Acceptable Use Policy

1. Lawful and Authorized Use

Users and clients may use our website and services only for lawful purposes and only within the authority granted by the relevant account owner, agreement, license, and platform terms.

No person may use services to facilitate fraud, impersonation, deceptive commerce, unlawful surveillance, infringement, harassment, exploitation, malware, unauthorized access, or violation of privacy or consumer protection laws.

2. Security Restrictions

Prohibited activity includes attempting to bypass authentication, probe vulnerabilities without written authorization, introduce malicious code, intercept data, overload infrastructure, scrape restricted information, distribute credentials, or interfere with another user’s systems.

Clients must promptly report suspected credential compromise, unauthorized changes, malware, or security incidents affecting systems to which Sitecraft Studios has access.

3. Prohibited Content

We will not knowingly create, publish, or support content that is illegal, defamatory, fraudulently misleading, exploitative, threatening, malicious, infringing, or designed to facilitate prohibited transactions.

We may require substantiation or legal review for sensitive claims, regulated services, financial offers, health statements, contests, subscriptions, or other activities carrying elevated compliance risk.

4. Platform and License Compliance

Clients must comply with Shopify, hosting, domain, payment, app, plugin, font, stock asset, and software license terms. Services may not be used to evade platform rules, payment restrictions, sanctions, export controls, or account enforcement.

5. Resource Abuse

Users may not use delivered systems or managed services in a way that creates unreasonable load, automated abuse, spam, mass unsolicited communications, fraudulent traffic, or interference with platform stability.

6. Credentials and Access

Credentials supplied to Sitecraft Studios must belong to the client or be shared with the owner’s authorization. Clients must use secure access methods and promptly revoke access when no longer required.

Users may not request access to accounts, data, code, or systems they do not own or control.

7. Support Conduct

Communications must remain professional. Threats, harassment, discriminatory abuse, repeated bad-faith demands, or attempts to pressure personnel into unlawful or unsafe actions may result in service suspension.

8. Investigation and Enforcement

We may investigate suspected violations, request clarification, suspend work, preserve relevant records, remove access, refuse instructions, or terminate services. Where reasonably necessary, information may be disclosed to platform providers, affected parties, professional advisers, or authorities.

Enforcement decisions may consider severity, intent, risk, history, and willingness to correct the issue.

9. Reporting

Reports should identify the relevant website, account, project, material, conduct, and available evidence. We may request additional information before acting.