Scope
This policy applies to the website, contact channels, and any Xylint product or environment that incorporates it. A client’s own application and third-party services may have additional rules. Use must also comply with the accepted engagement and applicable law.
Prohibited activity
Do not use the service to carry out or facilitate unlawful, deceptive, abusive, or harmful activity. In particular, you must not:
- Access accounts, systems, or data without authorization; bypass access controls or exceed granted permissions.
- Introduce malware, exploit vulnerabilities without permission, disrupt availability, overload systems, or interfere with other users.
- Commit fraud, impersonate another party, send spam, harvest personal information unlawfully, or distribute deceptive communications.
- Upload material that infringes intellectual-property rights, confidentiality duties, privacy rights, or applicable law.
- Use a product to create or distribute unlawful sexual content, child sexual abuse material, credible threats, or material that facilitates violence or exploitation.
- Misuse an AI-enabled feature to evade safeguards, falsely represent generated output as verified professional advice, or make prohibited decisions about people.
Data and authorized access
Provide only information and materials you are authorized to use. Do not share credentials, production secrets, regulated information, or personal data through an inappropriate channel. The presence of a text box or upload feature does not establish permission to submit every category of information.
Keep access credentials private, use the permissions appropriate to the task, and tell us promptly if you suspect unauthorized use of an account or environment managed under an engagement. Data handling and security responsibilities for client systems must be agreed in writing.
Testing, automation, and security reports
Security testing, bulk automation, scraping, and load testing of Xylint-managed systems require authorization unless a published program or applicable law expressly permits the activity. Ordinary search indexing and lawful use of public pages are not prohibited by this statement.
Report a suspected security issue to [email protected] with a concise description and the minimum evidence needed to understand it. Do not access more information than necessary, publish personal information, disrupt service, or claim that this policy grants a security-testing safe harbor.
Responding to misuse
We may investigate a credible report, preserve relevant records, restrict harmful activity, or suspend access where reasonably needed to address misuse, a material breach, or a security risk. Actions should be proportionate to the issue and subject to the applicable agreement and law.
Where practicable and lawful, we will explain a restriction and provide a way to resolve an error or concern. Serious illegal activity or an urgent threat may require immediate action. Contact [email protected] if you believe access has been restricted incorrectly.