Acceptable use
Responsibilities for content, collaboration, AI and integrations.
On this page
01Scope and responsibility
This policy applies to accounts, workspace material, public links, invitations, APIs and integrations. You are responsible for the content and instructions you submit and for acting within your authority. Workspace owners must allocate access appropriately and address misuse by people they administer. An administrator role does not grant ownership of another person’s intellectual property.
02Lawful content and rights
Do not use Lunume to facilitate unlawful activity, fraud, credible threats, exploitation, targeted harassment or unlawful discrimination. Do not distribute material that violates another person’s privacy, confidentiality or intellectual property. Upload personal or confidential material only where you have an appropriate lawful basis and authority. Do not submit passwords, private keys or payment-card data as ordinary support attachments.
03Account and system integrity
Do not impersonate another person, obtain accounts by deception, collect credentials, distribute malware, or attempt to access data outside your permissions. Do not exploit public links, recovery flows or integrations to bypass access controls. Disruptive testing, denial-of-service activity and attempts to evade security or resource limits are prohibited. Good-faith vulnerability reporting is described on the Security and access page.
04Invitations, publishing and communications
Send invitations only to intended collaborators and use a role appropriate to their work. Do not use invitations, public pages or notifications for unsolicited bulk advertising, phishing or deceptive messages. Review a document and its attachments before enabling a public link. Removing or revoking a link cannot recall copies that a recipient has already saved.
05Automation and service limits
Use APIs and integrations within the permissions and limits supplied for your account. Keep tokens private, stop a connection if its credentials are compromised and revoke access when it is no longer required. Do not bypass rate limits, create accounts to avoid quotas, or submit automated requests that materially interfere with other customers’ use. Any additional commercial limits must be identified in the applicable plan or order.
06Use of AI
Do not use AI features to circumvent the rules in this policy or to extract inaccessible workspace material, credentials or private system information. Send only content you are entitled to process with the feature. Review proposed changes, factual claims and citations before applying or distributing them. You remain responsible for the uses you make of an output; a generated answer is not evidence that a claim is true or an action is authorised.
07Reporting a concern
Use the published support contact and identify the relevant page, workspace or item where possible. Explain the conduct, when you observed it and why you believe it violates a right, law or this policy. For an intellectual-property report, identify the protected work, the relevant material, your authority to act and a way to contact you. Provide accurate information in good faith. Do not download, attach or redistribute unlawful material solely to support a report.
08Review, restrictions and appeals
We assess reports and may seek clarification. Where justified, measures may include restricting a public link, pausing an integration, removing access or suspending an account. We will choose measures appropriate to the nature and seriousness of the issue and applicable law. Urgent security or legal circumstances may require action before notice. Where lawful, we will explain the decision and how to request a review. A report does not guarantee removal, and this policy does not imply that every private document is routinely monitored.
09Legal rights
This policy does not restrict rights that cannot lawfully be restricted. You may challenge a decision through the contact process without losing other available remedies. We may preserve or disclose information where required by law or necessary to establish, exercise or defend legal claims, in accordance with the Privacy notice.