Legal
Acceptable Use Policy
What the platform may and may not be used for.
This document is a draft
It has no effective date and is not yet in force. 1 section is still awaiting approved legal text and is marked below. What it does describe is how the platform actually behaves today, and that part is accurate.
1. Who this covers
1.Who this covers
This applies to every account, on every plan, in every console — personal, reseller and developer alike.
2. Your account
2.Your account
- An account is for the person or business it was registered to. Do not share sign-in credentials.
- Do not use an account, wallet or payment instrument that is not yours.
- Keep your password and transaction PIN to yourself. We will never ask for either.
- Do not attempt to reach another account’s transactions, tickets or wallet.
3. Transactions
3.Transactions
- Do not use the platform for anything unlawful.
- Do not fund a wallet with money that is not lawfully yours.
- Do not attempt to reverse, duplicate or manufacture a transaction outside the platform’s own flows.
- Do not deliberately re-submit a purchase that is still unresolved in order to create a duplicate.
4. The developer API
4.The developer API
Accounts on the API plan agree to these in addition to everything above. The API Terms cover the developer platform in full.
- Keep API keys on your own server. Do not put one in frontend code, a public repository, a screenshot or a support message.
- Revoke a key you believe has been exposed. Revoking needs no PIN precisely so nothing stands between you and that control.
- Respect the published rate limits, and back off when you receive a rate-limit response rather than retrying immediately.
- Do not attempt to bypass authentication, rate limiting or the idempotency requirement on purchases.
- Do not use the API to probe the platform for weaknesses without written permission.
Plans do not overlap
A reseller plan does not include developer access, and the API plan does not include the reseller console. Attempting to reach a console your plan does not include is not a violation — it is simply refused — but circumventing that refusal is.
5. The platform itself
5.The platform itself
- Do not impersonate BuyByteData, its staff or its support.
- Do not attempt to interfere with the platform’s availability for other customers.
- Do not scrape, republish or resell platform content except as your plan expressly permits.
6. Reporting a problem
6.Reporting a problem
If you believe an account has been compromised, or you find a security weakness, tell us through support. Do not test a weakness against another customer’s account.
7. Enforcement
7.Enforcement
Awaiting approved legal text
What BuyByteData may do in response to a breach — warning, restriction, suspension, closure or investigation — what notice is given, and how a decision is appealed.
Nothing has been drafted for this section, and nothing has been invented in its place. It will be published here once it is approved.
8. Contact
8.Contact
Questions about this document go to support. Signed-in customers can open a ticket, which attaches their account and any transaction they are asking about; anyone else can use the contact page.
BuyByteData has not published a support telephone number or a direct email address. Anyone offering one is not us.