Acceptable Use Policy
Burning Ash Protocol acceptable use policy — permitted and prohibited uses of the service.
Acceptable Use Policy
Last Updated: March 2026
Domain: www.baprotocol.com
Purpose
This Acceptable Use Policy ("AUP") defines the boundaries for using the Burning Ash Protocol service, operated by TripleVision LLC. It supplements our Terms of Service and applies to all users, including Hosts, Survivors, and administrators.
Permitted Uses
You may use BAP to:
- Store encrypted personal documents, letters, instructions, and messages for designated survivors
- Configure and manage liveness checks and notification channels
- Designate survivors and set key-sharing thresholds
- Export your data in machine-readable format
- Self-host the software under the AGPL-3.0-or-later license
Prohibited Uses
Illegal Content
You must NOT store, upload, or transmit:
- Child sexual abuse material (CSAM) or any content exploiting minors
- Content that facilitates terrorism or violent extremism
- Content that facilitates human trafficking
- Stolen property, financial fraud instruments, or counterfeit materials
- Content that violates applicable export control or sanctions laws
Harmful Activities
You must NOT use the Service to:
- Conduct or facilitate money laundering, tax evasion, or financial fraud
- Distribute malware, ransomware, or other malicious software
- Launch denial-of-service attacks or attempt to overwhelm the Service
- Attempt to access other users' data or accounts
- Reverse-engineer, decompile, or disassemble the Service beyond what the AGPL-3.0 license permits
- Exploit vulnerabilities without responsible disclosure (see our Security Disclosure Policy)
- Scrape, crawl, or automatically access the Service beyond normal API usage
- Circumvent rate limits, authentication, or other security controls
Abuse of Service Features
You must NOT:
- Create fake or fraudulent liveness check configurations to harass or extort others
- Use the Will Transfer Protocol to threaten or coerce survivors
- Designate survivors without their knowledge for purposes of harassment
- Use the Service to distribute unsolicited bulk messages (spam)
- Create multiple accounts to circumvent plan limits or evade bans
- Use the Service in a way that degrades performance for other users
Intellectual Property Violations
You must NOT store or transmit content that:
- Infringes third-party copyrights, trademarks, or patents
- Violates trade secrets or confidentiality agreements
- Contains unlicensed proprietary software
Resource Limits
Fair Use
Each plan has defined limits (wills, survivors, storage, API calls). Exceeding these limits may result in service degradation or account restriction.
API Usage
API access is rate-limited per plan. Automated scripts must respect rate limit headers (X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset). Excessive API usage that degrades service for others may be throttled or blocked.
Enforcement
Monitoring
We do not proactively monitor the content of encrypted documents (we cannot decrypt them). However, we monitor:
- API usage patterns for abuse detection
- Rate limit violations
- Authentication anomalies
- Reported violations
Violation Response
Upon confirmed violation of this AUP, we may:
- Warning: Notify you of the violation and request remediation
- Restriction: Limit specific features or API access
- Suspension: Temporarily suspend your account
- Termination: Permanently terminate your account and delete your data
We aim to give reasonable notice before enforcement action, except where immediate action is required for legal compliance or to protect the Service and other users.
Reporting Violations
To report a violation: [email protected]
Appeals
If you believe enforcement action was taken in error, you may appeal by emailing [email protected] within 14 days. Appeals are reviewed within 10 business days.
Changes
We may update this AUP from time to time. Material changes will be communicated via email and posted on our website.
Contact
Abuse reports: [email protected]
Legal inquiries: [email protected]
This Acceptable Use Policy is part of our Terms of Service. By using BAP, you agree to both.