Skip to content

Acceptable Use Policy

Responsible use of Databrush and how we address misuse.

Service provider: DATABRUSH LLC, doing business as Databrush ("Databrush," "we," "us").

Last updated November 10, 2026

1. Scope

This Acceptable Use Policy is part of the Databrush Terms & Conditions (“Terms”). It applies to everyone who uses the Service through your account, including your users and your Agents. Capitalized terms have the meanings in the Terms. If you or anyone using your account breaks this policy, we may act under Section 12 of the Terms.

2. Prohibited conduct

You must not, and must not let anyone, including an Agent:

  • connect or process data you have no right to, or use the Service to violate anyone’s privacy, intellectual-property or other rights;
  • use the Service or its Output to send spam or unlawful messages, or to contact people in breach of email, text, telemarketing or privacy laws such as CAN-SPAM and the TCPA, including with contact lists exported from the Service;
  • use the Service for unlawful discrimination, surveillance, stalking, harassment, fraud or deception;
  • use the Service as the sole basis for decisions with legal or similarly significant effects on individuals;
  • try to access another customer’s data or workspace, or get around authentication, permissions, query safeguards, rate limits, plan limits or other controls;
  • probe, scan or test the Service for vulnerabilities without our prior written permission, interfere with or overload it, or introduce malware;
  • copy, resell, sublicense or provide the Service to others, use it to build a competing product, scrape it, or reverse engineer it except where the law allows;
  • misrepresent your identity, authority or location, or the source or reliability of Output; or
  • use the Service in violation of any law, including export-control and sanctions laws.

3. Agents, keys and automated access

  • Access the Service by machine only through our MCP server, documented interfaces and the keys or sign-in we provide. Do not script or scrape the app.
  • Keep keys, tokens and export links secret. Do not share them outside your team or put them in public code, and revoke any that may be exposed.
  • Stay within rate limits and daily caps. Do not create extra keys or accounts to get around them.
  • Supervise Agents that can make changes, and review the changes they make. You are responsible for what your Agents do.
  • Do not put content in your sources or the Service that is designed to manipulate AI systems, including other people’s Agents.

4. Restricted data

Unless we first agree in writing, do not connect or submit: health information protected by HIPAA; full payment-card numbers or security codes; bank or other financial-account credentials; government ID numbers such as Social Security, passport or driver’s license numbers; biometric or genetic data; precise geolocation; personal information of children under 16; information about racial or ethnic origin, religious beliefs, health, sex life or sexual orientation, or criminal records; or other data that needs a specialized regulated environment. Ordinary subscription and payment status and amounts are allowed.

We do not represent the Service as compliant with HIPAA, PCI DSS or other regulated-data standards. If restricted data reaches the Service, you are responsible for it and we may delete it.

5. Reporting and enforcement

Report misuse or a security concern to support@databrush.ai, without including passwords, tokens, connection strings or unnecessary personal information. Security research needs our written permission first.

We may investigate suspected violations, remove content, disable keys or Agents, and suspend or end accounts under Section 12 of the Terms. We are not obliged to monitor use of the Service. Changes to this policy follow Section 18 of the Terms.

Back to top