Acceptable Use Policy

1. Prohibited content

You may not upload, store, deploy, transmit, host, or otherwise process the following categories of content via the Service:

1.1 Criminally illegal content

• Child sexual abuse material (CSAM)
• Content prohibited by §§86, 86a StGB (unconstitutional and terrorist symbols)
• Content prohibited by §§130, 131 StGB (incitement, glorification of violence)
• Content prohibited by §§184b, 184c StGB
• Content inciting, promoting, or directly facilitating terrorism or violent extremism
• WMD construction (chemical, biological, radiological, nuclear)
• Other content criminally illegal where hosted, accessed, or used

1.2 Fraud and abuse infrastructure

• Phishing kits, credential-stealer infrastructure, financial-fraud tooling
• Malware, ransomware, command-and-control (C2) infrastructure, botnet command nodes, exploit kits
• Spam relays, mass-email infrastructure violating anti-spam law
• Unauthorised access tooling, automated attack infrastructure

1.3 Intellectual-property and dignity violations

• Copyright, trademark, patent, or trade-secret infringement
• Counterfeit goods or services
• Defamation, doxxing, harassment, non-consensual intimate imagery
• Personal data published without lawful basis

1.4 Resource and economic abuse

• Cryptocurrency mining (any algorithm, any coin)
• Free-tier farming, automated free-account creation
• Distributed attack tooling (DDoS reflectors, traffic amplifiers)

1.5 Restricted and dual-use

• Content violating export controls or sanctions applicable to the EU or Germany
• Dual-use content under EU Regulation 2021/821 without licence

2. Prohibited uses

• Circumvent any technical or contractual restriction we set
• Reverse-engineer the Service for the purpose of building a competing service
• Resell access to the Service without our written agreement
• Probe, scan, or test the vulnerability of any system you do not own or have permission to test
• Interfere with or disrupt the Service or other users' use of it
• Submit false legal notices or impersonate rights-holders in takedowns
• Operate any service that primarily exists to violate this AUP

3. AI-agent-specific provisions

3.1 You are responsible for the actions of any AI agent you authorise to act on the Service via your credentials, tokens, or MCP connections. AI-agent actions are attributed to you for purposes of this AUP.

3.2 You may not configure an AI agent to repeatedly attempt violations of this AUP, even if individual attempts are blocked or rejected by our tools.

3.3 You may not use the Service to provide AI-agent-driven infrastructure to third parties whose underlying use would itself violate this AUP.

4. Notice and takedown procedure

4.1 To report content you believe violates this AUP or applicable law, send a notice to abuse@nyxory.com. For takedown notices to qualify for §10 TMG safe-harbor handling, the notice must contain:

• Resource identifier: the exact URL, hostname, deployment slug, or resource identifier of the affected content
• Legal claim: the specific right invoked (statute, jurisdiction, article or section number) and a brief explanation of how the content violates it
• Rights-holder identification: name, role (rights-holder / authorised representative / law enforcement / supervisory authority), postal address, email, and a relationship statement (e.g. "I am the copyright owner", "I represent the owner under power of attorney")
• Good-faith and accuracy statement: a statement, under penalty of perjury or comparable false-statement liability under your jurisdiction, that the information in the notice is accurate and that you have a good-faith belief the use is not authorised by the rights-holder, its agent, or the law
• Signature: a physical or electronic signature of the notifier

4.2 Response. We aim to respond within 72 hours during the open beta. We may at our sole discretion request additional information, request a response from the user complained of, suspend the affected resource pending review, terminate the resource immediately, refer the matter to law enforcement, or decline to act where the notice is materially incomplete, abusive, or facially invalid.

4.3 Counter-notice (putback). If your content was suspended or removed in response to a takedown notice and you believe it was wrongly removed, you may file a counter-notice to abuse@nyxory.com. The counter-notice must contain: the same identifiers and signature as in §4.1, a statement under penalty of perjury that you have a good-faith belief the content was removed in error, and your consent to jurisdiction at the Operator's seat for any related proceeding. We may, but are not obliged to, restore the content; we will not restore content that we determine is still likely to violate applicable law or this AUP.

4.4 Bad-faith notices. Knowingly false takedown notices and bad-faith counter-notices may result in liability under §263 StGB (fraud), §269 StGB (data fraud), §823 BGB (tortious harm), or comparable provisions of your jurisdiction. We may forward false notices to the complained-of user and may decline to process further notices from a repeat false-notifier.

5. Enforcement

We may take any combination of: (a) suspend or terminate the affected App, deployment, or namespace; (b) suspend or terminate the user's account; (c) preserve evidence relevant to a legal claim; (d) disclose information to law enforcement or rights-holders where required or permitted by law.

No refund is owed for content removed or accounts terminated under this AUP. We are not obliged to monitor for violations.

6. Repeat-infringer policy

6.1 Repeat infringers. Accounts associated with two or more validated takedown notices within a rolling 12-month window, or with a single egregious violation involving content of the kinds listed in §1.1 (criminally illegal content), may be permanently terminated without notice and without refund. We track validated takedowns at the user-account level.

6.2 No appeal for §1.1 categories. Termination based on CSAM, terrorism-related content, or comparable criminally-prohibited categories is not subject to internal appeal; we will preserve evidence and refer the matter to law enforcement where required by law.

6.3 Account-level enforcement. Where a single user operates multiple namespaces or accounts, validated takedowns affecting any one of them count against the user-level repeat-infringer threshold.

7. Reporting our own potential issues

If you believe we are mishandling your data, infringing your rights, or violating applicable law, contact privacy@nyxory.com or hello@nyxory.com. You also retain the right to lodge a complaint with the competent supervisory authority.