web/src/views/AcceptableUseView.vue

<template>
  <LegalPage>
    <template #eyebrow>Legal · Conduct</template>
    <template #title>Acceptable Use Policy</template>
    <template #lede>
      A short, plain-language code of conduct for users, API
      consumers, and integrators.
    </template>
    <template #date>Last updated: 1 June 2026</template>
    <template #version>v1.0</template>
    <template #readtime>5 min read</template>

    <h2>You may use Ukweli to</h2>
    <ul>
      <li>Read, search, and quote audit reports for journalism,
        academic research, or civic education.</li>
      <li>Build dashboards, alerts, or watchdogs that monitor
        specific auditees, sectors, or fiscal years.</li>
      <li>Translate or summarize reports, provided the original
        citation is preserved.</li>
      <li>Embed our answers in your own publication <em>with full
        attribution</em> to the source document and to Ukweli.</li>
    </ul>

    <h2>You may not</h2>
    <ul>
      <li>Use the service for any unlawful purpose, including
        defamation, harassment, or incitement.</li>
      <li>Bypass rate limits, fingerprinting, or other technical
        safeguards. We track every request and will revoke access
        for abuse.</li>
      <li>Reverse-engineer or attempt to extract the underlying
        embeddings or ranking model.</li>
      <li>Republish the entire corpus of source documents in a
        commercial product; the OAG-K publishes the originals and
        supports that channel.</li>
      <li>Misrepresent answers as official OAG findings. Every
        answer must carry the citation chain back to the source.</li>
    </ul>

    <h2>API consumer rules</h2>
    <p>
      If you hold an API key, you additionally agree to:
    </p>
    <ul>
      <li>Keep your secret out of version control and client-side
        code. Rotate immediately if you suspect exposure.</li>
      <li>Honor the <code>X-RateLimit-*</code> response headers
        and back off when limits are reached.</li>
      <li>Provide a contact email in your API key's
        <em>description</em> field so we can reach you in case of
        abuse or necessary key rotation.</li>
      <li>Not share your key with third parties. If you need
        separate keys for separate projects, generate one per
        project.</li>
    </ul>

    <h2>Fair use</h2>
    <p>
      Even at the API tier (10,000 requests/day) we monitor aggregate
      usage. A pattern of requests that resembles scraping, automated
      polling at sub-second intervals, or excessive parallel
      concurrency may trigger a temporary rate cap and a request to
      chat with us.
    </p>

    <h2>Enforcement</h2>
    <p>
      We try to resolve issues with a quick email first. If that's
      not possible, we may — at our sole discretion:
    </p>
    <ul>
      <li>Throttle a specific key.</li>
      <li>Revoke a key without notice for material breach.</li>
      <li>Suspend a registered account.</li>
      <li>Block a subnet (in extreme cases of automated abuse).</li>
    </ul>

    <h2>Reporting abuse</h2>
    <p>
      If you notice abuse — spam, defamatory content, suspicious
      scraping — please report it to
      <a href="mailto:abuse@ukweli.ke">abuse@ukweli.ke</a> with
      relevant URLs, timestamps, and the offending user/key ID.
    </p>
  </LegalPage>
</template>

<script setup lang="ts">
import LegalPage from '@/components/LegalPage.vue'
</script>