1. Purpose and security principles
This policy is incorporated into the Terms of Service and applies to every user, organization, application, API key, provider node, and route using FunkyRouter. You must comply with law, respect third-party rights, and follow any model-specific restriction disclosed with a model.
Least privilege requires you to grant people and credentials only the access needed for their task. Zero trust requires you to authenticate and authorize each meaningful boundary rather than relying on network location, device ownership, or a shared secret with excessive scope. You may not use the service to defeat either principle for your account or another party.
2. Illegal, deceptive, and abusive activity
You may not use FunkyRouter to:
- violate applicable law, sanctions, export controls, court orders, or another person's intellectual-property, privacy, publicity, or other rights;
- facilitate fraud, impersonation, phishing, identity theft, money laundering, deceptive commercial practices, forged evidence, or evasion of a legal obligation;
- unlawfully acquire, infer, broker, expose, or track sensitive or identifying information, including credentials, precise location, health, biometric, financial, or government identifiers;
- generate or distribute material you know is unlawful, or provide tailored instructions whose primary purpose is to enable serious physical, financial, or digital harm; or
- falsely represent AI-generated material as an authentic person, official communication, or verified fact where that deception is likely to cause harm.
3. Security, credentials, and infrastructure
You may not:
- deploy malware, ransomware, destructive code, botnets, credential theft, unauthorized cryptomining, persistence, or command-and-control activity;
- access, scan, probe, disrupt, overload, or degrade FunkyRouter, a provider node, another customer, or a third party without explicit authorization;
- bypass rate, billing, geographic, model, role, safety, quarantine, or other technical controls, or conceal activity to avoid them;
- share credentials across organizations, expose one-time key plaintext, copy node credentials to another machine, or use a node or key after revocation; or
- scrape or resell the service, run an unauthorized proxy, or use automated account creation in a way that defeats admission or abuse controls.
4. Exploitation, harassment, and abuse involving people
You may not use FunkyRouter to:
- create, solicit, sexualize, groom, exploit, or facilitate abuse of a child, or create sexual content involving a person represented as a child;
- create or distribute non-consensual intimate imagery or sexual content, including a deceptive synthetic depiction of a real person;
- threaten, stalk, extort, dox, or coordinate targeted harassment or violence;
- facilitate human trafficking, unlawful weapons activity, terrorism, or violent extremist recruitment or operational planning; or
- make a material claim about an identifiable person without a reasonable verification process where foreseeable harm could result.
5. High-impact and professional decisions
You may use the service to assist a qualified person, but you may not use an Output as the sole or determinative basis for a decision about another person's employment, housing, education, credit, insurance, healthcare, legal services, essential utilities, public benefits, criminal justice, immigration, or another comparably consequential opportunity or service.
Any permitted high-impact use requires meaningful human review, validation against authoritative sources, an appropriate explanation and appeal route, testing for unlawful discrimination, and compliance with professional and sector-specific rules. FunkyRouter does not provide legal, medical, financial, or other professional advice.
6. Authorized security and safety testing
Defensive research, red teaming, safety evaluation, and security testing are allowed when you own the target or have written permission, stay within that permission, minimize personal data, avoid persistence or disruption, and report a FunkyRouter vulnerability through the verified beta channel. Security-sensitive prompts alone do not violate this policy.
This allowance does not authorize access to another customer's data, secrets, account, credits, or node; production denial-of-service; uncontrolled malware; social engineering of personnel; or public disclosure before a reasonable remediation period. We may require a separate test environment or written rules of engagement.
7. Customer responsibility
You are responsible for your authorized users, applications, Inputs, Outputs, integrations, and downstream distribution. You must implement controls proportionate to foreseeable harm, including authentication, scoped authorization, rate and spend limits, input and output review, recordkeeping, and a way to stop unsafe automation. You must not imply that FunkyRouter endorses your product or its decisions.
Report suspected child exploitation, a credible imminent threat, a compromised FunkyRouter credential, or other urgent abuse through the verified invitation, Order, or authenticated support channel supplied for the private beta. Contact emergency services when someone faces imminent physical danger.
8. Enforcement, notice, and appeal
We may use the minimum account, request, usage, security, and content information reasonably necessary to investigate suspected violations. Depending on severity and risk, we may reject a request, rate-limit, require remediation, preserve evidence when law permits, quarantine a node, revoke a credential, suspend an account, or terminate service. We may act immediately to address imminent harm, compromise, unlawful activity, or a threat to another party or the service.
When practical and lawful, we will explain the policy category and provide a chance to cure. You may appeal an enforcement decision by responding through your verified account, Order, or authenticated support channel with the decision, relevant context, and requested remedy. A person not involved in the initial decision will review an available appeal where staffing permits. Public abuse and appeal mailboxes remain a launch gate until delivery has been tested.