Creator Policy.

Anyone with an active Fortized account in good standing can use the Creator Hub. If your account is suspended, banned, or restricted, you can't create, publish, or list anything. And if you get moderated partway through building something, your drafts just pause until that's sorted out.

The first time you step into the Creator Hub, you'll accept the Terms of Use, the Terms of Service, and this Creator Policy. Once is enough. We won't ask again unless something meaningful changes.

Anything you make, an ad, a bot, a template, an API integration, goes out in your name and stays tied to your account. That means you're on the hook for how it behaves, how secure it is, and whatever it leads to, including any harm it does to other people.

Ads are paid placements that promote your bastion, your content, or (where allowed) an external destination. They appear in main content areas (banner) and sidebars (rectangle) across Discover, the Forum, and other surfaces.

An ad costs 15 Onyx for 4 days of placement. You can renew (15 Onyx for another 4 days) or enable auto-renew. Editing an active ad costs 5 Onyx. Cancelling an active ad costs 5 Onyx; the ad immediately stops serving and disappears from your inventory 2 hours after cancellation.

Ads must follow the Terms of Use. They must not contain or promote:

• Sexual or sexually suggestive content, nudity, or sexualised minors (any depiction)
• Hate speech, harassment, or content targeting a person or group based on identity
• Real-world violence, gore, or shock content
• Drugs, weapons, gambling for real money, or illegal goods and services
• Scams, phishing, malware, fake giveaways, or deceptive download buttons
• Misleading impersonation of Fortized, Swiftaw, staff, or other users
• Off-platform recruitment for groups whose primary purpose violates these rules

By default, ads link to a bastion you own. In-app destinations (Home, Discover, Forum, Atelier sub-tabs) are also allowed. External URLs (any domain other than fortized.com) are reserved for Fortized staff and verified partners only. Submitting an external URL without authorisation will get the ad rejected and may cost you the listing fee.

Swiftaw may take down any ad that violates this Policy or the Terms of Use, with or without notice. Onyx spent on a taken-down ad is forfeited. Onyx spent on an ad you cancelled yourself is also forfeited (the cancellation fee is the cost of stopping the placement early). Where a takedown was clearly our error, contact Support for a manual review and possible refund.

Bots are automated accounts that run inside bastions you authorise. They can react to messages, run commands, post content, manage roles, and respond to events, but only within the permissions you give them and the bastion owner agrees to.

A bot has only the permissions selected at creation and granted by each bastion that installs it. Granting a permission you don't need is a security risk. Requesting permissions you don't actually use is grounds for unlisting from the Marketplace.

• Spam, mass DMs, mass mentions, or unsolicited promotion
• Scraping or exfiltrating user data beyond what's needed for the bot's stated function
• Bypassing rate limits, moderation, or other Fortized safeguards
• Pretending to be a Fortized system bot, staff, or another user
• Running anything that would violate the Terms of Use if a human did it
• Cryptocurrency, NFT promotion, or pay-to-play gambling mechanics

Listing a bot in the Creator Marketplace is optional. Listed bots must have a clear name, description, accurate permission list, and either be free or priced in Onyx. Misleading listings (wrong description, hidden permissions, hidden monetisation) will be removed. Listings can be paid for with Onyx earned through Creator revenue.

Swiftaw may disable any bot that violates this Policy. Bastion owners may remove a bot from their bastion at any time. If a bot is found to be malicious, all installations of that bot may be force-removed across the platform.

A template is a snapshot of a bastion's structure: channels, categories, roles, default permissions, and certain non-personal settings. Templates do not contain messages, members, member roles, attachments, or any private data from the source bastion.

You can export a template only from a bastion you own. By exporting and listing it on the Marketplace, you grant Swiftaw a non-exclusive licence to host and distribute the template within Fortized so other users can import it.

The original creator's name is shown on the listing. Importers receive a fresh copy of the structure they can modify freely; no ongoing relationship to the original is implied.

Templates can be free or priced in Onyx. The same listing rules as bots apply: clear name, description, accurate contents. Templates that re-package another creator's work without permission will be removed.

