Acceptable Use Policy

This policy applies to workspace Owners, Admins and Users, to anyone invited into a workspace, and to end users who submit feedback or subscribe to a newsletter through a public Lupley page. Workspace Owners and Admins are responsible for the conduct of the people they invite.

You may not use Lupley to do any of the following, or to help anyone else do it:

• Break the law, or facilitate or encourage criminal activity.
• Commit fraud, deceive people about who you are, or misrepresent your affiliation with a company, brand or person.
• Send spam or bulk unsolicited messages through feedback, replies or newsletter features.
• Run phishing, credential harvesting or social engineering campaigns.
• Upload, link to or distribute malware, viruses, ransomware or other malicious code.
• Harass, bully, threaten, intimidate or abuse another person.
• Publish hateful, violent or threatening content directed at a person or group.
• Impersonate another individual, company or Lupley itself.
• Infringe copyright, trademarks, patents, trade secrets or other intellectual property rights.
• Violate someone's privacy, publish personal information without a lawful basis, or collect personal data without appropriate authorization and consent.
• Steal, guess, share or reuse account credentials that are not yours.
• Attempt to bypass authentication, authorization, role permissions, rate limits or any other access control.
• Attack, probe, overload, disrupt or attempt to gain unauthorized access to Lupley, its infrastructure or another customer's workspace.
• Send excessive automated requests, or scrape Lupley pages where scraping is not permitted.
• Misuse newsletter functionality, including mailing people who never subscribed or ignoring unsubscribe requests.
• Send unlawful commercial messages, or messages that do not meet applicable anti-spam and marketing requirements.
• Interfere with other users, or with the normal operation, integrity or performance of the service.

You are responsible for the content you publish, including what you choose to show on your public feedback board, roadmap and newsletter. Before publishing feedback submitted by an end user, make sure you are allowed to make it public and that it does not expose personal information unnecessarily.

Only contact people who have a lawful basis to be contacted, keep proof of consent where it is required, honour unsubscribe requests promptly, and identify your organization accurately in the messages you send.

If you see content or behaviour that breaks this policy, report it to support@getlupley.com. Report suspected security issues or vulnerabilities to security@getlupley.com and see the Security page for guidance.

Depending on the seriousness of the violation, its impact on other people and whether it repeats, we may remove or hide content, restrict specific features, limit request rates, suspend access, or terminate an account or workspace. Where it is appropriate and lawful, we will contact the workspace Owner first and give an opportunity to resolve the issue. Serious cases, such as illegal activity, active attacks or risks to other customers, may be acted on immediately.

We may update this policy as the product develops or as legal requirements change. The date at the top of this page shows when it was last updated. Current version: 2026-08-19.

Questions about this policy can be sent to legal@getlupley.com.