Docsheaf
Legal

Acceptable use policy

Last updated October 29, 2026

Anyone can publish a docs site with Docsheaf, so we need clear rules about what isn’t allowed. This policy applies to everything you put on Docsheaf — content in the app, published docs sites, custom domains and use of the API — and is part of our terms of service.

Content that isn’t allowed

  • Phishing pages, fake sign-in forms, or anything designed to trick people into revealing passwords, payment details or other secrets.
  • Malware, or links and instructions meant to spread it.
  • Spam, including pages that exist only to manipulate search rankings or to redirect visitors elsewhere.
  • Pretending to be another person, company or brand in a way that could mislead readers.
  • Content that infringes someone else’s copyright, trademark or other rights.
  • Other people’s personal data — such as contact details, ID numbers or financial information — published without a lawful basis.
  • Harassment, threats, hateful content, or content that exploits or endangers anyone, especially children.
  • Anything else that is illegal where you are or where your readers are.

Using the service

  • Don’t probe, scan or attack Docsheaf or other customers, or try to get around access controls, plan limits or rate limits.
  • Don’t create accounts or organizations in bulk, or automate sign-ups.
  • Don’t send traffic or API requests in volumes that serve no legitimate purpose or degrade the service for others.
  • Only connect custom domains you own or control.

Security research in good faith is welcome — follow our security guidelines and report what you find to [email protected].

Reporting a problem

If you see a docs site or content that breaks this policy, email [email protected] with the address of the page and what’s wrong with it. Reports of phishing and malware are handled first.

What we do

Depending on how serious the problem is, we may:

  • ask you to change or remove the content;
  • unpublish or suspend a docs site, or disconnect a custom domain;
  • suspend or close an account or organization, without notice for phishing, malware or illegal content;
  • report illegal content to the authorities when the law requires it.

Where we reasonably can, we’ll tell you what we did and why. If you think we got it wrong, reply to that message or write to [email protected] and a person will review it.