WorkHeroes OS

Acceptable Use Policy

AETERNUM AI LLC — WorkHeroes OS

Version 1.0 · Last updated 7 September 2026

This Acceptable Use Policy ("AUP") forms part of the Terms of Service. It applies to the Customer and to every User of the Customer's workspace.

1. General principle

The Service is a professional tool for running a services business. Use it for that, lawfully, and without harming the Service, other customers, or third parties.

2. Prohibited uses

You must not use the Service to:

  1. Break the law — including data protection, consumer protection, professional-conduct, anti-money-laundering, export control and sanctions rules applicable to you.
  2. Process data you have no right to process — uploading personal data without a valid legal basis, or content that infringes a third party's intellectual property, trade secrets or confidentiality.
  3. Send unsolicited communications — bulk marketing, spam over email or messaging channels, or messages that breach the rules of the underlying channel provider.
  4. Attack or degrade the Service — penetration testing without written authorisation, vulnerability scanning, denial-of-service, deliberately exceeding rate limits, or attempts to circumvent tenant isolation, authorisation checks or usage limits.
  5. Access other tenants — attempting to reach, enumerate or infer the data of another customer's workspace.
  6. Introduce malicious code — uploading or transmitting malware, ransomware or other harmful code.
  7. Misrepresent identity — impersonating another person or organisation, or falsifying the origin of a message sent through the Service.
  8. Resell or re-expose the Service — providing access to third parties who are not Users, operating a service bureau, or exposing the Service as part of another product, unless expressly agreed in writing.
  9. Scrape or extract at scale — automated bulk extraction of the interface beyond the documented export features.
  10. Misuse AI features — generating content that is unlawful, defamatory, discriminatory or intended to deceive; producing material that impersonates a real person without their consent; or using outputs as if they were verified professional advice without human review.
  11. Store data outside the intended scope — using the workspace as generic file hosting, or storing data categories that the Customer has not declared and for which the agreed security measures are not appropriate.

3. Responsibility for Users and content

The Customer is responsible for its Users' compliance with this AUP and for the content stored in its workspace. The Customer must ensure Users are informed of these rules.

4. Security research

We welcome good-faith security research. Do not test against a production workspace containing real data. Report findings to [email protected] with enough detail to reproduce the issue, and give us reasonable time to fix it before any public disclosure. We will not pursue legal action against researchers who follow this process, act in good faith, avoid privacy violations and data destruction, and do not exploit a finding beyond what is needed to demonstrate it.

5. Enforcement

If we become aware of a breach of this AUP, we may: ask the Customer to remedy it; restrict the affected feature; suspend the account under clause 6.4 of the Terms; or, for serious or repeated breaches, terminate the Agreement. We will give notice and use the least disruptive measure that is effective, except where immediate action is needed to protect the Service, other customers or third parties, or where the law requires it.

6. Reporting abuse

To report a violation, write to [email protected] with a description of the issue and any evidence you can share.

7. Changes

We may update this AUP. Material changes are notified as provided in clause 16 of the Terms.