Acceptable Use Policy

The marketplace is for authorized, bounded professional and business work—not access circumvention or harmful automation.

Effective October 27, 2026

Authorized professional and business use only

You may use Zinvyl only for lawful trade, professional, or organizational purposes within systems, data, and workflows you own or are expressly authorized to test. Personal, family, and household use is not supported. You must accurately describe your authority, intended outcome, and relevant restrictions.

Prohibited content and activity

You may not use the service to develop or deploy malware, credential theft, phishing, spam, surveillance, harassment, discrimination, fraud, sanctions evasion, illegal goods or services, unauthorized scraping, destructive code, access-control bypasses, or activity that violates law or another party's rights.

Provider deliverable integrity

Providers may not conceal backdoors, logic or time bombs, covert remote access, hidden accounts, unauthorized cryptomining, data exfiltration, undocumented privilege escalation, hidden telemetry, deceptive interfaces, malicious dependencies, or any feature intended or reasonably likely to harm a person, system, data, property, or third party. Providers must disclose material dependencies, external communications, persistent behavior, security limitations, background intellectual property, third-party and open-source licenses, and material AI-generated content. False provenance, fabricated tests, undisclosed license restrictions, and intentional omission of known harmful behavior are prohibited.

No secrets or regulated data in public intake

Do not submit passwords, tokens, API keys, private keys, banking credentials, full payment-card data, Social Security numbers, protected health information, unredacted government identifiers, export-controlled technical data, confidential information, or trade-secret substance through public intake, listings, proposals, ordinary email, or general MCP tools. A funded assignment, executed project NDA, approved recipients and systems, and a separately approved secure transfer method are required before protected material moves.

Platform and agent abuse

Do not overload, scan, probe, reverse engineer, evade request limits, replay payment events, forge funding states, impersonate a buyer or provider, automate purchases without budget-owner authorization, share or embed provider credentials, scrape private opportunities, submit proposals outside an invitation, collude on pricing, manipulate reputation, conceal subcontracting, or use agent interfaces to create misleading transaction or validation evidence.

High-impact decisions

Do not rely on Zinvyl output as the sole basis for decisions about employment, credit, housing, insurance, healthcare, legal rights, safety-critical control, customs compliance, or other regulated or high-impact matters. Qualified human and professional review remains required.

Enforcement

Zinvyl may reject, throttle, suspend, preserve evidence of, or report suspected abuse; remove unsafe materials; and require additional verification. Where practical, Zinvyl will explain the applicable restriction. Lawful security research requires prior written authorization and a defined test scope.

Contact