Skip to content
Sign in Sign up

Acceptable Use Policy

Last updated: 14 October 2026

This policy explains in more detail what section 7 of our terms allows and forbids. It applies to everyone who uses baseray: the app, the API, the MCP server, the public pages on baseray.ai and every output you export. A breach of this policy is a breach of section 7 of the terms.

1. What baseray is for

Use baseray to find, assess and understand buildings, and the businesses registered at them, for your own business: selling to businesses, solar, insurance, construction and renovation work, and market analysis. Individual records may go into your CRM, proposals and reports to your clients, as section 9 of the terms allows.

2. Keep the dataset within your plan

You must not:

  • resell, sublicense, publish or redistribute the dataset or a substantial part of it, for example in a database, a marketplace, a public website or a data file offered to others;
  • use outputs to build or feed a competing database or service;
  • share API keys or accounts outside your workspace, or combine several accounts, workspaces or trials to get more credits or higher limits;
  • try to recover data that a locked row or a search preview withholds, such as house numbers, business names or record facts, by combining requests or other tricks.

3. No scraping or bulk copying

  • For automated access, use the API with a key of your workspace. It allows 60 requests per minute per key and 5,000 requests per day per workspace.
  • Do not scrape the app or the API, and do not bypass rate limits, credits or access controls.
  • Search engines and AI crawlers that follow our robots.txt may index the public pages on baseray.ai. Copying those pages systematically to rebuild the dataset is not allowed.

4. Contacting businesses

baseray shows businesses by their registered office. If you use it to contact them, you decide on that outreach and you answer for it as an independent controller.

  • Many registered businesses are natural persons: in Romania a PFA, II or IF, in Czechia an OSVČ. Their data is personal data and the GDPR applies to it in full.
  • Have a lawful basis for each contact, such as a legitimate interest you have weighed and recorded. Tell the person, at the latest at your first contact, who you are, where you got their data and how they can object (Article 14 GDPR).
  • Follow the rules on unsolicited commercial communications, including Romanian Law No. 506/2004 and Czech Act No. 480/2004 Coll. They restrict commercial emails, text messages and automated calls, also when the recipient is a business, and often require the recipient’s prior consent.
  • Stop at once when someone objects, and keep them on your own suppression list so they are not contacted again.
  • Do not use baseray for direct marketing that the law does not allow.

5. A registered office is not an owner

  • A registered office shows where a business is registered. It does not show that the business owns, rents or occupies the building.
  • Do not present a registered office as proof of who owns or uses a building, and do not use it to guess who owns a family house or an apartment.
  • Do not use baseray to identify, locate, track or harass private individuals, for example to find where someone lives or to profile the people living in a building.
  • Do not use baseray for profiling or discrimination that the law prohibits.

6. AI assistants and automation

An AI assistant you connect through our MCP server acts with your account, so this policy applies to everything it does. A connection allows 60 tool calls per minute and 2,000 per day. Do not use an assistant to copy the dataset in bulk.

7. Security

  • Do not test, probe or attack the security of the service without our written permission. If you find a vulnerability, report it as our security page describes.
  • Do not disrupt the service, upload malicious code or overload our systems.
  • Keep passwords and API keys secret, and revoke a key at once if it is exposed.

8. What we do about misuse

We may investigate suspected misuse. Depending on how serious it is, we may warn you, revoke API keys, disconnect assistants, limit or suspend access, or end the contract as section 14 of the terms describes. We report misuse to the authorities where the law requires it.

To report misuse, write to [email protected]. If you believe a customer contacted you unlawfully using baseray data, you can also write to [email protected].