Acceptable Use Policy (AUP).

1. Principles

Alvo is designed for electricity-market analysis and trading decision support in line with Ukrainian and applicable European law. The Service is currently free and its resources are shared by every user, so use it for lawful purposes, with respect for others, and without harming the stability of the infrastructure.

2. Prohibited: market manipulation

Alvo only supports decisions; any action on the electricity market is governed by Ukrainian and European law. The following are prohibited:

• using the Service to coordinate bids between participants to influence prices (REMIT, Ukrainian Law on the Electricity Market);
• generating fake demand or supply signals on trading venues;
• using Alvo AI briefs to front-run other traders;
• any activity bearing signs of insider trading or wash trading.

Where market manipulation is suspected, we may notify NEURC, AMCU or ACER where the law allows or requires it.

3. Prohibited: technical integrity and data

• automated scraping or bulk downloading of data from the site or workspace outside the documented API (/developers);
• reselling, sublicensing or publicly redistributing data or outputs of the Service as your own product or feed — third-party source data is also restricted by its own licences;
• reverse-engineering, decompiling, or bypassing the Service's security mechanisms;
• attempts at unauthorized access to other users' accounts (password guessing, credential stuffing);
• DoS / DDoS attacks, deliberately exceeding rate limits, or evading them through multiple accounts or IP addresses;
• distributing malware, or phishing by impersonating the Alvo domain or emails.

4. API keys

If you hold an API key (it starts with alvo_live_), it is shown exactly once and cannot be recovered. You are responsible for keeping it safe:

• do not publish keys in code repositories, chats, or screenshots — keep them in a secret manager;
• do not share keys with third parties without Alvo's written consent — a breach may lead to suspension of access;
• on compromise, revoke the key in /account immediately and notify security@alvo.energy;
• do not use keys to act on behalf of people who have not explicitly agreed to it.

5. Content responsibility

You are responsible for data you upload to the Service (CSV imports, strategy profiles, audit notes, AI prompts). Alvo does not analyze or moderate it, but may stop processing it if it clearly violates the law or third-party rights.

6. Fair-use limits

To keep the free Service stable for everyone, the following limits apply. Exceeding a limit returns HTTP 429 with a Retry-After header.

7. Security and your responsibilities

• Enable two-factor authentication in /account — recommended for everyone, and especially for organization owners.
• If you hold API keys, rotate them regularly (we recommend every 90 days).
• Report suspicious activity to security@alvo.energy.

8. Enforcement

When a violation is confirmed, we respond in steps:

• First minor violation: an email warning and, where needed, temporarily reduced limits.
• Repeat or serious violation: temporary account suspension until you confirm in writing that the rules will be followed.
• Egregious violation (market manipulation, attempts to compromise other accounts, illegal content): immediate termination of access and, where the law requires it, notification of regulators.
• Security incident on your side: a joint investigation; liability for any damage is determined by law.

9. Reporting and appeals

Noticed abuse by another user? Email security@alvo.energy with details (time, IP, key identifiers — not full dumps). Anonymous reports are accepted, but without follow-up.

Disagree with our decision? Appeal via legal@alvo.energy within 14 days.