Acceptable use policy
Last updated 30 September 2026
This policy sets out what you may not do with Tightlip. It is part of our terms of service. In this policy, “we” and “us” mean Harbor Software LLC, and “you” includes anyone who uses Tightlip through your account or your API key.
1. What you may not do
You may not:
- break the law, or help anyone else break it;
- create, send or store content that is illegal, or that harasses, threatens, defrauds or harms anyone;
- process data you have no right to process, such as data you obtained unlawfully or data you promised someone you would keep to yourself;
- try to defeat, probe, test or get around Tightlip’s protections, its credit metering or its access controls, unless we have agreed to it in writing;
- change the extension, SDK or proxy so that it protects text without metering the credits it should;
- forge, guess or derive API keys, reverse engineer how API keys are made or checked, or use someone else’s key without their permission;
- sell, resell or transfer credits, or sell access to Tightlip itself as a service, without our written agreement;
- open more than one account, or use automated sign-ups, to get free credits more than once;
- overload, disrupt or attack Tightlip, send malware through it, or scrape it;
- use Tightlip to get around an AI provider’s safety systems or usage policies;
- pretend to be someone else, or give a false account of who you work for.
Using the SDK or proxy inside your own product, with your own API key and your own credits, is allowed. So is using your API key across your own organization, as long as you keep it secret from everyone else.
2. Your responsibility for what you send
Tightlip reduces what an AI provider sees. You remain responsible for what you send to AI providers and for how you use their answers. Detection is automatic and can miss things, so check the preview before you send, and add names that must always be hidden to your custom terms list.
You must also follow the rules of each AI provider you use. In the web workspace, that includes Anthropic’s Usage Policy. With the extension, SDK and proxy, it includes the usage policies of the provider you choose.
3. What we do if you break this policy
We may look into suspected breaches. If you break this policy, we may warn you, stop an API key from working, suspend your account or close it. Where a problem can be fixed and the situation allows, we will tell you first and give you a reasonable chance to fix it. We may act straight away where there is a security risk, a risk of harm to others or a legal requirement.
Credits used in breach of this policy are not refunded. We may remove free credits obtained in breach of it. We may report illegal activity to the authorities.
4. Reporting a problem
To report abuse, a breach of this policy or a security weakness in Tightlip, email hello@tightlipai.com. Tell us what you found and where, with enough detail for us to find it.
5. Changes to this policy
We may update this policy. We tell you about material changes the same way as for the terms of service, as section 17 of the terms explains.