Acceptable Use Policy

This policy forms part of the BuildKola Terms of Service. It applies to every account, organization, integration, and person using BuildKola.

1. Use the service lawfully

You must not use BuildKola to violate law, regulation, court order, sanctions, or another person’s rights. You must have authority and a lawful basis for information you submit.

2. Do not facilitate harm or deception

You must not use BuildKola to:

• commit or facilitate fraud, theft, money laundering, bribery, corruption, or identity misuse;
• impersonate a person or organization, misrepresent authority, or submit false verification information;
• exploit, harass, threaten, discriminate against, or endanger people;
• distribute malware, phishing, spam, or deceptive communications;
• infringe privacy, confidentiality, intellectual-property, or consumer rights; or
• support goods, services, or transactions prohibited by applicable law or a connected regulated provider.

3. Protect systems and access

You must not:

• probe, scan, test, bypass, disable, or interfere with security or access controls without written authorization;
• obtain or attempt to obtain another account, credential, token, secret, or non-public data;
• overload, scrape, reverse engineer, or automate access in a way that harms the service or evades published limits;
• introduce malicious code or use BuildKola to attack another system; or
• conceal the origin of requests or circumvent suspension, verification, country, or permission controls.

Good-faith security research must follow a vulnerability disclosure process we publish or be authorized in writing before testing.

4. Responsible organization administration

Owners and administrators must grant the least access needed, promptly revoke obsolete access, and not misuse staff or member information. Invitations may only be sent for legitimate organizational purposes.

5. Enforcement

We may investigate suspected violations and preserve relevant evidence. Depending on severity and risk, we may warn you, limit a feature, remove content, suspend access, terminate an account, notify an affected organization or provider, or report conduct where required by law.

We consider context, intent, impact, history, and opportunities to remedy an issue. Urgent restrictions may be applied without advance notice when needed to protect people, funds, data, or systems.

6. Reporting concerns

Report suspected misuse to [email protected]. Do not include passwords, one-time codes, complete financial account numbers, or raw government identifiers.