CODE.STORAGE ACCEPTABLE USE POLICY

Last Updated: Sept 21, 2026

Pierre Computer Company, Inc provides infrastructure for storing, managing, and serving code and related content. This Acceptable Use Policy ("Policy") sets out the rules for using that infrastructure responsibly.

This Policy applies to your use of Code Storage and its related services, including our APIs and any hosting or content delivery features (the "Service"), operated by Pierre Computer Company, Inc. ("we," "us," or "our"). It is incorporated into and forms part of our Terms of Service or the separate agreement governing your use of the Service (your "Agreement"). Capitalized terms not defined in this Policy have the meanings given in your Agreement. If this Policy conflicts with your Agreement, your Agreement controls unless it expressly provides otherwise.

These rules apply to content stored, transmitted, or made available through the Service, whether public or private, including repositories, source code, files, artifacts, websites, and applications. They also apply to activity performed through your account by your users, integrations, automated systems, and AI agents. You are responsible for activity conducted by your authorized users and through credentials, integrations, automated systems, and agents under your control. If you provide a product that uses the Service, you must require your users to comply with restrictions consistent with this Policy, maintain reasonable safeguards designed to prevent prohibited use, and take reasonable steps to address violations promptly when you become aware of them.

You must use the Service in accordance with applicable laws and regulations, including those concerning privacy, intellectual property, export controls, and sanctions. You must not use the Service to carry out, facilitate, or solicit unlawful activity. Without limiting the foregoing, you must not use the Service if you are identified on an applicable sanctions list; owned fifty percent (50%) or more, directly or indirectly and in the aggregate, by one or more parties identified on such a list (or otherwise owned or controlled by such a party where the applicable sanctions regime so provides); or located or ordinarily resident in a country or territory subject to comprehensive sanctions. You must not use the Service to export, re-export, or transfer software or technical data in violation of applicable export control laws.

You are responsible for having the rights, permissions, and legal authority needed to upload, store, process, and distribute your content through the Service.

You must not use the Service to create, store, publish, or distribute content, or engage in activity, that:

• Sexually exploits or abuses children, including child sexual abuse material (whether actual, AI-generated, or otherwise synthetic) or content that promotes, facilitates, or solicits such exploitation or abuse.
• Involves sexual exploitation, non-consensual intimate imagery (including AI-generated or manipulated imagery), or unlawful obscene material.
• Threatens violence, incites violence, or recruits for or materially supports terrorism or violent extremist activity.
• Harasses, stalks, intimidates, or targets people with hateful abuse, including on the basis of race, ethnicity, nationality, religion, disability, sex, gender identity, or sexual orientation.
• Unlawfully defames others or deliberately deceives people in a way likely to cause material harm, including harm to health, safety, or participation in elections.

We consider context when assessing content, including legitimate educational, documentary, scientific, or artistic purposes. Context does not permit content or activity that is unlawful. The restrictions in this Section that concern harassment, defamation and deception apply principally to content made publicly available through the Service or to conduct likely to cause serious harm to identifiable persons; restrictions concerning child sexual exploitation, non-consensual intimate imagery, threats, violent extremism, and other unlawful content or activity apply to all use of the Service.

You must not:

• Infringe another party's copyright, trademark, patent, trade secret, or other intellectual property or proprietary rights.
• Distribute stolen source code, confidential information, or software licensing credentials without authorization, or unlawfully facilitate the circumvention of software licensing controls.
• Impersonate another person or organization, misrepresent an affiliation, or falsely suggest that we or another party endorse your content, product, or activity.
• Misrepresent the origin or purpose of a website, application, repository, package, or download to deceive users, steal information, or cause harm.
• Forge commit signatures, or falsify the authorship, provenance, or integrity of code, commits, packages, or other content.

Public availability does not remove applicable license terms or other restrictions on reuse.

You must not use the Service to:

• Send or facilitate spam or other unsolicited bulk communications.
• Operate phishing sites, collect credentials through deception, or conduct scams, payment fraud, or identity theft.
• Create or operate accounts, bots, or other systems for deceptive impersonation, fraudulent engagement, or coordinated abuse.
• Distribute deceptive downloads or redirect users to harmful content under false pretenses.
• Knowingly provide infrastructure or material support for these activities when conducted through another platform.

Automation, bots, and AI agents are legitimate uses of the Service when their activity complies with this Policy. Automated activity is not a violation merely because it is automated.

