Forjo
Get started

Legal

Acceptable Use Policy

What you may not build, run or host on Forjo, and what happens when someone reports an app. These rules keep the service safe for everyone who builds on it and everyone who visits what they publish.

Last updated 11 November 2026Effective [EFFECTIVE DATE]

On this page 16 sections

What this covers

This policy applies to everything you do on Forjo: what you ask the agent to build, what runs in your project’s container, and every app you publish, on a Forjo address or on your own domain. It is part of our Terms of Service.

The rules apply whoever wrote the code. “The agent wrote it” is not an excuse, and asking the agent to build something on this list is itself a breach.

Phishing, fraud and impersonation

  • Fake sign-in pages, or anything that tricks people into giving up passwords, codes, card or bank details.
  • Sites that copy or pretend to be a real company, bank, government body or person.
  • Scams, fake shops, fake investment schemes, pyramid schemes and fake giveaways.

Malware

  • Viruses, ransomware, spyware, keyloggers and password stealers.
  • Command-and-control servers for botnets, or hosting files that infect other devices.
  • Code designed to hide what it does from the people running it.

Crypto mining

No mining of any cryptocurrency, in project containers or in published apps, including “browser mining” in visitors’ browsers and other proof-of-work jobs that only burn computing power.

Spam

  • Sending bulk email, text messages or chat messages that people did not ask for.
  • Posting automated comments, reviews or messages on other sites.
  • Creating fake accounts on other services in bulk.
  • Hosting pages whose only purpose is to promote spam or game search rankings.

Illegal and harmful content

  • Any sexual content involving minors. We remove it immediately, close the account and report it to the relevant authorities.
  • Intimate images shared without the consent of the people in them.
  • Content that threatens, harasses or incites violence, or that publishes someone’s private details to target them.
  • Content supporting terrorism or violent extremism.
  • Selling illegal goods or services, or goods that need a licence you do not have.
  • Content that infringes someone else’s copyright, trademark or other rights.
  • Collecting personal data without a lawful reason, or without telling people.

Attacks and network abuse

  • Denial-of-service attacks, or tools that flood other systems with traffic.
  • Scanning, probing or breaking into systems you do not own or have written permission to test.
  • Running open proxies, VPN exit points or anonymising relays for other people.
  • Trying to get out of your container, read other people’s projects, or get around Forjo’s own security, limits or monitoring.

Scraping abuse

Apps that read public web pages are fine. It becomes abuse when an app:

  • collects so much, or so fast, that it harms the site it reads;
  • ignores a site’s terms or robots rules in a way that breaks the law;
  • gets around logins, paywalls, CAPTCHAs or rate limits; or
  • harvests personal data, such as email addresses or phone numbers, to build lists.

Evading limits and reselling credits

  • Opening more than one account to get the free Trial again, or to get around a plan limit or a ban.
  • Getting around credit counting, rate limits or resource limits by any means.
  • Selling, trading or giving away free Trial credits or accounts.
  • Reselling access to Forjo or to its AI models, for example as a proxy or API for other people, without our written agreement.
  • Sharing one account between several people to avoid paying for a Team plan.

Fair use of resources

Project containers are for building and running your apps. Do not use them for unrelated heavy work, such as long-running batch jobs, video encoding farms or file hosting for large downloads. If a project uses far more than a normal app, we may slow it down, pause it, or ask you to move to a bigger plan.

Security research

If you find a security problem in Forjo, please tell us at [ABUSE EMAIL] with “Security” in the subject. Test only against your own account and projects, do not access other people’s data, and give us a fair chance to fix it before telling anyone else. We will not take action against research done in good faith under these rules.

Reporting abuse

If you see an app on Forjo that breaks this policy, email [ABUSE EMAIL]. You do not need an account. Include:

  • the full address (URL) of the app or page;
  • what is wrong, and which rule it breaks if you know;
  • when you saw it;
  • evidence such as screenshots, and for phishing or spam email, the full message with its headers; and
  • how we can reach you if we have questions.

Please do not send malware as an attachment. Send a link to it, or its file hash, instead.

How takedowns work

  1. We review every report. Reports about phishing, malware and harm to children come first.
  2. If harm is likely, we act straight away. We can unpublish an app, stop its container or suspend the account before talking to its owner.
  3. Otherwise we contact the owner and ask them to fix the problem within a set time, usually 48 hours.
  4. We keep evidence and, where the law requires or someone is at risk, pass it to the authorities.
  5. Repeated or serious breaches end the account. We may also refuse new accounts from the same person.

If we removed your content

We will tell you what we removed and why, unless the law or someone’s safety prevents it. If you think we got it wrong, reply to our message or email [email protected], and a person will look at it again.

Changes to this policy

New kinds of abuse appear all the time, so we may add to this policy. We will change the date at the top when we do, and tell you about significant changes by email or in the app.