()initio.studio

// legal & compliance

Acceptable Use Policy

Mandatory security standards, anti-abuse guidelines, and API operational rules for all users and client organizations.

Effective: October 11, 2026Last Updated: October 11, 2026Status: Active & Binding
Terms of ServicePrivacy PolicyAcceptable UseRefund & Cancellation
Zero Tolerance for Platform Abuse: InitioStudio aggressively monitors infrastructure traffic. Reverse-engineering our APIs, conducting unauthorized vulnerability scans, launching DDoS attacks, or distributing malware will trigger immediate IP blacklisting and formal reporting to statutory authorities.

1. Prohibited Engineering & IP Activities

Users, developers, and organizations shall NOT under any circumstances:

  • Reverse Engineering: Decompile, disassemble, reverse engineer, unpack, or attempt to derive the human-readable source code of any compiled InitioStudio binary, React frontend bundle, or Python ASGI/FastAPI microservice.
  • Circumventing Security Controls: Bypass, disable, or tamper with API rate-limiters, cryptographic token verifications, or multi-tenant database partitioning logic.
  • Interface Cloning: Replicate or create derivative works of our proprietary SAISYNC administrative layouts, watermarking engines, or client dashboards for commercial distribution.

2. Network Security & Infrastructure Protection

Denial-of-Service & Floods

Launching or participating in SYN floods, UDP amplification, slowloris attacks, or automated connection storms intended to degrade server performance or crash our services.

Unauthorized Penetration Testing

Scanning, probing, or testing our firewalls, databases, or API routes for vulnerabilities without prior written authorization from InitioStudio’s Security Operations Desk.

3. Automated Scraping & API Rate Limits

  • Scraping Prohibited: Systematic extraction or scraping of student records, portfolio databases, or client tenant registries via automated bots, spiders, or headless browsers is strictly prohibited.
  • Evasion Countermeasures: Rotating residential proxies, spoofing user-agent strings, or orchestrating distributed cloud workers to bypass our rate limits will result in permanent firewall IP bans.
  • Credential Stuffing: Automated password spraying or brute-force attempts on /saisync/token/ or admin endpoints is strictly banned.

4. Specialized Endpoint Rules

Cloudscraper Proxy Route (/tbi/proxy)

Provided strictly for authorized upstream API integration. Prohibited for routing traffic to phishing portals, scraping paywalled sites, or proxying copyrighted streaming media.

URL Shortener & Redirection (/tbi/shorten, /{code})

Short links must never resolve to malware, trojans, ransomware, drive-by downloads, phishing login scams, sexually explicit content, or unverified crypto mining scripts.

5. Academic & Content Standards

  • No Pirated Courseware: Organizations and users shall not host or distribute unlicenced textbooks, proprietary question banks, or stolen academic notes.
  • Integrity of Records: Forging, tampering with, or falsifying database-stored academic grades or examination transcripts is an offence subject to immediate criminal reporting under the Information Technology Act, 2000.

6. Responsible Security Disclosure

Safe Harbor for Ethical Researchers

We welcome ethical vulnerability reports. Submit potential findings to security@initiostudio.in. Do not exploit vulnerabilities, access data of other tenants, or disclose issues publicly until patched. Ethical researchers who follow our responsible disclosure protocol will not face legal action.

Legal & Regulatory Inquiries

For contract amendments, data processing addenda (DPA), grievance redressal under the India DPDP Act, or statutory notices, please contact our Legal Counsel at legal@initiostudio.in or reach our Data Protection Officer at dpo@initiostudio.in.

INITIO Studio · Hyderabad, Telangana, India · Standard Response SLA: 48 business hours