Acceptable use

Dispatch runs shells on your own machine. What you run in them is your business, in the same way that what you type into any other terminal is your business. There is no content policy here, nothing is inspected, and nothing could be — commands and output never leave your computer.

So this page is short. It covers the licence and the licence server, because those are the only two things we actually own.

Do not

• Share your key. One licence covers one person or one organisation, on up to 3 machines. Seats exist so you can work across a desktop, a laptop and a VM.
• Resell, rent or sublicense access, or run Dispatch as a service for other people.
• Patch out or work around the licence check, or publish anything that helps others do it. You may read the code — see the EULA — but defeating the gate is the line.
• Attack the licence server. No credential stuffing, no enumerating keys or addresses, no load testing it without asking, no attempts to mint yourself a licence. If you have found a way to do any of those, that is a security report and we would like to receive it — see Security.
• Use it to break the law, or in a way that makes us break it.

Rate limits are not a rule

The licence server limits how often each endpoint can be called from one address. Hitting a limit gets you an HTTP 429 and nothing else — it is not a breach of this page, it is the server doing its job. Trials are limited more tightly than launch checks, which is why a script that asks for trials in a loop stops working quickly.

What happens if you do

Your key is revoked, and one email goes to the address on the licence saying which line was crossed. No refund of the current period — that is the only case where Refunds does not apply.

We would rather send an email than a revocation. If something you are planning looks like it might be on this list, ask first: a use we have not thought of is more likely to get a yes than a lecture.

Reporting misuse

If you believe someone is sharing or reselling a key, or you have received Dispatch from somewhere that is not us:

TODOthe support address — set LEGAL.contact.support in src/lib/site.ts

Security vulnerabilities go somewhere else — Security and disclosure.