Acceptable Use Policy

1. Who this applies to

This policy applies to everyone who uses Vibely, on every plan, and to everything you do with it: the prompts you write, the code the agent generates for you, what runs in your sandboxes, and what you publish on a vibelyagent.com subdomain or a custom domain you connect. It also applies to anyone you let use your account. Breaking it is a breach of our Terms of Service.

2. Prohibited content

You may not use Vibely to generate, host, or distribute:

• Material that sexually exploits or endangers minors.
• Content that incites or facilitates real-world violence against people or groups.
• Detailed instructions for creating weapons capable of mass casualties.
• Malware, ransomware, spyware, credential stealers, botnet controllers, or DDoS tooling.
• Content that infringes intellectual property or violates privacy law.

3. India: the categories the IT Rules require us to name

India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require us, at rule 3(1)(b), to tell you in plain terms not to host, display, upload, publish, transmit, store or share any of the following through Vibely. This is that notice. It applies to prompts, project files, sandboxes, and anything you publish on a vibelyagent.com subdomain or a domain you connect.

• Content belonging to someone else that you have no right to.
• Content that is obscene, pornographic, paedophilic, or invasive of another person's privacy, including their bodily privacy.
• Content that is defamatory, libellous, or racially or ethnically objectionable.
• Content that is insulting or harassing on the basis of gender.
• Content that encourages or relates to money laundering or gambling, or is otherwise inconsistent with or contrary to the laws of India.
• Content that is harmful to a child.
• Content that infringes a patent, trademark, copyright or other proprietary right.
• Content that deceives or misleads about the origin of a message, or knowingly communicates information that is patently false or misleading but is presented as fact.
• Content that impersonates another person.
• Content that threatens the unity, integrity, defence, security or sovereignty of India, its friendly relations with foreign states, or public order, or that causes incitement to an offence, or prevents the investigation of an offence, or insults a foreign state.
• Software viruses or any other computer code, file or program designed to interrupt, destroy or limit the functionality of any computer resource.
• Content in the nature of an online game that is not a permissible online game under the Rules. If you build a game on Vibely that takes stakes or offers winnings, this is the bullet that applies to you.
• Advertising, surrogate advertising, or promotion of an online game that is not a permissible online game, or of an intermediary offering one.
• Content that otherwise violates any law for the time being in force.

4. India: how fast content comes down, and the yearly reminder

Rule 3(1)(f) requires us to tell you at least once a year that if you break these rules, our Terms of Service, or our Privacy Policy, we can remove the content and terminate your access. This page is that notice, and it is dated at the top so you can see when it was last put in front of you. Consider yourself told: the enforcement section below is what actually happens.

When someone complains or an authority orders a takedown, these are the deadlines we work to. They are the Rules' numbers, not ours:

• A grievance to our Grievance Officer: acknowledged within 24 hours of receipt, disposed of within 15 days (rule 3(2)(a)).
• A complaint that content exposes a person's private area, shows them in full or partial nudity or in a sexual act, or impersonates them including by a morphed image: removed within 24 hours of the complaint (rule 3(2)(b)).
• A court order or a notification from an authorised government agency: the content comes down within 36 hours (rule 3(1)(d)).
• Information we are lawfully directed to give a government agency for verification, prevention, detection, investigation or prosecution: provided within 72 hours of the order (rule 3(1)(j)).

5. Prohibited uses

You may not use Vibely to:

• Conduct unauthorized intrusion, or evade access controls on any system you do not own.
• Run unsolicited bulk messaging, phishing, or fraud schemes.
• Impersonate Vibely, our staff, or any other person or organization.
• Reverse-engineer model weights or attempt to extract training data.
• Harass a person, or build a service whose purpose is to harass, dox, or stalk someone.

6. Commercial restrictions

You may sell whatever you build with Vibely. You may not sell Vibely. Specifically, you may not:

• Resell, sublicense, rent, or white-label access to the Service, or offer it to others as your own AI builder.
• Share an account or a login. Each person who uses Vibely needs their own account; seats are how a team gets access. Sharing credentials is also how workspaces get taken over.
• Use prompts, Generated Output, or any part of the Service to train, fine-tune, distil, or evaluate a competing AI model or coding agent.
• Scrape, crawl, or automatically extract the Service, our website, or our documentation, or access the Service other than through the interfaces and APIs we provide.
• Circumvent credit metering, rate limits, seat counts, or plan gates — including by creating multiple accounts to repeat a free allowance, or by tampering with usage reporting.
• Publish benchmarks, competitive comparisons, or performance measurements of the Service without our prior written consent. Ask us at [email protected]; we would rather you measured it accurately.

