Acceptable use

Who this applies to

This policy is part of Empti's terms of service. It applies to everyone with an Empti account, to everyone in a team on Empti, and to anything that uses Empti for you: the app, the empti command, and the scripts and agents you run with it.

"Empti", "we" and "us" mean Dylan Tazawa-Lim, trading as Empti, in Australia. If this policy and the terms disagree, the terms win.

If you own a team, you're also responsible for making sure the people you invite know these rules.

What you can't store or share

Don't use Empti to store, send or share:

• Child sexual abuse material, or anything that sexualises children. We have no tolerance for it. We close the account, keep what we need to, and report it to the authorities.
• Anything illegal where you are or where the person you share it with is, or anything gained or used to commit a crime.
• Malware: viruses, ransomware, spyware, credential stealers, or files made to harm the computer that opens them. Keeping samples for security research in your own drive is fine. Spreading them through share links isn't.
• Other people's work you have no right to share: films, music, software, books, courses or photos that infringe copyright, trade marks or other rights.
• Other people's private information shared without their permission, including intimate images, identity documents and stolen data.
• Material used to harass, threaten, stalk or blackmail someone, or to incite violence against them.
• Phishing: pages or files that pretend to be someone else to collect passwords, payment details or personal information.

These rules cover what's stored in your drives, what's in your teams' drives and what you send with a share link. A file you keep only for yourself still has to be legal.

Share links

A share link sends a snapshot of some files to people you choose. Each link lasts 1, 7 or 30 days, can have a password and a download limit, and you can turn it off at any time in Empti's Settings, under Shared links. You can have up to 1,000 live links, each with up to 2,000 files.

Links are for sending files to people, not for running a download site. Don't:

• post share links publicly so that anyone can download the files, at scale (on forums, in app stores, in torrents or link lists, in ads or spam);
• use links to serve files to a website, an app or a game as if Empti were a content delivery network or public file host;
• make link after link to get round the 30-day limit or a download limit;
• send links to people who didn't ask for them, in bulk.

Sending a link to a client, a colleague, a mailing list you run or a small group is what links are for. Use a password for anything private, and send it separately from the link.

The person who makes a link is responsible for it, including for what the files in it are and who they send it to.

Using the service fairly

Don't:

• attack Empti: probe for or exploit weaknesses, try to reach other people's data, overload the service, or interfere with how it works for others (if you've found a security problem, tell us as described in Security and give us a fair chance to fix it before you publish it);
• guess or collect links: try share link IDs or passwords, or scrape links you weren't sent;
• get round limits: make extra accounts or teams to get more storage, more drives, more trials or more links than your plan includes, or share one account between people who should each have their own;
• resell Empti: sell, rent or give access to your account or your storage as a service for others, unless we've agreed to it in writing;
• pretend to be Empti or someone else, including in a team's name or a profile name;
• use someone else's account without their permission.

Your storage is the amount your plan includes. Uploads that would go over it are refused until you free up space or add more, so there's nothing extra to manage there.

The empti command, scripts and agents

You can use your drive from a terminal, a script, a scheduled job or an AI agent such as Claude Code or Codex, through the empti command or the mounted drive. That's a supported use, not a loophole. See Command line for how.

• An agent acts as you. Anything it stores, deletes or shares counts as if you did it, and this whole policy applies to it.
• It holds your keys. Once you've run empti unlock, anything that can run empti can read and change every file in your drive. To give an agent one folder only, use Settings → Agents. Only give full access to agents you trust, and leave empti rm out of what an agent is allowed to run unless it needs it.
• Keep it to your own work. Automating your own library is fine. Running a service for other people on top of your account isn't (see reselling).
• Stop when you're told to. If Empti refuses a request because of a limit or asks you to sign in again, a script should stop or slow down, not retry in a tight loop.

Limits that exist today

These are the limits Empti's service enforces now. They apply the same way to the app, the command and agents.

There's no fixed cap today on how many requests a signed-in account can make. We may add rate limits later, to keep the service working for everyone, and we'll list them here when we do. If your use is heavy enough that we're worried about it, we'll contact you before we limit it, unless it's harming the service or other people.

