Acceptable Use Policy — Open Vertex Router

This Acceptable Use Policy (“Policy”) governs your use of Open Vertex Router (the “Service”), operated by Open Vertex Technologies LLC, a Wyoming limited liability company (“we”, “us”, “our”).

This Policy is incorporated into and forms part of our Terms of Service. By accessing the Service, you agree to comply with this Policy and to ensure that everyone using your account and API keys complies with it as well.

1. What the Service is

Open Vertex Router is an API gateway. It routes your requests to third-party artificial intelligence model providers and returns their responses to you. We do not train, own, or operate the underlying models.

The Service accepts text input only. You may not attempt to submit images, audio, video, or any other non-text content, including by encoding it within a text payload.

This has two consequences you must understand:

You remain responsible for your inputs and for how you use the outputs. Model outputs may be inaccurate, incomplete, offensive, or otherwise unsuitable. You must independently verify any output before relying on it.
Upstream provider terms apply to you. See Section 2.

2. Upstream provider policies

When you send a request through the Service, that request is executed by a third-party provider. Depending on the model you select, this may include OpenAI, Anthropic, Google, Mistral AI, DeepSeek, or other providers we add from time to time.

You agree that your use of the Service must comply with the usage policies of any provider whose models you access, in addition to this Policy. Where a provider’s policy is stricter than this Policy, the stricter rule applies.

You are responsible for reviewing the policies of the providers whose models you use. We may, at our discretion, publish a current list of providers and links to their policies in our documentation.

If a provider notifies us that your usage violates its policies, or restricts our access on account of your usage, we may suspend your access to the affected models or to the Service without prior notice.

3. Prohibited uses

You may not use the Service, directly or indirectly, and you may not permit any third party using your account or API keys to:

3.1 Unlawful activity

Violate any applicable law, regulation, or sanctions regime, including U.S. export control and economic sanctions laws.
Access the Service from, or make it available in, any jurisdiction subject to comprehensive U.S. sanctions.
Facilitate any criminal offence, or evade law enforcement or regulatory obligations.

3.2 Child safety

Generate, solicit, transmit, or process any material that sexualizes, exploits, or endangers minors. This prohibition is absolute and admits no exception, including for purported research, testing, moderation, or fictional purposes.

Violations of this section result in immediate termination without notice and without refund, and will be reported to the relevant authorities and to the affected upstream provider.

3.3 Violence and physical harm

Produce instructions or operational assistance for weapons, explosives, or chemical, biological, radiological, or nuclear materials.
Promote, incite, glorify, or plan violence, terrorism, or attacks on individuals or groups.
Encourage or provide assistance with suicide, self-harm, or disordered eating.

3.4 Cybersecurity

Develop, distribute, or operate malware, ransomware, spyware, or other malicious code.
Identify or exploit vulnerabilities in systems you do not own or are not authorized in writing to test.
Conduct phishing, credential harvesting, or social engineering campaigns.
Circumvent authentication, access controls, rate limits, or security measures of any system, including ours.

3.5 Fraud, spam, and deception

Generate fraudulent, deceptive, or misleading content, including fake reviews, fabricated credentials, or fraudulent financial or commercial documents.
Send unsolicited bulk messages, or generate content for spam, scam, or engagement-farming operations.
Impersonate any individual or organization, or misrepresent your affiliation with any person or entity.
Generate synthetic audio, image, or video content depicting a real person without that person’s consent.

3.6 Harassment and discrimination

Harass, bully, threaten, intimidate, or defame any individual.
Generate content that demeans or promotes hatred against individuals or groups on the basis of a protected characteristic.
Facilitate stalking, doxxing, or the non-consensual disclosure of private information.

3.7 Privacy and surveillance

Conduct biometric identification, facial recognition, or emotion inference on individuals without a lawful basis and their informed consent. Note that the Service accepts text only; attempting to use it for biometric processing is prohibited regardless.
Build or operate mass surveillance, social scoring, or predictive policing systems.
Process personal data through the Service without a lawful basis, or in breach of any applicable data protection law.

3.8 High-risk automated decisions

You may not use the Service as the sole basis for consequential decisions about individuals without meaningful human review. This includes decisions concerning:

credit, lending, or insurance;
employment, promotion, or termination;
housing or education;
medical diagnosis or treatment;
legal rights, immigration status, or criminal justice outcomes;
eligibility for government benefits.

3.9 Political and civic integrity

Generate content intended to interfere with elections or democratic processes, including disinformation about voting procedures, candidates, or results.
Operate coordinated inauthentic behaviour campaigns, sockpuppet networks, or astroturfing operations.

3.10 Sexual content

Generate sexually explicit content, or content intended primarily for sexual gratification.
Generate non-consensual intimate imagery of any kind.

