This policy says what you may not do with Apiboo. It is part of our Terms of Service (section 6) and applies to everyone who uses the Service.
1. Scope
It covers every part of Apiboo that other people can reach through you: share links on apiboo.dev, items you publish to the API network, workspaces and documents you share, cloud mock servers, chat and files. It applies to content you create yourself and to content your own server or app serves through Apiboo.
2. What is not allowed
You may not use Apiboo, or let others use your account, links or servers, for any of the following:
- Phishing and scams. Pages or messages that trick people into giving away passwords, login details, payment details or other personal data, or into paying money, including copies of the login page of a bank, a shop, a service or a company.
- Malware. Spreading viruses, ransomware, spyware, crypto miners or other harmful code, or running command-and-control servers or download points for it.
- Collecting credentials. Collecting passwords, access tokens, one-time codes or payment data from people who have not knowingly agreed to give them to you, even for "testing" or "security awareness", unless you are authorised to run that test.
- Illegal content. Content that is illegal under EU law, Austrian law or the law of the country where it is accessed, for example child sexual abuse material, terrorist content, illegal hate speech, content that infringes copyright or trademarks, or offers of illegal goods and services.
- Spam. Sending unsolicited bulk messages, or using Apiboo links or servers in them.
- Attacks on others. Scanning, probing, flooding (denial of service), brute-forcing or exploiting systems you are not authorised to test, or using a share link or a mock server as a relay or proxy to hide such traffic.
- Pretending to be Apiboo. Using our name, logo or design to make people believe a page, message or app comes from Apiboo, and impersonating any other person or organisation to deceive.
- Getting around our safety measures. Hiding or removing the warning page in front of share links, creating new links or accounts to evade a suspension, or working around the limits of your plan.
Share links are made for showing work in progress. Do not use them to run a production website, a file-distribution service or an anonymising proxy.
3. Your responsibility
You are responsible for everything your account, your share links and your published items make available, including content your dev server loads from elsewhere, as if you published it yourself. Before you share a server, make sure it does not expose data you are not allowed to show, such as other people’s personal data or secrets.
4. What we do about breaches
We review every report. If we believe this policy or the law is broken, we may switch off a link or remove content at any time and, where needed to stop harm, without notice; suspend Share or other features for an account; or close the account. We keep the information needed as evidence and pass it to the authorities where the law requires it. We tell the affected user what we did and why, unless the law forbids it, and they can contest the decision by replying to it (Terms section 6a).
5. How to report a breach
- Share links: the report form at apiboo.com/share or the "Report abuse" button on the warning page.
- Illegal content anywhere on Apiboo (Digital Services Act): apiboo.com/report
- By email: abuse@apiboo.com (abuse of share links) or hello@apiboo.com (point of contact under the Digital Services Act).
6. Changes
We change this policy the same way as the Terms of Service (section 10).