Acceptable Use Policy

The short version. Use Kibble for honest forms that people choose to fill in. Don't use it to trick people, to collect secrets or financial details, or to send spam. If you find a Kibble form being misused, email [email protected].

This policy is part of our Terms of Service. It covers you, your Members and any Agent acting for you. Words with capitals mean what the Terms define them to mean.

#Don't collect secrets or financial details

Kibble forms are for messages, sign-ups and enquiries. Don't use them to collect:

• passwords, one-time codes, security answers, private keys, recovery phrases or API keys;
• payment card numbers or bank account details (use a payment provider);
• government ID numbers, such as social security, passport, driving licence or national ID numbers;
• health information covered by HIPAA. We don't sign business associate agreements.

Kibble may refuse form fields that look like they collect these. Getting around those checks breaks this policy.

#Handle other sensitive data with care

Some forms legitimately ask about sensitive matters. An event form might ask about accessibility needs, for example. Ask only what the form needs, have a lawful basis for it, and say so in your privacy notice.

That applies to:

• health;
• racial or ethnic origin;
• religion;
• sexual orientation;
• political views;
• union membership;
• genetic or biometric data;
• criminal records.

Kibble isn't designed to hold this kind of data in bulk, so don't build a form whose main purpose is collecting it.

Don't direct forms at children under 16, or knowingly collect their personal data.

#Don't deceive people

Don't use Kibble for:

• Phishing: forms that pretend to be from another organization, or that trick people into handing over information.
• Fraud and scams: forms used to deceive or defraud anyone.
• Impersonation: posing as a person or organization you aren't.
• Hidden collection: collecting more than a form says it does, or using answers in ways the Visitor wasn't told about.

#Don't send spam or abuse forms

• Don't use Kibble or its Destinations to send messages to people who didn't ask for them.
• Don't use Kibble, or an Agent connected to it, to submit to other people's forms automatically or in bulk.
• An Agent may fill in a form for a person who asked it to.

#Don't harm people or break the law

Don't use Kibble to collect, store or send content that:

• is illegal;
• infringes someone else's intellectual property or privacy;
• harasses or threatens anyone;
• promotes violence or hatred against people for who they are;
• sexually exploits anyone. We report child sexual abuse material to the authorities.

Don't use Kibble in breach of sanctions or export laws.

#Don't make big decisions on AI alone

Triage helps your team decide what to read first. Don't use its category, fit or summary as the only basis for a decision with legal or similarly significant effects on a person. That includes decisions about hiring, credit, housing, insurance, education or access to essential services. A person should review those decisions.

#Don't attack or overload the Service

Don't:

• probe, scan or test Kibble's security without our written permission (see our Security page for how to report a vulnerability);
• get around rate limits, plan limits or other controls;
• use webhooks or other features to attack or overload other systems;
• upload malware;
• interfere with other customers;
• try to access data that isn't yours.

#Reporting abuse

If you find a Kibble form being used for phishing, fraud or anything else this policy forbids, email [email protected]. Please include:

• the address of the page with the form;
• what's wrong with it, and why you think it breaks this policy or the law;
• your name and email address, so we can follow up (you can report anonymously, but we can't update you);
• a statement that your report is accurate and made in good faith.

What happens next:

• We confirm. We'll confirm that we received your report.
• We review it. We review reports promptly, phishing first, and decide quickly.
• We tell you. We'll tell you what we decided.

#What we do about breaches

Depending on how serious a breach is, we may:

• ask you to fix something;
• disable a form;
• remove content;
• suspend a site or Workspace;
• end your agreement, as described in the Terms.

When we act, we tell the Workspace owners what we did and why, unless the law forbids it or telling you would help someone abuse the Service. We also tell you how to respond. You can reply to contest the decision, and a person will review it.