Acceptable Use Policy

This Acceptable Use Policy ("AUP") describes how you may and may not use Writ ("the Service"). It supplements and is incorporated into our Terms of Service. Compliance is a feature, not a footnote: we enforce this policy. Writ runs on your own accounts, with your own credentials and data, on sites you are authorized to use.

1. Purpose

By using the Service you agree to comply with this AUP. It applies to every workflow, Monitor, automation, and marketplace listing you create or run.

2. Prohibited activities

You may not use the Service to:

• Violate any applicable law, regulation, or third-party right.
• Access systems, accounts, or data without authorization, or circumvent authentication or access controls you are not entitled to pass.
• Infringe intellectual property, trade secret, privacy, or publicity rights.
• Distribute malware, spam, phishing, or other harmful or deceptive content.
• Engage in fraud, money laundering, or facilitate prohibited or illegal transactions.
• Create, store, or distribute child sexual abuse material or other unlawful content.
• Harass, threaten, defame, or harm others.
• Interfere with or disrupt the Service, its infrastructure, or other users.

3. Authorized web data extraction

The Service automates browser actions against third-party websites. You are responsible for ensuring your use is lawful and authorized for each site you target. You may not:

• Collect or extract data in violation of a target website's terms of service or applicable law.
• Defeat technical access restrictions or paywalls you are not authorized to pass.
• Send request volumes that overload, degrade, or disrupt a target website.
• Collect personal data without a lawful basis or required consent.

We enforce a per-target cadence floor and throttling to protect target sites, but you remain responsible for the lawfulness of each target you choose. We maintain a domain blocklist and abuse monitoring.

4. Credentials and authenticated sessions

You may automate actions only on accounts and systems you own or are expressly authorized to access, including login-gated sites and accounts that use TOTP or mailbox-OTP. You may not use the Service to access another person's account without their authorization. Your credentials are stored in an encrypted vault and never exposed to AI or in logs.

5. Watch-and-Act

When a Monitor triggers a workflow (including form submissions or signup flows) you must have the right to perform the action on the target site. Sensitive actions run behind the built-in safety rails (spend caps, dry-run, and explicit approval and confirmation gates), and you may not use them to circumvent a target site's terms or access controls.

6. Agents

If you run a local/BYO agent, you must have the right to operate it on the network you use. If you configure your own network resources, you represent that you have the lawful right to use them and that their use complies with the providers' terms.

7. Marketplace content

If you publish workflows on the marketplace, you must own or have the rights to the content you publish and must not list workflows whose primary purpose is a prohibited activity. Published workflows are recipes only; you must not embed credentials, secrets, or personal data.

8. Enforcement

We may investigate suspected violations and may suspend or terminate accounts, remove content, or restrict access. We may report unlawful activity to the appropriate authorities. Enforcement tools include the domain blocklist, rate limiting, and abuse monitoring.

9. Reporting abuse

To report a suspected violation, contact [email protected]. For security disclosures, contact [email protected].

10. Changes to this policy

We may update this AUP from time to time. Material changes are posted here with an updated effective date and version. See all policies in the legal index.