This Acceptable Use Policy forms part of the legal conditions governing use of LeStudio Services.
1. Application and Interpretation
1.1 Application
This Acceptable Use Policy (“AUP”) applies to each Service that refers or links to it and supplements the LeStudio Terms of Service.
1.2 Priority
If this AUP conflicts with the Terms of Service, the Terms of Service prevail unless applicable Product Terms expressly provide otherwise.
1.3 Purpose
The purpose of this AUP is to protect users, third parties, LeStudio systems and the integrity and lawful operation of the Services.
2. General Lawful Use Obligation
2.1 Lawful Use
You must not use, attempt to use or permit use of a Service for unlawful conduct or to facilitate unlawful conduct.
2.2 Responsibility for Authorised Users
Where you administer an organisation workspace, you must take reasonable steps to ensure that persons whose access you control use the Service consistently with this AUP.
3. Unauthorised Access and Identity Abuse
3.1 Unauthorised Access
You must not access or attempt to access another person's Account, files, organisation, workspace or data without authority.
3.2 Credentials
You must not obtain, solicit, intercept, use or attempt to use another person's credentials, session material, token or authentication factor without authority.
3.3 Permission Bypass
You must not deliberately bypass role, tenant, organisation or application permissions.
3.4 Impersonation
You must not impersonate another person or organisation in a deceptive, fraudulent or harmful manner.
4. Security, Malware and Service Interference
4.1 Malicious Code
You must not introduce, distribute or execute malware or malicious code through a Service.
4.2 Denial of Service
You must not conduct or assist a denial-of-service, resource-exhaustion or similar attack.
4.3 Resource Abuse
You must not deliberately flood expensive endpoints, evade rate limits, evade quotas or otherwise impose abnormal load for the purpose of disrupting or materially increasing the cost of operating the Service.
4.4 Interference
You must not materially interfere with infrastructure or another user's lawful use of a Service.
4.5 Vulnerabilities
You must not exploit a vulnerability beyond what is reasonably necessary for good-faith verification under an applicable Vulnerability Disclosure Policy.
5. Automated Access
5.1 Restricted Automation
You must not use bots, scrapers, crawlers or other automation in a manner that:
- defeats access controls;
- disregards technical restrictions;
- creates material load or cost;
- harvests personal information unlawfully;
- materially disrupts normal users;
- breaches another applicable LeStudio policy.
5.2 Permitted Automation
Clause 5.1 does not prohibit ordinary search-engine indexing or automation expressly supported by the relevant Service.
6. Content and Files
6.1 Rights to Content
You must hold the rights, permissions and authority reasonably necessary to upload, store, transmit or process content through a Service.
6.2 Prohibited Content
You must not knowingly use a Service to store, transmit, facilitate or distribute:
- malware;
- stolen credentials;
- unlawfully obtained personal information;
- material whose possession or distribution is unlawful;
- unlawful exploitation material;
- material that you know materially infringes another person's copyright or other intellectual-property rights.
6.3 Product-Specific Restrictions
Product Terms may impose additional lawful content restrictions appropriate to a particular Service.
6.4 Complaints
Copyright, intellectual-property and other content complaints may be submitted through the Content & Legal Complaints process.
7. Good-Faith Security Research
7.1 Published Policy
Where LeStudio publishes a Vulnerability Disclosure Policy, activity within the policy's stated scope and boundaries will be assessed under that policy.
7.2 Prohibited Research Conduct
Unless LeStudio expressly authorises otherwise, security testing must not:
- access more personal or confidential information than minimally necessary to demonstrate a vulnerability;
- destroy, corrupt or materially alter production data;
- cause denial of service;
- involve social engineering against LeStudio staff or users;
- retain, disclose or misuse another user's private information.
7.3 Reporting
Security vulnerabilities must be reported to security@lestudio.co.nz.
8. Electronic Communications and Spam
8.1 Prohibited Communications
You must not use a Service to:
- send unlawful unsolicited bulk electronic messages;
- facilitate phishing;
- harass or threaten another person;
- circumvent unsubscribe or suppression controls;
- send materially deceptive commercial messages.
8.2 Applicable Law
Use of communications functionality remains subject to applicable electronic-messaging, privacy and consumer-protection law.
9. Circumvention and Technical Restrictions
9.1 Prohibited Circumvention
You must not deliberately bypass authentication, authorisation, security controls, usage quotas, Account restrictions, technical product restrictions or payment/licensing controls.
9.2 Legally Permitted Activity
Clause 9.1 does not prohibit interoperability, research or other conduct that Applicable Law expressly permits and which cannot lawfully be restricted.
10. Enforcement
10.1 Available Measures
Where LeStudio reasonably considers that this AUP has been breached or that protective action is necessary, LeStudio may:
- throttle traffic;
- require additional security verification;
- restrict a feature;
- revoke sessions;
- temporarily suspend access;
- terminate access for serious or repeated breaches;
- preserve relevant evidence where reasonably required for security or legal purposes.
10.2 Proportionality
LeStudio will seek to act proportionately having regard to the seriousness, repetition, intent, security risk and potential harm associated with the conduct.
10.3 Compromised Accounts
Where reasonably practicable, LeStudio will distinguish between accidental misuse, a compromised Account and deliberate abuse.
10.4 Notice
Where reasonably practicable, lawful and safe, LeStudio will provide notice of an enforcement action and a method for contacting LeStudio about that action.
11. Content Restriction and Legal Process
11.1 Restriction or Removal
LeStudio may restrict or remove content where it reasonably considers the action necessary to comply with law, protect users or systems, enforce this AUP or respond to a sufficiently supported legal complaint.
11.2 User Notice
Where Applicable Law requires notice to an affected user, LeStudio will apply the required notice process.
11.3 No Determination Merely by Receipt
Receipt of a complaint does not, by itself, constitute a determination by LeStudio that unlawful conduct or infringement occurred.
12. Reporting
12.1 Security
Security vulnerabilities: security@lestudio.co.nz
12.2 General Abuse
General misuse or abuse: support@lestudio.co.nz
12.3 Content and Legal Complaints
Content, copyright and other legal complaints: legal@lestudio.co.nz or the Content & Legal Complaints process.
13. Changes to this AUP
13.1 Amendments
LeStudio may amend this AUP to address changes in products, threats, abuse patterns or Applicable Law.
13.2 Material Changes
Material changes affecting users will be versioned and communicated consistently with the LeStudio Terms of Service.
13.3 Archive
Previous published versions will be preserved through the Legal Archive.
14. Contact and Governing Framework
14.1 Contractual Framework
This AUP must be read together with the LeStudio Terms of Service and any applicable Product Terms.
14.2 New Zealand Baseline
Public Legal V1 is prepared for LeStudio's current New Zealand operating baseline.