Acceptable use policy

1. Who this applies to

This policy is part of the Terms of service. It applies to every account, workspace member and API key, to everything uploaded or published through Lumdeck, and to the way the service is used. Customers are responsible for their members and for the agents and integrations they connect.

2. Security and fraud

Do not use Lumdeck to:

• imitate a sign-in, payment or account page, or collect passwords, one-time codes, payment card or bank details (phishing);
• distribute malware, exploits, or code that harms viewers or their devices, including drive-by downloads and forced redirects;
• mine cryptocurrency or run heavy computation in viewers' browsers;
• attack, scan or overload other websites or services from a deck;
• impersonate a person or organisation, or mislead viewers about who is behind a deck;
• get around the viewer sandbox, access other workspaces' data, or probe the service for vulnerabilities outside section 9.

3. Illegal and harmful content

Do not upload, share or present:

• child sexual abuse material, in any form. We remove it, keep what the law requires and report it to the authorities;
• terrorist content, or content that incites violence or hatred against people;
• threats, harassment, or content that targets a person for abuse;
• intimate images of a person shared without their consent;
• offers of illegal goods or services, or content that is otherwise unlawful where it is made available.

4. Other people's rights

• Do not infringe copyright, trade marks or other rights. See the copyright policy.
• Do not publish other people's personal data without a lawful basis, for example private contact details or identity documents (doxxing).
• Do not publish defamatory statements.

5. Spam and deception

• Do not use invitations, named sharing or e-mail gated links to send unsolicited bulk messages.
• Do not create links or decks designed to mislead viewers about their destination.

6. Using Lumdeck as intended

• Lumdeck hosts presentations. Do not use it as a general file host, website host, image or video CDN, or for software distribution.
• Do not create several Free workspaces or accounts to get around plan limits, and do not share one account between several people.
• Do not scrape the service, send automated traffic outside the documented API, or load test it without our written permission.
• Do not resell or sublicense the service without an agreement with us.

7. Code and third-party resources inside decks

Decks may run JavaScript and load resources from the public sources listed on the developer page. Those providers see each viewer's IP address. Do not use decks to track viewers, fingerprint devices or collect personal data unless you have a lawful basis and tell viewers. You are the controller of any data your deck collects itself.

8. Sensitive and regulated data

Lumdeck is not designed for special categories of personal data (such as health data), payment card data, or data subject to sector rules such as HIPAA or PCI DSS. Do not upload such data unless you have assessed the risk and a lawful basis, and never while Lumdeck is in beta.

9. Security research

We welcome reports of vulnerabilities at office@kinesislab.ai. Test only with your own accounts and workspaces, do not access other people's data, do not degrade the service, and give us reasonable time to fix an issue before you publish it. Research in line with this section is not a breach of this policy.

10. How we enforce this policy

We act on notices and on what we discover while running the service, as described in section 7 of the Terms of service. Measures range from disabling a link to taking down a deck, revoking API keys, suspending a workspace or closing an account. We send a statement of reasons and you can contest every decision. Report content with the "Report" link on any share page or the notice form.