1. Introduction

1.1. This Acceptable Use Policy (“AUP”) governs your use of the ChatCast platform operated by Comet Rocks GmbH (“we”, “us”, “our”). It applies to all users of the Service, including merchants, AI agents, and end-customers interacting with ChatCast-powered widgets.

1.2. This AUP supplements our Terms of Service and Agent Terms of Service. In the event of a conflict, the Terms of Service shall prevail unless this AUP imposes a stricter standard, in which case this AUP controls.

1.3. By using any part of the ChatCast platform, you agree to comply with this AUP. We may update this AUP from time to time, and continued use of the Service after changes are posted constitutes acceptance.

2. General prohibited conduct

2.1. You must not use the ChatCast platform to:

Violate any applicable law, regulation, or third-party right, including intellectual property, privacy, and consumer protection laws
Upload, transmit, or distribute content that is unlawful, defamatory, obscene, threatening, abusive, or that promotes violence, discrimination, or illegal activity
Impersonate any person or entity, or falsely represent your affiliation with any person or entity
Interfere with or disrupt the Service, its infrastructure, servers, networks, or other users' access to the Service
Introduce viruses, malware, trojan horses, or other harmful code into the platform
Attempt to gain unauthorized access to the Service, other user accounts, or systems connected to the Service
Use the Service for any purpose that competes directly with ChatCast without our prior written consent

3. Widget usage rules

3.1. Embedding. ChatCast widgets (FAQ widgets, AI shopping assistants) must be embedded only on storefronts you own or are authorized to manage. You must not embed ChatCast widgets on third-party websites without our authorization.

3.2. Content accuracy. You are responsible for ensuring that FAQs, product information, and policies displayed through ChatCast widgets on your storefront are accurate, current, and not misleading. Widget content must comply with applicable consumer protection and advertising laws.

3.3. No interference. You must not modify, reverse engineer, decompile, or tamper with the widget code, its communication with our servers, or the MCP discovery signals injected by the widget.

3.4. Privacy notices. If you enable ChatCast widgets on your storefront, you must ensure your storefront privacy policy accurately discloses the use of ChatCast and any associated data processing, consistent with your obligations as data controller under our Data Processing Agreement.

4. API and MCP endpoint usage

4.1. Authorized access. You may only access the ChatCast API and public MCP endpoints through the documented interfaces and protocols described in our developer documentation. Scraping, crawling, or accessing the Service through undocumented means is prohibited.

4.2. Rate limits. The public MCP endpoint is rate-limited to 100 requests per minute per IP address per store (sliding window). You must not attempt to circumvent, bypass, or exceed these limits through any means, including rotating IP addresses, distributing requests across multiple clients, or exploiting implementation details of the rate-limiting mechanism.

4.3. Fair usage. API and MCP access is provided for the purpose of serving real-time customer interactions. Bulk data extraction, pre-fetching entire product catalogs for offline storage, or using the API for competitive intelligence is prohibited.

4.4. Authentication integrity. You must not share, publish, or reuse authentication credentials (API keys, access tokens, discount codes) in a manner inconsistent with their intended purpose. Each credential is issued for a specific use and must not be transferred to unauthorized parties.

5. AI assistant guidelines

5.1. Merchant responsibility. Merchants who enable the AI shopping assistant are responsible for reviewing and configuring the assistant's behavior through the brand console. You must ensure the assistant is configured to provide accurate information about your products and services.

5.2. No harmful instructions. You must not configure the AI assistant to generate content that is unlawful, discriminatory, misleading to consumers, or harmful to end-customers. This includes but is not limited to false health claims, deceptive pricing, or misrepresentation of product characteristics.

5.3. Content limitations. The AI assistant provides information based on your product catalog and configured content. It is not a substitute for professional advice (medical, legal, financial, or otherwise). You must not market or present the AI assistant as providing such professional advice.

5.4. Transparency. End-customers interacting with ChatCast-powered AI features must be able to recognize they are communicating with an AI system. You must not remove or obscure AI disclosure indicators provided by the widget.

6. Agentic commerce rules

6.1. AI agents accessing the ChatCast platform via public MCP endpoints are additionally bound by the Agent Terms of Service. This section summarizes key acceptable use requirements; the Agent Terms govern in full.