3.11 Intellectual property

Infringe the copyright, trademark, patent, trade secret, or other intellectual property rights of any party.
Deliberately reproduce substantial portions of copyrighted works.

3.12 Professional advice

Present model outputs as professional medical, legal, financial, or psychological advice from a qualified practitioner, without appropriate qualified human review and clear disclosure to the end user.

4. Restricted data

You may not transmit the following categories of data through the Service unless we have agreed otherwise in a signed written agreement:

Protected health information subject to HIPAA. We do not currently execute Business Associate Agreements.
Raw payment card data — primary account numbers, CVV codes, magnetic stripe or chip data.
Government-issued identification numbers, including Social Security numbers and passport numbers.
Personal data of children under the age of 13, or under the applicable age of digital consent in the end user’s jurisdiction.
Biometric identifiers subject to specific statutory regimes.
Classified or export-controlled technical data.

You are responsible for minimizing personal data in your prompts. Where the purpose of your request can be achieved with pseudonymized or redacted inputs, you should use them.

5. Technical and account restrictions

You may not:

Share, publish, or expose your API keys. Keys are credentials; treat them as you would a password.
Use the Service in excess of the rate limits, model permissions, or credit limits allocated to your account, or take steps to circumvent them.
Attempt to extract, reverse engineer, or reconstruct model weights, training data, or system-level instructions from any provider through the Service.
Attempt to bypass safety filters or content moderation applied by us or by an upstream provider, including through prompt injection, encoding, obfuscation, or role-play framing.
Use automated means to place load on the Service beyond normal API usage, including denial-of-service or stress testing without our prior written consent.
Circumvent, disable, or interfere with usage metering, logging, or billing mechanisms.
Misrepresent to your own end users the nature of the Service or the identity of the models being used, where such disclosure is required by law or by an upstream provider.

Embedding and resale

You may integrate the Service into your own products and offer those products to your own customers. That is an intended use.

You may not resell bare access to the Service — that is, offer the Service’s API as a substantially equivalent gateway, proxy, or reseller product — without a written agreement with us.

You remain fully responsible for the conduct of your own end users, and for ensuring that your terms with them are consistent with this Policy.

6. Security obligations

You must:

Store API keys securely and never commit them to source control or client-side code.
Rotate keys promptly when a team member with access departs.
Revoke any key you believe may be compromised, using the controls available in your dashboard.
Notify us at security@openvertexrouter.com without undue delay upon becoming aware of any unauthorized access to your account or keys.

You are responsible for all usage and all charges incurred under your account and keys, including usage resulting from a compromise you failed to report or prevent.

7. Enforcement

Where we reasonably believe this Policy has been violated, we may, in our discretion and with or without prior notice:

request information or clarification from you;
restrict access to specific models or capabilities;
apply rate limits or reduce credit limits;
suspend one or more API keys, or your account as a whole;
terminate your account and this agreement;
disclose information to law enforcement or a regulator where required by law or where we believe there is a risk of serious harm.

We will generally attempt to contact you before suspending an account, but we may act immediately where the conduct involves child safety, an imminent risk of harm, a security threat, unlawful activity, or a demand from an upstream provider.

Refunds. Where your account is terminated for a violation of this Policy, prepaid service credits are not refundable. Where your account is closed for any other reason, our Refund & Cancellation Policy applies.

Reinstatement. If your account is suspended, you may contest the decision or request reinstatement by writing to support@openvertexrouter.com. We will review the request within a reasonable time. We are not obliged to reinstate an account.

8. Reporting abuse

To report a violation of this Policy, content of concern, or a security vulnerability, contact us at security@openvertexrouter.com.

Please include the approximate date and time, the affected account or key if known, and enough detail for us to investigate. We do not currently operate a paid bug bounty programme, but we investigate good-faith security reports and will not pursue action against researchers who report responsibly and do not access or damage third-party data.

Intellectual property complaints, formal legal notices, and requests from law enforcement or regulators should instead be sent to legal@openvertexrouter.com. Formal notice under our Terms of Service must be given in the manner set out in that agreement.

9. Changes to this Policy

We may update this Policy as the Service, applicable law, or upstream provider requirements change. We will post the revised version at this URL and update the effective date above. Where a change materially reduces what you are permitted to do, we will make reasonable efforts to notify account administrators by email in advance.

Continued use of the Service after a revised Policy takes effect constitutes acceptance of it.

Questions about the interpretation or scope of this Policy may be directed to legal@openvertexrouter.com.

10. Contact Us

Open Vertex Technologies LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States

Abuse reports and security vulnerabilities: security@openvertexrouter.com
Legal notices, intellectual property claims, and data protection requests: legal@openvertexrouter.com