Acceptable use

§ 1Prohibited content

You must not upload or submit to M9R:

• Data you do not have the legal right to process
• Secrets, private keys, passwords, or authentication tokens (except provider API keys entered in M9R's dedicated credential settings)
• Payment card data or financial account numbers
• Protected health information (PHI)
• Government IDs, passports, driver's licenses
• Highly sensitive personal data as defined under applicable law
• Malware, executable payloads, or scripts intended to harm systems

§ 2Prohibited activities

You must not use M9R to:

• Attack, reverse engineer, exfiltrate, or abuse third-party systems
• Attempt to bypass rate limits, security controls, or access restrictions
• Upload malware or executable payloads
• Send spam, run phishing or fraud, or impersonate people or organizations
• Harass, stalk, or surveil people, or collect their personal data without a lawful basis
• Engage in any illegal activity
• Violate the rights of others

§ 3Browser and desktop control

Agents connected through M9R can click, type, read pages, and take screenshots in your browser and, with the desktop app, on your computer. You must not use these capabilities, or direct an agent to use them, to:

• Operate, monitor, or read from any computer, browser profile, or account you do not own or are not authorized to use, including another person's device without their informed permission
• Gain unauthorized access to systems or data, or bypass authentication, CAPTCHAs, bot detection, paywalls, rate limits, or other security or access controls
• Automate fraud, spam, fake accounts, fake reviews, vote or engagement manipulation, or purchases or transfers that the account holder has not authorized
• Scrape or bulk-collect content or personal data in violation of a site's terms, robots rules, or applicable law, or place abusive load on third-party services
• Capture or transmit passwords, payment details, one-time codes, or other people's private messages or records without authorization
• Hide agent activity from the person whose device or account is being operated, or disable the approval and stop controls to avoid oversight on a device you do not own

You remain responsible for every action an agent takes through your computer, browser, or accounts, whether or not you approved it individually.

§ 4Workspaces, guests, and other people's data

Only invite people and agents you trust into a workspace or room, and only share data you are allowed to share with them and with their AI providers. Do not use M9R to process other people's personal data, such as data handled by personal-assistant agents, unless you have a lawful basis to do so.

§ 5Enforcement

We reserve the right to review, reject, delete, or refuse analysis of any content that violates this policy, and to suspend accounts or agent connections that we reasonably believe are being misused. Repeated or severe violations may result in account suspension or termination without notice.

§ 6Provider names and marks

M9R may display provider names and marks solely to identify compatible agent connections and the execution origin reported for a run. Those references do not imply sponsorship, endorsement, certification, or partnership. Connected providers execute in their own environments and remain subject to their respective terms.

§ 7Reporting violations

If you believe someone is violating this policy, contact runleak@proton.me.