Acceptable Use Policy

This Acceptable Use Policy (this "AUP") is part of, and incorporated into, the Oak Terms of Service (the "Terms") between you and Oakspace Inc. ("Oak", "we", "us", or "our"). It applies to everyone who uses Oak — the CLI, the hosted service at oak.space, the API, and any content you store, push, or make available through Oak (your "Content"). Capitalized terms not defined here have the meaning given in the Terms.

Oak is a code storage and collaboration platform. You bring your own coding agent; Oak stores and serves the repositories those agents and people push to. You are responsible for everything stored under your account or your organization, including Content created by any agent or automation you run.

You may not use Oak to store, host, or distribute Content that:

• Is unlawful, or that promotes, facilitates, or instructs others in unlawful activity
• Sexually exploits or endangers minors in any way (see section [03] — we have zero tolerance)
• Is malware, ransomware, spyware, or other malicious code intended to harm systems or exfiltrate data without authorization (see section [04] for the security-research exception)
• Is designed to phish, spoof, or otherwise deceive people into disclosing credentials or sensitive information
• Infringes the intellectual-property rights of others, including pirated software, media, or unlicensed redistribution ("warez")
• Contains another person's private or personal information published without a lawful basis ("doxxing"), or leaked credentials, secrets, or access tokens belonging to others
• Is harassing, threatening, or incites violence against any person or group
• Is intended primarily to mine cryptocurrency on, or otherwise abuse, third-party or our infrastructure

Oak has zero tolerance for child sexual abuse material (CSAM) or any content that sexually exploits or endangers minors. We will remove such Content immediately, terminate the accounts involved, preserve the relevant data as required by law, and report it to the National Center for Missing & Exploited Children (NCMEC) and/or law enforcement as required under applicable law.

To report suspected child exploitation on Oak, email [email protected] with the URL or account and any detail you can safely provide. Do not download, copy, or redistribute the material yourself.

Oak is built for developers, and legitimate security work routinely involves storing exploit code, proof-of-concept payloads, malware samples for analysis, and offensive-security tooling. Storing such code for research, education, defense, or authorized testing is permitted.

What is not permitted is using Oak as a distribution or command channel for live attacks — for example, hosting an actively served phishing page, staging malware for mass delivery, or using Oak infrastructure to attack third parties. The line is intent and use, not the mere presence of dangerous code. When in doubt, keep the repository private and clearly document its research purpose.

You also agree not to:

• Attempt to gain unauthorized access to the service, other accounts, or other organizations' data
• Probe, scan, or test the vulnerability of the service except under a coordinated-disclosure arrangement with us
• Interfere with, degrade, or disrupt the service or its infrastructure (including denial-of-service, excessive automated requests, or evading rate limits, quotas, or other technical controls)
• Use Oak primarily as a generic file host, CDN, or backup target for content unrelated to a software project
• Resell or sublicense access to the service without our written permission
• Circumvent storage quotas, account limits, or suspensions, including by creating accounts to evade enforcement
• Use Oak in violation of applicable export-control, economic-sanctions, or trade laws, or permit access to Oak by any person or from any territory where such access is prohibited by those laws

We respect intellectual-property rights and respond to clear notices of alleged copyright infringement under the U.S. Digital Millennium Copyright Act (DMCA). If you believe Content on Oak infringes your copyright, send a written notice to our designated agent using the following contact information: Oakspace Inc., Attn: DMCA Agent, 1100 Boylston Ave., Suite 506, Seattle, WA 98101, telephone: +1 (425) 728-0960, email: [email protected]. Your notice must include:

• Your physical or electronic signature
• Identification of the copyrighted work claimed to be infringed, or, if multiple works are covered by the notice, a representative list of such works
• Identification of the infringing material and a URL or path sufficient for us to locate it
• Your contact information (address, telephone, email)
• A statement that you have a good-faith belief the use is not authorized by the owner, its agent, or the law
• A statement, under penalty of perjury, that the information is accurate and that you are authorized to act on the owner's behalf

We may remove or disable access to allegedly infringing Content and maintain and reasonably implement a policy of terminating, in appropriate circumstances, users who are repeat infringers. If you believe Content was removed or disabled because of mistake or misidentification, you may send a written counter-notice to the designated agent identified above that includes: (i) your physical or electronic signature; (ii) identification of the material that was removed or disabled and the location where it appeared before removal or disabling; (iii) a statement under penalty of perjury that you have a good-faith belief the material was removed or disabled as a result of mistake or misidentification; and (iv) your name, address, and telephone number, together with a statement that you consent to the jurisdiction of the federal district court for the judicial district in which your address is located or, if your address is outside the United States, any judicial district in which Oak may be found, and that you will accept service of process from the person who submitted the original notice or that person's agent. We may restore the material in accordance with the DMCA, including after the applicable statutory waiting period unless the original claimant notifies us that it has filed an action seeking a court order. Misrepresentations in a notice or counter-notice may carry liability under 17 U.S.C. § 512(f).

Report content or behavior that violates this AUP to [email protected] (use [email protected] for copyright). Include the repository URL, account, or organization and enough detail for us to investigate. If you are reporting content that you believe is illegal in the European Union, also include: (i) a sufficiently substantiated explanation of why you believe the content is illegal; (ii) its exact URL or other electronic location; (iii) your name and email address, except where applicable law permits an anonymous report; and (iv) a statement that you have a good-faith belief that the information and allegations in your notice are accurate and complete. Where required by applicable law, we will acknowledge receipt and notify you of our decision and available means of redress.

When we determine, in our reasonable judgment, that this AUP has been violated, we may take any action we consider appropriate, including removing or disabling Content, disabling a repository, suspending or terminating accounts or organizations, and reporting to law enforcement. For severe violations (such as CSAM, active attacks, or content that exposes us or our providers to legal liability) we may act immediately and without prior notice. For less-severe issues we will generally try to notify you and give you a chance to remediate. Where required by applicable law, we will provide the affected user with a clear and specific explanation of a removal, suspension, or termination, including the basis for the decision and available means of redress, unless providing that information is prohibited by law or would create a material security risk.

If you believe we acted in error, you may appeal by replying to the enforcement notice or emailing [email protected]. We will review appeals in a timely, diligent, non-arbitrary, and objective manner.

We may update this AUP from time to time. We will provide notice of material changes as required by applicable law. Where permitted by applicable law, changes may take effect immediately if necessary for legal, security, or abuse-prevention reasons. Changes will apply prospectively beginning on the stated effective date. Continued use of the service after a change constitutes acceptance of the updated AUP.