Acceptable Use Policy

What may be built here

Hexvor writes and hosts websites on request. That means a page somebody types into existence here runs on our infrastructure, at our address, under our reputation — so the limits below are not a formality. They are the terms on which we are willing to carry what you make.

In force from 2026-08-22. Part of the Terms of Service; the definitions there apply here.

1. What this covers

This policy applies to everything you do with the Service: what you type into the prompt, what the model writes for you, what you upload, what you publish on a hexvor.com address or on a domain of your own pointed at us, what your published site does to its visitors, and how you use our API, forms and e-mail features.

It applies whether a site is public, unlisted, or only ever visible in your own preview. A page that is not linked is still hosted.

2. Prohibited content and conduct

You may not use Hexvor to create, generate, host, publish, link to, or distribute any of the following.

2.1 Deception and fraud

• Phishing. Any page designed to obtain passwords, one-time codes, card numbers, bank credentials, wallet seed phrases, or identity documents by pretending to be someone else.
• Impersonation. Presenting yourself, your site, or your business as a person, company, bank, public authority, or brand you are not authorised to represent — including copying their name, logo, wording, or visual identity closely enough to mislead.
• Fake shops and services. Taking payment, deposits, or personal details for goods or services you cannot or do not intend to provide.
• Investment and financial fraud. Ponzi and pyramid schemes, "guaranteed return" offers, fake or unlicensed exchanges, token or presale pages that misrepresent what is being sold, recovery-scam pages targeting previous victims.
• Fabricated credibility. Invented reviews, testimonials, certifications, awards, press coverage, medical or scientific claims, client logos, or statistics presented as real.
• Deceptive interfaces. Fake countdowns, fake stock counters, fake "others are viewing this" notices, pre-ticked consent, subscription traps, or checkout flows designed to obscure the total price, the recurrence, or how to cancel.

2.2 Malicious technology

• Malware, ransomware, spyware, keyloggers, droppers, or any code intended to damage or gain unauthorised access to a device or account.
• Cryptomining executed in a visitor's browser without their explicit, informed consent.
• Pages designed to exploit browser or device vulnerabilities, to perform clickjacking, or to hijack a visitor's session on another site.
• Command-and-control endpoints, exfiltration endpoints, credential stuffing tools, or infrastructure supporting an attack elsewhere.
• Using the Service to send unsolicited bulk messages, or to host the landing pages such messages point at.
• Attacking the Service itself: probing for vulnerabilities without written permission, circumventing rate limits, quotas, allowances or access controls, extracting our prompts or models, or using automated means to create accounts or consume capacity.

2.3 Other people's rights

• Copying text, images, photographs, video, music, fonts, code, or page designs you do not own and have no licence to use. Asking the model to "make it look exactly like [a named site]" does not create a licence, and the output is your responsibility.
• Using another party's trademark, trade name, or brand assets in a way likely to confuse people about who is behind the site.
• Publishing someone's personal information without a lawful basis — home address, phone number, identity or financial documents, private images — and in particular publishing it in order to expose, threaten or harass them.
• Circumventing paywalls, DRM, or licence terms, or distributing tools or keys for doing so.

2.4 Harm to people

• Child sexual abuse material, in any form, without exception. This is reported to the competent authorities and the account is terminated permanently and immediately. There is no appeal and no notice period.
• Sexual content involving anyone who is, or appears to be, a minor — including drawn, generated, or stylised depictions.
• Non-consensual intimate imagery, and sexual content produced from a real person's likeness without their consent.
• Content that incites, praises, or provides material support for terrorism or violent extremism, or that recruits for it.
• Threats of violence, targeted harassment, coordinated abuse, or content that promotes violence against a person or a group by reference to race, ethnicity, national origin, religion, disability, sex, gender identity, or sexual orientation.
• Promotion of self-harm, suicide, or disordered eating, including methods, encouragement, or communities organised around them.
• Human trafficking, forced labour, or the sale of people or organs.

