Acceptable Use Policy

This policy is part of the n8v Terms of Service. It applies to every Customer, every Authorised User, every API or A2A client and every agent acting on their instructions. Terms defined in the Terms of Service have the same meaning here.

1. The basic rule

Use n8v to build and maintain software lawfully. You are responsible for what agents do on your instructions, in their sandboxes and in the services you connect, as if you had done it yourself.

2. Prohibited content

You may not use the Service to create, store, process or distribute:

1. child sexual abuse material, or material that sexualises minors. We report it to the competent authorities and close the account;
2. content that is illegal under EU law or the law of the Netherlands or the country where it is used;
3. content that threatens, harasses or incites violence or hatred against people;
4. content that infringes intellectual property rights, trade secrets or privacy rights of others;
5. malware, ransomware, spyware or other code designed to damage systems or to gain access without authorisation, except defensive security research on systems you own or are authorised to test.

3. Prohibited activities

You may not use the Service, or let agents be used, to:

1. access, scan, probe or test systems, networks or accounts you are not authorised to access, or to get around their authentication or security measures;
2. attack n8v or other customers, including attempts to escape a sandbox, to reach other customers' sandboxes or data, or to plant instructions (prompt injection) that make agents or services of others act against their users;
3. send spam, phishing or other unsolicited bulk messages, or impersonate people or organisations;
4. mine cryptocurrency, run proxies, VPN exit nodes, file-sharing or torrent services, load generators or other permanent servers, or keep sandboxes running artificially;
5. use more resources than your plan allows, or get around rate limits, usage caps, seat caps or the invitation system, for example by creating multiple accounts or creating accounts automatically;
6. share accounts or seats, or resell or sublicense access, invitations, Credits or API access without our written permission;
7. collect personal data unlawfully, for example by scraping, or track or profile people without a legal basis;
8. develop or operate AI practices prohibited under Article 5 of the EU AI Act, including, from 2 December 2026, systems that generate realistic intimate or sexually explicit imagery of identifiable people without their explicit consent;
9. make decisions with legal or similarly significant effects on people based solely on AI Output, without human review;
10. breach the terms or usage policies of the AI model providers or other Third-Party Services you use through n8v, including restrictions on using the credentials of consumer subscription plans in other products;
11. breach sanctions or export control laws, including use by or for sanctioned persons, or from or for countries or regions subject to comprehensive EU or US sanctions;
12. reverse engineer the Service, except where mandatory law allows it, or copy it to build a competing service.

4. Security testing

Security research on the Service is welcome, but only under our responsible disclosure policy. It does not allow denial-of-service tests, social engineering, testing against other customers' accounts or data, or keeping access to data you encounter.

5. Your responsibility for agents

1. Give agents only the access they need: install our GitHub App on the repositories they need, use scoped and revocable secrets, and keep branch protection and required reviews on production branches.
2. Do not give agents credentials that allow irreversible actions in production systems without human review.
3. Review AI Output before you merge, deploy or publish it.

6. Reporting abuse

Report suspected abuse or illegal content to [email protected], and security vulnerabilities to [email protected]. Section 15 of the Terms of Service explains what a notice should contain and how we handle it.

7. Enforcement

1. We may investigate suspected breaches of this policy, using the information available to us, such as rate-limit and usage data and the content of a notice.
2. We respond in proportion to the breach: a warning, removal of content, disabling an integration or agent, rate limiting, suspension or termination of the account. We give a statement of reasons and explain how to challenge the decision, as described in sections 15 and 16 of the Terms of Service.
3. If information gives rise to a suspicion of a criminal offence involving a threat to someone's life or safety, we inform the competent authorities (Article 18 of the Digital Services Act).
4. We cooperate with authorities where the law requires it.

8. Changes

We may update this policy under section 26 of the Terms of Service. Material changes take effect 30 days after notice, except changes required by law or needed to address a security risk.