Acceptable Use Policy

This Acceptable Use Policy ("AUP") sets out what you may not do with Tokentide. It forms part of our Terms of Service and applies to every use of the Service: through the API, the dashboard, the SDKs or any product built on them. Capitalized terms have the meaning given in the Terms.

Who this policy applies to#

This policy applies to you, to everyone who uses your Account or API keys and to your End Users. If you make the Service available to End Users, you must make sure they follow this policy, and you are responsible for their use.

Prohibited uses#

You may not use the Service, or help anyone else use it, for any of the following.

Illegal and harmful content#

• Breaking any applicable law or regulation, or infringing the rights of others.
• Creating, storing or distributing illegal content.
• Creating sexually explicit or intimate content that depicts a real person without their consent.
• Encouraging or providing instructions for suicide, self-harm or eating disorders.
• Any practice prohibited by article 5 of the EU AI Act (Regulation (EU) 2024/1689), such as manipulative or exploitative techniques that cause significant harm, social scoring, or building facial recognition databases through untargeted scraping of facial images.

Child safety#

We have zero tolerance for child sexual abuse material (CSAM). You may not create, request, distribute or store any content that sexualizes minors, or use the Service to groom, exploit or endanger children. We suspend the Account immediately, preserve the relevant metadata and report the matter to the competent authorities.

Security and fraud#

• Creating or distributing malware, ransomware, spyware or other malicious code, or tools designed to gain unauthorized access to systems or data.
• Attacking, probing or disrupting any system or network without authorization.
• Fraud, phishing, scams, identity theft, forged documents, money laundering or other financial crime.
• Spam: generating or sending unsolicited bulk messages, or content for spam campaigns.

Harassment, hate and violence#

• Harassing, threatening, bullying or intimidating anyone.
• Content that attacks or incites violence or discrimination against people based on protected characteristics such as race, ethnic origin, religion, disability, sex, sexual orientation or gender identity.
• Promoting, glorifying or planning violence against people.

Weapons of mass destruction and violent extremism#

• Developing, acquiring, producing or using chemical, biological, radiological or nuclear (CBRN) weapons, or explosives designed to cause mass casualties.
• Supporting terrorism or violent extremism, including recruitment, propaganda, financing or the planning of attacks.

Privacy and intellectual property#

• Doxxing: collecting or publishing personal information to identify, locate or harm someone.
• Unlawful surveillance, tracking or monitoring of people, or processing personal data without a legal basis.
• Infringing copyright, trademarks, trade secrets or other intellectual property rights, or circumventing technical protection measures.

Deception and impersonation#

• Impersonating a person or organization in a misleading way, including Tokentide or Venice.
• Presenting AI-generated content as human-made where that is deceptive or where the law requires disclosure.
• Fake reviews, fake engagement, coordinated inauthentic behaviour or disinformation campaigns, including about elections and other civic processes.

Circumventing limits, security or pricing#

• Bypassing or trying to bypass rate limits, spend caps, quotas, safe mode on images or any other technical control of the Service or of an upstream provider.
• Creating or using several Accounts to obtain more trial credit, promotions or Low Tide allowances, or to avoid a suspension.
• Probing other customers or trying to access their data, API keys, prompt caches or traffic.
• Deliberately sending invalid requests to trigger errors, including to exhaust shared upstream error budgets or to abuse our per-customer 4xx circuit breaker.
• Manipulating our market or pricing rules, for example by generating artificial demand or by gaming the daily reset, quotes or price locks.
• Testing the security of the Service outside our responsible disclosure policy, overloading the Service, or reverse engineering it except as the law expressly allows.

Sharing and reselling access#

• Sharing API keys with anyone outside your organization.
• Selling, reselling, sublicensing, renting or otherwise transferring access to the Service, credits, API keys or Accounts.
• Offering the Service itself to others, for example as a public API, a proxy or a credit marketplace.

You may build your own products and services that use the Service for your End Users, as long as they add your own functionality and you don't give End Users your API keys or direct access to our API.

Upstream policies#

Anything prohibited by Venice's Terms of Service and policies, or by the policies of the provider of a model you use, is also prohibited under this policy, as those terms apply to end users of products built on their APIs. They are incorporated by reference. Where they are stricter than this policy, the stricter rule applies. See section 6 of our Terms.

Model and content restrictions#

• We don't offer models whose primary purpose is adult content.
• Our image endpoints always run with Venice's safe mode on, and you can't turn it off. Images that safe mode flags may be blurred or refused.
• Venice and upstream providers apply their own content policies and may refuse a request.

Your responsibilities#

• End Users. Bind your End Users to terms consistent with this policy, give them a way to report abuse and act on the abuse reports we forward to you.
• Outputs. Review Outputs before relying on them and keep a person involved in decisions that significantly affect people, such as decisions about credit, employment, housing, insurance, education, health or legal matters.
• Transparency. Tell people when they interact with an AI system or see AI-generated content, where the law requires it.
• Personal data. Have a legal basis for any personal data you send and prefer Private models for it.
• Keys. Keep your API keys secret and use the per-key limits available to you.

How we enforce this policy#

Signals we use#

We don't store your Content, so we can't and don't read it to enforce this policy. Instead we rely on:

• the rate at which Venice and upstream providers reject an Account's requests under their content policies;
• payment risk signals, such as disputes, fraud warnings and sanctions screening results;
• abuse reports sent to abuse@tokentide.app;
• the pseudonymous per-Account identifier (anon_user_id) we attach to requests sent to Venice, which lets Venice report abuse to us without learning who you are; and
• usage patterns in request metadata.

Graduated responses#

Our response is proportionate to the seriousness of the breach and is usually graduated:

1. a warning;
2. a rate cap or other limit;
3. suspension of the affected keys, lanes, payment methods or the whole Account; and
4. termination (a ban).

In severe cases, such as CSAM, credible threats to life or serious security attacks, we suspend immediately. Where the law requires it, we report to the competent authorities and preserve the relevant metadata. What happens to your balance is set out in the Terms.

Appeals#

If you think we made a mistake, reply to our notice or write to support@tokentide.app. A person will review your case and answer you.

Reporting abuse#

Report abuse of the Service to abuse@tokentide.app. Include what you saw, when (in UTC) and, if you have it, the request id (X-Request-Id) or the API key prefix. Never send us illegal material, such as CSAM: report it directly to the police or to a hotline of the INHOPE network, and tell us only where you found it. To report a security vulnerability, follow our responsible disclosure policy.

Requests from authorities#

We hold metadata only, never Content. We handle requests from authorities through a documented process with legal review, and disclose only what the law requires (see our Privacy Policy).

Changes to this policy#

We may update this policy. We'll give notice of material changes as described in section 21 of the Terms.