Acceptable Use Policy

1. Prohibited Content

You may not use the Services to create, build, publish, host, store, distribute, or link to content or applications that:

• Are illegal or facilitate illegal activity in any jurisdiction where the app or content is made available.
• Sexualize or exploit minors — including child sexual abuse material (CSAM) in any form, real or generated. We report apparent CSAM to the National Center for Missing & Exploited Children (NCMEC) and cooperate with law enforcement.
• Depict intimate imagery without consent — including non-consensual intimate images and sexualized deepfakes of real people.
• Promote hate or violence — content that promotes hatred, incites violence or harm against people based on protected characteristics, glorifies terrorism, or celebrates acts of extreme violence.
• Harass or endanger individuals — harassment, stalking, threats, or publishing private identifying information about others without consent ("doxxing").
• Are malicious code — malware, spyware, ransomware, viruses, or any software designed to disrupt, damage, or gain unauthorized access to systems, devices, or data.
• Deceive or defraud — phishing pages, credential harvesting, scams, pyramid or Ponzi schemes, fake giveaways, deceptive impersonation of any person, brand, or service (including Emra), or content designed to trick people into disclosing sensitive information or transferring money.
• Infringe rights — content that infringes or misappropriates any third party's intellectual-property, privacy, publicity, or other rights. Copyright complaints are handled under the DMCA process in Terms of Service Section 22.
• Facilitate prohibited transactions — the sale or facilitation of illegal goods or services, including illegal drugs and weapons, or gambling where unlawful.
• Contain sexually explicit material.

2. Prohibited Conduct

In connection with the Services, you may not:

• Bypass or attempt to bypass authentication, authorization, or other security controls, or access accounts, data, or non-public areas of the Services without authorization.
• Probe, scan, or test the vulnerability of the Services or of any Published App you do not own, except as permitted under Section 5 (Security Research).
• Interfere with or disrupt the Services — including denial-of-service attacks, flooding, or deliberately degrading performance for other users.
• Use the Services for cryptocurrency mining, proxying, or as generic compute, bandwidth, or relay infrastructure unrelated to building and running apps.
• Operate an open proxy, VPN endpoint, anonymization relay, or traffic-tunneling service through a Published App.
• Send spam, unsolicited bulk messages, or phishing through the Services or from a Published App, or use the backend to build or store harvested contact lists for that purpose.
• Create accounts by automated means; create multiple or successor accounts to evade limits, suspension, or termination; or buy, sell, or transfer accounts.
• Circumvent or attempt to circumvent usage, storage, build, or rate limits, or billing (including cycling between paid and unpaid status to obtain storage or Services without paying — see Terms of Service Section 13.A).
• Resell, sublicense, or white-label the Services except as expressly permitted in writing (publishing apps for End Users under the Terms is permitted).
• Scrape the Services, or use the Services to develop a competing product by extracting Emra's software, prompts, or interfaces (Terms of Service Section 5.B).

3. Backend and Hosting Integrity

Emra's hosting and backend-as-a-service exist to power apps built on Emra. You may not:

• Use data collections or file storage as a general-purpose file host, CDN, or distribution point disconnected from a functioning app — including hosting pirated media, leaked databases, or bulk archives for download.
• Store or transmit through the backend any content prohibited by Section 1.
• Store data you are not lawfully permitted to collect or hold, or data collected from End Users deceptively or without any required notice or consent.
• Use the backend for regulated data without written approval from Emra: protected health information subject to HIPAA, cardholder data subject to PCI-DSS (payment card numbers belong in a payment processor, not in collections), government-classified information, or similar specially regulated data. Emra's backend is not currently offered as HIPAA- or PCI-compliant infrastructure.
• Use the Services or a Published App in high-risk contexts where failure could lead to death, personal injury, or severe damage — including medical treatment decisions, emergency services, and life-support or safety-critical systems.

4. AI Feature Rules

When using the AI Tools, you may not:

• Prompt or direct them to produce content or code prohibited by Section 1, or that infringes or misappropriates third-party rights.
• Represent that Output was reviewed, endorsed, or verified by Emra, or misrepresent AI-generated content as solely human-created where doing so is deceptive or unlawful.
• Use them for automated decision-making that produces legal or similarly significant effects on individuals without appropriate human oversight.
• Use them to generate content for harassment, discrimination, or abuse.

5. Security Research

We welcome good-faith security research into the Services under coordinated disclosure:

• Report suspected vulnerabilities to support@emra.app and give us a reasonable opportunity to remediate before public disclosure.
• Do not access, modify, or exfiltrate data that is not yours; do not degrade the Services; do not test against other users' accounts or Published Apps without their and Emra's authorization.
• Good-faith research conducted within these rules will not be treated as a violation of this AUP.

6. Duties of Published-App Operators

If you publish an app, you are its operator (see Terms of Service Section 6.B). You must:

• Identify yourself honestly. Do not present your app in a way likely to deceive End Users about who operates it or its relationship to Emra.
• Provide End Users with any legally required terms, privacy notices, and consents for your app. Emra's Terms and Privacy Policy do not cover your app's End Users.
• Comply with all laws applicable to the data your app collects and to the functionality it offers.
• Not design your app around dark patterns whose purpose is to deceive or coerce End Users.

7. Reporting Violations

Report abuse, illegal content, or AUP violations to support@emra.app. Include the app URL and enough detail for us to locate and evaluate the material. For copyright infringement, follow the DMCA process in Terms of Service Section 22. We review reports and act as described in Section 8. Where required by law, we will process notices and communicate decisions consistent with those requirements.

8. Enforcement

We may investigate suspected violations and take any action we reasonably consider appropriate, including: warning the account holder; removing or disabling content; unpublishing, disabling, or deleting a Published App or its backend; suspending or restricting account features; terminating accounts; and reporting to law enforcement. We may preserve and disclose information as described in the Privacy Policy, including where required by law. We do not undertake to pre-screen apps or content, and enforcement in one case does not waive our right to enforce in another. Enforcement follows the Terms of Service, including Sections 5.C, 6.C, 12, and 13.

9. Changes

We may update this AUP as the Services and abuse patterns evolve. Material changes will be notified as described in Terms of Service Section 20. Continued use of the Services after changes take effect constitutes acceptance.

Questions about this policy: support@emra.app — Emra Tech, Inc.