Acceptable use policy

This policy forms part of the Deploy Terms of Service. It applies to accounts, APIs, integrations and operations carried out through Deploy by Vimonto, provided by Luuk Dahlmans trading as Vimonto, Chamber of Commerce number 74936719. It covers activities directed through Deploy even when the servers belong to you or another provider.

1 Authorised use#

Use Deploy only for systems and content that you are entitled to manage. Agencies may manage authorised client projects within their plan. You may automate legitimate workflows through supported APIs and integrations, subject to documented limits and reasonable security measures.

Business and personal projects are permitted within your plan. You must have permission for connected accounts, infrastructure and software and comply with laws applicable to your activities. This includes privacy, intellectual property and anti-spam requirements and sanctions or export restrictions applicable to you or Vimonto.

2 Prohibited conduct#

You must not use Deploy to:

• gain unauthorised access, steal credentials, bypass access controls or exploit someone else’s infrastructure;
• distribute malware, ransomware or phishing material, operate botnets, carry out denial-of-service attacks or facilitate fraud;
• exploit children, distribute child sexual abuse material, or facilitate other unlawful exploitation or violence;
• distribute unlawful content, unlawfully disclose personal data, or infringe copyright, trade secrets or other rights;
• send unlawful unsolicited messages, harvest personal data unlawfully, or evade recipients’ valid opt-outs;
• create deceptive accounts, evade a suspension, abuse free trials or use unauthorised payment methods;
• bypass plan limits, deliberately overload the Deploy platform, interfere with other customers or misuse our shared processing capacity;
• attempt to extract Vimonto’s proprietary source code or circumvent its protections, except where a restriction would be prohibited by mandatory law;
• resell access to Deploy itself without a written agreement, or imply that Vimonto endorses your business without permission.

Ordinary deployment, monitoring, scheduled jobs and use of the documented API are permitted automation. Legitimate testing on infrastructure you own or have permission to test must stay within that permission and must not affect Deploy’s systems or other customers. Testing Deploy itself requires prior written authorisation for the scope and method.

Do not place workloads requiring special safeguards within our processing scope without the prior agreement required by the DPA. Standard Deploy subscriptions are not a promise of suitability for life-critical systems or regulated workloads with unagreed requirements.

3 Resource limits#

Plan limits and any usage charges must be disclosed before purchase or before the additional usage is authorised. We may apply proportionate rate limits to protect service stability and explain their effect where practicable. A temporary protective restriction does not authorise undisclosed charges or a permanent reduction in your agreed plan.

Your independent server provider’s restrictions and charges apply separately. We do not reserve unrestricted control over lawful activity on your independently operated server merely because it was previously connected to Deploy.

4 Reports and enforcement#

Report abuse or a suspected vulnerability to info@vimonto.nl. Include the relevant domain or account identifier, a description, dates and sufficient evidence for investigation. For a rights complaint, identify the material and your authority to report it. Do not send live credentials, unnecessary personal data or unrelated confidential content. Ask for a secure channel before providing sensitive evidence.

We assess credible reports and may seek further information. Measures can include a warning, restricting an integration, disabling a harmful operation, suspending access or ending the affected subscription under the Terms. We aim to act proportionately, give reasons and an opportunity to resolve the issue where practicable, and allow you to request review by email. We may act immediately where necessary to prevent harm or comply with law.

We may preserve or disclose relevant evidence where legally required or otherwise lawfully justified. Personal data processing remains subject to the Privacy Policy and DPA. This policy creates no blanket obligation to monitor every customer application and no right to retain unrelated customer data indefinitely.

Account enforcement does not by itself authorise destruction of independently hosted customer resources. Contractual export rights remain available where lawful and compatible with necessary security restrictions.