Acceptable Use Policy

1. Introduction

This Acceptable Use Policy ("AUP") establishes the rules governing your use of the IS.TEAM platform (https://is.team) and all associated applications, APIs, webhooks, and services (collectively, the "Service"). This AUP is incorporated by reference into our Terms of Service and forms a binding part of the agreement between you and IS.TEAM LLC ("IS.TEAM," "we," "us," or "our").

By accessing or using the Service, you agree to comply with this AUP. Violations may result in suspension or termination of your account, removal of content, and other actions described in Section 7.

2. General Principles

The Service is designed for legitimate professional project management and team collaboration. You must use the Service:

In compliance with all applicable local, state, national, and international laws and regulations
Consistent with the spirit of these guidelines — not merely the letter
In a manner that respects the rights and dignity of other users
Without interfering with the integrity, performance, or availability of the Service

3. Prohibited Content

You may not create, upload, store, transmit, or share content through the Service that:

3.1 Illegal Content

Violates any applicable federal, state, local, or international law or regulation
Infringes any patent, trademark, trade secret, copyright, or other intellectual property right
Violates the privacy or publicity rights of any person
Constitutes fraud, misrepresentation, or deceptive trade practices
Facilitates illegal gambling, unauthorized securities trading, or unlicensed financial services

3.2 Harmful or Abusive Content

Is threatening, harassing, bullying, intimidating, or discriminatory toward any person or group
Contains hate speech, including content that degrades individuals or groups based on race, ethnicity, national origin, religion, gender, gender identity, sexual orientation, disability, age, or veteran status
Is defamatory, libelous, or malicious toward identifiable individuals or organizations
Constitutes stalking or facilitates real-world harassment of any person
Exploits, abuses, or endangers children in any way; includes child sexual abuse material (CSAM) in any form

3.3 Explicit and Adult Content

Contains sexually explicit material in a context not appropriate for the professional nature of the Service
Depicts graphic violence intended to shock or disturb

3.4 Malicious Technical Content

Contains viruses, worms, Trojan horses, ransomware, spyware, adware, or any other malicious code
Links to or facilitates the download of malware or phishing pages
Attempts to exploit vulnerabilities in browsers, operating systems, or third-party systems
Contains content designed to perform unauthorized automated actions (bots, scrapers not disclosed via API Terms)

3.5 Spam and Deceptive Content

Constitutes unsolicited bulk communications (spam)
Employs misleading or deceptive subject lines, sender names, or content
Contains pyramid scheme, multi-level marketing, or other fraudulent "get rich quick" material
Impersonates IS.TEAM, any IS.TEAM employee, another user, or any third party in a misleading way

4. Prohibited Activities

4.1 Security and Integrity Violations

You may not:

Attempt to gain unauthorized access to any IS.TEAM system, account, or network
Conduct penetration testing, vulnerability scanning, or security research against the Service without prior written authorization from IS.TEAM (email security@is.team to request a scope agreement)
Probe, scan, or test the vulnerability of the Service or any IS.TEAM network
Circumvent or disable any security, authentication, or access-control feature
Intercept, monitor, or modify communications between other users without authorization
Perform denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks against the Service or any third-party infrastructure reachable through the Service
Forge TCP/IP packet headers, email headers, or any other part of a message

4.2 API and Automation Misuse

You may not:

Use the IS.AI LLM API (ist_ tokens) for purposes other than legitimate workspace automation on boards where you hold appropriate access
Share your API tokens publicly or include them in client-side code, public repositories, or other exposed locations
Exceed rate limits or engage in conduct that imposes an unreasonable or disproportionate load on the Service's infrastructure
Scrape or systematically download large volumes of content from the Service using automated tools, except through officially documented API endpoints within documented rate limits
Use webhooks or API endpoints to send high-frequency automated requests beyond what is necessary for legitimate integration use
Create accounts or workspaces programmatically in bulk without prior written approval

4.3 Privacy Violations

You may not:

Record voice meetings without disclosing and obtaining legally required consent from all participants
Collect, store, or process other users' personal information in violation of applicable privacy laws
Use the Service to build profiles of individuals without their knowledge or consent
Upload or store biometric data of third parties without explicit written consent from those individuals
Use the Service to process "sensitive personal information" as defined under CCPA (including social security numbers, financial account information, health data, precise geolocation, immigration status) beyond what is incidental to legitimate project management use

4.4 Intellectual Property Violations

You may not:

Upload, store, or transmit content that infringes any third party's intellectual property rights
Remove, alter, or obscure any copyright, trademark, or other proprietary notices
Reverse-engineer, decompile, or disassemble any part of the Service
Use IS.TEAM's name, logo, or trademarks without prior written authorization

