DRAFT — NOT LEGAL ADVICE. Prepared as a starting draft; not reviewed by a lawyer. Have a qualified Australian legal practitioner review it before use.

Acceptable Use Policy — Grace

This Acceptable Use Policy ("AUP") applies to everyone who uses Grace and forms part of the Terms of Service. It exists to keep the Service secure, lawful and available for all customers.

You must not

• Use the Service in breach of any law, regulation, or third-party right (including privacy, IP, and confidentiality rights);
• Upload or transmit malware, or content that is unlawful, infringing, defamatory, or harmful;
• Attempt to gain unauthorised access to the Service, other customers' workspaces or data, or the underlying systems; or probe, scan or test the vulnerability of the Service without our prior written permission;
• Interfere with or disrupt the integrity or performance of the Service (for example, denial-of-service, excessive automated requests, or circumventing rate limits or access controls);
• Reverse engineer, decompile or attempt to derive source code, except to the extent this restriction is prohibited by law;
• Resell, sublicense, or provide the Service to third parties except as expressly permitted;
• Use the Service to build a competing product, or to benchmark it for a competitor, without our consent;
• Remove or obscure proprietary notices, or misrepresent your affiliation or identity; or
• Use the Service to store or transmit personal information you are not entitled to handle, or sensitive information beyond what your compliance purpose requires.

Fair use and automated access

Automated/API access (where offered) must stay within any documented limits and must not degrade the Service for others. We may apply rate limits and reasonable technical protections.

Enforcement

We may investigate suspected breaches and may suspend or terminate access where reasonably necessary to protect the Service or others, in accordance with the Terms of Service. Where practicable and appropriate we will give notice and an opportunity to remedy; for serious or ongoing breaches we may act immediately.

Reporting

Report security issues or misuse to [TO CONFIRM: e.g. security@eganservices.com]. We welcome good-faith security reports and will not pursue action against researchers acting responsibly and within the law. [TO CONFIRM: confirm your vulnerability-disclosure stance with your solicitor.]