About these policies. Shely is the service name. A separate legal operator name and business address have not been published. Contact [email protected] for operator information or policy questions. These policies do not limit rights that applicable law gives you.

Acceptable use

This policy applies to Shely accounts, connections, files, shared workspaces and AI requests. Technical controls reduce abuse; they do not detect every prohibited action or replace your responsibility to use systems lawfully.

Use only systems you are authorised to access

Connect only with the system owner's permission and stay within that permission. Do not use Shely for unauthorised scanning, credential guessing, exploitation, access to another person's account or interference with a system. Legitimate administration and security testing require authorisation from the affected system's owner.

Protect other people and their information

Do not steal, expose or misuse credentials or personal information. Do not distribute malware, carry out attacks, facilitate fraud or use Shely to transfer unlawful content. Respect intellectual property and privacy rights. Do not use the service in violation of applicable sanctions or other legal restrictions. These rules do not prohibit lawful reporting, privacy tools or exercising your legal rights.

Respect access controls and service limits

Do not bypass authentication, team permissions, host verification, usage quotas or other protective controls. Do not create abusive automation or traffic intended to degrade service for others. Session, connection, transfer and AI limits can depend on the account, workspace and deployment.

The hosted browser gateway has destination controls for private, loopback, link local and metadata addresses. Native direct connections do not use that gateway and can reach networks available to your device. A reachable destination is not evidence of permission to use it. Do not try to turn the hosted gateway into an unrestricted proxy or bypass its network controls.

Use the assistant responsibly

Do not submit stolen secrets or data you have no authority to share. Review commands before approving them. A model answer or risk warning does not authorise an action on a system, establish legal permission or guarantee that an action is safe.

Reporting and review

Report suspected abuse to [email protected]. Include relevant dates, identifiers and a description, but not passwords or private keys. We may ask for enough information to investigate without disclosing another user's private data.

We may restrict access as described in the terms when reasonably necessary to address abuse, security risks or legal obligations. Where safe and lawful, we will explain the reason. You can contact support to request review or correct a mistaken report. This policy creates no contractual fine or automatic loss of your content.

Security research

Report vulnerabilities to [email protected] or use the reporting links on the security page. The repository security policy describes the existing good faith research safe harbour. Test only your own accounts and data unless you have express permission; avoid service disruption and do not access or alter other users' data. Authorisation to test Shely is not authorisation to test an external provider or customer server.