Scope
This policy applies to everyone who visits madevyn.xyz, sends an inquiry, communicates with the studio or uses a system supplied by Madevyn. It forms part of the Terms. A breach of this policy is a breach of the agreement.
Lawful use
Use the site and the services only for lawful purposes and only in the way they are intended. You are responsible for the content, data, accounts and systems you provide, and for having the rights and permissions needed to use them.
Do not use the studio to build, deploy or support something that is unlawful, deceptive, malicious, or intended to harm a person, a system or public safety.
Prohibited conduct
You must not:
- access a system, account or data without authority, or help another person to do so;
- send malware, ransomware, spyware, phishing content or a harmful script through the site or an engagement;
- use the forms or the studio's email addresses to send spam, a chain message, a deceptive offer or an automated bulk inquiry;
- impersonate a person or organisation, misrepresent an affiliation, or forge a header or identity;
- scrape, crawl or extract the site at a rate that degrades it, or bypass a rate limit, access control, Turnstile challenge or other security measure;
- probe, scan or test a system you do not own or have written permission to test;
- infringe copyright, a trade secret, a database right, a trade mark or another person's privacy;
- harass, threaten, defame or discriminate against a person;
- introduce a backdoor, hidden collection routine, time bomb or other concealed function into a deliverable;
- use a deliverable or a system supplied by the studio for a purpose the proposal prohibits.
Forms, email and automated access
The project brief and callback forms are for genuine inquiries from a person or an organisation that may want to work with the studio. Do not submit another person's details without authority. Do not automate submissions or use the forms to test a security control without written permission.
The studio may throttle, challenge, filter or block a request that appears automated, abusive or fraudulent. A blocked request can be raised with the studio by email if it was legitimate.
Security testing and reports
Do not test the site or a studio system for a vulnerability without prior written permission. A request for permission can be sent to security@madevyn.xyz and should describe the target, the method and the planned window.
If you discover a suspected vulnerability, report it privately to security@madevyn.xyz with the steps needed to reproduce it. Do not access, change, delete or disclose another person's data, and do not degrade the service. The studio will acknowledge a good-faith report made under this policy and the agreed scope and will not treat it as a hostile act.
Intellectual property
The site, its text, design, code, marks and images are owned by Madevyn or used with permission. You may read, print and share a page for a lawful purpose, but you may not copy a substantial part, remove a notice, resell the content or use a mark in a way that suggests endorsement without written permission.
Rights in an engagement deliverable are set out in the Terms and the proposal. Open-source components remain under their own licences, and you must comply with those licences.
Client work and third-party systems
Only give the studio access to a system, account or dataset you are authorised to share. Do not ask the studio to bypass a licence, a rate limit or an access control on a third-party service.
If a project involves another person's data, you are responsible for the notice, lawful basis, permissions and retention that apply. The studio will process that data only on documented instructions and under the agreed data processing terms.
Enforcement
The studio may refuse, suspend or end access to the site or an engagement where this policy is breached, where the law requires it, or where the conduct creates a security, legal or safety risk. Where the issue can reasonably be corrected, the studio will give notice and an opportunity to correct it.
Serious conduct may be reported to a regulator, a law enforcement body or the affected provider. The studio will cooperate with a lawful investigation.
Changes and contact
This policy may change when the site or the law changes. The version and date at the top identify the version. A material change will be notified where required. Questions and reports go to security@madevyn.xyz for security, or legal@madevyn.xyz for a legal or policy question.