Acceptable Use Policy

1.Scope

This policy applies to everyone who uses Cloudesk — account holders, workspace members, and anyone using a site, store, portal, form or email sent through it — and to everything put into or published with it. It forms part of our Terms of Service. Workspace owners are responsible for making sure their members and the content on their sites follow it.

2.Illegal and harmful content

Do not use the Service to create, host, publish, sell, or send anything that:

• is unlawful under Indian law or the law where you operate — including content prohibited by Rule 3(1)(b) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021;
• is child sexual abuse material, or sexualises or exploits minors in any way (we report it to the authorities);
• is obscene, pornographic, invasive of another person's bodily privacy, or shared without the consent of the people in it;
• is defamatory, harasses, threatens or incites violence or hatred against people based on religion, caste, race, ethnicity, gender, sexual orientation, disability or other protected characteristics;
• promotes or facilitates terrorism, money laundering, gambling or betting that is illegal where offered, or the sale of illegal drugs, weapons, counterfeit goods, wildlife products or other prohibited items;
• impersonates a person, business or government body, or is deliberately misleading — including fake reviews, misleading prices or health claims, or misinformation that is patently false;
• threatens the unity, integrity, defence, security or sovereignty of India, friendly relations with foreign states, or public order.

If you sell through a store built with Cloudesk, you must hold any licences your products need and follow the Consumer Protection (E-Commerce) Rules, 2020 that apply to you as a seller — including showing your business details, prices with taxes, and your return and refund policy.

3.Malware, phishing and attacks

• Don't upload, host or link to malware, ransomware, spyware or any code designed to harm devices or data.
• Don't build phishing pages, fake login or payment pages, or sites that collect passwords, card or bank details under false pretences.
• Don't use the Service — including its code-execution and automation features — to attack, scan, or gain unauthorised access to any system, mine cryptocurrency, or run denial-of-service traffic.
• Don't try to get around plan limits, the firewall, rate limits, or the boundaries between workspaces, or access data that isn't yours.

4.Email, messaging and spam

• Send marketing email and messages only to people who have agreed to receive them, or where the law otherwise allows it, and honour unsubscribe requests promptly.
• Don't use purchased, rented or scraped contact lists. Don't hide who you are, use misleading subject lines, or forge headers.
• Follow the rules that apply to you, including India's TRAI regulations on unsolicited commercial communication, the CAN-SPAM Act, and the GDPR and ePrivacy rules where they apply.

We may pause sending from a workspace whose emails get unusually high bounce or complaint rates while we look into it.

5.Other people's rights and data

• Only upload content you own or have permission to use. Don't infringe copyrights, trade marks, designs, patents or trade secrets.
• Collect and use personal data lawfully: tell people what you collect and why, get consent where it's needed, and respond to their requests. This matters especially for health data (Clinic), children's data (Education), and employee and payroll data (HR).
• Don't use the Service to track or surveil people without a lawful basis.

6.Fair use of the platform

• Don't scrape, crawl or bulk-download the Service or other customers' sites by automated means, except through our documented APIs and exports and within their limits. Search engines indexing published sites is fine.
• Don't overload the Service, for example by sending excessive requests, using it as general file hosting or a content-delivery network, or running long-lived workloads unrelated to your business.
• Don't resell, rent or share access to the Service, or white-label it, unless we have agreed in writing.
• Don't reverse-engineer the Service or use it to build a competing product.

7.Security testing and responsible disclosure

Don't probe, scan or test the Service's security, or try to break into it, without our prior written permission. Good-faith security research is welcome: if you follow the responsible-disclosure guidelines on our Security page — test only against your own account and data, avoid harming other users or the Service, don't access or keep others' data, and report what you find to us privately — we won't treat your research as a breach of this policy.

8.Reporting and enforcement

To report content or behaviour that breaks this policy, including on a site or store built with Cloudesk, use the details on our contact page with the link and what is wrong. Complaints from users and affected persons are handled as described on the Grievance Redressal page.

If we find a breach, we may — depending on how serious it is — warn the workspace, remove or disable access to the content, unpublish a site, pause email sending, suspend members or the workspace, or close the account. Where we act against content, we will tell the workspace owner what was removed and why, and give them a chance to respond, unless the law or the safety of others prevents it. We comply with lawful orders from courts and government agencies, and may report illegal activity to the authorities.