Acceptable Use Policy
Helicopter gives AI agents real Android phones. That is useful, and it is also exactly what abuse looks like: many accounts, verification codes, fake clicks and automated activity that pretends to be a person. This policy says what you must not do. It applies to you and to everything your agents, scripts and tools do through your account.
You must not use Helicopter to
- Farm accounts. Create, register, warm up or operate fake accounts or fake identities at scale on any app or service, including bulk sign-ups.
- Commit SMS or one-time-code fraud. Receive, collect or relay SMS messages, verification codes or one-time passwords on behalf of other people, sell or trade verified accounts or numbers, or use phones to get around phone-number verification.
- Commit ad, click or install fraud. Generate fake ad clicks or impressions, fake app installs, fake engagement, ratings or reviews, or abuse reward and referral programs.
- Send spam. Send unsolicited bulk messages, calls, comments, posts or invitations.
- Attack credentials. Try stolen or guessed credentials (credential stuffing), guess passwords or codes by brute force, or otherwise try to break into accounts that are not yours.
- Defeat security or platform rules. Bypass or defeat the security, integrity checks, device or app attestation, anti-fraud systems, CAPTCHAs, rate limits or terms of any app or platform. Testing your own apps, or someone else’s with their written permission, is fine.
- Pass automation off as human. Disguise automated activity as human activity to avoid the rules of an app or platform that does not allow automation.
- Mine cryptocurrency. Use phones to mine or earn cryptocurrency, or for other heavy computing that is not part of using the phone itself.
- Run malware. Create, host, spread or run malware, spyware, stalkerware, ransomware or botnet infrastructure. If your security research involves malware, contact us first.
- Handle illegal content. Store, generate, share or access content that is illegal where you or we are located, or that infringes someone else’s rights. We report child sexual abuse material to the authorities.
- Harass people. Harass, threaten, stalk, dox or abuse anyone, or share intimate images of someone without their consent.
- Scrape against the rules. Scrape or collect data in breach of an app’s or website’s terms, technical restrictions or the law.
- Resell access. Resell, sublicense, share or give away your API keys or phones, or offer Helicopter access to others as a service, without our written permission.
You also must not
- Try to break out of a phone’s virtual machine, reach another customer’s phone or data, or get around the isolation and limits we put in place.
- Probe, overload or disrupt the Service or the network it runs on.
- Use the Service in a way that breaks the law, or helps anyone else break it.
How we enforce this
To enforce this policy and protect the Service, we monitor connection metadata from phones: where a phone connects to (destination and port) and when. We look at metadata, not content. We do not store screen contents, typed text or app data in our logs. We also look at API usage metadata (which routes were called, when, and for which phone). Connection metadata is kept for 30 days. See the Privacy Policy.
What happens if you break this policy
We may suspend your account immediately, without notice, and we may revoke API keys, stop or delete phones, and end your access. We may report illegal activity to the authorities and cooperate with their requests. If you think we have made a mistake, email {{CONTACT_EMAIL}} and we will look at it.
Responsibility
You are responsible for what your agents and tools do through your account, including actions you did not plan. You are also responsible for following the terms of the apps and platforms you use on a phone. See the Beta Terms.
Reporting abuse and changes
To report abuse of Helicopter, email {{CONTACT_EMAIL}}. We may update this policy; if a change is material we will tell you by email or on this site.