Acceptable use policy

This policy is part of the terms of service between you and Zuzo Studio LLC, which makes Xodia. It applies to everything you do with Xodia: the app at app.xodia.ai, previews, the MCP server, the xodia CLI, built-in AI and anything you build, store or run with them.

You are responsible for what happens in your workspace, including what your team members and the AI tools you connect do there.

Don't use Xodia to build, store, preview or publish:

• content that exploits or harms children, in any form;
• content that promotes or threatens violence, terrorism or hatred against people because of who they are;
• phishing pages, fake login or payment forms, or sites that pretend to be another person, brand or organization;
• malware, spyware, or code meant to harm a visitor's device or data;
• scams, fraud, or deceptive offers, reviews or claims;
• content that infringes copyright, trademarks or other rights, or that you don't have the right to use;
• personal data about others that you have no lawful reason to publish;
• anything else that breaks the law where you or your visitors are.

Don't use Xodia, or attempt, to:

• attack, scan or probe other systems, or send spam, from a preview or with any part of Xodia;
• get around a preview's network rules, the allow-list proxy, sandbox isolation or other security measures;
• access another workspace, project, repository or account that isn't yours;
• find or exploit weaknesses in Xodia, except as described in our security page, reporting them to us first;
• reverse engineer, decompile or disassemble the Xodia app or its code, except where the law says this can't be restricted;
• put secrets, keys or tokens that aren't yours into a project, or use Xodia to collect other people's credentials.

• Previews are for developing and reviewing your site. Don't use them to host a live site, run unrelated workloads, mine cryptocurrency or keep a preview busy just to keep it running.
• Don't get around plan limits, rate limits or usage counting, for example by creating extra workspaces or trials to get more than your plan includes.
• Don't overload Xodia, its MCP server or its APIs with traffic beyond normal use.
• Don't access, crawl or scrape the app with bots, scripts or other automated tools, except through Xodia's own MCP server, CLI and documented APIs.
• Don't resell Xodia, or share an account or a seat between people.

The same rules apply to work done by AI, whether it's your own AI connected over MCP or Xodia's built-in AI. In particular, don't:

• ask an AI to produce anything this policy doesn't allow;
• use the app, its interface, code, skills or output to train or improve AI models, or to build a competing product;
• use AI tools to get around the limits and protections above.

Check what your AI changes before you save and publish it. You are responsible for your published site, whoever wrote the code.

Your sites are published by your own host, under your own account and its rules. This policy still applies to sites you build or edit with Xodia, and you are responsible for their content, for their own legal pages and for how they treat their visitors' data.

If you see something on or from Xodia that breaks this policy, email hello@zuzostudio.com with the subject "Xodia abuse report". Tell us the address or project involved and what you saw. For a security weakness, see the security page.

If we believe this policy is broken, we may, depending on how serious it is:

• ask you to fix it;
• stop a preview, disconnect an AI client or lock a project;
• remove content we store;
• suspend or close the workspace or account;
• report illegal content or activity to the authorities.

We'll tell you why unless the law or safety prevents it, give you a chance to fix the problem where we can, and you can reply if you think we got it wrong. Where we can, we act on the problem itself before the whole account. If you seriously or repeatedly break this policy, we may close your account as the terms of service describe.

We may update this policy as Xodia changes, and we'll change the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.