# Cactus acceptable use policy

> Verified against the product on 2026-10-05

## Who it covers

This policy applies to:

- People on a team.
- People who read a Help Center or write through Messenger.
- Agents and AI clients connected to Cactus.

This policy is part of the [Terms of Service](https://cactus.heycactus.ai/cactus-terms-of-service). Each team is responsible for making sure its people follow it.

## Connect sources

Connect only sources you have the right to share with Cactus. Don’t connect personal data you weren’t allowed to collect or share. Don’t connect payment card numbers, health records, government ID numbers, or a source that exists to hold them. Cactus isn’t built to hold those kinds of data.

## What you publish

Don’t use Cactus to create, publish, or send:

- Illegal content, or content that helps someone break the law.
- Content that violates someone’s copyright, trademark, privacy, or other rights.
- Deceptive content, such as phishing, fake reviews, or impersonation.
- Harassment, threats, or content promoting violence or hatred against people for who they are.
- Sexual content involving children.
- Malware or links to malware.
- Spam, including bulk messages to people who didn’t ask for them.

## Use Cactus

Don’t try to access another team’s pages, conversations, or code, or anything your role doesn’t let you access. Don’t probe, scan, or attack Cactus, or try to get around its sign-in or limits. Don’t send enough requests to slow Cactus down for others. Don’t copy or take apart Cactus, use it to build a competing product, or resell access without written agreement. To report a security problem, follow the [Trust Center](https://cactus.heycactus.ai/cactus-trust-center).

## Ask Cactus

Don’t try to make Cactus ignore its rules, reveal what it shouldn’t, or act against the team it works for, including by hiding instructions in a question, page, or file Cactus reads. People and agents may read a published Help Center, its llms.txt, its markdown pages, and its public MCP address; keep requests slow enough that these stay quick for everyone else.

## If the policy is broken

| What happens | What it means | What to do |
| --- | --- | --- |
| Cactus removes content, stops reading a source, takes a Help Center or Messenger offline, or suspends a team | These are possible responses to a policy breach | The team’s Owners are told what happened and why, unless the law or the risk prevents it |
| You find misuse | Anyone can report it; you don’t need an account | Email hello@heycactus.ai |
| The law requires a report | Cactus reports what it finds to the authorities | No action is specified for you |