Acceptable Use Policy

1. Scope

"Services" means every Bodek app, website and API: Bodek Accounts, Files, Forms, SMS, Games, Tools, Developers, the Bodek API, our billing pages and this Help Center. You are responsible for all use of the Services under your account, your keys and your numbers, whether or not you knew about it.

2. Prohibited content

Do not store, upload, publish, share, send or collect content that:

• is unlawful where you or the recipient is, or that promotes or facilitates unlawful activity;
• infringes a copyright, trademark, patent, trade secret, right of publicity or other right, or that you do not have permission to hold or distribute;
• sexually exploits or endangers a child in any way, including child sexual abuse material, which we report to the authorities as law requires;
• is non-consensual intimate imagery, or depicts or facilitates sexual violence, trafficking or exploitation;
• threatens, harasses, bullies, stalks, defames or incites violence against anyone, or targets a person or group with hateful content;
• discloses another person's private or identifying information without permission, including doxxing;
• is deceptive: impersonating a person, business or government body, forging headers or sender identity, phishing for credentials or payment details, or presenting fabricated records, receipts, reviews or endorsements as genuine;
• contains malware, exploits, credential dumps, stolen data, or tools whose main purpose is to break into systems or evade detection;
• promotes self-harm, illegal drugs or weapons, or an illegal scheme such as a pyramid or Ponzi arrangement; or
• you are not legally allowed to process, including regulated data you have no lawful basis to hold.

Data we are not built to hold. Do not use the Services to store or collect payment-card numbers, full government identifiers, biometric identifiers (other than the face grouping Bodek Files performs on your own photos), protected health information subject to HIPAA, or material subject to export control or classified handling, unless we have agreed to it in writing. The Services are not certified for PCI DSS, HIPAA, FedRAMP, CJIS or similar regimes.

3. Prohibited conduct

Do not:

• access an account, workspace, file, form, message, game or dataset you are not authorized to access, or help anyone else do so;
• share, sell or rent your account, keys or access, or resell the Services, except under a plan or written agreement that permits it;
• interfere with the Services or with anyone else's use of them: flooding, denial of service, excessive concurrency, deliberately breaking rate limits, or deliberately corrupting data;
• circumvent a quota, plan limit, paywall, authentication step, encryption, watermark or other technical control, or use multiple accounts to do so;
• scrape, crawl, mirror or bulk-download the Services, or extract a dataset for redistribution or to build a competing product;
• reverse engineer, decompile or benchmark the Services for publication without our written permission, except where law expressly permits;
• use the Services to send bulk unsolicited email or messages, to host the landing page of a spam or fraud campaign, or to support any of it;
• cheat in a game, use external assistance or automation against other players, abuse other players in chat, or manipulate results;
• misrepresent your relationship with Bodek, use our names or logos without permission, or imply that we endorse, review or certify your content, application or messages;
• use the Services in a high-risk setting where failure could cause death, injury or severe damage, as stated in the Terms; or
• violate export control, sanctions, anti-bribery, consumer-protection, privacy or any other law that applies to you.

4. Messaging and calling

Bodek SMS carries extra obligations because sending a text message to someone is regulated. The full rules are in the Messaging Terms. At a minimum, do not:

• message anyone who has not given you consent that the law and the carriers require, or keep messaging someone who has opted out;
• add a person to a group text without their permission;
• send to purchased, scraped, rented or otherwise unverified number lists;
• send content in the categories carriers prohibit, including the "SHAFT" categories — sex, hate, alcohol, firearms and tobacco — cannabis, illegal drugs, gambling, high-risk financial offers, payday or debt-relief loans, get-rich-quick schemes, or anything deceptive;
• conceal who you are, spoof a sender, or route traffic through a number in a way designed to evade carrier filtering or registration rules; or
• use the Services as an emergency, alarm, dispatch or life-safety channel, or to reach emergency services.

5. APIs, automation and limits

Use documented endpoints within their published scopes, rate limits and quotas. Do not probe for undocumented endpoints, retry aggressively after an error, cache beyond what the documentation allows, or design an integration whose failure mode is a flood of requests. Automated clients must identify themselves honestly, handle 429 and 5xx responses with backoff, and respect robots.txt on our public sites. Keep API keys and client secrets out of client-side code, public repositories and shared documents; a leaked key is your responsibility until you revoke it. We may throttle, block, revoke or suspend any key, application or integration to protect the Services.

6. Security research

We welcome reports of genuine vulnerabilities at support@bodek.us. Testing is permitted only against your own account and data, without automated scanning that degrades the Services, without accessing anyone else's data, without social engineering our staff or providers, and without publishing details until we have had a reasonable chance to fix the issue. Anything beyond that — including denial-of-service testing, data exfiltration and testing a third party's systems — is a violation of this Policy and may be unlawful.

7. Enforcement

We may investigate suspected violations and take any action we consider appropriate, with or without notice, including: removing or disabling content, a link, a form, a group or an album; blocking a number or a recipient; throttling, revoking or deleting keys; limiting sending or sharing; suspending or terminating an account, workspace or application; and reporting to carriers, providers or law enforcement. Where law permits, we may preserve and disclose information in connection with an investigation or legal process.

We are not obliged to monitor content or messages, and we do not promise to detect every violation. Nothing we do or fail to do waives any right. Termination for a violation of this Policy does not entitle you to a refund, and you remain responsible for charges already incurred.

8. Reporting abuse

Report abuse, spam, harassment or prohibited content to support@bodek.us; copyright complaints go to dmca@bodek.us under our Copyright and DMCA Policy; privacy concerns go to privacy@bodek.us. Include links, numbers, dates and anything else that will help us find it. To stop automated text messages from a Bodek SMS number, reply STOP to that number.