DOC: Public instance of PurlDB and Vulnerable Code - ToS and Data Privacy?

**What type of documentation would you like?**
Details on integration of PurlDB and Vulnerable Code: https://dejacode.readthedocs.io/en/latest/application-settings.html

**Documentation topic**
When running DejaCode it by default connects to public instances of PurlDB and Vulnerable Code. It is unclear when we are permitted to use these (testing, non-commercial, commercial) in our own deployment of DejaCode and what kind of data is being transmitted.