Effective date: 29 September 2026
Onekey gives you access to public data. This policy says what you must not do with it. It is part of our Terms of Service. Breaking it can lead to suspension or termination, and to reports to platforms or authorities where the law requires.
1. You must not use Onekey to
- Harass, threaten or abuse any person or group.
- Dox: collect or publish someone's private or identifying information (home address, private phone, workplace details, family) to expose or target them.
- Stalk or surveil: track a person's activity, location or contacts over time, or monitor individuals or groups without a lawful purpose and lawful basis. This includes surveillance of journalists, activists, dissidents or protected groups.
- Discriminate: make or support decisions about people's employment, credit, housing, insurance, education or access to services based on protected traits, or in a way that breaks anti-discrimination law.
- Spam or manipulate: send unsolicited bulk messages, run fake accounts or engagement, or run coordinated inauthentic behaviour.
- Break the law: use the service for anything illegal where you or the data subjects are, including fraud, extortion, sexual exploitation, and content involving minors.
- Circumvent source platforms' rules: use Onekey to evade a platform's bans, blocks, rate limits, or access controls against you, or to take actions the platform has forbidden you from taking.
- Attack Onekey: probe, overload, reverse-engineer or bypass our limits, share or resell API keys, or use the API to build a competing service.
- Re-identify: link data from Onekey to other data to identify people who are pseudonymous, where doing so would harm them.
2. Compliance with source platforms and the law
You are responsible for checking that your use complies with:
- the terms, policies and developer rules of each source platform you query;
- data protection and privacy laws (for example GDPR, UK GDPR, DPDP Act, CCPA), including having a lawful basis, giving notice, and honouring deletion requests;
- consumer protection, anti-spam, sanctions, export and IP laws.
We do not review your use case, and passing data through Onekey does not make it lawful for you to use.
3. Automated decision-making
Do not use Onekey data as the sole basis for decisions that have legal or similarly significant effects on a person (such as hiring, lending, or law-enforcement action). Public data is often incomplete, out of date, or wrong. If you use it in automated decisions you must provide human review, transparency and a way to contest the decision, as the law requires.
4. Data handling
Store and secure the data you receive. Delete data when we notify you of a takedown or when the individual has removed it at the source, as far as you reasonably can. Do not share data with parties who would break this policy.
5. Enforcement
We may investigate, ask for information about your use case, rate-limit, suspend or terminate accounts, withhold credits in serious cases, and report unlawful activity. We try to warn first, but we may act at once when there is risk to people or to the service. To report misuse of Onekey, use the abuse report form.