Acceptable Use Policy | RED Atlas API

1. Permitted Uses

The API is licensed for lawful, internal business use consistent with the authorized use case in Customer's executed agreement with RED Atlas. Permitted uses include:

Accessing property intelligence data including AVM reports, market comparables, geospatial data, and ownership records to support Customer's internal business operations;
Integrating API responses into Customer's own proprietary applications, platforms, or internal workflows, subject to the restrictions in Section 2;
Building Customer-facing products that display API-derived insights at the field or record level, provided that raw underlying data is not bulk-exposed, re-exported, or made available for download by end users;
Conducting internal research, analysis, and modeling using API outputs for Customer's own business purposes;
Testing and development activity within Customer's allocated credit balance using credentials authorized by RED Atlas.

Any use not expressly listed above requires prior written approval from RED Atlas.

2. Prohibited Uses

The following uses are strictly prohibited and each independently constitutes a material breach of the Terms of Service. Violation entitles RED Atlas to immediately suspend or terminate API access, pursue the remedies set forth in Section 5.3 of the Terms of Service, and seek all other available legal and equitable relief.

2.1 Data Resale, Redistribution, and Commercialization

Customer is absolutely prohibited from: (a) reselling, sublicensing, transferring, or otherwise commercializing RED Atlas Data or Outputs, in whole or in part, to any third party, whether for direct compensation, as part of a bundled product or service, or in exchange for non-monetary consideration; (b) distributing, sharing, or providing access to raw API responses, data extracts, or field-level outputs to any third party, including affiliates and subsidiaries not expressly named in an Order Form, without RED Atlas's prior written authorization; (c) incorporating RED Atlas Data or Outputs into any publicly accessible or third-party-accessible database, platform, marketplace, data feed, or API product; (d) white-labeling, rebranding, or otherwise presenting RED Atlas Data or Outputs as Customer's own proprietary data product for distribution or resale; (e) creating any Derived Work that incorporates RED Atlas Data for distribution, licensing, or commercialization without a separately executed written data commercialization agreement with RED Atlas; and (f) using RED Atlas Data or Outputs to develop, train, or operate a competing data product or property intelligence service.

For the avoidance of doubt, the following are also prohibited: providing API access to a client, partner, or investor as part of a demonstration, trial, or due diligence process without RED Atlas's prior written consent; embedding RED Atlas Data or Outputs in any report, presentation, or deliverable provided to a paying client as part of Customer's own service offering, unless Customer has obtained a resale or redistribution license from RED Atlas; and creating an abstraction layer or wrapper that allows third parties to query RED Atlas Data through Customer's own interface.

2.2 Bulk Export and Systematic Extraction

Customer may not: (a) systematically download, mirror, scrape, or bulk-export property records, datasets, or portfolios beyond the scope and volume of the authorized use case; (b) use automated scripts, bots, crawlers, or any non-human process to extract data at a scale not expressly contemplated by Customer's subscription tier; (c) circumvent rate limits, pagination controls, authentication mechanisms, or any other technical measures implemented by RED Atlas; (d) store or cache API responses in a durable datastore beyond the operational necessity of the authorized use case and for longer than reasonably required for that use case; or (e) aggregate API responses over time to reconstruct a dataset that approximates the RED Atlas underlying database.

2.3 Unauthorized Access and Security Violations

Customer may not: (a) share API credentials, keys, or tokens with any person or entity not expressly authorized as an Authorized User under Customer's executed agreement; (b) attempt to access API endpoints, data fields, markets, or functionality not authorized under Customer's subscription tier or Order Form; (c) probe, scan, or test the security or vulnerability of RED Atlas API infrastructure, servers, or network; (d) attempt to reverse engineer, decompile, disassemble, or derive RED Atlas's proprietary data processing methodologies, valuation models, database schema, or source code; or (e) use the API in a manner intended to circumvent any credit-based or usage-based billing mechanism.

2.4 ML and AI Model Training

Customer may not: (a) use RED Atlas Data or Outputs to train, fine-tune, validate, or benchmark any machine learning or artificial intelligence model intended for commercial use or distribution, without a separate written AI/ML licensing agreement executed by RED Atlas; (b) use RED Atlas Data or Outputs as training data, ground truth, or labeled data for any supervised, unsupervised, or reinforcement learning system without such agreement; or (c) feed API outputs into any foundational, generative, or large language model in a manner that enables third parties to retrieve or reconstruct RED Atlas Data through prompting, inference, or retrieval-augmented generation.

The prohibition in this Section applies regardless of whether the resulting model retains RED Atlas Data in identifiable form. A Derived Work that was trained on RED Atlas Data is subject to the commercialization restrictions in Section 2.1 of this AUP and Section 5.3 of the Terms of Service.

2.5 Unlawful and Harmful Use

Customer may not: (a) use the API in violation of any applicable law or regulation, including privacy laws, fair housing statutes, anti-discrimination laws, and data protection regulations; (b) use property ownership or contact data to harass, stalk, defraud, discriminate against, or cause harm to any individual; (c) use the API in connection with predatory lending, mortgage fraud, insurance fraud, or any other financial crime; (d) use the API to generate consumer reports as defined by the FCRA or for any purpose that triggers FCRA obligations; or (e) facilitate any processing of personal data that would violate Puerto Rico data protection rules, Colombia's Habeas Data law (Ley 1581 de 2012), EU GDPR, or equivalent regulations in any jurisdiction where Customer operates.

