Versatl — Acceptable Use Policy

Effective Date: March 9, 2026

Last Updated: July 27, 2026

View previous versions

This Acceptable Use Policy ("AUP") defines what is and is not permitted on the Versatl platform, operated by Mfini Inc. ("Mfini," "Company," "we," "us," or "our") at versatl.ai. This policy applies to all users, including consumers and creators. Violation of this policy may result in enforcement actions including content removal or delisting, restriction or suspension of account features, or account termination (Section 5.2).

Scope — autonomous, scheduled, and configured activity. These prohibitions apply to any use of the Service, whether you perform an action directly, instruct an agent to perform it, or configure a standing instruction — a subscription, trigger, workflow, or the Proactive Assistant — that performs it later without further input from you. Actions the Platform takes under your standing instructions and autonomy settings are your use of the Service, and configuring an agent to do a prohibited thing violates this policy to the same extent as doing it yourself. The same applies to capabilities you supply: agents acting through a custom MCP server you registered, a webhook endpoint you configured, or a model API key you provided (BYOM) remain fully subject to this policy.

1. Prohibited Uses

You may not use the Service to:

1.1 Illegal Activity

• Violate any applicable local, state, national, or international law or regulation
• Facilitate fraud, money laundering, or financial crimes
• Generate content that constitutes illegal harassment, stalking, or threats
• Produce or distribute child sexual abuse material (CSAM) or any content sexualizing minors

1.2 Harmful Content

• Generate content designed to harass, bully, intimidate, or threaten individuals or groups
• Create disinformation, deepfakes, or deliberately misleading content intended to deceive
• Produce content that promotes violence, self-harm, or terrorism
• Generate spam or unsolicited bulk communications through the Service or any connected service

1.3 Intellectual Property Violations

• Use agents to systematically scrape, copy, or reproduce copyrighted material
• Publish agents that impersonate other creators, brands, or public figures
• Use the Platform to circumvent paywalls, DRM, or access controls

1.4 Security Violations

• Attempt to access other users' data, credentials, or account information
• Attempt to bypass Platform guardrails, rate limits, or safety filters
• Probe, scan, or test the Platform for vulnerabilities without authorization
• Attempt to reverse-engineer the Platform's AI models, prompts, or proprietary systems
• Inject adversarial prompts designed to manipulate agent behavior beyond intended use
• Share or publish your API keys or credentials
• Use the Versatl-operated MCP server (described in the Terms of Service §2 and the Privacy Policy §5.7) to access, enumerate, or invoke tools, agents, resources, or memory that the operating user has not explicitly authorized via the master switch (Settings → MCP) and the per-tool approval matrix; or to bypass the per-tool approval flow by reusing approvals across distinct tool calls
• Operate an external MCP client that you do not own or have permission to use, against a Versatl account that you do not own or have permission to use
• Register a custom MCP server that you are not authorized to connect, or one designed to return malicious tool results or prompt-injection payloads targeting the Platform, its agents, or other users' systems

1.5 Platform Abuse

• Create multiple accounts to circumvent usage limits, spend caps, bans, or rate limiting, or to obtain promotional credits (including the Welcome Credit) more than once
• Automate account creation or sign-up processes
• Resell or sublicense access to the Platform without authorization
• Manipulate agent ratings through fake accounts or coordinated voting

1.6 Third-Party Service Abuse

• Use any connected service in violation of that service's terms of use. The current inventory of connected services and their connection categories is maintained in the Connected Services Appendix at versatl.ai/legal/connected-services-appendix, which is incorporated by reference.
• Use agents to send spam, phishing emails, or unsolicited messages through the Service (including platform-managed bots and Platform email delivery) or any connected service
• Exceed rate limits or abuse APIs of connected services through automated agent actions

2. Publisher-Specific Restrictions

These restrictions apply to any agent you make available to another person — by listing it on the public marketplace, sharing it directly, or distributing a definition for import ("subscriber" below means any user of your agent). If you make an agent available to others, you additionally may not:

• Publish agents with system prompts designed to extract user personal data
• Include instructions that attempt to bypass Platform guardrails or credential isolation
• Reference credentials, API keys, or authentication tokens in system prompts
• Publish agents that impersonate Platform first-party agents
• Publish agents with misleading names, descriptions, or capability claims
• Misrepresent your agent's Bring-Your-Own-Model (BYOM) coverage state (see Marketplace Publisher Agreement §6.1, "Accurate BYOM disclosure")
• Use agent descriptions for advertising or promoting external services unrelated to the agent's function
• Attempt to access subscriber data through any means

3. Restricted Business Categories

The Platform processes payments through a regulated payment provider (Stripe). The following business categories and use cases are restricted on the Platform, both as content the agent generates AND as services the agent provides for or on behalf of a business operating in the category. This list mirrors and incorporates Stripe's published list of restricted businesses (available at https://stripe.com/restricted-businesses); changes Stripe makes to that list apply automatically.

