AUTHORIZED DATA / EXPLICIT BOUNDARIES
Use the action layer
only for legitimate business operations.
This Policy applies to every workspace, API key, agent, job, report, callback, and connected system used with ActionDock.
Supported use
ActionDock may be used to analyze business documents supplied by the customer, extract and validate structured records, conduct bounded public-web research, create internal reports, and read or update customer-approved HTTPS business systems within configured method and path limits.
The calling agent must remain under the customer’s control. External writes always require approval from a signed-in workspace owner after review of the exact request preview. Supported use is limited to the customer’s legitimate internal business operations: reading and updating records in systems the customer controls, including the customer’s own billing account, and posting notifications to the customer’s own team workspace. It does not include delivering messages to customers or other external people, audience acquisition, public posting, moving money out of an account, regulated decisions, or services sold to third parties.
Required authority and transparency
- Use only data, accounts, APIs, and source material you own or are authorized to process.
- Provide legally required notices and obtain valid permission for personal data.
- Respect access controls, contractual restrictions, intellectual-property rights, robots directives, and applicable law.
- Review machine-generated results and external-write previews before relying on or approving them.
- Identify automated assistance where law, contract, or reasonable user expectation requires it.
Prohibited uses
You may not use ActionDock to:
- break the law; facilitate fraud, deception, harassment, discrimination, violence, exploitation, or evasion of sanctions;
- gain unauthorized access, scan or attack systems, deploy malware, steal credentials, bypass technical controls, or expose another party’s confidential data;
- run advertising, lead generation, unsolicited outreach, engagement manipulation, campaign automation, bulk customer messaging, or any customer-facing messaging over SMS, voice, email, chat-app, or social channels;
- provide or resell carrier, phone-number, message-delivery, proxy, marketplace, payment, money-transfer, stored-value, gift-card, or virtual-currency services to others, or use a connection to move money out of an account, change where money is paid out, act on a third party’s account, or submit card or bank account details;
- make or recommend automated decisions about people, or score, rank, profile, infer sensitive traits about, or categorize people, whether or not the result is used for eligibility, employment, credit, insurance, housing, education, medical, legal, biometric, or another high-impact purpose;
- generate or distribute human-like faces, face swaps, deepfakes, voice impersonation, deceptive identity, a person’s likeness without explicit consent, sexual content, unlawful surveillance material, or content that infringes another party’s rights;
- scrape personal data at scale, build identity profiles, solve access challenges, evade rate limits, or circumvent a source’s terms;
- operate or support gambling, betting, adult or dating services, medical advice, financial or credit advice, trading signals, government services, pseudoscience, unauthorized certification or exam-preparation resale, travel resale, device repair or security-optimization products, VPN or proxy services, CAPTCHA solving, or unauthorized software resale;
- sell physical goods, standalone human services, donations, crowdfunding, community access, advertising, sponsorship, or third-party marketplace inventory through ActionDock;
- misrepresent a preview, queued job, failed job, or approval request as a completed external action; or
- offer ActionDock itself, its limits, or provider capacity as a transferable credit, resale service, or hidden sub-processor without written authorization.
API connection policy
Connections must use HTTPS on the standard secure port, resolve to public network addresses, and point to a legitimate business system controlled or authorized by the workspace owner. Redirects, local or private network targets, embedded credentials, arbitrary agent-supplied headers, and paths outside the configured allowlist are rejected.
ActionDock blocks destination categories that fall outside supported use: SMS, voice, and telephony providers; transactional-email and marketing-automation platforms; consumer messaging apps; social-publishing platforms; exchanges and trading platforms; money-transfer services; and payment processors other than the restricted destination described below. A technically reachable endpoint is not automatically an acceptable destination.
Restricted destinations. A workspace owner may connect the owner’s own account at a small set of providers under limits the server enforces on every request, after accepting a fixed confirmation that the account belongs to the owner and will not be used to provide messaging, payment, or money-transfer services to others: a team-chat workspace (Slack) for notifications to the owner’s own team, with administrative, directory, scheduling, and cross-organization sharing endpoints refused and webhook URLs not accepted; and a Stripe account only through a Stripe restricted API key and an explicit resource allowlist, with payouts, transfers, top-ups, account and payout-destination changes, connected-account, Treasury, Issuing, crypto, card-data, checkout, terminal, and direct payment-creation endpoints, invoice payment and sending, quote acceptance, and the corresponding request parameters refused for every method. Approval of every write by a signed-in workspace owner still applies. ActionDock never holds funds, card data, or a provider balance; provider responses to approved requests are kept in the job record as described in the Privacy Policy and on the Security page.
Enforcement and reporting
We may reject a job, disable a connection or key, preserve evidence, rate-limit activity, suspend a workspace, or terminate access when reasonably necessary to investigate or prevent a violation. Serious or urgent abuse may be acted on without advance notice.
Report suspected abuse to support@actiondock.app with relevant job or workspace identifiers. Do not include secrets or full payment details.
Operator
RSAngel / ActionDock
Representative: Khan Svetlana
Business Registration Number: 580-50-00933
Address: 충청남도 아산시 신창면 천우물로 22, 101동 603호 (아산 삼부르네상스 더힐)
Email: support@actiondock.app