Acceptable Use Policy

This Acceptable Use Policy (“AUP”) applies to every part of PrimesFlow: the web dashboard, the monitoring agent, the REST API, documentation, support interactions, and any other service we provide (collectively, the “Service”).

The purpose of this policy is to protect the integrity, security, and reliability of the Service for all customers, and to ensure that PrimesFlow is used only for lawful, authorized infrastructure monitoring. By using the Service, you agree to comply with this AUP in addition to our Terms of Service and Privacy Policy.

You may use PrimesFlow only to monitor infrastructure that you own, lease, or have explicit written authorization to manage. Acceptable uses include:

• Installing the PrimesFlow agent on servers, virtual machines, or containers that belong to you or your organization.
• Collecting system metrics, service health checks, and limited log excerpts for operational monitoring.
• Using AI-assisted diagnostics on telemetry from your own authorized servers.
• Calling the PrimesFlow API to integrate the Service with your own internal tools, dashboards, or alerting workflows.
• Configuring alerts, inviting team members, and managing workspace access for legitimate operational purposes.

You are responsible for all activity that occurs under your account, including actions taken by team members you invite. Keep your credentials secure and promptly remove users who no longer need access.

You may not use PrimesFlow for any unlawful purpose or in connection with illegal activity. Prohibited conduct includes, but is not limited to:

• Monitoring infrastructure used to facilitate fraud, money laundering, illegal gambling, or the distribution of unlawful content.
• Using the Service to facilitate, conceal, or further any criminal activity.
• Violating applicable export controls, sanctions, or trade restrictions.
• Any use connected to weapons development, illegal surveillance tooling, or activities that threaten harm to persons or property.

PrimesFlow must not be used to access, probe, or tamper with systems or data you are not authorized to monitor. You may not:

• Install the agent on servers, cloud instances, or endpoints you do not own or have written permission to manage.
• Access, modify, or attempt to access another customer’s workspace, servers, dashboards, or data.
• Reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code of the agent, dashboard, API, or any other part of the Service.
• Circumvent authentication, authorization, rate limiting, or any other security control we implement.
• Use unauthorized bots, scrapers, crawlers, or automated tools to extract data from the Service.

If you discover a security vulnerability in PrimesFlow, report it responsibly to contact@primesflow.io rather than exploiting it.

You may not use the Service in a way that degrades performance, reliability, or experience for other customers. Prohibited conduct includes:

• Launching or participating in denial-of-service attacks, resource-exhaustion traffic, or other attempts to disrupt the Service.
• Relaying, proxying, or amplifying network traffic through the agent or API for purposes unrelated to monitoring your own infrastructure.
• Creating multiple accounts or workspaces to bypass plan limits, free-trial restrictions, or enforcement actions.
• Misusing alerts, notifications, or webhooks to send spam, harassment, or unwanted messages.
• Submitting false, fabricated, or manipulated data to the Service.

Your use of PrimesFlow must respect the rights of third parties and comply with applicable data-protection laws, including the GDPR, CCPA, and any similar regulations. You may not:

• Monitor or collect data in violation of data-protection laws or the rights of data subjects.
• Process personal data about third parties without a valid legal basis, such as consent or a legitimate operational need.
• Reproduce, modify, or create derivative works from PrimesFlow’s software, documentation, user interface, or branding without our prior written permission.
• Impersonate PrimesFlow, PrimesFlow Ltd, our staff, or another customer.

PrimesFlow is an observability and diagnostics platform, not a penetration-testing or offensive-security tool. You may not use it to attack, probe, or compromise systems you do not own or authorize. Specifically, you may not:

• Conduct reconnaissance, port scanning, enumeration, or vulnerability scanning of systems you do not own or have explicit authorization to test.
• Use monitoring data, AI diagnostics, or alerts to identify or exploit vulnerabilities in third-party systems.
• Deploy the agent as a persistence mechanism, backdoor, command-and-control channel, or any form of malware on compromised or unauthorized systems.
• Correlate PrimesFlow data with information obtained through unauthorized access to third-party systems.
• Engage in red-team, bug-bounty, or security-research activity against systems without the explicit written authorization of the system owner.

Security researchers who wish to test PrimesFlow itself should contact contact@primesflow.io for responsible disclosure guidelines before performing any testing.

Each PrimesFlow plan has published limits for servers, data retention, alert rules, and API requests. Current limits are described on our Pricing page. You agree to:

• Stay within the server and resource limits of your selected plan, and upgrade promptly if your needs exceed those limits.
• Respect per-workspace API rate limits. Sustained abuse may result in throttling, suspension, or termination.
• Run the agent using the standard PrimesFlow configuration. Modified or tampered agents that send excessive, malformed, or non-standard data may be rate-limited or blocked.

We reserve the right to investigate suspected violations of this AUP and to take action we consider appropriate. Actions may include:

• Warning. A notice describing the violation and a reasonable window to correct it.
• Throttling. Temporary reduction of API or agent throughput to prevent harm to the Service.
• Suspension. Temporary suspension of your account or workspace while we investigate a suspected violation.
• Termination. Immediate or notice-based termination for severe or repeated violations.

We will attempt to contact you before taking action unless the violation poses an immediate risk to the Service, other customers, or the public. Accounts terminated for AUP violations are not eligible for refunds.

If you believe your account was suspended or terminated in error, you may appeal by emailing contact@primesflow.io within 14 days of the action. Appeals are reviewed by a team member who was not involved in the original enforcement decision.

If you suspect a violation of this AUP or observe abusive behavior originating from the PrimesFlow platform, please report it to us at contact@primesflow.io. Include as much detail as possible, such as:

• The workspace, account, or IP address involved, if known.
• A description of the suspected violation.
• Timestamps, logs, screenshots, or other evidence.

We investigate all reports promptly and will take action when appropriate. We may not disclose the outcome of an investigation due to confidentiality obligations.

We may update this AUP from time to time to reflect changes in the Service, legal requirements, or security best practices. Material changes will be announced by email to workspace owners or through an on-Service notice at least 14 days before they take effect.

Your continued use of PrimesFlow after the effective date of any update constitutes acceptance of the revised policy. If you do not agree to the changes, you must stop using the Service and cancel your subscription.

If you have questions about this Acceptable Use Policy or need to report a violation, please contact us.