This policy applies to every customer, whether a business or a consumer: to you, your Account Owner, your agents, your clients under section 5.10 of the Terms of Service, and anyone who uses the Service through your Account. You are responsible for every breach by any of them. The rules apply also to Mini Apps and the bridge in your own infrastructure when they are used with Portal or the Tealbrick Software. Terms defined in the Terms of Service have the same meaning here.
1. Illegal and harmful content and activity
You must not use the Service to:
1.1 break any law or regulation, or help someone else do so;
1.2 store, process, send or publish content that is illegal, including child sexual abuse material, terrorist content, content that incites violence or hatred, and content that infringes intellectual property, privacy or personality rights;
1.3 carry out fraud, phishing, scams, identity theft, impersonation, market manipulation or money laundering;
1.4 process personal data without a legal basis, or carry out unlawful surveillance or workplace monitoring;
1.5 carry out a practice that Article 5 of Regulation (EU) 2024/1689 (AI Act) prohibits, for example manipulative techniques, social scoring or unlawful biometric categorisation, with any agent or model connected to the Service;
1.6 develop or deploy weapons, malware or tools whose main purpose is to cause harm.
2. Messages, outreach and spam
2.1 You and your agents are the sender of every message sent through the Service or through accounts connected to it (email, chat, social posts, SMS, calls).
2.2 You must not send unsolicited commercial communications without the consent or other legal basis that the law requires (Article 13 of Directive 2002/58/EC as implemented in the recipient’s country).
2.3 Every commercial message must identify the sender truthfully and include a working opt-out where the law requires it. You must honour opt-outs promptly.
2.4 You must not use purchased, scraped or harvested contact lists without a legal basis.
2.5 You must follow the rules and rate limits of each platform you post to or message through (for example chat platforms, social networks, email providers, Composio).
2.6 You must not use agents to create fake accounts, fake reviews, fake engagement or coordinated inauthentic behaviour.
2.7 You must not make an agent appear to be a human person where the law requires disclosure that the person is dealing with an AI system. For any agent or system you assemble, the duties of Article 50 of the AI Act sit with you as its provider or deployer.
2.8 Our names. You must not name Tealbrick or Polygonface as the sender, sponsor or source of a message. You must not use our names, domains or logos in sender names, signatures, agent names or agent personas.
3. Agents and automation
3.1 You must not let an agent do anything through the Service that you would not be allowed to do yourself.
3.2 You must configure grants, scopes, holds and approvals that fit the risk of what your agents do. For actions with legal, financial or safety effects (for example payments, contracts, deletion of records, messages to many people), you must use a hold or approval, or another form of human review.
3.3 You must not use the Service to bypass a third party’s security, terms, rate limits, paywalls or access controls.
3.4 You must not give an agent a person’s sign-in credentials.
3.5 You must not use agents to make decisions about people that have legal or similarly significant effects without the safeguards the law requires (for example Article 22 GDPR).
4. Security of the Service
You must not:
4.1 probe, scan, test or attack Portal, our infrastructure, our release channels or other customers’ Workspaces, except under our coordinated vulnerability disclosure policy at tealbrick.com/security, or with our prior written permission;
4.2 bypass authentication, grants, signatures, licence checks, rate limits or other technical controls;
4.3 access or try to access another customer’s Account, Workspace or data;
4.4 upload or deploy malware, or use the Service to distribute it;
4.5 interfere with the operation of the Service, for example by flooding, denial of service or resource exhaustion;
4.6 tamper with signed configuration, the release registry or update channels;
4.7 enter secrets or personal data in Portal setting fields or skill texts that do not ask for them (Terms of Service, section 3.5(b)).
Good-faith security research under our disclosure policy is welcome. Report it to security@tealbrick.com.
5. Rate limits and fair use
5.1 Portal applies rate limits and size limits to its API and to bridge connections (for example configuration pulls at most every 5 seconds, and request size caps). We may change them to protect the Service.
5.2 You must not use automation against Portal beyond the documented API and limits.
5.3 You must not create Accounts or Workspaces in bulk to avoid limits or Licence terms.
6. Intellectual property and brand
You must not:
6.1 copy, resell, sublicense or host the Tealbrick Software or Portal for third parties, except as the Terms of Service, the Tealbrick Software Licence or a written partner agreement allow;
6.2 use the Tealbrick name, logo or look and feel for a fork, a reseller offer, a hosted service, a domain name, a package name or a social account, except as the Brand Use Policy allows;
6.3 remove or change copyright, licence or trademark notices.
7. Reporting a breach of this policy (notice and action)
7.1 Anyone may report content or activity that breaches this policy or the law, by email to legal@tealbrick.com with the subject “Abuse report”. The report should include: the location (URL or Workspace identifier if known); why the reporter considers it illegal or in breach; the reporter’s name and email (except for reports of child sexual abuse material); and a statement that the report is made in good faith.
7.2 We confirm receipt to the reporter without undue delay. We decide on the report in a timely, careful and objective way, and tell the reporter our decision and the available ways to contest it.
7.3 Because Mini Apps run in the customer’s own infrastructure, we usually cannot see or remove content there. We forward reports to the customer where we can identify it, and we may act under section 8.
7.4 We use no automated means to decide on reports.
8. Enforcement
8.1 If we reasonably believe that this policy is breached, we may, at our choice: ask you to fix it; remove or disable Workspace Data; stop issuing new grants for an agent; suspend an agent card, a Workspace or the Account; or terminate under the Terms of Service. A measure taken under this section is not a breach of the Terms of Service.
8.2 We give you a statement of reasons when the measure starts, unless the law forbids it. The statement says what we restricted, why, on which facts, whether we acted on a notice, and how you can contest it. Where reasonable, we tell you before we act and give you a chance to fix the problem. In urgent cases (security, illegal content, harm to others) we act first.
8.3 We report illegal activity to the authorities where the law requires it and cooperate with them as the law requires. Where we become aware of information giving rise to a suspicion that a criminal offence involving a threat to the life or safety of persons has taken place, is taking place or is likely to take place, we inform the competent authorities promptly.
8.4 You may contest a decision by replying to our statement of reasons. A person who did not take the original decision reviews it where we can arrange this, and we answer within a reasonable time.
9. Changes
We may update this policy. Material changes follow the notice rules in section 20.1 of the Terms of Service, except where an immediate change is needed for security or to comply with law.
Contact
Polygonface s.r.o., Sládkovičova 60, 974 05 Banská Bystrica, Slovakia. Abuse reports and legal notices: legal@tealbrick.com. Security: security@tealbrick.com. Tealbrick is a brand of Polygonface s.r.o.