7. What sandboxes are for

A sandbox exists to build, run, and preview your project. It is not general-purpose compute. You may not use one to:

• Mine cryptocurrency, farm tokens, or run any proof-of-work or distributed-compute scheme.
• Operate a proxy, VPN, VPN exit node, Tor relay, or anonymizing service.
• Run workloads unrelated to the project — media transcoding farms, model training runs, mass file conversion, torrent or file-sharing nodes.
• Run load generators, port scanners, or credential-stuffing tools against any host.
• Store or serve content unconnected to the project, such as a file locker or a media library.

8. Data you must not put into Vibely

Vibely is not built, assessed, or contracted for regulated data. Do not put any of the following into a prompt, an upload, a project file, an environment variable, a connected database, or a form your published app collects:

• Protected health information, or any patient or clinical record. We are not a HIPAA business associate, we do not sign business associate agreements, and no part of the Service is configured for HIPAA.
• Payment card numbers, CVVs, magnetic-stripe or chip data. We are not assessed against PCI DSS. Use a payment provider that handles cards for you and never let card data reach your project.
• Government identifiers — Aadhaar or other national ID numbers, Social Security numbers, passport or driving licence numbers, tax IDs.
• Biometric data, including face templates, fingerprints, voiceprints, and iris scans.
• Children's personal data, or data from any service directed at children under the age at which consent is required where your users are.

9. Why that list exists, and what happens if you ignore it

Your prompts and project content are processed by our cloud sandboxes and sent to third-party AI model providers, which are listed in Annex 3 of our Data Processing Agreement. Neither those sandboxes nor those providers are scoped, certified, or contracted for the categories above, and we hold no agreement with them that would let us extend one to you. Project data is stored in the United States (AWS us-east-1) and in Singapore (Supabase, ap-southeast-1).

If you put regulated data into Vibely anyway, you are in breach of these terms and you do it entirely at your own risk. We may remove the content, suspend the project, or suspend the workspace. A workspace suspended for breach is not refunded, and you indemnify us for claims arising from your content under the Indemnification section of our Terms of Service. We have no way to retrieve data already sent to a model provider, so please do not send it.

10. Publishing and hosting

Everything in this policy applies to what you publish, whether it is served from a subdomain of vibelyagent.com or from a custom domain you connect. You may host the app you built: a product, a site, a tool, an internal service. You may not use our hosting as a general file host, a link shortener or redirect service for content you did not build, a mirror for someone else's site, or a staging ground for spam or malware distribution.

Assume what you publish is reachable by anyone who has the link. Published apps on the Free and Pro plans are public. Restricting a published app to your workspace, to selected groups, or to yourself is a Business-plan capability. Web previews are gated to signed-in users by default, but turning on public remixing opens the preview to anyone with the link, and mobile previews are not gated at all — the preview URL itself is the access control.

The app is yours and so is its legal compliance. If it collects personal data you are the controller of that data and you need your own privacy notice, your own cookie consent where your users are, your own terms, and your own lawful basis for what you collect. Ours cover Vibely, not your app. Form submissions your published app collects are stored by us for 730 days and then deleted by an automated nightly purge.

11. High-risk use cases

Do not use Vibely as the sole decision-maker in safety-critical, medical, legal, financial, employment, housing, insurance, credit, or government-eligibility decisions. Generated Output may contain inaccuracies and is not warranted to be fit for any particular purpose. A human who is accountable for the decision has to review it.

12. Security and integrity

Do not probe, scan, or test the vulnerability of Vibely systems without prior written consent. Do not attempt to escape a sandbox, reach another workspace's data, or interfere with anyone else's projects, builds, or credits. If you have found a vulnerability, we want to hear about it — see Responsible Disclosure.

13. Reporting abuse

If you observe content or behavior that violates this policy, email [email protected]. Tell us the URL or the workspace and what you saw. We act on credible reports and may share relevant information with law enforcement when required.

14. Enforcement

We may warn, throttle, remove content, unpublish an app, suspend a project, suspend a workspace, or terminate an account. What we do depends on what happened and whether it is repeated. Where the problem is fixable we will normally tell you what to fix first.

Severe violations — material that exploits minors, credible threats of violence, malware distribution, phishing — result in immediate termination and reporting to the relevant authorities, without notice. Credits and fees are not refunded on termination for breach; see our Refund and Cancellation Policy.

15. Contact

Questions about this policy? Email [email protected]. Vibely is operated by Mana Intelligence Private Limited, incorporated in India.