What's not allowed, and why.

1. Why this exists

This expands on the acceptable-use clause in the terms of service (section 5) — it exists so C4Stage stays usable, safe and legal for everyone on it.

2. Don't

• Post or store unlawful content, or use the service for an unlawful purpose.
• Upload malware, exploits, or anything designed to damage or disrupt a system.
• Attack, probe or attempt to breach the security of C4Stage or anyone else's systems.
• Point a health probe at a host you don't control and aren't authorised to monitor — a probe is a request our servers send on your behalf, not a way to reach a host anonymously.
• Scrape the service, send it more traffic than a person would generate, or circumvent rate limits or other usage limits.
• Resell or redistribute access to the service.
• Share one account between multiple people — invite them instead.
• Circumvent billing: using a payment method without authority, or working around limits meant to keep the preview fair.
• Use the AI assistant to generate content that's illegal, that harasses or defames someone, or that helps plan violence or wrongdoing.
• Upload someone else's confidential or proprietary information into a diagram, comment or assistant prompt without the authority to share it.

3. AI usage limits

Assistant requests are limited per account — currently 8 per minute and 200 per day — to keep the preview fast and fair for everyone. Limits may change as the service grows; hitting one just means waiting for the window to reset.

4. Enforcement

A first issue usually gets a warning. Repeated or serious breaches can lead to removing content, revoking share links or tokens, or suspending or terminating the account — with or without notice, depending on severity. See the terms of service (section 9) for how ending an account works generally.

5. Reporting abuse

If you come across content, a shared canvas, or behaviour on C4Stage that breaks this policy, tell us: reach the team through your workspace administrator or the channel that came with your invitation. Include the link or account involved and what you saw — that's usually enough for us to act.