Acceptable use policy
=====================

Draft for legal review. Not a final document.
Last updated: 1 September 2026.

What you cannot do with this platform
-------------------------------------

This list is not exhaustive, but it is concrete. If something resembles it, do not do it.

- Impersonate a brand, a bank, a public administration or another person.
- Send unsolicited bulk messages over any channel.
- Collect personal data by deception, including credentials and payment details.
- Publish or distribute illegal content, or material that exploits minors.
- Harass, threaten or incite hatred or violence.
- Automate decisions with legal effects on a person without human supervision.
- Use the platform to attack third-party systems or bypass their security measures.

Custom domains
--------------

Before enabling a custom domain we verify the organization legal identity and review whether the requested name resembles a known brand. A domain imitating a bank, a telecom or a public body is not activated.

What happens on breach
----------------------

We warn, suspend or cancel, in that order and according to severity. In cases of active fraud or risk to third parties, suspension is immediate.

Every measure is communicated to the organization owner with its reason, and recorded in a log that cannot be edited.

How to report
-------------

Anyone can report abuse from the public form, without an account. A person reviews it.