Acceptable use

Use the platform lawfully

Use KDPika only for software and data you are authorized to manage. Do not distribute malware, facilitate fraud, infringe intellectual-property rights, harass people or use licensing workflows to collect unrelated sensitive information. You are responsible for your application's legality and the notices and permissions required for customer and device processing.

Protect access and respect limits

Do not steal credentials, access another workspace, bypass email verification or payment checks, forge provider events, tamper with audit evidence or evade rate and plan limits. Do not multiply Free accounts to run production sales or exceed evaluation allowances. Do not use the platform to send spam or verification messages to addresses you do not control. Automated signup, recovery or resend abuse may be blocked.

Never include full card numbers, CVCs, plaintext passwords or privileged API secrets in support tickets, customer metadata or public applications. Keep administrative keys on trusted servers and revoke suspected compromised credentials. Use least-privilege access and maintain your application's own security updates.

Security research

Report suspected vulnerabilities privately to hi@kdpika.com with a reproducible, non-destructive description and minimal evidence. Do not access other users' information, persist access, perform denial-of-service testing or disclose personal data. Written authorization is needed before intrusive testing of the live service. A report does not imply authorization for exploitation, a bounty or immunity under law. We will assess credible reports and coordinate appropriate remediation.

Proportionate enforcement

We may restrict affected features, reject abusive requests or suspend access when reasonably necessary to protect users, comply with law or address a material breach. We aim to communicate the reason and remedy opportunity where appropriate and legally permitted. Urgent containment may precede notice. Contact hi@kdpika.com if you believe a restriction is mistaken. Enforcement does not remove statutory refund, conformity or data-protection rights; those requests are reviewed separately.