What Empti can and can't see

Every file is encrypted on your Mac before it leaves, with a random key that your passphrase locks, and only you know the passphrase. Empti's service stores the encrypted bytes and can't open them. That limits what we can check, and we'd rather say so plainly.

What we can't do

• We can't see the names or contents of the files in your drive, and we can't scan them.
• We can't see inside a share link on our own: what's needed to open it is in the part of the link after #, which browsers never send to us.
• We can't see a share link's password, or who opened it.

What we can see

• For your account: your email address, how much you store, how many encrypted files you have and their sizes, and when they changed.
• For a share link: its ID, the account that made it, when it was made and when it ends, whether it has a password or a download limit, how many times it was viewed and downloaded, how many files it has and their total encrypted size.

So we don't look for breaches of this policy. We act when someone tells us about one. If you send us a full share link, including the part after #, we can open the files it shares the same way anyone you sent it to could. That's the only way we see inside a file, and we only do it to check a report.

See Security for how the encryption works and Privacy for what we keep about you.

What we do about a breach

Depending on how serious it is and whether it has happened before, we may:

• turn off a share link. It stops working at once for anyone who opens it. A download already in progress can finish, because each file's download link lasts up to 15 minutes.
• warn you and ask you to remove something or change how you use Empti;
• stop you making share links, or stop you uploading, while we look into it;
• sign your account out of every Mac and every empti session;
• close your account, and delete what's stored in it;
• keep records and report to the police or other authorities when the law requires it or when someone is at risk.

Because files are encrypted, we act on links and accounts. We can't remove one file from inside your drive, and we can't edit what's in it.

For anything that puts people at risk, including child sexual abuse material, we act first and talk later. For everything else, we'll usually tell you what we found and give you a chance to fix it. When we close an account, we tell the owner and, where the law allows, why.

If you think we got it wrong, reply to the message we sent you, or write to support@getempti.com. We'll look at the decision again and reply within 2 working days.

We respond to requests from the police and courts only when they're lawful and properly made. Even then we can only hand over what we have, which doesn't include the contents of your files. Send law enforcement requests to support@getempti.com with the subject line "Law enforcement request".

Report a share link

If you've been sent or found a share link that breaks this policy, tell us. You don't need an Empti account.

Email abuse@getempti.com with:

1. The link. Copy the whole thing, including the part after #. It looks like https://api.getempti.com/s/ID#secret. The whole link lets us open the files and check what you saw. If you'd rather not send that part, send the link up to the #: we can still find the link and turn it off, but we won't be able to see what's in it.
2. The password, if the link has one and you have it.
3. What you saw: which files, what's wrong with them, and which rule above it breaks.
4. Where you found the link and when: who sent it, or the page it was posted on.
5. How to reach you: your name and email address. We won't tell the link's owner who reported it unless the law requires us to.
6. For copyright or trade mark, a rights holder's notice: your name and contact details, the work you own or represent, the link or file it concerns, a statement that you believe in good faith the use isn't authorised, a statement that the notice is accurate, and your signature.

What happens next

1. We confirm we've got your report within 2 working days.
2. We find the link and, if you sent the whole link, open it to check what it shares.
3. If it breaks this policy, we turn it off, and we may take the other steps in What we do against the account that made it.
4. We tell you that we've acted, though not always exactly what we did, to protect everyone's privacy.

Links end by themselves within 30 days, and turned-off and expired links are deleted from our service. A link you report may already be gone. If it says "This link has expired" or "This link was turned off", nobody can open it any more.

Please only report in good faith. Reports made to harass someone or to take down content you simply disagree with breach this policy too.

Changes to this policy

We may update this policy as Empti changes, for example when we add rate limits. We'll change the date at the top, and tell account owners by email before a change that limits what they can do takes effect.

Contact

Reports of share links and other abuse: abuse@getempti.com. Everything else, including appeals and law enforcement requests: support@getempti.com, or see Contact support.

Empti is run by Dylan Tazawa-Lim, a sole trader trading as Empti, in Australia. ABN 58 237 629 332.