Acceptable use policy

This policy expands on the acceptable-use section of the terms of service and is part of them. It applies to everyone who uses StockAI: the web app, the API, the MCP server, the assistant (in the app or over WhatsApp) and trial accounts.

If you administer an account, you are also responsible for what the people you invite and the integrations you give an API key to do.

• The trial account is for getting to know StockAI. It lasts 24 hours and its limits are small on purpose.
• Do not create trial account after trial account to work in them continuously or to get around the trial account's limits. We count the trial accounts created from each IP address to stop that abuse.
• Do not upload to a trial account data you do not want to lose or sensitive personal data: it is erased entirely when it ends.

• Respect the limits: up to 120 calls per minute per key. Do not spread the work across several accounts or keys to get around them.
• Each key is a credential. Do not publish it, do not put it in code others can see and do not share it outside your company.
• Use the API to connect your own systems. Do not use it to offer third parties a service built on StockAI without a written agreement with us.

To automate, use the API. Do not extract data from the app or the website with bots or scripts that imitate a user, except normal search-engine indexing of the public pages.

Do not try to copy the hosted service: decompiling or deobfuscating the code served to the browser, bypassing access controls, calling addresses that are not public or rebuilding the product to compete with it. This does not limit what a written licence you have signed separately with us allows.

The files, documents and data you upload must be yours or you must have the right to use them. In particular, do not upload:

• illegal content, or data obtained without the right to it (for example, another company's customer base);
• personal data you do not need to manage your inventory, let alone sensitive data (health, people's financial data, identity documents);
• files containing malware or crafted to attack the service.

StockAI can email purchase orders to your suppliers, and send alerts by email, WhatsApp or SMS. Those messages go out in your name, so:

• send them only to suppliers and contacts you have a business relationship with;
• do not use them for advertising, unsolicited bulk messages or to impersonate another person or company;
• if someone asks you to stop writing to them, stop.

Do not test the security of the service, scan our servers or try to get into other people's accounts or data, except within the rules of the responsible disclosure policy, which gives you permission to research in good faith within certain limits.

Flooding the service (denial of service) or deceiving our team or other customers to gain access is never allowed.

Depending on how serious it is, we may delete the offending content, revoke an API key, limit features, erase a trial account early, or suspend or close the account, as provided in the suspension and termination section of the terms. Except in an emergency — for example, an ongoing attack or a risk to other customers — we warn you first and give you a chance to fix it.

If the breach may be a crime, we may report it to the authorities.

If you see someone using StockAI against this policy — for example, you received an unwanted email sent from StockAI — write to us at contacto@stockai.es with what you know: the message received, the date and the sending address.