Acceptable Use Policy

1. Purpose, scope and application

This Policy applies to all access to and use of the Services, whether free or paid, and whether the Services are accessed by a human being through a browser or by software acting on a person's behalf, including autonomous agents, bots, scripts, crawlers and other automated tools. Requests made to our APIs, agent-readable surfaces or x402-payable endpoints are use of the Services for the purposes of this Policy.

If you operate, deploy, instruct or otherwise make use of an automated agent or other software that interacts with the Services, you are responsible for that software's compliance with this Policy and the Terms of Service. The acts and omissions of agents, scripts and integrations under your control are treated as your own, and a breach of this Policy by such software is a breach by you.

You are also responsible for use of the Services made through your account, your organisation or your API keys, including trial keys, by any member of your team or by any person or system to whom you make credentials available.

2. Unlawful use

You must not use the Services in any way that violates applicable law or regulation, or to plan, facilitate, assist or conceal any unlawful activity. In particular, you must not use the Services:

• to commit, further or facilitate any crime, fraud, theft or deception, or to obtain money, Digital Assets, data or anything else of value by false pretences;
• for money laundering, terrorist financing or dealing with the proceeds of crime, or to structure, layer or obscure transactions for any of those purposes;
• to evade or violate economic or trade sanctions or export controls, or to deal, directly or indirectly, with or for the benefit of any sanctioned person, entity or territory;
• to engage in market manipulation or deceptive schemes of any kind, including wash trading, spoofing, pump-and-dump schemes, or the fabrication of transaction activity intended to mislead others about the volume, activity, reputation or trustworthiness of any agent, merchant, service, token or protocol;
• to infringe or misappropriate the intellectual property, privacy or other rights of any person;
• to conduct, or hold yourself out as conducting, any activity that requires a licence, registration or authorisation that you do not hold, including any regulated payment or digital payment token service, any regulated capital markets or financial advisory activity, or any other regulated financial, legal or medical service, whether through a paywalled resource, the facilitator or otherwise; or
• to encourage, enable or assist any other person to do any of the above.

3. Security abuse

You must not compromise, or attempt to compromise, the security or integrity of the Services, of our infrastructure or of any other user. In particular, you must not:

• access, or attempt to access, any account, organisation, data, system or network without authorisation, or probe, scan or test the vulnerability of the Services without our prior written consent;
• introduce or distribute malware, viruses, worms, ransomware or any other harmful or malicious code through the Services;
• interfere with or disrupt the Services or any other user's use of them, including by denial-of-service attacks, deliberate resource exhaustion or traffic designed to degrade or destabilise the Services;
• misuse credentials or API keys, including by using credentials or keys that were not issued to you, attempting to derive, brute-force or intercept the credentials or keys of others, or circumventing authentication, session or access controls;
• attempt to access non-public areas of the Services or the systems of our suppliers; or
• remove, disable or interfere with security-related features of the Services.

4. API and platform abuse

The metered parts of the Services, including the read API, the SQL endpoint and the AI SQL playground, are subject to rate limits, Query Unit charges and other technical controls. You must not:

• circumvent, or attempt to circumvent, rate limits, metering, quotas, row caps or Query Unit charges, including by manipulating requests, exploiting metering errors or timing traffic to defeat technical controls;
• share, pool, rotate or cycle accounts, organisations or API keys (including trial keys obtained through repeated small x402 test payments) in order to evade rate limits, metering, per-key restrictions or free-tier grants;
• create multiple accounts or organisations to obtain sign-up grants or other benefits more than once, or otherwise abuse promotional credits or coupons;
• scrape, crawl, harvest or bulk-extract data from the Services other than through the published interfaces provided for that purpose, or in breach of technical controls, robots directives or documented usage limits;
• resell, republish or redistribute data obtained from the Services in a manner that misrepresents Roundhouse as the source of, or as endorsing, sponsoring or certifying, your product, dataset or service, or that suggests an affiliation with Roundhouse that does not exist; or
• use the AI SQL playground or any other feature to attempt to generate or execute queries designed to reach data, schemas or systems beyond those the feature is intended to expose.

5. User Content and Publisher standards

The app builder and paywall features allow you to publish files, APIs and small apps behind an x402 paywall priced in USDC, with payments flowing directly from the buyer's wallet to your own wallet. You are solely responsible for your User Content and for anything you offer for sale through the Services. Roundhouse is not a party to any transaction between a Publisher and a buyer, and blockchain transactions are irreversible.

