Acceptable Use Policy

This Acceptable Use Policy applies to DWL Accounts, connected-app access initiated through DWL Accounts, identity flows, passkeys, support channels, purchases, subscriptions, checkout flows, account recovery, and any content or automation that interacts with the Portal. Connected apps may add stricter product-specific rules.

• Credential stuffing, token theft, phishing, session hijacking, account takeover, or unauthorized account recovery.
• Scraping, botting, automated sign-ups, fake accounts, load testing, rate-limit bypassing, spam, or abuse of email flows without written permission.
• Unauthorized scanning, vulnerability testing, reverse engineering, persistence, privilege escalation, data exfiltration, or security probing.
• Malware, malicious code, credential harvesters, exploit payloads, botnets, or attempts to disrupt, degrade, or overload the Service.
• Interference with audit logs, security controls, entitlement checks, payment controls, connected-app handoffs, or provider infrastructure.

• Illegal content, IP infringement, privacy violations, doxxing, nonconsensual intimate content, sexual exploitation, or content involving minors.
• Harassment, threats, hate, fraud, impersonation, deceptive claims, misleading identity, or attempts to misrepresent affiliation with DWL Accounts.
• Content or conduct that violates another person's contract, confidentiality, publicity, privacy, employment, platform, or data-protection rights.
• Use of DWL Accounts to coordinate violence, self-harm instructions, regulated weapons transactions, controlled substances, or other prohibited commerce.
• Submission of health, payment, government ID, private key, or other sensitive information unless the specific workflow requires it and provides appropriate safeguards.

• Card testing, stolen payment methods, money laundering, sanctions evasion, refund fraud, chargeback abuse, promo abuse, or tax evasion.
• Using purchases to sell or facilitate regulated goods or services without required licensing, compliance review, and written authorization.
• Manipulating subscriptions, trials, entitlements, billing records, invoices, app access, or payment processor workflows.
• Reselling, transferring, sublicensing, or sharing paid access except where the plan or connected app expressly allows it.

Violations may result in rate limits, feature limits, purchase cancellation, refund denial where permitted, entitlement removal, connected-app unlinking, evidence preservation, account suspension, termination, deletion, provider reporting, payment processor reporting, law-enforcement referral, or legal action. Security research must follow the responsible disclosure process.