FORGE Acceptable Use Policy

Effective date: August 15, 2026

This Acceptable Use Policy ("AUP") applies to the FORGE service operated by Mediator Solutions LLC and is incorporated into the FORGE Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.

The purpose of this AUP is to keep FORGE useful for legitimate business management without becoming a platform for fraud, abuse, unlawful surveillance, security attacks, spam, or storage of information the Service was never designed to hold.

1. General rule

You may use FORGE only for lawful, authorized business purposes and only in a manner consistent with the rights of other people, the integrity of the Service, and applicable law.

You may not use the Service, directly or indirectly, to facilitate conduct that would violate this AUP if performed through FORGE itself.

2. Illegal or fraudulent conduct

You may not use FORGE to:

• commit, promote, facilitate, or conceal illegal activity;
• create fraudulent invoices, receipts, estimates, payment records, identities, or business records;
• knowingly misrepresent that goods or services were delivered when they were not;
• impersonate another person or business without authority;
• conduct payment fraud, chargeback fraud, identity theft, money laundering, sanctions evasion, or similar financial misconduct;
• falsify records for use in litigation, insurance claims, taxes, licensing, government programs, financing, or regulatory submissions;
• solicit or facilitate bribes, kickbacks, extortion, or unlawful payments.

FORGE may be used to correct legitimate records and document good-faith business disputes. The prohibition is directed at intentional falsification or unlawful conduct, not ordinary mistakes.

3. Unauthorized access and security abuse

You may not:

• attempt to access another customer's workspace, records, files, sessions, or billing information without authorization;
• probe, scan, test, or exploit vulnerabilities in production systems without our prior written authorization or an expressly published security-testing policy that permits the activity;
• bypass authentication, authorization, rate limits, subscription entitlements, upload restrictions, or technical controls;
• intercept or manipulate traffic to obtain another person's session or authentication code;
• distribute malware, ransomware, spyware, credential stealers, exploit kits, botnets, or malicious scripts;
• use FORGE infrastructure as command-and-control, payload hosting, phishing infrastructure, or a staging point for attacks;
• intentionally create excessive requests, resource exhaustion, denial-of-service traffic, or other activity designed to degrade availability;
• access non-public APIs or internal interfaces by deceptive or abusive means.

Good-faith security research is permitted only when separately authorized by us in writing or through a published vulnerability-disclosure program that defines the permitted scope.

4. Spam, deceptive outreach, and abusive communications

FORGE is not a bulk-messaging or unsolicited-marketing platform. You may not use information stored in FORGE to:

• send unlawful spam;
• conduct phishing or credential-harvesting campaigns;
• send deceptive, fraudulent, or materially misleading commercial messages;
• evade unsubscribe requests or communication-consent laws;
• harass, threaten, intimidate, stalk, or repeatedly contact someone in a manner prohibited by law;
• acquire, import, or exploit unlawfully obtained contact lists.

Ordinary client communications and legitimate business follow-up remain permitted subject to applicable communications and privacy laws.

5. Harmful, exploitative, or abusive content

You may not use FORGE to create, store, upload, transmit, or organize content that:

• constitutes child sexual abuse material or sexual exploitation of minors;
• promotes or facilitates human trafficking;
• contains non-consensual intimate imagery;
• credibly threatens physical harm;
• is used to stalk or unlawfully surveil another person;
• is defamatory or unlawfully invasive of privacy in a manner that creates legal liability;
• infringes another person's intellectual-property rights;
• is otherwise unlawful to possess, transmit, or distribute.

We may report apparent child sexual abuse material or other conduct where reporting is required by law.

6. Highly sensitive and regulated information

Unless we have expressly agreed in a signed writing to support the relevant regulated use case, you may not use FORGE as the system of record for:

• full payment-card credentials or security codes;
• Social Security numbers or equivalent government identifiers;
• online-banking credentials;
• passwords for unrelated third-party systems;
• private cryptographic keys or wallet seed phrases;
• protected health information requiring a HIPAA business associate agreement;
• biometric identification templates;
• classified government information;
• data subject to specialized export-control or national-security handling requirements not expressly supported by us;
• unnecessary highly sensitive information about children.

