Acceptable Use Policy

1. Purpose

This Acceptable Use Policy ("AUP") governs your use of the TrueEntropy API and associated services operated by Interlink Digital Group Limited ("we", "us"). By using TrueEntropy, you agree to comply with this policy.

2. Permitted Use

TrueEntropy is designed for lawful applications requiring true quantum random numbers, including but not limited to:

• Licensed gambling and gaming platforms (with appropriate regulatory compliance)
• Cryptographic key generation and security applications
• Scientific research and statistical sampling
• NFT and blockchain applications
• Software development and testing
• Any other lawful purpose requiring high-quality randomness

3. Prohibited Use

You may not use TrueEntropy for:

• Unlicensed gambling - Operating gambling services without appropriate licences (e.g. UKGC, MGA) in jurisdictions where licensing is required
• Illegal activities - Any activity that violates applicable law, regulation, or court order
• Abuse or disruption - Attempting to overwhelm, disrupt, or interfere with the service, including DDoS attacks or intentional rate limit evasion
• Credential sharing - Sharing API keys or allowing unauthorised access to your account
• Reverse engineering - Attempting to reverse engineer, decompile, or extract proprietary algorithms, QuBitLang circuits, or system architecture
• Competitive analysis - Using the service solely to benchmark or replicate a competing service
• Misrepresentation - Claiming that non-quantum random numbers (e.g. sandbox results) are quantum-generated, or falsifying provenance certificates
• Resale without agreement - Reselling TrueEntropy services to third parties without a written reseller agreement

4. Rate Limit Compliance

You must respect the rate limits associated with your subscription tier. Automated systems that intentionally circumvent rate limits (e.g. rotating API keys to bypass per-key limits) are prohibited. If you need higher limits, please upgrade your plan or contact us for Enterprise pricing.

5. API Key Security

• API keys must be stored securely and never exposed in client-side code, public repositories, or logs
• You are responsible for all activity performed with your API keys
• Immediately revoke and rotate any key you believe has been compromised
• Use scoped API keys with minimum required permissions

6. Compliance Obligations

If you use TrueEntropy in regulated industries (gambling, financial services, healthcare), you are responsible for:

• Obtaining and maintaining all required licences and certifications
• Ensuring your use complies with relevant regulations (UKGC RTS, NIST, FDA/EMA, etc.)
• Retaining provenance certificates as required by your regulatory obligations
• Purchasing the appropriate Compliance Pack add-on if required by your regulator

7. Monitoring & Enforcement

We monitor API usage patterns to detect abuse. If we identify a violation of this policy, we may:

• Issue a warning with a deadline to remediate
• Temporarily suspend your API access
• Permanently revoke your API keys and terminate your account
• Report illegal activity to relevant authorities

8. Reporting Violations

If you become aware of any violation of this policy, please contact us at abuse@trueentropy.net.

9. Changes to This Policy

We may update this AUP from time to time. Material changes will be notified via email and dashboard notification at least 30 days before taking effect.