Usage Policies

1. Acceptable Use

Durbl is designed for building AI applications with persistent memory. You may use Durbl for:

AI agents, copilots, and assistants
Chatbots with persistent context
SaaS applications with AI personalization
Research and experimentation
Internal business tools

You may NOT use Durbl for:

Storing illegal content or facilitating illegal activities
Surveillance, tracking, or monitoring individuals without consent
Building weapons, malware, or tools designed to cause harm
Storing sensitive personal data (health records, financial data) without appropriate compliance measures
Scraping, spam, or abuse of other services
Attempting to reverse-engineer Durbl Cloud infrastructure

2. Data Policies

You own your data. Durbl does not claim ownership of any content you store in the engine.
Durbl does not access, read, or analyze the content of your memories except as needed for technical support at your explicit request.
Data is stored in EU data centers (Frankfurt, Germany) for cloud users.
Self-hosted users control their own data location entirely.
You can export or delete your data at any time via API or by contacting support@durbl.dev.

3. Memory Lifecycle Policies

Durbl provides configurable memory lifecycle management:

Retention policies: define how long memories are kept
Decay policies: configure how quickly unused memories lose priority
Summarization policies: control when old memories are condensed
Deletion policies: set rules for permanent memory removal

You are responsible for configuring lifecycle policies appropriate for your use case and applicable regulations (e.g., GDPR right to be forgotten).

4. Rate Limiting & Fair Use

Each plan includes defined capacity limits (memory objects, context builds, API calls). These limits ensure fair resource allocation for all users.

If you exceed your plan limits:

You will receive a notification before reaching the limit
API calls beyond the limit return HTTP 429 with a clear message
Your existing data is never deleted due to limit overages
You can upgrade your plan at any time for more capacity

Automated abuse (excessive API calls, scripted attacks) may result in temporary rate limiting or account suspension.

5. Account Suspension

Durbl reserves the right to suspend accounts that:

Violate these usage policies
Engage in automated abuse or excessive resource consumption
Use the platform for illegal purposes
Fail to pay for paid plans after multiple reminders

Before suspension, we will:

Notify you via email with the specific concern
Give you 7 days to respond or correct the issue
Only suspend if the issue is not resolved

Suspended accounts retain their data for 30 days. After 30 days, data may be permanently deleted.

6. API Key Security

API keys grant full access to your project''s data
Keep API keys secret — do not commit them to public repositories
Rotate keys if you suspect unauthorized access
Each project has its own API key — keys cannot access other projects
Durbl is not responsible for data breaches caused by leaked API keys

7. Compliance

Durbl Cloud is hosted in EU data centers and designed with GDPR-readiness in mind. However:

Durbl is not HIPAA certified (do not store protected health info)
Durbl is not SOC 2 certified yet (coming in a future version)
For compliance-sensitive workloads, contact sales@durbl.dev to discuss enterprise options including on-premise deployment

8. Changes to These Policies

We may update these policies as the platform evolves. Material changes will be communicated via email to all account holders. Continued use of the platform after changes constitutes acceptance.

9. Contact

For questions about these policies: legal@durbl.dev To report abuse: abuse@durbl.dev