Acceptable Use Policy

1. Who this applies to

This policy applies to everyone who installs or uses the Cotterpin software, uses Watch or the free routes, holds a Pro, Team or Enterprise licence, or uses our website or licence service. It forms part of our Terms of Service. If you use Cotterpin for an organisation, you are responsible for the people you give access to.

2. Licensing and licences

You must not:

• bypass, disable, patch or tamper with licence checks, machine limits, the Watch/enforce decision, release signature checks or licence tokens;
• forge, alter or replay a licence token, or use one on a machine it was not issued for;
• wind back your clock, spoof a machine fingerprint or otherwise disguise a machine to extend or multiply a licence;
• share, sell, rent or sublicense a licence or Team seat, or let more people use it than you have paid for;
• distribute the software, its gate packs or paid components, except as the Software Licence allows.

3. Our licence service and website

You must not:

• attack, probe, scan, overload or scrape the licence service or this website, except as security research under section 5;
• get around rate limits, or send automated requests other than those the Cotterpin software makes;
• use another person's email address to claim a purchase, or try to guess one-time codes;
• interfere with other customers' use of the service.

4. How you use Cotterpin

You must not use Cotterpin:

• to break the law or infringe anyone's rights, including intellectual property and privacy rights;
• on code you are not entitled to process, or to send code to a model provider you are not entitled to send it to;
• to build, test or deploy malware, or to attack systems you are not authorised to test;
• in breach of your model provider's terms (Anthropic, OpenAI, xAI or others).

5. Security research is welcome

Good-faith security research is not a breach of this policy when it follows our Security and Responsible Disclosure Policy: report what you find to security@cotterpin.io, respect our users' privacy and data, avoid degrading the service, and give us a reasonable chance to fix the issue before you disclose it. Testing that needs another customer's data, or that would deny service to others, is not covered.

6. What happens if this policy is broken

Depending on how serious it is, we may warn you, rate-limit or block requests, or suspend or revoke a licence, as set out in section 14 of the Terms of Service. Where a breach can be put right, we will tell you first and give you 32 days to do so. When a licence ends, Cotterpin runs in Watch; nothing on your machine is deleted.

7. Reporting misuse

To report misuse of Cotterpin, email support@cotterpin.io. For a security vulnerability, email security@cotterpin.io.