Acceptable Use Policy

This policy binds every operator with a workspace, every person that operator gives console access to, and every member of a programme running on the platform. It forms part of the Platform Terms and of the Website Terms of Use.

Operators must impose equivalent obligations on their members by binding terms. An operator whose members breach this policy is treated as having breached it, because the operator is the only party that can bind them.

This is the section that matters most, and it is not a formality. A programme of any of the following kinds may not be run on this platform, whatever it is called:

1. 01Recruitment-driven compensation. Any plan whose compensation is primarily driven by enrolling participants rather than by genuine sales of products or services to end users — including payments for enrolment itself, compensation that survives only while new participants keep joining, and “qualification” purchases that exist to unlock commission rather than to be consumed or resold.
2. 02Inventory loading. Requiring or incentivising participants to buy more than they can genuinely use or resell, or refusing reasonable buy-back of unsold, unopened goods where local law requires it.
3. 03Guaranteed-return schemes. Any programme presenting a package as producing a fixed, guaranteed, “risk-free” or capital-protected return, or as an investment product.
4. 04Unregistered securities or collective investment. Offering interests, tokens, revenue shares or pooled arrangements that constitute securities or collective investment schemes where they are offered, without the registration or exemption that law requires.
5. 05Deposit-taking, lending and money transmission. Taking repayable funds from members, operating a wallet or exchange for third parties, or transmitting money for others through a programme running here.
6. 06Gambling and lotteries. Games of chance, prize draws with paid entry, or compensation contingent on a random outcome, where a licence is required.
7. 07Prohibited or restricted goods. Programmes selling controlled substances, weapons, counterfeits, stolen data, prescription medicines without authorisation, or products making unlicensed medical or health claims.
8. 08Sanctions evasion or laundering. Any programme structured to move value for sanctioned persons, to obscure the origin of funds, or to break a payment trail.

• Anything unlawful, defamatory, harassing, hateful, or that incites violence.
• Sexual content involving minors, non-consensual intimate imagery, or content that sexualises a person who cannot consent.
• Malware, exploit code, phishing pages, or content designed to deceive a person into disclosing credentials.
• Another party's intellectual property used without permission, including a brand used to imply a relationship that does not exist.
• Personal data an operator has no lawful basis to hold, and special-category data of any kind — the platform is not built to hold it. Identity documents in particular must never be uploaded: verification returns a decision and a non-reversible handle, and that is all the platform is designed to keep.
• Earnings claims, income projections, lifestyle claims and testimonials that breach the marketing policy.

The binding rules for marketing content are in the Programme Marketing and Claims Policy, which is more specific and prevails on that subject.

• Circumventing a control. Working around the two-person approval on plan versions or payout runs, the ceiling on total compensation, the marketing-approval flow, a rate limit, an identity check or the geographic gate — including by sharing an account so that one person can act as two.
• Circumventing the geographic gate. Using or instructing others to use a VPN, proxy, Tor exit, relocated device or borrowed address to obtain access from a country the platform does not serve. See Prohibited Jurisdictions and Sanctions Policy.
• Identity fraud. Enrolling under a false identity, enrolling a person who did not consent, or operating multiple positions for one human in order to earn on your own downline. One approved identity may hold one position per workspace, and the database refuses the second.
• Payment abuse. Fabricating purchases, self-dealing purchase volume, or reversing payments after commission has accrued in order to extract value.
• Interference. Scraping beyond published crawl directives, load-testing without written permission, probing other tenants, or any attempt to read or affect a workspace that is not yours.
• Credential handling. Sharing operator credentials, retaining access for a person who has left, or using a workspace API key outside the systems it was issued for.

The platform is not served in the countries listed in Prohibited Jurisdictions and Sanctions Policy, and it may not be marketed into them. An operator must not target a prohibited country in its marketing, must not enrol members it knows to be located there, and must not instruct a member to conceal their location.

Security research is welcome within limits. You may probe your own workspace and your own data. You may not access another tenant’s data, degrade the service, run automated scanning at volume, or use a finding for anything other than reporting it.

Report findings to [[ To be supplied — security contact address ]]. There is no bug-bounty programme today and no reward is offered; this is stated so nobody works on the assumption that one exists. Research conducted within these limits and reported promptly will not be treated as a breach of this policy.

Enforcement escalates, and each step is recorded in the audit log with the operator who took it:

1. 01Notice — we tell you what we believe is wrong and what would resolve it.
2. 02Required change — we require a specific change within a stated period, such as withdrawing an asset or correcting a claim.
3. 03Restriction — a specific capability is withdrawn (for example, publishing marketing assets or listing publicly) while the issue is open.
4. 04Suspension — workspace access is suspended.
5. 05Termination — the agreement ends, per the platform terms.

Steps may be skipped where the breach is serious, where a regulator or payment provider requires it, or where continuing would expose XEX to criminal or regulatory liability. In every case we state the reasons, and you may challenge the decision — see Complaints and Disputes.

To report a breach of this policy — by an operator, by a member, or in marketing material you have seen anywhere — write to [[ To be supplied — compliance contact address ]] with the programme name, what you saw and where. Reports about a specific programme’s money are handled as described in Complaints and Disputes, and are recorded against the workspace either way. Include URL and a screenshot where the content may be taken down before we see it.