Acceptable Use Policy

This Acceptable Use Policy ("Policy") forms part of the Serve's Terms of Service and describes conduct and content that are prohibited when using Serve. Terms not defined here have the meanings given in the Terms of Service.

Violations may result in immediate restriction, suspension, or termination of an account, device, link, token, tunnel, or other access to the Service, with or without prior notice. We may also preserve or disclose information and cooperate with authorities where required by law or reasonably necessary to protect people, property, rights, or the Service.

Unlawful, Harmful, or Abusive Activity

You may not use the Service to create, upload, host, transmit, facilitate, promote, or make available:

• unlawful content or activity;

• threats, harassment, stalking, intimidation, abuse, or incitement of violence;

• material that exploits, harms, sexualizes, or endangers children;

• non-consensual intimate imagery, sexual exploitation, or trafficking;

• fraudulent schemes, scams, deceptive practices, or impersonation;

• content that infringes intellectual-property, privacy, publicity, confidentiality, contractual, or other third-party rights;

• defamatory material or content prohibited by a valid court order;

• illegal gambling, illegal controlled substances, or unlawful weapons activity; or

• activity intended to cause death, bodily injury, property damage, or other serious harm.

Phishing, Malware, and Security Abuse

You may not use the Service for:

• phishing, credential theft, payment-card theft, account takeover, or deceptive login pages;

• malware, ransomware, spyware, viruses, worms, trojans, malicious scripts, exploit kits, or command-and-control infrastructure;

• botnets, distributed denial-of-service attacks, traffic amplification, cryptojacking, or unauthorized cryptocurrency mining;

• unauthorized vulnerability scanning, penetration testing, probing, exploitation, interception, or surveillance;

• bypassing authentication, authorization, rate limits, paywalls, security controls, or access restrictions;

• distributing stolen credentials, access tokens, private keys, exploit code intended for abuse, or unlawfully obtained data;

• open proxies, Tor exit nodes, public VPN relays, traffic laundering, or similar anonymous third-party traffic relays without our written authorization; or

• activity that compromises, tests without authorization, or interferes with any system, network, account, device, application, or data.

Good-faith security research must be expressly authorized by the owner of the target system, remain within the authorization's scope, and not harm the Service or third parties.

Spam and Unwanted Communications

You may not use the Service to send, support, redirect, collect responses for, or facilitate:

• spam or bulk unsolicited email, messages, calls, or notifications;

• email harvesting, address-list acquisition through deception, or credential collection;

• fraudulent marketing, pyramid schemes, or misleading commercial promotions; or

• communications that violate applicable consent, opt-out, sender-identification, telemarketing, or anti-spam laws.

Network and Service Interference

You may not:

• overload, flood, disrupt, degrade, or unreasonably burden the Service or its providers;

• generate traffic or resource consumption materially disproportionate to ordinary use;

• evade quotas, plan limits, link limits, account limits, suspensions, blocks, or technical restrictions;

• create accounts, devices, or tunnels through automation intended to avoid enforcement or capacity controls;

• interfere with another user's links, traffic, devices, content, or access;

• forge or manipulate protocol metadata, source information, headers, identities, or routing information for deceptive or harmful purposes; or

• use the Service as a content-delivery network, mass file-distribution service, public proxy, commercial hosting provider, or managed tunnelling service without our written authorization.

Sensitive and Regulated Uses

You may not expose or process sensitive, confidential, or regulated information unless you have all necessary legal authority, notices, consents, agreements, security controls, and application-level encryption. This includes passwords, authentication secrets, payment-card data, financial-account data, health information, government identifiers, precise location data, biometrics, children's data, confidential business information, and export-controlled information.

The Service is not designed or warranted for emergency systems, medical devices, life-support systems, critical infrastructure, nuclear facilities, weapons systems, aviation control, autonomous vehicles, or other high-risk uses where failure or unauthorized access could cause death, bodily injury, environmental harm, or major property damage.

Intellectual Property and Takedown Requests

You may not use the Service to infringe or misappropriate copyrights, trademarks, patents, trade secrets, publicity rights, or other proprietary rights.

A rights holder or authorized representative may send a takedown request to serve@swyftlabs.org. The request should identify:

1. the protected work or right claimed to be infringed;

2. the exact Serve URL or subdomain and specific material at issue;

3. the requester's name and contact information;

4. a good-faith statement that the disputed use is not authorized by the rights holder, its agent, or law;

5. a statement that the request is accurate and that the requester is authorized to act; and

6. a physical or electronic signature where legally required.

We may forward a complaint to the affected account holder. Knowingly submitting a materially false claim may create legal liability.

No Obligation to Monitor

We have no obligation to pre-screen or continuously monitor tunnel traffic or content served through links. We may investigate reports or signals, use automated or manual measures to protect the Service, and block, restrict, preserve, or remove access to content or activity that we reasonably believe violates this Policy, the Terms of Service, law, or third-party rights.

Our failure to act on one violation does not waive our right to act on that or another violation later. Enforcement decisions may consider severity, recurrence, intent, risk, legal obligations, operational impact, and available evidence.

Reporting Abuse

Report suspected abuse to serve@swyftlabs.org. Include, where available:

• the full public URL and Serve subdomain;

• the date, time, and time zone of the activity;

• a clear description of what you observed;

• relevant request identifiers, screenshots, headers, or other evidence; and

• your contact information if you want a response.

Do not send passwords, private keys, raw access tokens, illegal material, or unnecessary personal information. If material presents an immediate danger, contact the appropriate emergency or law-enforcement authority first.

Enforcement and Appeals

We may immediately suspend, restrict, revoke, recycle, or terminate any affected account, link, token, device, or tunnel. We may also rate-limit traffic, block a hostname or request, preserve relevant records, notify affected parties, or refer a matter to a provider or authority where appropriate.

An account holder may appeal an enforcement action by emailing serve@swyftlabs.org with the account email, affected link, action being appealed, explanation, and supporting evidence. An appeal does not require us to restore access while it is reviewed.

Changes to This Policy

We may update this Policy by posting a revised version with a new "Last updated" date. Material changes will receive any additional notice required by applicable law. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.