Terms of Service

These terms cover using the Poly CLI, poly.candygate.eu, and the community package registry. By creating an account or installing packages through Poly, you agree to them.

Your account

You're responsible for your account and anything published or sent from it, including through a personal access token issued to an AI assistant. Keep your password and tokens private, and revoke a token immediately if you suspect it's been exposed.

The community registry

Anyone signed in can publish packages under community:name. Names are first-come-first-served. Community packages are not scanned for malware — the SHA-256 checksum recorded at publish time only protects against corruption or tampering in transit, not against a malicious publisher. Only install packages you trust.

You keep ownership of what you publish, but grant every user the right to download and run it via Poly. Don't publish anything you don't have the rights to, anything malicious, or anything that isn't a runnable CLI script or small binary — the registry isn't a general file host.

Poly Pro

Pro is a one-time €0.99 payment processed by Stripe, unlocking concurrent multi-package installs and automatic background upgrades. It doesn't gate any package or formula — the built-in tap catalog stays free for everyone. Because it's a small one-time digital purchase delivered immediately, it's non-refundable except where required by law.

Acceptable use

• No malware, spam, harassment, or impersonation.
• No attempting to bypass moderation, rate limits, or the token/scope system.
• No automated mass account creation or name-squatting on the registry.

Staff and admin accounts can remove packages, suspend accounts (temporarily or permanently), and send service notifications you can't opt out of. You'll always see why if your account or a package is affected.

Availability

Poly is provided "as is". The service, registry, and MCP server may change, be interrupted, or be discontinued at any time. Adapters like pip, npm, Homebrew, and crates.io are third-party services outside our control.

Changes

These terms may be updated as the product evolves. Meaningful changes will be reflected here with an updated date at the top.

Contact

Questions about these terms: open.corp.2030@gmail.com. See also the Privacy Policy.