You must not use the Service to:

• Gain or attempt to gain unauthorized access to accounts, credentials, data, devices, services, or networks.
• Disrupt or compromise the security, integrity, or availability of the Service or another party's systems, including through denial-of-service attacks or destructive activity.
• Deliver malware as part of an attack, operate botnets or command-and-control infrastructure, deploy ransomware, or steal credentials or data.
• Host or distribute code, files, or other content in direct support of an ongoing unlawful attack or malware campaign.
• Introduce malicious code into a software supply chain, including through malicious dependency substitution, typosquatting, or compromised packages, builds, or updates.
• Store or distribute content deliberately designed to cause AI agents or other automated systems that process it to take unauthorized actions or exfiltrate data, including through embedded prompt-injection attacks.

Legitimate security research, vulnerability demonstrations, malware analysis, research into provenance, signing, supply-chain, and agent security, and tools with both defensive and offensive applications are permitted when otherwise lawful and consistent with this Policy. Code is not prohibited solely because it could be misused. Testing against a live system requires authorization from the party entitled to grant it and must stay within that authorization.

If otherwise legitimate content is being used through the Service to carry out an active attack, we may restrict access to the affected content to stop the harm, taking its legitimate uses into account.

You must not bypass authentication, access controls, or other security measures; use credentials without authorization; or evade a suspension or other enforcement action by creating replacement accounts or acting through another party.

Keep your account credentials and access keys secure. If you discover unauthorized access or a compromise affecting your use of the Service, notify us promptly and take reasonable steps to contain it.

You must respect applicable licenses, privacy rights, and access restrictions when collecting or using information obtained through the Service, whether through Git, an API, a website, automated collection, or another method. These obligations apply regardless of purpose, including any collection or use of content or data obtained from the Service to train, fine-tune, or otherwise develop machine learning or artificial intelligence models. This Policy does not prohibit model training or analysis using content you are otherwise permitted to use; it requires that any such collection or use comply with applicable license terms, privacy rights, and access restrictions.

You must not use that information to facilitate spam, phishing, harassment, identity theft, or other prohibited activity. You must not harvest personal information for unsolicited targeting or sell it without a lawful basis. Access to public content does not authorize access to private repositories, restricted metadata, or other protected information.

You must not expose another person's private or sensitive information without lawful authority, including by doxxing or distributing stolen personal data, passwords, access tokens, or financial information.

If you collect or process personal information through the Service, you must have a lawful basis, provide required notices, obtain any required consent, and use appropriate safeguards. You must honor applicable privacy rights and respond to legally valid requests concerning that information.

Our handling of personal information is described in our Privacy Policy and, where applicable, our Data Processing Addendum.

You must not:

• Use the Service to mine cryptocurrency or to run other compute-intensive workloads unrelated to storing, managing, and serving code and related content.
• Use the Service as a general purpose content delivery network, media hosting, or file storage service unconnected to software development or delivery, or primarily to distribute large volumes of content unrelated to code.
• Circumvent or attempt to circumvent rate limits, storage quotas, bandwidth limitations, or other technical restrictions, or impose an unreasonable or disproportionately large load on the Service or its infrastructure.

We may investigate suspected violations and take action reasonably necessary to protect users, the Service, and others. Depending on the circumstances, this may include requesting corrective action, restricting or disabling access to affected content, removing content, or suspending or terminating access to the Service, subject to your Agreement and applicable law. We do not routinely monitor content, including private repositories. We may review content and activity where reasonably necessary to investigate a credible report of a violation, to protect the Service and its users, or to comply with law, consistent with your Agreement, our Privacy Policy and, where applicable, our Data Processing Addendum. We may refer suspected unlawful activity to law enforcement or other appropriate authorities, and we make reports to the National Center for Missing & Exploited Children when required by 18 U.S.C. § 2258A or other applicable law.

We consider the nature and severity of the violation, the risk of harm, and whether violations are repeated. Where reasonably practicable and lawful, we generally seek to explain the issue and provide an opportunity to address it. We may act immediately when necessary to stop ongoing harm, respond to a security threat, or meet a legal obligation. A decision not to take action with respect to one violation does not waive our right to act on any other or future violation.

If a violation involves an end user of your product, we may ask you to restrict that user's access or remove the affected content. You must cooperate reasonably with requests to investigate and resolve violations. Where practical, we will direct enforcement at the affected content or user.

To report a suspected violation or request review of an enforcement decision, contact security@pierre.co. Include the relevant repository, URL, or other resource identifier, a description of the issue, and information that will help us assess it. Do not include passwords, access tokens, or copies of unlawful content in your report.

We may update this Policy as the Service and the risks it faces evolve. We will publish the updated Policy with its effective date and provide notice of material changes in accordance with your Agreement and applicable law. Changes take effect in accordance with those requirements.