Last updated: August 17, 2026

This policy applies to Duvento Cloud and describes what you may and may not do with the service. It supplements our Terms of Service.

1. You may not

• Use Duvento for any unlawful purpose, or to track, store, or facilitate access to assets you are not authorized to manage.
• Store registrar passwords, hosting passwords, API secrets, private keys, payment card numbers, or anyone's passwords anywhere in Duvento (see also the "No secret storage" clause in our Terms).
• Attempt to bypass plan limits (users, clients, assets, SSL checks, reminder emails) through automation, multiple accounts, or other workarounds.
• Scrape, reverse-engineer, or attempt to extract the underlying source code of Duvento Cloud beyond what is already published in the open-source self-hosted edition.
• Use our SSL-checking feature, API, or webhooks to scan, probe, or interact with domains and servers you do not own or have explicit permission to monitor.
• Send spam, phishing content, or malware through Duvento's email or Telegram reminder features.
• Resell or sublicense access to Duvento Cloud without our written permission (reselling to your own clients as part of your agency services, without giving them direct login access to your workspace, is fine).
• Interfere with or disrupt the service, attempt unauthorized access to other workspaces, or conduct security testing against Duvento Cloud without our prior written consent.
• Upload content that infringes on someone else's intellectual property or violates their privacy rights.

2. Fair use of shared resources

Plan limits exist to keep the service fast and reliable for everyone. If your legitimate usage pattern doesn't fit within a plan's limits, contact us — we're generally happy to work out a reasonable arrangement rather than have you work around the system.

3. Reporting violations

If you believe another user is violating this policy, contact us at support@duvento.com.

4. Consequences

Violating this policy may result in a warning, suspension, or termination of your account, at our discretion, depending on severity. We aim to give notice and an opportunity to fix the issue where the violation isn't severe or urgent (e.g., a security risk to other users).