3. Rate Limits and Technical Controls

RED Atlas enforces rate limits and technical controls to ensure platform reliability and fair access. Current rate limits are published in the API documentation at developer-portal-eight-psi.vercel.app/docs and are subject to change with notice.

Rate limits are enforced per API key. Distributing requests across multiple keys to circumvent aggregate limits is prohibited and constitutes a violation of Section 2.3.
Requests exceeding rate limits will receive HTTP 429 responses. Sustained rate limit violations may result in automatic key suspension pending review.
RED Atlas may implement additional technical controls, including throttling, IP-based restrictions, payload size limits, and query complexity limits, to protect platform integrity.
Enterprise customers may negotiate custom rate limits and technical parameters in an executed Order Form.

4. Data Grant Program — Additional Terms

Customers participating in the RED Atlas Data Grant Program are subject to the following terms in addition to all other terms of this AUP:

Grant Credits may only be used for the Authorized Use Case in the executed Data Grant Agreement. Any other use requires prior written approval from RED Atlas.
Grant Credits are non-transferable, non-refundable, and have no cash value. Unused credits expire at the end of the grant term and are forfeited.
Data Grant participants may not share access credentials with affiliates, subsidiaries, or any other entity not expressly identified in the Data Grant Agreement.
Continued API access after credit exhaustion or grant expiry without an executed paid subscription Order Form is unauthorized access subject to immediate suspension and invoicing at applicable list prices.
RED Atlas may audit Data Grant usage at any time upon reasonable notice to verify compliance with the Authorized Use Case.

5. Personal Data and Privacy

API Outputs may include personal data as defined under applicable law. Customer agrees to:

Process personal data only for purposes authorized under the applicable agreement and this AUP;
Implement commercially reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, or misuse;
Comply with all applicable privacy and data protection laws including Puerto Rico data protection rules, U.S. CAN-SPAM and TCPA requirements, Colombia's Habeas Data law (Ley 1581 de 2012), and EU GDPR where applicable;
Refrain from using personal data fields for secondary purposes unrelated to property intelligence analysis, including targeted advertising, consumer profiling, or any purpose not contemplated by Customer's authorized use case;
Notify RED Atlas promptly of any data breach, unauthorized access, or suspected misuse of API data involving personal information.

6. Monitoring, Watermarking, and Audit Rights

RED Atlas reserves the right to monitor, audit, and technically inspect API usage for compliance with this AUP and applicable agreements. Specifically, RED Atlas may:

Embed technical markers, watermarks, honeypot records, or canary data in RED Atlas Data and Outputs for the purpose of detecting unauthorized redistribution. Detection of such markers in any third-party system, dataset, or product shall constitute prima facie evidence of unauthorized redistribution by Customer.
Review API call logs, request volumes, endpoint patterns, and response payloads to identify prohibited uses;
Request documentation, records, and system access from Customer to verify that usage is consistent with the authorized use case, with Customer's response required within five (5) business days;
Conduct on-site or remote audits of Data Grant participants upon reasonable notice to verify credit usage and use case compliance;
Suspend API access pending the outcome of any compliance investigation without liability.

Customer agrees to cooperate fully with all RED Atlas audit and compliance activities.

7. Enforcement and Remedies

7.1 Immediate Suspension

RED Atlas may suspend Customer's API access immediately and without prior notice upon reasonable determination that Customer is engaged in a prohibited use, poses a security risk to the platform, or has violated Section 2 of this AUP.

7.2 Termination

RED Atlas may terminate Customer's API access upon written notice if: (a) Customer fails to cure a material breach of this AUP within ten (10) business days of notice; or (b) Customer engages in conduct that RED Atlas determines is not capable of being remediated.

7.3 Liquidated Damages for Unauthorized Resale

In addition to all other available remedies, Customer agrees that any unauthorized resale or redistribution of RED Atlas Data entitles RED Atlas to liquidated damages of the greater of $500,000 or three times the fair market value of the data resold or redistributed. The parties agree this is a reasonable pre-estimate of harm given the difficulty of calculating damages from unauthorized data redistribution.

7.4 Injunctive Relief

Customer acknowledges that any violation of Section 2.1 or Section 2.4 would cause RED Atlas irreparable harm for which monetary damages would be inadequate. Customer consents to RED Atlas seeking immediate injunctive relief from any court of competent jurisdiction without bond or prior notice to Customer.

7.5 Legal Action

Unauthorized resale, bulk export, credential sharing, AI training misuse, and use of data for unlawful purposes may expose Customer to civil and criminal liability, including claims under the Defend Trade Secrets Act (18 U.S.C. Section 1836), the Computer Fraud and Abuse Act (18 U.S.C. Section 1030), applicable copyright law, and Puerto Rico commercial law.

8. Reporting Violations

If Customer becomes aware of any violation of this AUP, including unauthorized use of Customer's own API credentials by a third party, Customer must notify RED Atlas immediately at legal@atlas.red. RED Atlas, Inc., Attn: Henry Keenan, CEO, San Juan, Puerto Rico. Prompt reporting of violations discovered by Customer may be taken into account by RED Atlas in determining the appropriate response.

9. Updates

RED Atlas may update this AUP at any time. Material changes will be communicated to active API customers via email at least fourteen (14) days before taking effect. Continued use of the API after the effective date constitutes acceptance. The current version is always available at api.atlas.red.

10. Governing Law

This AUP is governed by the laws of the Commonwealth of Puerto Rico and is subject to the dispute resolution and class action waiver provisions of the API Terms of Service.