Acceptable Use Policy

1. Purpose and responsibility

This Acceptable Use Policy applies to every account, API request, artifact, updater response, domain, download page, and other use of Releases. You are responsible for your users, contractors, integrations, and anyone using your credentials.

2. Illegal, harmful, or infringing material

• Do not upload, distribute, promote, or facilitate malware, ransomware, spyware, credential theft, botnets, unauthorized cryptomining, destructive code, or evasion tools intended for misuse.
• Do not distribute content that is illegal, fraudulent, deceptive, defamatory, exploitative, or that infringes intellectual property, privacy, publicity, confidentiality, or other rights.
• Do not facilitate child sexual abuse material, trafficking, terrorism, targeted harassment, credible threats, non-consensual intimate material, or unlawful discrimination.
• Security and dual-use tools are allowed only where you have authorization and use proportionate safeguards. We may request evidence of legitimate purpose.

3. Technical abuse

• Do not probe, scan, exploit, disrupt, overload, or bypass security or rate limits without our written authorization.
• Do not access another tenant, intercept traffic, forge identity or origin, abuse custom domains, or attempt to derive credentials or private information.
• Do not use automated traffic primarily to inflate usage, exhaust resources, evade plan limits, manipulate analytics, or impose unreasonable load.
• Do not resell or provide the service as a standalone content-delivery network unless your order expressly allows it.
• Do not use Releases to send spam or unsolicited communications, host phishing pages, or distribute applications through deceptive or coerced installation.

4. Release integrity

• Keep signing keys outside Releases and under appropriate access control.
• Accurately identify applications, publishers, versions, platforms, permissions, and material security or compatibility risks.
• Do not impersonate another publisher or create confusingly similar domains, marks, or download pages.
• Promptly yank or replace a compromised release and cooperate with reasonable abuse, recall, or security-response steps.

5. Enforcement and reporting

We may investigate suspected violations and preserve relevant evidence. Depending on risk, we may rate limit, quarantine an artifact, disable a domain or download, revoke keys, suspend an account, notify affected parties, or terminate service. We will consider context, severity, repetition, and remediation and provide notice where safe and practical.

Report suspected abuse to abuse@mateality.com and security vulnerabilities to security@mateality.com. Include the URL, app or release identifier, reason, evidence, and your contact details. Do not send harmful binaries by email; provide a safe retrieval method.