Skip to content
FlashTowerFlashTower home

Acceptable Use Policy

Effective date: October 1, 2026 · Last updated:

This Acceptable Use Policy (“AUP”) applies to everyone who accesses or uses the Service and forms part of the Terms of Service. It exists to protect FlashTower's customers, the public, and the Service.

1. Prohibited activities

You may not, and may not help or permit anyone else to:

  1. access or attempt to access another organization's data, or any account, system, or data without authorization;
  2. use the Service to assess, monitor, target, or gather information about systems, accounts, people, or organizations you are not authorized to assess or monitor;
  3. connect integrations, grant permissions, or approve or pre-authorize Guard actions for systems you are not authorized to control;
  4. circumvent Service safeguards, including role checks, multi-factor authentication, approval requirements, rate limits, or usage budgets;
  5. use the Service to surveil individuals in violation of law, or to discriminate against, harass, or harm anyone;
  6. attempt to re-identify organizations or people from aggregate statistics or benchmarks;
  7. probe, scan, or test the vulnerability of the Service, or breach its security or authentication measures, except as authorized by the Responsible Disclosure Policy;
  8. interfere with or disrupt the Service, including through denial-of-service attacks, excessive automated requests, or scraping;
  9. upload malware or content designed to exploit the Service or its users;
  10. reverse engineer, decompile, or disassemble the Service, except to the extent applicable law expressly permits despite this restriction;
  11. resell, sublicense, or provide the Service to third parties without FlashTower's written agreement; or
  12. use the Service in violation of applicable law, including privacy, employee-monitoring, computer-misuse, export-control, and sanctions laws.

2. Authority to monitor

You may record, connect, or monitor only systems, accounts, and AI tools that your organization owns or controls, or that the owner has authorized you to monitor, and only in accordance with applicable law, including any notice or consent requirements that apply to monitoring employees, contractors, or other individuals.

3. Security-testing boundaries

FlashTower helps you assess your own AI systems. It is not a tool for testing systems you do not own or are not authorized to test, and nothing in the Service grants authorization to test any third-party system. You may not scan, probe, or test FlashTower without authorization. Good-faith security research on FlashTower is authorized only under, and within the limits of, the Responsible Disclosure Policy.

4. Data you must not upload

Do not upload passwords, API keys, access tokens, or other secrets; payment card numbers; protected health information, unless your organization has signed a Business Associate Agreement with FlashTower that covers it; or government identification numbers. If you upload such data by mistake, delete it and contact support@flashtower.com.

5. Enforcement and reporting

FlashTower may investigate suspected violations, remove content, and suspend or terminate access, with notice where practicable and without notice where necessary to prevent harm. FlashTower may report unlawful activity to law enforcement and cooperate with lawful requests. Report suspected abuse to security@flashtower.com.

Contact

FlashTower is operated by Boostlete LLC, 1620 N Carpenter Rd, Suite D46, Modesto, CA 95351. Privacy and legal notices: privacy@flashtower.com. Security: security@flashtower.com. Support: support@flashtower.com. Billing: billing@flashtower.com. General inquiries: hello@flashtower.com.