You must not publish, sell or make available through the Services any User Content that:

• infringes any intellectual property or other proprietary right, or that you do not have the rights, licences and consents needed to publish and sell;
• is unlawful, fraudulent, deceptive or misleading, including content marketed with false claims about its nature, provenance, performance or utility;
• is defamatory, obscene or sexually exploitative, or that exploits or endangers minors in any way;
• contains malware or other harmful code, or is designed to compromise, surveil or damage a buyer's systems, data or wallets;
• consists of personal data collected or disclosed unlawfully, or of stolen or hacked material; or
• promotes or facilitates any conduct prohibited elsewhere in this Policy.

Publishers must describe accurately, before payment, what buyers will receive, including any material limitations, and must not misdescribe the content, functionality or scope of a paid resource. Complaints from buyers or other evidence of misdescription may lead to enforcement action under this Policy.

6. Data about identifiable persons

The Services index publicly available blockchain settlement data and enrich it with identity signals such as ENS names, ERC-8004 identity registry records and heuristics. Attribution is probabilistic and may be incomplete or wrong, and some indexed records may nevertheless relate to identifiable individuals. You must handle any such data responsibly and in compliance with the data protection and other laws that apply to your use of it.

You must not use the Services, or any data obtained from them, to:

• harass, stalk, intimidate, threaten or harm any individual;
• expose or publish an individual's identity, wallet holdings, transaction history, location or other personal information in a manner intended or likely to cause harm or distress (doxxing);
• build profiles of identifiable individuals, or track an individual's transactions or associations, other than for lawful purposes and in compliance with applicable data protection law; or
• make decisions that produce legal or similarly significant effects for an individual, including decisions about employment, credit, insurance, housing or access to services, without independent verification through appropriate means.

7. No reliance for regulated purposes

The data made available through the Services derives from public blockchains and third-party sources. Indexing may lag, chains may reorganise, attribution is probabilistic and trust scores are informational signals only. Nothing in the Services is financial, investment, legal, accounting or tax advice, and nothing in the Services is an endorsement or recommendation of any agent, merchant, token or protocol. The Data & Risk Disclaimer explains these limitations in more detail.

You must not represent the Services, or any data obtained from them, as an authoritative or certified source for regulated or high-stakes purposes, including regulatory compliance, anti-money-laundering or sanctions screening, credit or lending decisions, audit or assurance work, or regulatory reporting, without independent verification from appropriate sources. If you choose to use data from the Services as an input to any such process, you do so at your own risk and remain solely responsible for the outcome.

8. Enforcement

We may, but are not obliged to, monitor use of the Services and investigate suspected or reported breaches of this Policy. Where we believe, in our sole discretion, that this Policy has been or may be breached, we may take any action we consider appropriate, with or without notice to you, including:

• issuing a warning or requiring changes to your conduct or your User Content;
• throttling, rate-limiting or otherwise restricting your access to some or all of the Services;
• suspending or revoking API keys, including trial keys, and adjusting Query Unit balances affected by error or misuse;
• removing, disabling or unpublishing User Content;
• suspending or terminating accounts or organisations, and refusing future registrations; and
• reporting conduct to law enforcement, regulators or other authorities, and cooperating with any resulting investigation, including by preserving and disclosing information where we believe in good faith that we are permitted or required to do so.

We may act on our reasonable assessment of the information available to us at the time. To the maximum extent permitted by law, we are not liable to you or to any third party for any action we take, or decline to take, under this Policy. Our rights under this Policy are in addition to, and do not limit, our rights under the Terms of Service or at law.

9. Reporting violations

If you become aware of any actual or suspected breach of this Policy, including a security vulnerability, abusive User Content or misuse of data about an individual, please report it to legal@roundhouseai.io. Please include enough detail for us to assess the report, such as the relevant URLs, wallet addresses, entity pages or content, a description of the conduct concerned and any supporting evidence.

We may contact you for further information. We do not commit to respond to, or act on, every report, and we may not be able to share the outcome of any investigation. Do not test a suspected security vulnerability against the Services yourself; report it instead.

10. Changes to this Policy

We may update this Policy from time to time by posting a revised version on this page with an updated effective date. Changes take effect when posted unless the revised version states otherwise. Your continued use of the Services after a revised version is posted constitutes your acceptance of it. The current versions of all of our legal documents are listed at the legal hub.

11. Contact

Questions about this Policy, reports of violations and all legal, privacy, complaints and other notices should be directed to legal@roundhouseai.io.

Roundhouse AI Ltd., 101 Telok Ayer Street, #03-02, Singapore 068574.