You may not publish, subscribe to, or use an agent to facilitate transactions or operations for any of the following:

3.1 Financial and legal services

• Unregistered money services, money transmitters, or currency exchanges
• Cryptocurrency mining, exchanges, ICOs, or wallet services
• Debt collection, debt consolidation, or debt settlement services
• Credit repair, credit counseling, or credit monitoring services
• Bail bonds, factoring, payday lending, or check cashing
• Securities brokerage, financial advisory, or investment services without proper licensure
• Multi-level marketing (MLM), pyramid schemes, or matrix programs

3.2 Adult and regulated content

• Adult content, pornography, or escort services
• Dating services that facilitate sexual encounters
• Tobacco, vaping, e-cigarettes, or smoking accessories
• Cannabis (including CBD outside permitted jurisdictions), kratom, or other controlled substances
• Pharmaceuticals (prescription, non-prescription, or research chemicals) without proper licensure
• Nutraceuticals making unverified health claims; pseudo-pharmaceuticals

3.3 Weapons and dangerous goods

• Firearms, ammunition, explosives, or weapon parts
• Knives marketed for use as weapons
• Fireworks or other regulated explosives

3.4 Gambling and gaming

• Lotteries, sweepstakes, raffles, contests of chance for prizes
• Online gambling, sportsbooks, fantasy sports for prizes
• Skill-based games where users wager money

3.5 Aggressive marketing and outreach

• Telemarketing or robocalling, including agents that initiate phone calls
• Bulk email marketing services not honoring CAN-SPAM/GDPR
• Lead generation services that collect or sell consumer data without consent
• Negative-option, free-trial, or auto-renewal billing schemes designed to obscure cancellation

3.6 IP, fraud, and security

• Counterfeit goods, replica products, or unauthorized resale of branded goods
• Stolen goods, including digital goods (cracked software, accounts, data)
• Hacking tools, malware, exploits, or services that compromise other systems
• Document forgery, fake IDs, or services that misrepresent identity
• Essay mills, academic dishonesty services, or contract cheating

3.7 Other restricted

• Get-rich-quick schemes, work-from-home schemes, or any operation Stripe lists as high-risk
• Any business or use case that Stripe, our payment provider, designates as restricted, prohibited, or unsupported

By using the Platform you represent that your activity (and, if you are a publisher, each agent you list) does not facilitate any of the above. Mfini may take the enforcement actions described in Section 5.2 (including restricting or suspending account features and delisting or terminating accounts and listings) against activity that violates this section, withhold or claw back payouts associated with such activity, and report suspected fraud to Stripe and law enforcement.

4. Content Guidelines

4.1 Agent Descriptions

Agent names and descriptions should be:

• Accurate and truthful about the agent's capabilities
• Free of offensive, discriminatory, or inflammatory language
• Professional and suitable for a general business audience

4.2 System Prompts

Agent system prompts must:

• Stay within the agent's declared capabilities and category
• Not contain instructions to ignore safety guidelines
• Not include hardcoded credentials, URLs to malicious sites, or injection patterns
• Pass the Platform's automated review checks at publish time if submitted to the marketplace (see Marketplace Publisher Agreement §2.5)

4.3 Task Outputs

The Platform applies automated guardrails to task-execution outputs: certain common formatted personally identifiable information patterns (for example, dash-formatted Social Security numbers, 16-digit payment-card numbers, and email addresses) are detected and redacted, while content-safety and budget checks run in advisory mode — they record an advisory signal in our logs but do not block delivery or route the output to a human review queue. These guardrails are a safety net, not a guarantee: they run on task outputs, not on every delivery channel, and users remain responsible for reviewing outputs before publishing them externally. (Spend limits are enforced separately at billing time; see Terms of Service §5.3.1.)

5. Enforcement

5.1 Detection

We use a combination of automated review checks, admin review processes, user reports, and monitoring to detect violations.

5.2 Actions

Depending on severity and recurrence, enforcement actions may include: a warning with required correction; removal or delisting of content or agents; temporary restriction or suspension of some or all account features (including pausing scheduled and background activity); or termination and closure of the account. We choose the action we judge proportionate to the violation and may escalate if it recurs. Suspension for a violation does not pause, extend, or entitle you to credit or refund for prepaid subscription periods; during a suspension, scheduled and background activity is refused and no new subscription charges are made. Remedies for suspensions issued in error are at our discretion (we may credit or refund unserved time). Illustrative examples:

5.3 Appeals

If you believe an enforcement action was taken in error, you may appeal by contacting abuse@versatl.ai within 30 days. We will review your appeal and respond within 10 business days.

6. Reporting Violations

If you encounter content or behavior that violates this AUP, please report it to:

Email: abuse@versatl.ai

Include as much detail as possible, such as the agent name/ID, task ID, or a description of the violation.

7. Changes

We may update this AUP from time to time. Material changes will be communicated via email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance.

8. Contact

Mfini Inc.

Email: abuse@versatl.ai

Address: 1401 Lavaca St, Ste 558, Austin, TX 78701