2.5 Regulated and illegal goods

• Weapons, ammunition, explosives, or their manufacture; instructions for making weapons capable of mass harm, including chemical, biological, radiological and nuclear.
• Controlled substances, precursor chemicals, or prescription medication offered without the licence the law requires.
• Counterfeit goods, forged documents, forged currency, or stolen credentials, accounts, or data.
• Gambling, lotteries, betting, adult services, pharmacies, financial services, or any other regulated activity offered without the authorisation required in the places where the site is available.

2.6 Adult content

Pornographic and sexually explicit material may not be generated, published, or hosted on the Service, including on a custom domain pointed at us. This is a platform limitation rather than a moral position: our hosting and payment arrangements do not permit it. Nudity in an artistic, medical, or educational context is judged on what the page as a whole is for.

2.7 Misleading the public

• Sites that impersonate a news organisation, or that present fabricated reporting as genuine journalism.
• Health, medical, or legal claims presented as fact without a qualified basis, and anything that discourages people from seeking care.
• Content that misrepresents an election, a voting procedure, a candidate, or a public authority.
• Automated or bulk generation of near-identical sites for the purpose of manipulating search results.

3. What the model will refuse

Some of this is enforced before anything is written. Our design brief instructs the model to refuse requests aimed at the categories above, and never to invent a phone number, address, review, statistic, testimonial, qualification, award, price, or customer logo — because a fabricated detail on a published page becomes a false statement made by whoever publishes it, and an invented phone number belongs to a real stranger.

A refusal is not a judgement about you and you may explain what you actually meant. But refusals are not negotiable by rephrasing, and attempting to work around them — by splitting a prohibited request into innocuous pieces, by disguising its purpose, or by editing the output afterwards to restore what was refused — is itself a breach of this policy.

Equally, the model is not a filter you can rely on. It is a system that can be fooled, and it will sometimes write something it should not have. That does not make the result permitted. You remain responsible for what you publish, whoever or whatever wrote it.

4. Your site is your responsibility

When you publish, you are the publisher. In particular, you are responsible for:

• The accuracy of every factual claim on the page, including any the model wrote for you and you did not check.
• Holding the rights to every image, font, logo, and piece of text you upload or ask for.
• Your own legal notices where the law requires them — privacy policy, cookie consent, imprint, distance-selling and refund terms, allergen and licensing information.
• Whatever your site collects from its visitors. If your site has a form, the people who fill it in are trusting you, not us. See the privacy policy for how we handle those messages on your behalf.
• Owning, or being authorised to use, any domain you point at us.

5. What we do about breaches

What happens depends on what was done and whether it looks deliberate. In rough order of severity, we may:

1. Ask. For an honest mistake — an unlicensed photograph, a missing disclosure — we tell you what is wrong and give you a period to fix it.
2. Unpublish. The site is taken off the web while the project and its contents remain in your account.
3. Suspend. The account can still sign in and read what it made, but cannot generate, upload, or publish.
4. Terminate. The account is closed. Where we may lawfully do so we tell you why and give you a reasonable opportunity to export your work first.
5. Report. Where content is criminal, or where there is a risk to someone's safety, we report it to the competent authorities and preserve the relevant records.

We act immediately and without notice where content is illegal, where there is a credible risk of harm, where it endangers the Service or other users, or where a provider we depend on requires it. Otherwise we aim to tell you first.

Appeals. If you think we got it wrong, write to [email protected] with the address of the site and why. A person reads it. Where a decision was made with automated assistance you may ask for review by a human, and you will get one.

6. Reporting something

If you have found a Hexvor-hosted site that breaks these rules, tell us at hexvor.com/report — no account needed, and you do not have to give your name. Copyright complaints have their own procedure, set out in section 12 of the Terms.

Reports of child sexual abuse material, credible threats to life, or terrorism should be sent to [email protected] and marked urgent. They are handled ahead of everything else.

7. Changes

New ways to misuse a website generator are invented regularly, so this list will grow. Material changes are announced in the product and by e-mail where we have your address, and take effect thirty days later unless a change is required sooner by law or by an immediate risk of harm.