Acceptable use policy

This policy is part of the terms of service and applies to accounts, workspaces, designs, uploads, comments, prompts, generated output, exports, public share links, and API traffic. You are responsible for people using the service through your account or workspace.

• Do not threaten, harass, stalk, exploit, or facilitate harm to a person or group.
• Never create, upload, request, or distribute child sexual abuse material or sexual content involving a minor. Apparent violations may be reported to the appropriate authorities.
• Do not create or distribute non-consensual intimate imagery, sexualized depictions of a real person without consent, or material intended to extort or humiliate.
• Do not expose personal, biometric, health, financial, authentication, or government-identifier data without lawful authority and appropriate safeguards.
• Do not use the service for unlawful discrimination, surveillance, or decisions that materially affect a person without legally required review and safeguards.

• Do not impersonate a person, organization, public body, or brand, or falsely suggest their endorsement.
• Do not create phishing material, counterfeit documents, fraudulent advertising, fake credentials, or content intended to obtain money, access, or secrets by deception.
• Do not present generated or altered imagery as an authentic record where doing so could mislead or harm someone.
• Do not hide the origin or destination of a public link in order to trick its recipient.

• Use only content, fonts, logos, images, and data you have the right to use.
• Do not infringe intellectual-property, publicity, privacy, confidentiality, contractual, or other rights.
• Do not use the service to distribute malware, spam, unlawful advertising, regulated goods, or instructions whose purpose is to facilitate wrongdoing.
• Comply with laws that apply to your content, audience, industry, and use of generated output.

• Do not access another account, workspace, design, upload, or share link without permission.
• Do not probe, scan, exploit, reverse engineer, bypass access controls, or interfere with the service except for good-faith security testing authorized by us.
• Do not run traffic that degrades the service, evade limits, automate account creation, scrape at scale, or use Design Buddy as storage or delivery infrastructure unrelated to designing.
• Do not introduce malicious code or use the service to attack another system.
• Do not sell, sublicense, or provide a competing hosted service through your account without our written agreement.

Do not send a configured text or image provider data you are not allowed to disclose. You must review output before relying on or publishing it. Provider-backed features do not remove your responsibility for accuracy, permissions, disclosure, or lawful use.

We may investigate reports and preserve relevant records. Depending on severity and urgency, we may ask you to correct the issue, remove content, revoke a share link, restrict a feature, suspend access, terminate an account or workspace, or report conduct where law requires it. We may act without advance notice where needed to prevent immediate harm.

We aim to respond proportionately and will consider context, intent, impact, recurrence, and whether the issue can be corrected.

Send reports to support@workflowcorp.com. Include the public link or workspace name, what happened, when it happened, and any evidence you can safely provide. Do not include passwords or unnecessary sensitive data.

Good-faith security research that avoids privacy violations, service disruption, and data destruction is welcome. Report findings before public disclosure. For emergencies or an immediate threat to safety, contact local emergency services first.