6.2. Honest recommendations. Agents must provide truthful, accurate product recommendations to end-customers. Commission rates must not influence agents to recommend unsuitable products or misrepresent product features, pricing, or availability.

6.3. No fraud or manipulation. Agents must not create, facilitate, or benefit from fraudulent orders, fake purchases, self-referral schemes, or any manipulation of attribution tracking or commission calculation systems.

6.4. Discount code restrictions. Discount codes issued to agents are for use in direct customer conversations only. Publishing discount codes on coupon aggregation websites, forums, social media, or other public channels is strictly prohibited.

6.5. Data handling. Brand data accessed through the MCP endpoint (product catalogs, pricing, policies, FAQs) must only be used within the immediate context of serving a customer inquiry. Agents must not store, cache, redistribute, or commercially exploit brand data beyond this purpose.

6.6. No spam. Agents must not generate unsolicited bulk recommendations, mass marketing messages, or engage in any form of automated outreach that could constitute spam under applicable laws (including the German UWG).

7. Content standards

7.1. All content submitted to or displayed through the ChatCast platform must not:

Infringe any third party's intellectual property, privacy, or other rights
Contain or promote illegal products, services, or activities (including controlled substances where prohibited by law)
Include personal data of third parties without their consent or a lawful basis for processing
Violate export control laws or sanctions regulations applicable in the EU, Germany, or the user's jurisdiction
Contain content that targets or exploits minors in any way
Constitute or promote phishing, social engineering, or other deceptive practices

8. Security

8.1. Vulnerability testing. You must not conduct security testing, penetration testing, vulnerability scanning, or load testing against the ChatCast platform without our prior written authorization. If you discover a security vulnerability, please report it responsibly to security@chatcast.io.

8.2. Account security. You are responsible for maintaining the security of your account credentials, API keys, and access tokens. You must notify us immediately at security@chatcast.io if you suspect unauthorized access to your account.

8.3. No circumvention. You must not circumvent, disable, or interfere with any security features, access controls, usage limits, or technical measures implemented in the Service.

9. Intellectual property

9.1. Our IP. You must not copy, reproduce, reverse engineer, decompile, disassemble, or create derivative works of the ChatCast platform, its code, algorithms, models, or documentation, except as expressly permitted by applicable law (e.g., EU Directive 2009/24/EC for interoperability).

9.2. Resale and redistribution. You must not resell, sublicense, or redistribute the Service or any part of it without our prior written consent. This includes repackaging ChatCast functionality as part of a competing service.

9.3. Trademarks. You may use the ChatCast name and logo solely to identify that your storefront uses ChatCast, in accordance with any brand guidelines we may publish. Any other use of our trademarks requires prior written permission.

10. Enforcement

10.1. Monitoring. We may monitor use of the Service for compliance with this AUP. We are not obligated to actively monitor all activity but reserve the right to investigate suspected violations.

10.2. Graduated response. If we determine that you have violated this AUP, we may, at our sole discretion and depending on the severity of the violation:

Warning: Notify you of the violation and request that you remedy it within a reasonable timeframe
Restriction: Temporarily limit functionality, reduce rate limits, or disable specific features
Suspension: Temporarily suspend your access to the Service pending investigation or remediation
Termination: Permanently terminate your account and access to the Service in accordance with the Terms of Service

10.3. Urgent action. For violations that pose an immediate risk to the Service, other users, or third parties (including security incidents, fraud, or illegal activity), we may take immediate action without prior notice. We will inform you of the action taken and the reasons as soon as practicable.

10.4. Reporting violations. If you become aware of any violation of this AUP, please report it to support@chatcast.io.

11. Governing law

This AUP is governed by the laws of the Federal Republic of Germany. The exclusive place of jurisdiction for all disputes arising from or in connection with this AUP shall be Berlin, Germany. The United Nations Convention on Contracts for the International Sale of Goods (CISG) is excluded.

12. Contact

For questions regarding this Acceptable Use Policy, please contact:

Comet Rocks GmbH
Cuvrystrasse 1
10997 Berlin, Germany
Email: info@chatcast.io

Last updated: February 2026