4.5 Account and Identity Violations

You may not:

Create multiple accounts to circumvent plan limits, bans, or other restrictions
Share account credentials with multiple individuals beyond what is permitted by your subscription plan
Sell, transfer, sublicense, or otherwise convey access to your account or API tokens to third parties
Impersonate IS.TEAM staff or claim affiliation with IS.TEAM without authorization
Use false, misleading, or temporary-only email addresses to evade account restrictions

4.6 Commercial Restrictions

You may not:

Resell, sublicense, or commercially redistribute the Service or any component thereof without a separate written reseller agreement with IS.TEAM
Build a competing product using material portions of the Service's output or architecture
Use the Service to benchmark or test competing products for commercial publication without disclosure and prior written consent
Frame or mirror any portion of the Service on another website without prior written permission

4.7 Regulatory and Export Violations

You may not:

Use the Service in any manner that violates US export control laws (EAR, ITAR), including accessing the Service from or for the benefit of sanctioned countries or Specially Designated Nationals (SDNs) listed by OFAC
Use the Service to facilitate transactions with parties on applicable government restricted-party lists
Use the Service in connection with the design, development, or production of weapons of mass destruction

5. Third-Party Integrations and Webhook Use

When using third-party integrations (GitHub, Slack, Google Drive, Figma) or webhooks (Zapier, Make.com, custom endpoints), you must:

Comply with the terms of service and acceptable use policies of those third-party platforms
Not use integrations to scrape, harvest, or exfiltrate data from third-party services in violation of those services' terms
Ensure webhook endpoints you configure are your own or you have authorization to send data to them
Not use incoming webhooks to inject malicious content, XSS payloads, or other harmful data into IS.TEAM task content
Not send personally identifiable information to webhook destinations you do not control or that do not have appropriate security measures

IS.TEAM is not responsible for how third-party services handle data transmitted through integrations or webhooks.

6. AI Feature Use

When using AI-powered features (Meeting Notes, IS.AI API, AI Workflow Planner):

You must not attempt to manipulate AI outputs through adversarial prompts designed to bypass safety measures
You must not use AI-generated outputs as the sole basis for decisions involving significant legal, medical, financial, or safety consequences without independent human review
You must not claim that AI-generated content was authored by a human when the context requires accurate disclosure
You must disclose AI involvement in communications where required by applicable law or professional regulations
You must obtain all legally required consents before using the audio recording feature on calls with others (see Section 4.3 above)

7. Enforcement

IS.TEAM reserves the right to investigate and take action in response to any suspected violation of this AUP:

7.1 Actions We May Take

Issue a warning (email notification to the account owner)
Temporarily suspend specific features or the entire account
Remove or disable offending content
Permanently terminate the account without refund
Report illegal activities to law enforcement or regulatory authorities
Pursue civil or criminal legal action

7.2 Factors in Determining Response

Severity and nature of the violation
Whether the violation is deliberate or inadvertent
History of prior violations
Whether the violation affected other users, third parties, or the stability of the Service
Cooperation and remediation efforts by the account holder

7.3 Account Termination

Accounts terminated for AUP violations are not eligible for refunds. We will provide advance notice where practicable, but reserve the right to take immediate action for severe violations (e.g., CSAM, active attacks against the Service, distribution of malware).

7.4 Appeals

If you believe your account was suspended or terminated in error, you may submit an appeal to hi@is.team with "AUP Appeal" in the subject line within 30 days of the action. We will review your appeal in good faith and respond within 10 business days.

8. Reporting Violations

If you believe someone is using the Service in violation of this AUP, please report it to us:

General AUP violations: hi@is.team (subject: "AUP Violation Report")
Security vulnerabilities: security@is.team (subject: "Security Report")
Copyright infringement (DMCA): hi@is.team (subject: "DMCA Notice") — follow the DMCA procedure in our Terms of Service
Child safety (CSAM): Report to us at hi@is.team AND to the National Center for Missing & Exploited Children (NCMEC) at CyberTipline.org

We will investigate reports in good faith and take appropriate action. We cannot guarantee a response to every report, and our investigation findings are confidential.

9. Changes to This Policy

We may update this AUP at any time. Material changes will be communicated via email and a Service notification at least 30 days before taking effect. Your continued use of the Service after the effective date constitutes acceptance of the revised AUP.

10. Contact

IS.TEAM LLC 123 Placeholder Street, Suite 100 Wilmington, DE 19801 United States Email: hi@is.team Security: security@is.team Website: https://is.team