Acceptable Use Policy

Wallaby Data Pty Ltd (trading as Wallaby Token) · ABN 90 701 729 964 · Last updated: 1 September 2026

This policy defines what you may not do with the Wallaby API. It is part of our Terms of Service. You are responsible for every request made under your API keys, including requests made by your users through your product.

1. Illegal and harmful activity

• No use that violates any applicable law or regulation, in Australia or in the jurisdiction where you or your end users are located.
• No fraud, phishing, scams, or deceptive practices of any kind.
• No generation, distribution, or facilitation of child sexual abuse material. We report CSAM to the Australian eSafety Commissioner and relevant authorities.
• No creation or distribution of malware, ransomware, or exploit tooling.
• No doxxing, stalking, harassment, or incitement of violence against any person or group.
• No sexually explicit or pornographic content, including sexual chatbots and erotic role-play services, whether or not such content is legal in your jurisdiction.
• No graphic violence or gore: no generation of content that depicts, glorifies, or instructs in real-world violence, torture, or cruelty to people or animals.

2. Deception and manipulation

• No large-scale disinformation, astroturfing, or coordinated inauthentic behaviour.
• No impersonation of real people or organisations without clear disclosure.
• No undisclosed AI-generated content where disclosure is legally required (e.g. electoral communications).

3. Surveillance and rights violations

• No unauthorised surveillance, profiling, or biometric identification of individuals.
• No use that circumvents sanctions, export controls, or trade restrictions.
• No automated decision-making with legal or significant effects on people (credit, employment, housing, insurance) without meaningful human review and a lawful basis.

4. Platform abuse

• No attempting to probe, bypass, or degrade our security, rate limits, or metering.
• No reselling access to your key or sharing one key across unrelated third parties without our written consent (resale arrangements are available — ask us).
• No model extraction or distillation: do not use output from the Service to train, fine-tune, or distil any model, do not systematically harvest output to build datasets, and do not attempt to replicate the functionality of any model we provide, without our written consent. Accounts terminated for model extraction are not eligible for refund of remaining balance.
• No scraping or probing of model internals, weights, or system prompts by automated means.
• No misrepresenting the origin of output, including claiming human authorship where that claim is fraudulent.
• No creating multiple accounts to farm trial credit, evade rate limits, or circumvent metering — one trial per person or organisation.

5. Enforcement

We may investigate suspected violations, suspend service immediately where warranted, terminate accounts for serious or repeated breaches, and report unlawful conduct to authorities. Where practicable and lawful, we will tell you why and give you a chance to fix the issue before termination.

6. Reporting abuse

See misuse of our service? Email abuse@wallabytoken.com. We read every report.