Acceptable Use Policy

1. Prohibited content

Do not use nvault to store, transmit or back up:

• content you do not own or have permission to store;
• material that infringes intellectual-property or privacy rights;
• malware, exploit kits, or credentials obtained through unauthorised access;
• content that is unlawful in India or in your jurisdiction, including child sexual abuse material;
• content whose storage would violate export-control or sanctions law.

2. Prohibited conduct

• Probing, scanning or testing the security of the Service without our prior written consent.
• Attempting to access another account, organization, project or file that is not yours.
• Circumventing plan limits, rate limits, or authentication.
• Reverse-engineering the Service except to the extent that restriction is prohibited by law.
• Automated use that degrades the Service for others, or using it as a general-purpose file host or CDN.
• Reselling or sublicensing access without our written agreement.
• Using the Service to send spam or to harass any person.

3. Fair use of resources

nvault is designed for environment and configuration files. Uploads are subject to per-file and per-account size limits enforced by the API. Do not use the vault to store large binaries, media libraries or backups unrelated to project configuration.

4. Security research

We welcome good-faith vulnerability reports. If you follow coordinated disclosure and email security@nvault.dev before sharing details publicly, we will not pursue action against you for testing that is limited to your own account and does not access, modify or destroy other users' data or degrade the Service.

5. Reporting abuse

Report content or behaviour that violates this policy to hello@nvault.dev. Please include enough detail to identify the account or content and the reason it is objectionable or unlawful. We aim to acknowledge reports within a few days and to act on clearly unlawful content promptly once verified.

6. Enforcement

Depending on severity, we may warn you, remove or disable access to specific content, suspend or terminate the account or organization, and report unlawful activity to the authorities. Where practicable we give notice and an opportunity to remedy the issue; we may act immediately where there is a risk of harm, legal exposure or ongoing abuse. Because content is encrypted, enforcement is generally triggered by a report or legal process rather than by us inspecting content.

7. Changes

We may update this policy; material changes are announced in the app or by email.