This policy is part of the Terms of Service. It applies to you, to your users, and to any software or AI agent acting with your keys, on every Runtime product. You are responsible for all of them.
Our servers are rented from infrastructure providers whose own rules bind us, and one complaint can affect every customer on a server. We therefore enforce this policy quickly and without warning.
What you must not do
No harm to other systems. No denial-of-service traffic. No port scanning, probing, vulnerability testing, credential guessing or attempts to gain access against any system that is not yours, even with its owner's permission. No malware, command-and-control servers, botnets or phishing. No interference with anyone else's use of a network or service.
No bulk or unwanted messages. No spam by any route, and no email sent directly from the Services. Calling a mail provider's API for mail its rules allow is fine.
No mining. No mining or validating of cryptocurrency or similar digital assets. Local test chains are fine.
No relaying traffic. No open proxies, VPN endpoints, Tor relays or exit nodes, or other services whose purpose is to relay third parties' traffic through our network.
No breaking the law or other people's rights. Nothing illegal, fraudulent, infringing, defamatory, harassing or threatening. No content that sexually exploits children; we report it to the National Center for Missing & Exploited Children and to law enforcement. No breach of anyone's privacy, and no scraping in breach of the law.
No attacks on the Services. No attempt to escape a sandbox, reach another customer's resources, reach our hosts or internal network, or get around limits, metering, quotas or billing. No opening several accounts to repeat a free trial or to avoid a limit or a suspension. No use that places a load on the Services out of proportion to what you pay for or that degrades them for others.
Nothing that must not fail. No use where a failure of the Services could lead to death, injury, or severe physical or environmental damage.
No regulated data. No protected health information, ever. No payment card numbers, government identifiers or special categories of personal data as defined in European law, unless you encrypt the data yourself and we have agreed in writing first.
No reselling or cloning. You may not sublicense, resell or transfer access to the Services except as section 4 of the Terms of Service allows, and you may not use the Services to build or improve a competing compute, sandbox or hosting service.
No embargoed places or people. No use from, or for the benefit of, a country, region or person under United States sanctions or export restrictions.
Security research against the Services themselves is welcome if you ask first: write to marc@heyruntime.com before you start.
What we do about it
If we reasonably believe this policy has been broken, we may, immediately and without notice: cut a resource's network access, stop or delete it, preserve evidence, suspend or close the account, refuse future accounts, and report the matter to our providers or to law enforcement. Credit on an account closed for breach is forfeited as the Terms of Service describe. You are liable for what the breach costs us, including charges and penalties from our providers.
We may investigate suspected breaches, and that can include examining the affected resources and their network records.
Report abuse
Write to marc@heyruntime.com. Include the address or URL involved, the date, time and time zone, and any logs you have. We act on reports quickly.
Copyright complaints
If you believe material on the Services infringes your copyright, send a notice to our copyright agent:
Copyright Agent, Runtime LLC, 1500 N Grant St Ste N, Denver, CO 80203, United States. Email: marc@heyruntime.com.
The notice must include: your signature, physical or electronic; the work you say is infringed; the material you say infringes it and where it is, precisely enough for us to find it; your name, address, telephone number and email; a statement that you believe in good faith the use is not authorized by the owner, its agent or the law; and a statement, under penalty of perjury, that the notice is accurate and that you are the owner or authorized to act for the owner.
We remove or disable material named in a valid notice and tell the customer, who may send a counter-notice to the same address with the equivalent details required by 17 U.S.C. § 512(g). We close the accounts of repeat infringers.
Changes
We may change this policy by posting a new version. It changes when our providers' rules change, and sometimes that leaves no time for notice.