Acceptable Use Policy

Purpose

This Acceptable Use Policy (“AUP”) is part of the Candler Terms of Service. It states what you may not do with the Service, including Vault, Authenticator, Recovery, Cloud, Agent, and integrations.

Illegal and harmful activity

You may not use the Service to commit or facilitate crime, including fraud, exploitation, trafficking, or other unlawful activity. You may not store or distribute unlawful content.

Unauthorized access, malware, and credential abuse

You may not use Candler to write, host, or operate malware, ransomware, or exploit kits; to attempt unauthorized access to any system; to phish, harvest, or replay credentials; or to traffic in stolen accounts or session tokens.

Do not use Vault, Authenticator, Recovery, or Cloud as infrastructure for credential theft or for attacking third-party systems.

Infrastructure and Cloud abuse

You may not impose unreasonable automated load, probe or scrape the Service in a way that degrades it, attempt to bypass quotas or signed Cloud access, mine cryptocurrency on our infrastructure, or use Cloud storage for bulk content unrelated to software-project work in a way that harms other users.

You may not attempt to disrupt Candler or its processors.

Agent and integrations

You may not instruct Candler Agent or connected integrations to violate this AUP, to generate attack tooling, or to act on third-party systems without authorization. You remain responsible for actions you approve.

Content

You may not upload infringing content, or content that you do not have the right to store. You may not use the Service to host or share CSAM or other prohibited abusive material.

Enforcement

We may investigate suspected abuse, suspend or terminate accounts, remove content, and notify providers or authorities where we believe we are required or where needed to protect the Service. Reports: legal@candler.dev or hello@candler.dev.