These acceptable use rules protect Teamwide users, customers and shared infrastructure at teamwide.app. They apply to boards, workspaces, sharing, invitations, uploads, comments, API and MCP interfaces, and AI agents and their tools.
1. Purpose and principles
Teamwide serves lawful visual collaboration. All use must respect applicable law, third-party rights and the platform's security and availability. Customers are responsible for their content and the access permissions they grant.
2. Invitations, sharing and legal basis
- Only invite people where a valid legal basis exists for contact and access.
- Do not use invitations, comments or sharing for spam, unlawful advertising or unsolicited mass communication.
- Share personal, confidential or protected information only with authorised recipients. Recipients can pass on a public link.
- Respect objections and promptly revoke shares and memberships that are no longer needed.
- Only use content, files, images and other materials for which you have the necessary rights.
3. Identity and permissions
Account details, display names and invitations must not mislead about identity or authority. Roles, board permissions and password protection must be used as intended. Passwords, API keys, OAuth tokens and other credentials must not be made available to unauthorised persons.
4. Prohibited content and purposes
In particular, the services must not be used for:
- phishing, identity theft, payment fraud or other deceptive activities;
- malware, ransomware, harmful files or links, or circumvention of security measures;
- unlawful, defamatory or threatening content, or content that infringes third-party rights;
- depictions of child sexual abuse or the sexual exploitation of minors;
- incitement to hatred, discrimination or violence against protected groups;
- unlawful trade in weapons, drugs, stolen data or other prohibited goods;
- activities requiring authorisation without the necessary authorisation; or
- other conduct that breaches applicable law, official orders or third-party rights.
Lawfully regulated businesses are not excluded solely because of their industry. They must meet all industry-specific, data protection and security requirements and assess the suitability of the service for their data.
5. Technical misuse
- Unauthorised access to other people's accounts, workspaces, boards or data is prohibited.
- Authentication, tenant separation, roles, read restrictions, and storage, API or security limits must not be circumvented.
- Load tests, scans and automated access that endanger stability or security without prior coordination are prohibited.
- The platform must not be used to collect other people's personal data or attack external systems.
- Automated upload, export, invitation and agent loops must not place disproportionate strain on the infrastructure.
- Resale as a standalone collaboration service requires our prior consent.
6. AI agents and external tools
These rules also apply to instructions given to AI agents and their results. Agents must not be used to circumvent permissions, disclose secrets or carry out unlawful acts. Only submit data that the configured model provider and enabled tools are permitted to process. Check outputs and changes before using them; automatic results may be inaccurate or affect third-party rights.
7. Review and enforcement
Where there is a specific suspicion of misuse, we may examine technical metadata, security events and content necessary for the investigation and request information about authorisation or remediation. The scope and measures depend on severity, urgency and repetition.
We may limit access, block content or shares, revoke credentials, temporarily suspend accounts or workspaces, or terminate for good cause. In cases of immediate danger or legal obligation, we may act without prior notice. Where reasonable, we inform the customer and give them an opportunity to comment or remedy the situation. Measures are lifted once their reasons cease to apply.
8. Reporting misuse
Report suspected misuse to [email protected] . The affected board or sharing address, the time and a brief description are helpful. Do not send passwords or API keys.
9. Changes
For objective reasons, we may adapt these rules to new patterns of misuse, services or legal requirements. Material changes are communicated in accordance with the Terms and Conditions. The current version is available at teamwide.app/acceptable-use.