Acceptable Use Policy

1What this is

This policy is part of the Terms of Service and applies to everyone who uses the Services. Atlas supplies licensing, authentication and binary protection. We do not review what you build, who you sell it to, what you charge or what you tell your customers. This page lists the few things we will not allow because they harm people outside the relationship between you and your customers, or harm Atlas, and says what we do when someone with a real claim asks us to act.

2What you can do

• License, authenticate and protect software you have the right to distribute.
• Bind licenses to your End Users’ hardware, run your own sessions, keys and bans, and give Resellers access.
• Protect a compiled Windows binary with the Obfuscator and ship the result.
• Integrate the SDK into your applications and run them in production.

3What is not allowed

You may not use the Services to license, protect or deliver:

• Malware aimed at people who did not choose it: software built to damage a device, take it over, steal its data or credentials, or watch its owner without their knowledge. That covers ransomware, credential stealers, covert key-loggers, botnet clients, stalkerware and miners that run unseen.
• Copies of other people’s software that you have no right to distribute, such as pirated or cracked copies.
• Cheats and bypass tools: software made to cheat in online games, to get past another product’s anti-cheat, copy protection or license check, or otherwise to break the terms of the product it targets. That covers game hacks, aimbots, cracks, keygens and license-bypass loaders.
• Anything that is a crime to make or hold where you operate, such as sexual content involving minors.

You also may not:

• Use Atlas messaging, webhooks, the forum or chat to harass, threaten, spam or target people.
• Defraud Atlas: stolen or unauthorised payment methods, bad-faith chargebacks, refund fraud, false identity, or accounts opened to get around a suspension, a ban, a limit or a price.
• Post other people’s personal data without their consent in the forum, public chat or support channels.

Protecting unlawful software with Atlas does not make it lawful, and we treat an attempt to hide malware behind the Obfuscator as a serious breach.

4What we do not police

Software that works alongside other programs, such as modding and compatibility tools, overlays, automation, debuggers and security-research tools, is not on the list in section 3 unless it is built to do what section 3 describes. Atlas does not review your software and does not decide for you whether it is lawful.

Whether it is lawful depends on the law where you and your buyers are, on what the owner of the targeted software permits, and on the rules of the payment processors and platforms you sell through. Some of those can be strict. That risk is yours, not Atlas’s, and Atlas will not stand between you and a rights holder or a court. If we receive a valid legal order or a well-founded complaint we cannot responsibly set aside, section 8 applies.

5Attacks on Atlas

Unless you have our written authorisation (section 9), you may not:

• Reverse engineer, decompile or disassemble the Atlas client library, authentication protocol, protection engine or servers, or tamper with, bypass or disable any authentication or anti-tamper check in them.
• Probe, scan, overload or break into Atlas servers, databases or APIs, including denial of service, credential stuffing and rate-limit evasion.
• Use what you learn about Atlas internals to build a competing platform or a tool that defeats Atlas.
• Share, resell or pass on API keys or credentials, except through the reseller features.
• Exploit a flaw to get what you were not granted or did not pay for, for example in plan limits, reseller balance or stock.

6Your customers are yours

Atlas has no relationship with the people who run your software. We do not write, review or enforce the license terms, privacy notices, prices, refund rules, support promises or bans that apply between you and your End Users or Resellers, and we are not a party to them. This policy does not regulate how you treat your own customers beyond what the law and section 3 require.

Two consequences. First, if privacy law applies to the data your software collects, you decide the legal basis and write the notice; the Data Processing Agreement covers what Atlas does with that data and what it gives you to help, and Atlas does not audit what you tell your End Users. Second, End Users have no rights against Atlas under your terms, and we will not mediate a dispute between you and them.

7Sanctions and export control

You may not use the Services where sanctions or export-control law forbids it, or give access to anyone, or in any territory, under comprehensive sanctions. You confirm you are not so restricted.

8When we act

We look at account, sign-in and payment records (see the Privacy Policy) to find fraud and attacks on the platform. We do not read the contents of your software to judge it. When we find a breach, or receive a valid legal order, or a complaint from a rights holder or an affected person that is plausible on its face, we may:

• warn you where there is time, and ask you to fix it;
• disable the specific license, application, file or build involved, or suspend the account straight away where that is the only way to stop harm;
• pass a complaint to you so you can answer it;
• keep records for investigation and to respond to the authorities, and follow valid legal requests; and
• close the account and, where the breach was serious, refuse to refund unused time.

We do not judge who is right in a dispute between you and a third party, and acting on a complaint is not an admission that it is correct. Repeat infringers are closed. If you think we got it wrong, write to [email protected]; we answer within ten business days. Governing law and courts are in the Terms.

9Security testing

Security research is welcome when it is authorised. Ask first at [email protected], describe your scope and method, and test only your own account and infrastructure. Report findings through the process at atlassecurity.site/security. Testing outside an agreed scope falls under section 5.

Good-faith research

We will not act against good-faith research inside an agreed scope that is reported responsibly: no privacy violations, no service degradation, no data destruction, and a reasonable time for us to fix the issue before anything is published.

10Reporting