This policy is part of our terms of service. It applies to every app, database, file and request on Rivtor, whoever deployed it: you, your teammates or the AI agents you connect.

Why this matters

Apps on Rivtor share infrastructure and, for now, the rivtor.com domain. One phishing page can get the whole domain flagged by browsers and take every customer's app down with it. So we act fast, and sometimes before asking.

What is not allowed

• Phishing and impersonation. Pages that imitate a bank, payment app, wallet, email provider or any other brand to collect credentials or payments, or that pretend to be Rivtor.
• Malware. Hosting or distributing viruses, ransomware, spyware, exploit kits or command-and-control servers.
• Cryptocurrency mining of any kind, including in the browsers of your visitors.
• Spam. Bulk or unsolicited email, messages or comments. Outbound SMTP on port 25 is blocked; send email through a provider that enforces consent.
• Open proxies, VPN exit nodes, Tor exit relays or services that anonymise traffic for others.
• Attacks on others. Denial-of-service, port or vulnerability scanning of systems you do not own, credential stuffing, or attempts to break out of your sandbox or reach other customers' apps or data.
• Illegal content under the laws of India or of the place your users are, including content that promotes terrorism or violence, unlawful gambling, and the sale of illegal goods.
• Child sexual abuse material. Zero tolerance. We remove it immediately, terminate the account and report it to the authorities.
• Infringement of copyright, trademarks or other rights, including pirated media and software.
• Harassment, doxxing, threats, or content that targets people for who they are.
• Getting around limits. Multiple free accounts, rotating projects to dodge sleep or bandwidth caps, or using the service in ways designed to consume resources without serving a real app.
• Misleading names. Project names and subdomains that imitate brands, banks, payment apps or Rivtor itself. Many such names are reserved and cannot be claimed.

Plans and limits

The Free plan is for personal and non-commercial projects. Apps that sell things, carry ads or serve a business need a paid plan. Free apps carry a “Hosted on Rivtor” badge with a link to report abuse.

How we enforce it

• Every deploy is scanned for known phishing kits and brand-impersonation patterns, and new URLs are checked against Google Safe Browsing.
• CPU usage is watched for mining patterns; network rules limit outbound connections.
• When scanning or a report finds a likely problem, the app is suspended automatically and a person reviews it.
• Our target is to act on a valid abuse report within 1 hour, at any time of day.
• Depending on severity, we may suspend one app, suspend the account, delete content, or close the account. Serious cases may be reported to the authorities.

Appeals

If you think we got it wrong, email abuse@rivtor.com from the address on your account with the project name and what the app does. A person will review it and reply. If an app was suspended by mistake, we restore it as it was; your data is not deleted during a suspension.

Reporting abuse

Seen something on a *.rivtor.com address or a domain hosted by us? Use the abuse report form or email abuse@rivtor.com with the full URL and what you saw.