Acceptable Use Policy
Last updated
Instatus helps teams tell their users what is going on. This policy keeps it that way for everyone. It is part of our Terms of Service and applies to every account, team member and API key.
Status pages and notifications
Don't use a status page, widget, email, SMS, call or other notification to:
- impersonate another company or person, or publish a status page for a product or service you don't operate or represent;
- phish, collect passwords or payment details, distribute malware, or link to sites that do;
- send messages to people who haven't asked to receive them, including by importing subscriber lists without consent;
- send marketing or promotional messages through subscriber notifications (product updates directly related to an incident or maintenance are fine);
- publish content that is illegal, defamatory, harassing, hateful, sexually explicit, or that infringes someone else's intellectual property or privacy; or
- publish other people's personal data, such as customer names or contact details, without a legal basis.
Status pages should describe the availability and performance of your own products. If you run a page on behalf of a client, you need their permission.
Monitoring
Our monitors make requests from many locations around the world. Don't use them to:
- monitor systems, domains or IP addresses that you don't own or have permission to monitor;
- scan for vulnerabilities, brute-force logins, scrape content, or bypass access controls;
- generate load intended to degrade or disrupt a service (denial of service), or run load tests through Instatus; or
- send requests that carry malware or exploit code.
You can find the IP addresses our monitors use at instatus.com/ips. If you see monitoring traffic from Instatus that you didn't authorize, report it using the details below.
SMS, calls and email
- Only add phone numbers and email addresses of people who agreed to receive alerts or updates, and remove them promptly when they ask.
- Follow the laws that apply to the messages you send, such as the US TCPA and CAN-SPAM, Canada's CASL, and the EU and UK ePrivacy rules.
- Don't use on-call alerting to contact people outside your organization or rotation.
The Service itself
- Don't probe, scan, load test or penetration test Instatus without written permission. To report a vulnerability, use our security response process.
- Don't try to access another customer's account or data, or get around plan limits, rate limits or security controls.
- Don't interfere with or overload the Service, or use it in a way that degrades it for other customers.
- Don't create accounts in bulk or by automated means, or create new accounts to avoid a suspension.
- Don't use the Service where you are prohibited by sanctions or export control laws.
AI features
Don't use our AI features to create content that breaks this policy, to mislead people about whether a person or AI wrote something when it matters, or to try to extract our prompts, models or other customers' data.
What happens if this policy is broken
We look into reports and may remove content, pause notifications or monitors, revoke API keys, suspend or close accounts, and report illegal activity to the authorities. Where we can, we will contact the account owner first and give them a chance to fix the problem. We act immediately when there is a risk of harm, such as phishing, malware or attacks on third parties. Our Terms of Service describe suspension and termination.
Reporting abuse
Report a status page, notification or monitoring traffic that breaks this policy to support@instatus.com with "Abuse report" in the subject. Include the URL, the time and any message headers or logs that help us find it. For copyright claims, use our copyright policy. For security issues, use our security response process.