Report misuse of NotHoly.
If someone used NotHoly against your systems, your data or your rights, tell us here. You do not need an account to report.
File a report
Send evidence as links or pasted text, because the form takes no attachments. Leave out passwords and full API keys and tell us where they are exposed instead.
For child safety reports, send only the URL or case details. Do not paste the material or download it. Your email is optional for this category.
These go somewhere else
What happens after you send it
- Review
- We review the report and check it against our records. We cannot promise a response time or a particular result.
- Action on accounts
- We can suspend an account under the Acceptable Use Policy when the report and our records support it.
- Your identity
- We do not share your name or email with the customer you report, unless the law requires it. To act on a report we may tell the customer which system and time it concerns.
- Customer data
- We cannot give you customer data. Disclosing it takes a court order or a request from a competent authority, sent to [email protected].
- What we can see
- API prompts and responses are not stored, so we investigate from metadata such as time, API key, model and token counts. A time window and a key prefix from you are what let us find the traffic.
- Retention
- We keep the report, your contact details and the IP address and browser string sent with it for three years after we close the case, or after its last update if it is never closed, then delete them. We use the IP address and browser string to keep this form from being abused.
- Your data
- The Privacy Policy covers this data and your rights. To access, correct or delete it, write to [email protected] with your case ID.