Acceptable Use Policy
What Orelys may and may not be used for. Accounts that break these rules can be closed, without refund.
On this page
1What it is for
- 1.1
Checking your own exposure, or that of an organisation you are authorised to act for.
- 1.2
Security research and threat intelligence carried out lawfully.
- 1.3
Investigations you have a lawful basis to conduct.
2What it is not for
- 2.1
Stalking, harassing, threatening or intimidating anyone.
- 2.2
Doxxing — publishing someone’s personal information.
- 2.3
Getting into accounts, systems or data that are not yours.
- 2.4
Fraud, identity theft, extortion or blackmail.
- 2.5
Reselling access, or sharing your account or your API key with anyone else.
- 2.6
Running automated tools against the website itself to extract data. Automated use goes through the API, on the plans that include it, within your quota and limits.
- 2.7
Creating several accounts, or otherwise getting around quotas, limits or security checks.
- 2.8
Attacking, overloading or trying to break the service.
3What happens if the rules are broken
Accounts that misuse the service can be closed, without refund. Where the law requires it, we may pass information to the competent authorities.
4Reporting misuse
If you believe Orelys is being used against you or someone else, use the contact form and pick “Report abuse”, or write to support@orelys.io.