Acceptable Use Policy

1. Unlawful and harmful content

You must not use Weave to store, share or distribute content that:

• is unlawful, or infringes anyone's intellectual property, privacy or other rights;
• contains child sexual abuse material, or promotes terrorism or violent extremism;
• harasses, threatens, defames or discriminates against others;
• is malware or is intended to cause harm, such as ransomware, credential stealers or exploit kits deployed against systems you are not authorised to test (security research code in a clearly labelled repository is acceptable);
• contains other people's personal data that you have no lawful basis to process, or credentials, secrets or keys belonging to others.

2. Security and integrity

You must not:

• access, or try to access, accounts, organisations, repositories or data you are not authorised to use, or get around access controls, symbol ownership, rate limits or authentication;
• probe, scan or test the vulnerability of the Service except under our vulnerability disclosure policy;
• introduce viruses or other malicious code into the Service;
• interfere with or disrupt the Service, for example by denial-of-service attacks or by sending requests designed to overload it;
• share credentials or personal access tokens in a way that lets unauthorised people use your account.

3. Fair use of resources

You must not:

• use automated means (including AI agents) to send traffic at a volume that degrades the Service for others, or that exceeds published limits;
• use Weave primarily as general file hosting, a content-delivery network, or for storing large binaries unrelated to software development;
• use the Service for cryptocurrency mining or similar compute abuse;
• create accounts in bulk, or create accounts to evade a suspension or to abuse free allowances, credits or trials.

4. AI features

You must not use the AI features of the Service to:

• do anything prohibited by this policy;
• attempt to extract the prompts, models or other users' data, or to bypass safeguards of our AI providers;
• generate content that breaches our AI providers' usage policies.

5. Misrepresentation and spam

• Do not impersonate any person or organisation, or misrepresent who authored a change.
• Do not use invitations, notifications or other features to send spam or unsolicited messages.

6. Enforcement

If we reasonably believe this policy has been breached we may remove or disable access to content, revoke tokens, restrict features, or suspend or terminate accounts as set out in the Terms. Where reasonably practicable we will tell you what we have done and why, and give you a chance to respond. We may report illegal activity to the authorities.

7. Reporting

Report abuse or illegal content to privacy@weave.directory. Report security vulnerabilities to security@weave.directory. If you believe content on Weave infringes your copyright, email us with the content's location, the work you say is infringed, your contact details, and a statement that the information is accurate and you are authorised to act.