Acceptable Use Policy

Use KORD.ch only for lawful, authorized social media planning, collaboration, media management and publishing. You are responsible for content, connected profiles, people, agents, API tokens and instructions in your workspace.

You must follow applicable law, these policies and the terms, API policies, community standards, advertising rules and technical limits of every connected platform.

You may not use KORD to create, store, coordinate or distribute content that:

• Is illegal, fraudulent, defamatory or unlawfully discriminatory, or encourages violence or criminal activity.
• Sexually exploits or endangers a child, depicts non-consensual intimate material or facilitates human trafficking or abuse.
• Infringes copyright, trademark, publicity, privacy, confidentiality or another person's rights.
• Contains malware, phishing, credential theft, malicious links or instructions intended to compromise systems or accounts.
• Harasses, threatens, stalks, doxxes or unlawfully impersonates a person or organization.
• Misrepresents sponsorship, identity, provenance or AI generation where disclosure is required by law or platform rules.

You may not use KORD, including through an agent or API token, to:

• Send unsolicited bulk or repetitive content, coordinated spam or deceptive engagement campaigns.
• Buy, sell, fabricate or manipulate followers, likes, comments, views, reviews or other engagement signals.
• Evade moderation, provider review mode, rate limits, geographic controls, account restrictions or approval requirements.
• Scrape, harvest, enrich or build databases of people or platform data without lawful authority and provider permission.
• Create or control deceptive account networks, impersonate an official account or conceal the party responsible for a campaign.
• Publish regulated advertising, political content, contests or promotions without required eligibility, targeting, disclosure and authorization.

You may not:

• Probe, scan, exploit, reverse engineer, overload or disrupt KORD except for limited good-faith research that follows the Security page.
• Access another workspace, profile, media file, queue job or administrative function without authorization.
• Share raw session cookies or provider credentials. A finite Quick connection block may be copied once into its intended new private agent task only after accepting KORD's warning; never place it in a public or shared chat. Secure, long-lived and non-expiring API tokens must never be placed in a prompt, code, logs or screenshots.
• Upload malware, execute unauthorized code or use KORD as a general file-hosting, proxy or content-delivery service.
• Resell, sublicense or pool plan capacity without a written agreement, or split usage across accounts, workspaces or tokens to evade limits.
• Use automated traffic that ignores documented API contracts, idempotency rules, backoff, upload limits or fair-use safeguards.

Give an agent only the minimum scopes it needs. Draft preparation is the safe default. Elevated scheduling or publishing access must be deliberate, documented and consistent with workspace approval rules.

An agent must not claim human review occurred when it did not, bypass a readiness error, forge channel IDs or workspace context, expose credentials, or retry an action in a way that creates duplicate posts. The customer remains responsible for tools it authorizes.

Do not use KORD where a publishing error could directly cause death, personal injury, critical-infrastructure failure or another high-impact outcome. KORD is not a compliance substitute for regulated financial, medical, legal, election or emergency communications.

You are responsible for export controls, sanctions, advertising restrictions, recordkeeping and sector-specific approvals that apply to your organization, audience or content.

We may reject a request, quarantine or cancel a job, remove access, revoke a token, disconnect a profile, preserve evidence, rate limit traffic, suspend a workspace or terminate an account where we reasonably believe this policy has been violated or immediate action is needed to prevent harm.

Where practicable, we will explain the reason and provide a chance to correct or appeal. We may act without advance notice where delay could compromise security, violate law, expose another person or breach a provider's rules.

Report abuse or a security concern to [email protected]. For a product-policy question or appeal, contact [email protected] from the account-owner email and include the workspace, affected action and relevant timestamp. Do not send raw tokens or unnecessary personal data.