An API key is a credential tied to your account that lets third-party software act on Fortized in a limited way: signing users in with their Fortized account ("Login with Fortized"), rendering a bastion member list, or showing a "Join Bastion" button via oEmbed. A key gives the holder the ability to call Fortized on your behalf; treat it like a password.

• Keep your keys secret. Never publish them in client-side code, public repos, screenshots, or chat.
• Rotate (revoke and regenerate) any key you suspect has leaked.
• Use one key per integration so revoking one does not break the others.
• You are liable for everything done with your key, including misuse by a service you authorised.

API keys are intended for legitimate integrations such as: authenticating Fortized users on your own site, embedding a public bastion's member count or join button, syncing roles with an external service the user opted into, or building a community-side tool for your own bastion. Use cases not listed are not necessarily forbidden, but anything that abuses a user's trust will be revoked.

• Scraping or storing user data beyond what your integration actively uses
• Building shadow profiles or selling Fortized data to third parties
• Sending traffic to bypass rate limits, moderation, or anti-spam controls
• Using OAuth login to harvest credentials, tokens, or to phish
• Re-implementing core Fortized features in a way that competes with or extracts value from the platform without authorisation

Login-with-Fortized uses an OAuth-style flow: a user is redirected to Fortized, signs in, and explicitly authorises the scopes your application requests. We will only release the data the user consented to. oEmbed widgets (member list, Join button) render content from a public bastion and may be embedded on third-party sites.

Keys are subject to per-user and per-key rate limits. Exceeding them will throttle or temporarily disable the key. Swiftaw may revoke a key at any time for abuse, security incidents, or policy violations.

If you list a paid bot or paid template on the Creator Marketplace, you earn Onyx for every sale, less Swiftaw's platform share. The exact split is shown on the listing form before you publish. Free items earn no Onyx.

Onyx is a virtual currency tied to your Fortized account, governed by the Fortshop Policy. It cannot be redeemed for real money and cannot be transferred outside the platform.

If a buyer disputes a Marketplace purchase and we issue a refund, the corresponding Onyx is reversed from your earnings. Repeated disputes against your listings may lead to delisting.

You keep ownership of the original stuff you make: your ad imagery, bot scripts, template structures, and the code behind your integrations. You can use it, sell it, or take it down whenever you want, as long as you're within this Policy and the Terms of Service.

Publishing on Fortized gives us the free, worldwide permission we need to host, store, show, share, and route your content so the platform can actually run. That permission ends when you take the content down, apart from backups and audit copies we're required by law to keep for a while.

Don't upload anything you don't have the right to use. Submitting copyrighted material, trademarks, or another person's likeness without permission may get the work removed and your account moderated.

Creator content gets looked at by a mix of automated systems and human moderators. We act on your reports, automated signals, and our own audits. We don't check everything before it goes live.

• Hide or delete an ad, bot, template, or listing
• Disable a bot in all bastions where it is installed
• Revoke API keys
• Suspend or close your Creator access while keeping the rest of your account active
• Suspend or terminate the entire account where the violation is severe or repeated

If you believe a creator is breaking this Policy, report the offending ad, bot, template, or integration to Fortized Support. Include the creation's name, the creator's username, and a clear description of the issue.

If we take action on something you created, we will tell you what was actioned and why, where we can. You can appeal through Support. Appeal decisions are made by a moderator who was not involved in the original decision wherever possible.

You can cancel ads, unlist bots and templates, and revoke API keys at any time. Existing licences in the hands of buyers are not retroactively cancelled by you stopping; refer to Section 6 for refunds.

We may pause or end your access to the Creator Hub if you break this Policy or the Terms of Use. If it was something small and clearly not on purpose, we'll usually warn you first.

We'll update this Policy now and then. Anything meaningful gets announced in the app or by email at least 30 days ahead, and we'll ask you to re-accept before you carry on in the Creator Hub. Small clarifications take effect right away and are noted at the top of the page.