Toty (“Platform,” “we,” “us,” or “our”) provides safe, lawful, and responsible AI-generated content. This Acceptable Use Policy applies to all content generated, published, distributed, or stored through the Platform, and sets out our content standards, moderation, reporting, and enforcement. Everyone who uses the Service must follow it. This Policy is the content policy referred to by the Terms of Service.
1. Scope
This Policy applies to:
- Text: prompts, and text returned by a model.
- Images: AI-generated or edited images, illustrations, and photo results.
- Video: AI-generated or edited video.
- User inputs: prompts, reference images, and instructions you submit.
2. Content standards and prohibited categories
The Platform prohibits generating the following six categories of content. The clauses below describe those categories and other violations in more detail.
- Pornography / NSFW content.
- Violence / gore.
- Hate speech.
- Child-unsafe content (CSAM).
- Deepfakes / impersonation of real people.
- Content that infringes copyright or trademarks.
2.1 Absolutely prohibited — zero tolerance
The following is actioned immediately and may be reported to the authorities:
- Child sexual abuse material (CSAM), or any sexual content involving minors.
- Content that promotes or facilitates terrorism, extremism, or mass violence.
- Technical instructions for weapons of mass destruction.
- Content that incites genocide or ethnic hatred.
- Deepfakes of real individuals, including face swaps, nudification, intimate-scene compositing, and fabricated statements or actions. Consent does not make this allowed.
2.2 Restricted categories
This Platform is not an age-verified adult service. Pornography, NSFW content, and nudity are prohibited, including content a user says is only for private viewing. Gore, violence made to harm, and political content that is likely to mislead are also prohibited. Medical, legal, and financial output must not be presented as licensed professional advice.
2.3 Generally prohibited conduct
- Generating or spreading misinformation or claims that have been shown to be false.
- Impersonating a real person, brand, or organization.
- Infringing intellectual property, publicity, or privacy rights.
- Passing AI-generated content off as human-created in order to deceive someone.
- Bulk-generating spam or deceptive commercial content.
- Using jailbreak prompts to bypass the Platform’s or a model provider’s safety measures.
- Creating malware, phishing content, or attack tools.
- Using inputs, outputs, or the interface to train, fine-tune, distil, or benchmark a competing model, or scraping model output at scale.
2.4 Source of uploaded material
You may upload only your own photos, voice, or other material, or material for which you have explicit permission from the people depicted. Uploading another person’s photos or voice without their consent is prohibited. Before uploading, you must confirm that the material is yours or that you have permission. Permission does not authorize the deepfake content prohibited in Section 2.1.
3. Content moderation
We use two layers: the model provider’s automated safety filters, and a human review of reports and blocked requests.
3.1 Automated review
- Input filtering: prompts and reference images are sent to the selected model provider and pass through that provider’s safety filter. Users cannot turn these filters off.
- Output filtering: results are checked by the same provider before they are returned. Output that fails the check is not saved for the user.
- Image generation sent through Fal runs with the Fal safety checker enabled.
- Image generation sent through OpenAI uses OpenAI moderation, set to auto.
- Requests to Google, ByteDance Seedance / Seedream, MiniMax, and Kuaishou Kling use each provider’s own safety filters.
3.2 Human review
- Reports sent to [email protected] are read by the operator.
- If a user writes in about a request a model provider blocked, we review the prompt, reference images, and account record against this Policy.
- The Platform does not currently run a 24-hour review rota or an independent third-party content audit. Human review follows the timelines in Section 6.
3.3 Severity
| Level | Description | Review | Action |
|---|---|---|---|
| L1 — Critical | Child safety, terrorism, weapons-of-mass-destruction instructions | Provider block plus human confirmation | Immediate ban, and a report where the law requires it |
| L2 — High | Pornography, gore, hate speech, deepfakes, serious infringement | Provider filter plus priority human review | Remove the content, suspend the account, and zero the credits |
| L3 — Medium | General violations, such as misleading content or a jailbreak attempt | Human review | Warning and removal |
| L4 — Low | Minor violations | Reviewed when reported | Warning, and removal or an edit |
4. Reporting
4.1 When to report
- Content or behaviour that breaks the content standards in this Policy.
- A critical violation involving child safety or terrorism.
- AI impersonation of you, or infringement of your own rights.
4.2 Reporting principles
- Confidentiality: a reporter’s identity is used only to handle that report, and is not disclosed to the reported user.
- Impartiality: every report is reviewed against this Policy and the content in question.
- Anti-abuse: malicious or false reports are recorded. Repeated abuse of the reporting channel can lead to a warning, a restriction, or account closure.
5. Reporting channels
Email [email protected]. This is the only channel that currently accepts content reports, safety issues, and appeals, and the operator reads it. Include the page or result URL, the approximate time, your account email, and what happened. For child-safety reports, put “CSAM” in the subject so we can prioritise them.
6. Response timelines
| Violation | First response | Resolution |
|---|---|---|
| L1 — Critical | Within 24 hours | Within 24 hours |
| L2 — High | Within 1 business day | Within 3 business days |
| L3 — Medium | Within 3 business days | Within 7 business days |
| L4 — Low | Within 5 business days | Within 15 business days |
If a report needs longer, we tell the reporter why. The order is: receive the email, classify it L1 to L4, review the content and the account record, decide, enforce, and notify the reporter.
7. Enforcement actions
These are actions we can actually take. More than one can apply. Subscription credits already used are not refunded. An account closed for breaking this Policy is not eligible for the unused-credit refund in the Terms.
| Action | What we do | Applies to |
|---|---|---|
| 1. Warning | A written notice requiring removal or an edit | A first minor violation |
| 2. Content removal | Delete the violating output from the account library and storage | Confirmed L3 and L4, and anything more serious |
| 3. Zero credits or restrict features | Set the remaining balance to zero, or limit models and generation quota | Repeated minor violations, or a single L3 |
| 4. Account suspension | Stop sign-in and generation while the review is open | L2, or repeated violations |
| 5. Permanent ban | End access permanently | L1, or repeated L2 |
| 6. Report to authorities | Report to the competent authority and cooperate with an investigation | Criminal-level L1 |
8. Appeals
You may appeal within 14 days of the enforcement notice by emailing [email protected]. Include the account email, the date of the original notice, and why you believe the decision was wrong. Within 10 business days we re-read the decision against this Policy, the report, and the generated content, and we write back with the reason for keeping or reversing it. While the same operator handles the mailbox, an appeal is a fresh review, not an automatic confirmation of the original notice.
9. Policy updates
Material changes are announced at least 15 days in advance by updating the date on this page and publishing the change on the site. Continuing to use the Service after that notice means you accept the updated Policy. We do not currently publish a periodic content-safety transparency report.
10. Contact
- Safety, reports, and appeals: [email protected]
- Operator: Toty
- Address: Portland, Oregon 97201, United States
- Website: https://toty.ai