RouteHaven
DRAFT — not yet in force. This document is a working draft. It must be reviewed and completed by qualified legal counsel before launch. Bracketed items such as [COMPANY LEGAL NAME] are placeholders that have not been filled in.

Acceptable Use Policy

Version 2026-10-15-draft · Last updated 2026-10-15

This Acceptable Use Policy ("AUP") applies to everyone who uses RouteHaven and forms part of the Terms of Service. Because RouteHaven forwards requests to third-party model providers, you must also comply with the usage policies of every provider you use through the Service (OpenAI, Anthropic, Google). Where this AUP and a provider policy differ, the stricter rule applies.

1. Illegal and harmful content

  • No content that sexually exploits or endangers children. We report such material to the relevant authorities.
  • No use to plan, promote or facilitate violence, terrorism, or the development of biological, chemical, nuclear or radiological weapons.
  • No creation or distribution of malware, ransomware, or tools to compromise systems you are not authorized to test.
  • No harassment, threats, hateful content targeting protected groups, or non-consensual intimate content.
  • No fraud, phishing, scams, impersonation of real people or organizations, or deceptive content presented as human-written where disclosure is legally required.
  • No infringement or misappropriation of intellectual property or privacy rights, and no unlawful collection or processing of personal data.

2. High-risk uses

Do not rely on model outputs as the sole basis for decisions with legal or similarly significant effects on individuals (for example credit, employment, housing, insurance, medical or legal decisions) without appropriate human review and any disclosures required by law. Do not use the Service to operate critical infrastructure or weapons systems.

3. Platform integrity

  • Do not resell, sublicense or share access to RouteHaven, or offer it to third parties as a standalone API, without our written consent.
  • Do not share API keys outside your organization, circumvent rate limits, budgets or balance checks, or create multiple accounts to evade limits or suspensions.
  • Do not probe, scan or test the Service for vulnerabilities without written permission; report suspected vulnerabilities to [LEGAL CONTACT EMAIL].
  • Do not interfere with the Service, other customers or the model providers, including by sending traffic designed to overload them.
  • Use only provider API keys that you are authorized to use, in line with that provider's terms.
  • Do not send spam or unsolicited bulk messages generated with the Service.

4. Sanctions and export controls

Do not use or provide access to the Service from or for comprehensively sanctioned jurisdictions, or for sanctioned persons, or in violation of export control laws. The Service blocks some jurisdictions automatically; that does not relieve you of your own obligations.

5. Enforcement

We may investigate suspected violations, and may warn, rate-limit, revoke API keys, suspend or terminate accounts, and cooperate with law enforcement or model providers where required. Where appropriate we will tell you what happened and give you an opportunity to respond. Report abuse to [LEGAL CONTACT EMAIL].