Acceptable Use Policy

Version 0.1 (draft) · 12 July 2026.

Using HEARTBEAT, you agree not to:

• break the law, or store content you have no right to store;
• probe, scan, or test the vulnerability of the service, or attempt to cross tenant boundaries (row-level isolation is a security control, not a challenge);
• use another person's credentials, or share yours;
• impose abusive load (automated scraping, bulk requests beyond documented API limits);
• use the wellbeing/pulse system to attempt to identify individuals — attempts to de-anonymise aggregate sentiment are a material breach;
• upload malware or content that is unlawful, harassing, or infringes others' rights;
• resell or white-label the service without a written partner agreement.

We may suspend or terminate access for material breach, with notice where practicable. Report abuse or security issues to [security@yourdomain — placeholder].