Acceptable Use Policy

Users may use Ephemeral Workspace™ only for lawful, authorized, privacy-respecting, and contractually permitted purposes. Customers are responsible for their users, guests, administrators, content, instructions, integrations, and configurations.

If these restrictions conflict with a signed enterprise agreement, the stricter security, privacy, abuse-prevention, or legal-compliance obligation controls unless the agreement expressly says otherwise.

Do not use the Service for illegal conduct, fraud, phishing, harassment, exploitation, discrimination, threats, extortion, stalking, nonconsensual surveillance, doxxing, unlawful scraping, impersonation, spam, unauthorized credential collection, or violation of intellectual-property, privacy, publicity, consumer-protection, employment, export, sanctions, or data-protection laws.

Do not upload, generate, transmit, or store malware, exploit code, botnet instructions, credential dumps, stolen data, destructive payloads, or instructions intended to compromise systems, except within a written, authorized, isolated, and legally compliant security-testing engagement.

Do not probe, scan, load test, stress test, benchmark, crawl, scrape, reverse engineer, bypass, disable, weaken, or interfere with the Service, its providers, its rate limits, its tenant isolation, its deletion workflows, its verification adapters, or its security controls without written authorization.

Do not attempt to access another tenant, workspace, account, key, token, invoice, log, audit event, receipt, provider configuration, or deletion evidence without authorization.

Do not submit content unless you have the rights, consents, notices, legal bases, and permissions needed to process it. Do not use the Service for regulated production workloads unless the required agreement, provider configuration, security evidence, and compliance terms are in place.

Do not use AI, export, deletion, audit, or receipt features to conceal wrongdoing, destroy evidence unlawfully, mislead regulators, evade discovery obligations, or create false certifications.

We may investigate suspected violations and may throttle, suspend, terminate, remove content, preserve evidence, notify affected customers or providers, or report conduct where required or permitted by law.

Enforcement decisions may consider severity, intent, harm, repeat behavior, risk to others, provider requirements, legal obligations, and whether immediate action is needed to protect the Service.