Acceptable Use Policy

Scope

Bastille-C3 is operated by Elouarn de Kerros in France. This policy covers the website and the commercial access we supply. Software permissions remain governed by the applicable component license. This policy does not withdraw Apache-2.0 rights or authorize a use forbidden by law.

Bastille-C3 supplies customer-installed governance tools. We do not host, provide, curate or manage content available through your harness or LLM providers, and do not monitor every action inside your deployment.

Prohibited conduct

Do not use the website, support channels or paid entitlements to:

• Commit fraud, impersonate another customer, submit forged purchase evidence, or make deliberately false abuse reports.
• Steal, expose, sell, rent or share license credentials outside the access authorized by the purchased plan.
• Bypass payment or licensing controls to obtain unauthorized commercial benefits.
• Gain unauthorized access to systems, exfiltrate information, deploy malware, or cause unlawful disruption or damage.
• Spam, harass, threaten, or overwhelm support, payment, licensing or website infrastructure.
• Misrepresent Bastille-C3’s authorship, endorsement, license terms, or ability to guarantee safe agent behavior.
• Use a harness or model provider in a way that violates applicable law or that provider’s terms.

Only submit information you have a lawful reason and authorization to share. Redact secrets and personal or confidential information that is not needed to handle the request. Do not upload or send illegal content as evidence.

Authorized work and security research

Legitimate administration, development, testing and security research on systems you own or are explicitly authorized to assess are not prohibited merely because the work involves security tools. Stay within that authorization and applicable law. A Bastille-C3 module does not give permission to test another person’s infrastructure or bypass a third party’s lawful restrictions.

If you find a Bastille-C3 vulnerability, use the private abuse and security channel. Give a minimal, non-destructive reproduction and do not access or disclose other customers’ information.

Enforcement

Where justified by the conduct and applicable terms, we may restrict website access or suspend paid licensing benefits. We may request clarification or remediation and, where appropriate, give notice and an opportunity to respond. Urgent restrictions may be necessary to stop active harm or comply with law.

Actions must respect mandatory legal rights and the applicable software license. We do not claim a right to take over or delete customer-hosted data. If you think an enforcement decision is mistaken, contact bastilleworks@mailo.com with the relevant reference.