Acceptable Use Policy

Last updated: 2026-04-27

This Acceptable Use Policy ("AUP") applies to everyone who uses Pluralize — developers signed up at pluralize.app, the apps they build on top of the platform, and the tenants who sign in to those apps. It is part of the Terms of Service and a breach is a material breach of those Terms.

The point of this policy is short: don't use Pluralize to harm others or to attack the platform. Everything below is a more specific version of that.

You are responsible for your tenants

You are the operator of your App. We expect you to surface and enforce these rules with your own tenants — through your own terms, your moderation practices, and your willingness to suspend bad actors. If your tenants do something that breaks this AUP, that is your responsibility to address. We will work with you in good faith, but repeated violations from the same App will be treated as a breach by you.

Prohibited content and conduct

You may not, and may not permit your tenants to, use the Service to store, transmit or facilitate any of the following.

1. Illegal content

  • Content that is unlawful where it is created, hosted, or accessed, including child sexual abuse material (CSAM), non-consensual intimate imagery, content that incites terrorism or violence, and content that infringes intellectual property rights.
  • Content related to the sale of regulated goods or services (firearms, controlled substances, prescription pharmaceuticals) where you do not hold the required licences.

We have zero tolerance for CSAM. Any confirmed instance results in immediate termination of the App, preservation of evidence, and a report to the appropriate authorities (in Spain, the Guardia Civil's Grupo de Delitos Telemáticos and the EU's INHOPE network).

2. Abuse of people

  • Harassment, threats, doxing, or stalking of identifiable individuals.
  • Hate speech targeting protected characteristics (race, ethnicity, religion, gender, sexual orientation, disability, age, national origin).
  • Content designed to facilitate fraud, identity theft, or financial scams, including phishing pages and fake login forms targeting third-party brands.

3. Spam and unsolicited messaging

  • Sending unsolicited bulk email or SMS through your App, whether via Resend on our infrastructure or your own provider.
  • Operating "lead generation" or scraping-resale services that collect tenants for the purpose of marketing them to unrelated third parties.
  • Running affiliate-link farms, fake-engagement bots, or any service whose primary purpose is to manipulate ranking or visibility on third-party platforms.

4. Malware and security abuse

  • Hosting malware, exploit kits, command-and-control infrastructure for botnets, cryptojacking scripts, or browser hijackers.
  • Using Pluralize to launch attacks against any system, including denial-of- service attacks, vulnerability scans you do not have permission to perform, or credential-stuffing campaigns.
  • Mining cryptocurrencies or running other high-CPU workloads incompatible with the Service's intended use as an auth/billing/data backend.

5. Abuse of the platform itself

  • Reverse engineering, decompiling or attempting to extract source code from the Service, except to the extent expressly permitted by applicable law.
  • Probing, scanning or testing the vulnerability of the Service without our prior written consent. We welcome coordinated disclosures at hello@pluralize.app.
  • Circumventing rate limits, plan limits, billing controls, or any other technical restriction.
  • Creating multiple free accounts to evade plan limits, or using the Service in a way designed primarily to consume disproportionate resources.
  • Scraping or republishing the dashboard, the docs site, or any other Pluralize property in bulk for resale.

6. Misrepresentation

  • Falsely implying that your App is operated, endorsed or certified by Pluralize.
  • Removing or obscuring our notices, branding or copyright statements where required.
  • Using the Pluralize name or logo in marketing without our prior written consent, beyond a factual statement that your App is "built on Pluralize".

High-risk use cases

The Service is not designed for and must not be used as the sole control for any of the following without your own additional safeguards:

  • Life-critical, safety-critical or medical-decision systems.
  • Aircraft, vehicle or industrial control systems.
  • Storage of cardholder data outside the Stripe-hosted flows we provide.
  • Storage of large volumes of special-category personal data (Art. 9 GDPR) without a documented DPIA and additional security measures discussed with us in advance.

Reporting violations

If you believe content hosted on Pluralize, or behaviour by an account or App, violates this AUP, please email hello@pluralize.app with the URL or App identifier and a brief description. We aim to acknowledge reports within one business day. CSAM reports take priority over everything else and may be reported by anyone, anonymously, to the same address.

Enforcement

We may, depending on the severity, the harm caused, and your history:

  • ask you to remove or modify the offending content;
  • throttle or temporarily suspend the affected App;
  • terminate the affected App or your entire account, with or without notice in proportion to the severity;
  • preserve evidence and report to law enforcement where legally required or appropriate.

For first-time, low-severity issues we will normally reach out and give you the chance to fix things. For severe abuse — CSAM, attacks against the platform or its users, fraud — we will act immediately and without warning.

Changes

We may update this policy. Material changes will be announced in-dashboard and by email at least 30 days before they take effect, except where a change is required to address an immediate legal or security concern.

Questions? Email hello@pluralize.app — we'll route to the right person.