories, client-side code, screenshots, tickets, or logs, or otherwise leave them where others can find them.
- Use a key issued to someone else, or let a third party use yours, including through shared machines or resold access.
- Circumvent concurrency limits by opening additional sessions on the same account for other people to use.
A plan's concurrency limit decides how many sessions can run at once. If a key leaks, rotate it immediately from the console and tell us at [email protected]; we may revoke it first to protect the account.
6. Platform abuse
You must not interfere with how the service is metered, secured, or operated:
- Circumventing rate limits, quotas, caps, billing, or authentication controls.
- Probing, scanning, or load-testing our infrastructure or that of our providers without written permission.
- Using the service in a way that exposes it to automated abuse, or relaying requests for a third party without their own account.
- Reverse engineering the service to obtain model access or credits outside the published interface.
7. What happens when this policy is broken
We investigate reports and automated signals of abuse. When we find a violation, we may take any of the following steps, depending on severity and whether the problem is repeated:
- Warning. For a first, minor, or ambiguous issue, we contact you and ask you to stop.
- Limits. We throttle, rate-limit, or restrict specific models, keys, or routes while the issue is reviewed.
- Suspension. We pause the account. Access stops immediately, and the subscription is not billed further while it is suspended.
- Termination. We close the account for serious or repeated violations. Termination of this kind ends access to the service and any remaining plan credits, and no refund is owed.
Suspension or termination for a violation of this policy, or for an activity that creates security, legal, or payment-processor risk, does not entitle you to a refund of consumed or remaining credits, and is not a breach by us under any service commitment. Where the law permits, we will tell you which rule was broken and why, unless doing so would compromise an investigation or another person's safety. We may report unlawful content or conduct to law enforcement.
You are responsible for activity that happens under your account, including activity by anyone you have allowed to use your session.
8. Reporting a violation
If you believe someone is using Nib in breach of this policy, or you have received abusive traffic from our infrastructure, email [email protected] with the details. Reports are reviewed confidentially.
9. Changes
We may update this policy as the service or applicable law changes. Material changes are announced by email or in-app at least 14 days before they take effect. Continued use after that date constitutes acceptance.
10. Contact
Secret Key LLC
30 N Gould St, Ste R
Sheridan, WY 82801, United States
[email protected]