Acceptable Use Policy

Effective

This policy is part of the Prized Terms of Service. It applies to everyone who uses the Services and to everything that runs in your workspace, including code run by your agents and your users. If code you run breaks this policy, you have broken it, even if you didn't write or read that code.

1. Not allowed

Cryptocurrency mining

No cryptocurrency mining (proof of work, proof of space or similar), on trial credit or on any plan, in a box or a sandbox. Running a blockchain node or a local test network for development is fine.

Attacks and unauthorized access

  • Attacking, probing, scanning or testing systems you don't own or lack permission to test. This includes port and vulnerability scanning, credential brute-forcing and exploiting vulnerabilities.
  • Denial-of-service attacks, traffic floods, botnets, and command-and-control servers.
  • Creating or distributing malware, ransomware or phishing.
  • Accessing other customers' machines or data, breaking out of a box or sandbox, or getting around isolation, metering or monitoring.

Network abuse

  • Spam: bulk unsolicited email, messages, comments, sign-ups or reviews.
  • Running open proxies, open mail relays, VPN or Tor exit nodes, or any other proxy or relay exit for other people's traffic. Outbound traffic for you and your own agents is fine.
  • Creating, deleting or moving machines to get new IP addresses.
  • Automated traffic that gets around a site's access controls or overloads it.

Illegal or harmful content

  • Anything illegal, including child sexual abuse material (which we report to NCMEC), content that infringes intellectual property or privacy, non-consensual intimate images, and threats or incitement to violence.
  • Phishing pages, fraud and scams, including through shared port links.
  • Hosting a production website or service on shared port links. They are for previews, demos and testing.

Getting around limits and free credit

  • One free trial per person and per company. Don't create extra accounts, workspaces or inboxes (including aliased, plus-addressed or disposable addresses) to get more free credit or higher limits.
  • Agent sign-up is for creating your own account. Don't use automation to create accounts in bulk, or for people who didn't ask for one.
  • Don't evade quotas, rate limits, holds, suspensions or billing, for example by splitting work across accounts or signing up again after a hold.
  • Resale. Don't offer other people raw access to Prized machines as a hosting or compute service without our written agreement. Building a product that runs your users' code on Prized (for example, an agent product that uses Sandboxes) is allowed. You are responsible for what your users run and must forbid what this policy forbids.

Law and sanctions

No use that breaks the law, export controls or sanctions, and no use by or for sanctioned persons or countries.

2. Outbound data

Plans include outbound data transfer for normal development work. If a workspace sends more than 2 TB out in a month, we'll contact you to agree on a fix, such as a custom plan or a limit.

3. Testing Prized's own security

You may test your own boxes and sandboxes. Don't run denial-of-service tests, don't access other customers' data, and stop and tell us if you reach another customer's data or Prized's internal systems. Report vulnerabilities to before publishing them. There is no bug bounty.

4. Limits on trial credit

Trial credit comes with technical limits: allowed sizes, one box, sandbox free-tier quotas, and a pause when one process runs at full CPU for 30 minutes. Hitting one isn't a violation. The Billing and Limits docs list them, and starting a plan lifts them.

5. Enforcement

  • Detection. We monitor box and sandbox telemetry (resource use and the busiest processes) and other signals. Some enforcement is automatic.
  • What we may do, with or without notice: pause the workspace's boxes and sandboxes and block new ones (a “hold”); remove content or stop share links; remove trial credit, or credit obtained through abuse; suspend or terminate accounts and workspaces; and report to law enforcement, affected parties or our providers, such as AWS.
  • Holds. A hold deletes no data and takes no credit. Paying doesn't lift a hold, and neither does deleting the box or sandbox involved; the one exception is the trial-credit CPU pause (section 4), which ends when you start a plan. Email to ask for a review.
  • Serious or repeated violations can lead to termination without a refund.

6. Reporting abuse

Email with what you saw, the IP address or URL, and when it happened.