# Acceptable Use Policy

DRAFT — counsel to review (Joseph Bauer)

This is a draft. It is not legal advice. Members accept it at checkout before paying.

1. LocalRoute is for text and agent use only. Do not use it to generate images, video, or audio.

2. Do not use LocalRoute for illegal activity, including fraud, abuse of systems you do not own, or content that exploits minors.

3. Each member has their own API key. Bill (or an operator with the engine admin token) can suspend or revoke that key at any time. That is the kill switch.

4. Member data is isolated per member. We do not mix one member's prompts, keys, or usage with another's for billing or chat.

5. Each tier has a hard monthly token cap. There is no overage in this phase. When the cap is reached, the key stops.

6. Founding Member is a 90-day founding term at the founding price. After that term, the then-current Community or other published rate applies unless a later agreement says otherwise.

7. Portability: a member's data and keys leave with them on request. We will export what we hold for that member and revoke the key so it cannot be reused on this platform.

8. Cloud phase: during launch, inference runs on rented capacity at a hosted provider under its written zero-retention policy; your prompts are not used for training. The platform moves to member-owned hardware in Pueblo when membership justifies it. Same URL, same keys.

9. Do not share your key. Usage on your key is billed and capped to you.

10. We may refuse or terminate service that violates this policy.

The hosted-provider name is recorded in docs/backends.md and docs/decisions-log.md (env-driven; not hardcoded in engine Python). Update it in the same commit as a backend swap.