If your industry or contract requires a specific certification, data residency, retention regime, encryption standard, regulated-service agreement, or audit right, you are responsible for confirming that FORGE supports that requirement before placing covered information in the Service.

7. Privacy and surveillance misuse

You may not:

• collect or upload personal information you have no lawful or legitimate business reason to process;
• secretly create dossiers for stalking, blackmail, discrimination, or unlawful surveillance;
• use FORGE to conduct unlawful employment, housing, credit, insurance, or eligibility discrimination;
• use Customer Data for purposes materially inconsistent with notices or rights you are legally required to provide;
• attempt to circumvent a person's legally valid privacy choice or request.

FORGE may be used to maintain ordinary customer records where the customer has a lawful business reason and complies with its own privacy obligations.

8. Intellectual-property abuse

You may not use FORGE to knowingly store or distribute content that infringes copyrights, trademarks, trade secrets, publicity rights, or other intellectual-property rights.

If you believe material stored or distributed through FORGE infringes your rights, contact reach@prime88.studio with sufficient information for us to evaluate the report.

9. Unauthorized resale or service bureau use

Unless we authorize it in writing, you may not:

• resell login credentials;
• rent workspace access to unrelated third parties as a standalone service;
• white-label FORGE as if you own the underlying software;
• operate a service bureau whose primary product is unauthorized access to FORGE rather than your own legitimate business service;
• use multiple accounts or fictitious entities to evade capacity or pricing limits.

Using FORGE to manage work you legitimately perform for your own clients is allowed.

10. Automated access and extraction

You may not scrape, crawl, harvest, enumerate, or automatically extract data from non-public FORGE surfaces unless an API, export function, or written permission expressly authorizes that activity.

You may not use bots or automation that materially interferes with normal service operation or attempts to defeat plan limits, security controls, or rate limits.

Reasonable browser automation for your own authorized records may be permitted where it does not create security or availability risk, but we may require use of a supported API or export mechanism instead.

11. Competitive misuse and reverse engineering

Except where law gives you a non-waivable right, you may not use unauthorized technical means to reverse engineer, decompile, disassemble, derive source code, reconstruct private APIs, or extract non-public implementation details from FORGE.

This does not prohibit lawful observation of publicly available website behavior, ordinary interoperability work protected by law, or independent development that does not misuse our confidential information or circumvent technical restrictions.

12. Sanctions and export restrictions

You may not use FORGE where doing so would violate U.S. sanctions, export controls, or other applicable trade restrictions.

You may not knowingly provide access to a person or entity prohibited from receiving the Service under applicable law.

13. Abuse of referrals, promotions, or billing

You may not:

• self-refer through duplicate, fictitious, or controlled accounts to obtain discounts improperly;
• generate fake referrals;
• create accounts solely to trigger promotional benefits;
• reverse or dispute valid payments after obtaining a benefit in bad faith;
• manipulate billing events, checkout metadata, or entitlements;
• represent a FORGE discount or referral benefit as cash when the program terms state otherwise.

14. Reporting violations

Reports of suspected abuse may be sent to reach@prime88.studio. Include enough information for us to identify the relevant account, record, URL, or conduct.

We may request additional information before taking action. Filing a report does not guarantee a particular enforcement outcome.

15. Enforcement

If we reasonably believe an account or activity violates this AUP, we may take proportionate action, including:

• warning the customer;
• requiring removal or correction of content;
• revoking an invitation or session;
• rate-limiting activity;
• blocking a file or request;
• temporarily suspending a feature or account;
• terminating access for severe or repeated violations;
• preserving records where legally required;
• notifying appropriate authorities where required or legally justified.

Where the issue is remediable and does not create an immediate security, legal, fraud, or safety risk, we will generally attempt to provide a reasonable opportunity to cure before permanent termination.

16. Changes

We may update this AUP as abuse patterns, laws, and Service capabilities change. Material changes will be communicated in accordance with the Terms where required.

17. Contact

Mediator Solutions LLC

Email: reach@prime88.studio