Acceptable Use Policy

Last updated: May 3, 2026

Effective date: March 15, 2026

This Acceptable Use Policy ("AUP") describes what is and isn't allowed when using OneClickClaw services. It is part of our Terms of Service. Violations may result in warnings, rate-limiting, suspension, or termination of your account.

We want OneClickClaw to be a safe, reliable platform for everyone. These rules exist to protect you, other users, and the broader community from harm.

1. General Rules

When using OneClickClaw, you must:

• Comply with all applicable laws and regulations in your jurisdiction.
• Respect the rights and privacy of others.
• Use the Service honestly and in good faith.
• Report any security vulnerabilities or abuse to us promptly.

1.1 Optional SSH Access

SSH access to your VPS is optional and disabled by default. If you choose to enable it, you remain solely responsible for anything that happens through that channel, including any software you install, any credentials you grant to third parties, and any traffic that originates from your server. The compliance monitoring described in our Terms of Service and Privacy Policy (SSH session metadata, network and filesystem metadata, listening ports) continues to apply whenever SSH is enabled. Using SSH access to disable, evade, or tamper with that monitoring is itself a violation of this AUP.

2. Prohibited Activities

The following activities are strictly prohibited. This list is not exhaustive. We reserve the right to determine what constitutes a violation.

2.1 Deception and Fraud

• Creating deepfakes, impersonating real people, or generating content designed to deceive others about its origin or authenticity.
• Using your AI agent for scams, phishing, or social engineering attacks.
• Misrepresenting AI-generated content as human-created without disclosure.

2.2 Spam and Abuse

• Sending unsolicited bulk messages, spam, or automated outreach through your AI agent.
• Using the Service to generate content at scale for SEO manipulation or spam campaigns.
• Operating botnets, automated scraping operations, or denial-of-service activities from your server.

2.3 Privacy Violations

• Collecting, storing, or processing personal data of others without their consent or a lawful basis.
• Doxxing: publishing private or identifying information about someone without their consent.
• Surveillance, stalking, or monitoring individuals without authorization.
• Scraping personal data from social media or other platforms.

2.4 Harmful Content

• Generating content that promotes violence, hatred, or discrimination.
• Creating or distributing child sexual abuse material (CSAM) or exploitative content.
• Generating content that facilitates terrorism, extremism, or radicalization.
• Producing non-consensual intimate imagery.

2.5 Security Abuse

• Attempting to access other users' servers, data, or accounts.
• Using your server to launch attacks against other systems (DDoS, port scanning, etc.).
• Circumventing security measures, rate limits, or access controls.
• Running cryptocurrency mining, torrent clients, or relay nodes on your server (these activities degrade performance for all users on shared infrastructure).
• Installing unauthorized software that compromises server security.

2.6 Illegal Activities

• Any activity that violates applicable local, national, or international law.
• Distributing copyrighted material without authorization.
• Using the Service in connection with illegal goods or services (drugs, weapons, counterfeit goods).

2.7 Chatbot and Support Abuse

• Attempting to extract, reverse-engineer, or manipulate the system prompt or internal instructions of our AI chatbots (prompt injection).
• Sending abusive, offensive, threatening, or illegal content to chatbots or support agents.
• Automating interactions with our chatbots (scripted requests, bots, or API abuse) to consume credits or resources artificially.
• Creating multiple accounts to circumvent credit limits, rate limits, or bans.
• Harassing, threatening, or being abusive towards our support team during ClawCrew live chat sessions. Our team has the right to end any session where they feel unsafe.
• Sharing, reselling, or transferring AI support credits or ClawCrew Support access to other accounts or third parties.

3. AI-Specific Rules

Because OpenClaw agents are AI-powered, there are additional responsibilities that come with operating one:

3.1 Human Oversight Required

• You must maintain meaningful human oversight of your AI agent, especially for any actions that could have significant consequences (financial transactions, medical information, legal advice, etc.).
• Your AI agent should not be deployed in a fully autonomous mode for high-risk decisions without human review.

3.2 Synthetic Media Disclosure

• If your AI agent generates images, audio, video, or other synthetic media, you must clearly label it as AI-generated.
• Users interacting with your AI agent should know they are communicating with an AI, not a human, unless the context makes it obvious.

3.3 Output Responsibility

• You are responsible for the output and actions of your AI agent. "The AI did it" is not a defense.
• If you become aware of your agent producing harmful, illegal, or policy-violating content, you must take immediate corrective action.

4. Resource Usage

• Use your server resources within the limits of your plan. Excessive resource consumption that impacts other users on shared infrastructure may be rate-limited.
• Do not use your server for purposes unrelated to OpenClaw (e.g., running a web server, hosting files, mining cryptocurrency).

5. Enforcement

We take violations seriously. Our enforcement process is proportional to the severity of the violation:

Important: For severe violations (illegal activity, CSAM, security attacks), we may skip directly to suspension or termination without prior warning, and we may report the activity to law enforcement.

6. Appeals

If you believe we made an error in enforcing this policy, you may appeal by emailing info@oneclickclaw.io with the subject line "AUP Appeal". We will review your appeal within 5 business days and provide a written response.

7. Reporting Abuse

If you encounter misuse of our platform, or if an OpenClaw agent deployed via OneClickClaw is behaving in a harmful way, please report it:

• Email: info@oneclickclaw.io

Please include as much detail as possible: what happened, when, any relevant URLs or screenshots. We will investigate all reports promptly.

8. Changes to This Policy

We may update this AUP as the platform evolves and as new AI-related regulations emerge. Material changes will be communicated via email at least 14 days in advance.