Skip to content

Legal

Acceptable Use Policy

Nook works when people can trust the room they are in. This policy lists what is not allowed, what hosts are expected to do and how to report a problem.

Last updated October 4, 2026

Project template — to be reviewed before publication

This document describes how the Nook software works. Whoever runs this installation (the operator) must review it, complete it and adapt it to their jurisdiction before relying on it. It is not legal advice.

Still to complete in this document:

  • Contact email — set NOOK_CONTACT_EMAIL on the server
  • Security contact email — set NOOK_SECURITY_EMAIL on the server

Who this applies to

This policy applies to everyone who uses the Service: account holders, guests and people who use the bot. It is part of the Terms of Service, and words such as “Content”, “Host” and “Simulated participant” have the meaning given there.

Illegal and harmful behavior

Don’t use the Service to:

  • Share illegal content or carry out or promote illegal activity.
  • Harass, bully or intimidate anyone, or share someone’s private information to target them.
  • Attack people on the basis of who they are, such as their race, ethnicity, nationality, religion, disability, sex, gender identity or sexual orientation.
  • Threaten violence or encourage others to commit it.
  • Share any sexual content involving minors. Such content is reported to the authorities where the law requires it.

Impersonation and deception

  • Don’t impersonate another person or organization, or choose a display name meant to mislead others about who you are.
  • Don’t present simulated participants as real people — for example, by showing a simulation meeting as proof that real people attended.
  • Don’t use simulation meetings to deceive anyone.
Simulated participants are always labelled “Simulated”. Don’t hide, crop out or misdescribe that label when you show the Service to others.

Recording and capturing others

Nook has no recording feature. Don’t record calls, take screenshots of other participants or capture what they share using other software or devices, unless everyone who is captured has agreed and the law allows it.

Invites, spam and the bot

  • Don’t send spam or unwanted bulk messages, including through the messaging service bot or invitations.
  • Don’t automate the bot to create meetings, send invitations or message people in bulk.
  • Don’t post invite links publicly to disrupt meetings, and don’t join meetings you weren’t meant to join.
  • Don’t try to guess invite links or meeting codes.

Protecting the Service

  • Don’t interfere with the Service or with other people’s use of it, for example by overloading it.
  • Don’t probe, scan or test the Service for vulnerabilities, or try to get around its security measures, permissions or rate limits.
  • Don’t access other people’s accounts, meetings or data without permission.
  • Don’t upload, send or link to malware.
  • Don’t scrape the Service or collect data from it with automated tools.

If you find a security problem, report it instead of exploiting it. See Security or write to [Security email — complete before publication].

What we expect from hosts

Hosts set the tone of a meeting and have the controls to keep it safe:

  • Share invite links only with the people you mean to invite, and create a new link if one leaks.
  • Use the waiting room when you don’t know everyone who might join.
  • Act on behavior that breaks this policy: mute, remove participants, lock the room or end the call.
  • Tell participants when a meeting includes simulated participants.

Reporting a problem

To report abuse, write to [Contact email — complete before publication] or use the contact form. Include the meeting code if you have one, roughly when it happened and what you saw. Report security vulnerabilities to [Security email — complete before publication].

If something is happening in a call right now, tell a host — they can remove people and end the call straight away.

What the operator may do

Depending on how serious and how repeated a violation is, the operator may remove Content, remove people from calls, cancel meetings, suspend or close accounts, and report matters to the authorities where the law requires it.

These steps are described in the Terms of Service. If you think a decision about your account was a mistake, write to [Contact email — complete before publication].

Changes to this policy

The operator may update this policy. The date at the top shows when it last changed.