Draft — under legal review

Legal

Acceptable Use Policy

Last updated: 24 September 2026

RightSide is operated by Poligon Tech. This policy lists what you may not do with RightSide. It applies to you, to anyone you let use your account, and to every coding agent (such as Claude Code or Codex) that acts with your RightSide credentials. What your agent deploys, you deploy. This policy is part of the Terms of Service.

Prohibited content and activity

You may not use RightSide, or any app you host on it, to:

Fraud and deception

• run phishing pages or any other form of credential harvesting, including pages that imitate a login, payment or recovery screen of a service you do not operate;
• impersonate a person, company, brand or public body, or mislead people about who operates an app;
• run scams, fake shops, fraudulent investment schemes or other deceptive practices.

Malicious software and attacks

• host, build or distribute malware, ransomware, spyware, exploit kits or other code designed to harm systems or people;
• run botnet command-and-control (C2) servers, proxies for attack traffic, or infrastructure for any of the above;
• launch or help launch denial-of-service attacks;
• perform port scanning, vulnerability scanning or brute-force attacks against systems you do not own or do not have written permission to test.

Spam

• send unsolicited bulk messages (spam) by email, SMS, chat or any other channel, or host pages that are advertised by spam;
• run open mail relays or open proxies.

Hosted apps may not send email directly over port 25 (SMTP). We block, or may block at any time, outbound connections to port 25. If your app needs to send email, use an authenticated email provider and follow its rules.

Illegal and harmful content

• host or transmit content that is illegal in Romania or the European Union, or in the place where it is made available;
• host, link to or distribute child sexual abuse material (CSAM). We have zero tolerance for it: we disable the app and the account immediately, preserve the evidence, and report it to the competent authorities;
• promote or incite terrorism or violence, or host content that is unlawful hate speech;
• publish other people's personal data without a lawful basis, or harass, threaten or stalk anyone;
• sell or facilitate the sale of illegal goods or services.

Intellectual property

• host or distribute material that infringes copyright, trademarks or other rights, including pirated software, media or course material.

Abuse of the platform

• try to break or get around the isolation between apps, or between apps and the platform: for example by escaping a container, reaching other apps' networks, reading data that is not yours, or reaching RightSide's internal services;
• get around limits, quotas, rate limits, invitation controls or suspensions, for example by creating extra accounts;
• mine cryptocurrency, or run other workloads whose main purpose is to consume compute (crypto mining, proof-of-work, password cracking);
• use excessive resources in a way that degrades the service for others, for example sustained full CPU use, very large or rapidly growing storage, or large volumes of outbound traffic unrelated to a normal web app;
• resell, sublicense or provide RightSide as a service to third parties without our written permission;
• share your account or credentials with people outside your organisation, or let an agent act for someone who is not an authorised user;
• interfere with, reverse engineer for the purpose of attacking, or overload RightSide or its providers.

Security research

Good-faith security research on RightSide is welcome if it follows our security policy: test only your own accounts and apps, do not access other people's data, do not degrade the service, and report what you find to [email protected]. Research that follows that policy does not breach this one. Testing third-party systems from an app hosted on RightSide is not covered, unless you have the system owner's written permission.

Enforcement

We choose a response that fits how serious the problem is and how likely it is to cause harm. Usually we move through these steps:

1. Warn. We contact you by the email on your account, explain the problem and give you a reasonable time to fix it.
2. Disable the app. If the problem is not fixed, or it is causing harm, we stop the app or remove its public route. Your other apps keep running.
3. Suspend the account. For repeated or serious breaches we suspend your account and revoke the agent credentials it approved.
4. Terminate. For the most serious breaches we close the account under the Terms of Service.

We may skip steps and act immediately, without warning, when there is illegal content (including CSAM), an active attack, phishing or malware, a risk to other customers or to the platform, or when the law requires it. We will tell you what we did and why, unless the law or an ongoing investigation prevents it. If you think we got it wrong, reply to our notice and we will review the decision.

We may preserve relevant data and share it with law enforcement or other competent authorities where the law requires or permits it.

Reporting abuse

To report an app on RightSide that breaks this policy, email [email protected] with the full URL, the time you saw it and what is wrong. Never send child sexual abuse material itself, only the URL. More detail is on the security page.

Changes

We may update this policy as RightSide and the threats against it change. We will change the date at the top of the page, and for material changes we will tell account holders by email before they take effect, unless the change is needed urgently to stop abuse.