Acceptable Use Policy

_Last updated: August 12, 2026_

This Acceptable Use Policy ("Policy") governs what you may buy, sell, and do on Cinderella, operated by Todd Fishman (doing business as Cinderella FYI). It supplements our Terms of Service and Seller Agreement. By using Cinderella you agree to follow it. We may update it as the marketplace grows.

1. You must have the right to sell what you list

You may only list code, ideas, or assets that you own or are authorized to sell. That means:

• You wrote it, or you hold a license that permits resale/transfer.
• You are not violating an employer agreement, contractor agreement, NDA, or

open-source license by selling it.

• You are transferring rights you actually hold, under the rights model stated

on the listing — assignment (the default for repo sales), a non-exclusive license, or an idea materials transfer — as defined in the Seller Agreement. The deliverable in a code sale is the scrubbed bundle; you keep your original repository.

Misrepresenting ownership or the rights conveyed is grounds for immediate removal and account termination.

2. Prohibited content

Do not upload, list, or transmit anything that:

• Contains live secrets or personal data you haven't cleared — API keys,

credentials, tokens, customer data, or PII. Our scrubber is a safety net, not a license to be careless.

• Is malware or intentionally harmful — viruses, backdoors, spyware,

crypto-miners, credential stealers, or code designed to damage or gain unauthorized access to systems.

• Infringes intellectual property — stolen code, pirated software, or

content that violates someone else's copyright, trademark, or patent.

• Is illegal or facilitates illegal activity, fraud, or the circumvention

of security or access controls.

• Is sexually explicit, hateful, harassing, or violent.
• Deceives buyers — fake metrics, fabricated readiness, plagiarized

descriptions, or listings that misrepresent what's being sold.

3. Prohibited conduct

Do not:

• Scrape or bulk-download the marketplace. "Scraping" means any automated

or programmatic access to listings, user profiles, or marketplace data beyond normal interactive browsing — including harvesting listing data to train AI models.

• Deploy bots or automated agents to browse, offer, message, or interact

with Cindy without our written permission. Automated access we do permit is subject to rate limits we may set.

• Create multiple accounts to circumvent restrictions, manipulate offers,

reviews, or reputation, or engage in self-dealing.

• Circumvent fees by moving a Cinderella-originated deal off-platform to avoid

commission.

• Manipulate reviews, offers, or reputation (self-dealing, fake accounts, review

trading).

• Probe, scan, or test the vulnerability of our systems without permission, or

breach any security or authentication measures.

• Abuse, threaten, or harass other users, or impersonate anyone.
• Use the platform to spam or send unsolicited marketing.

4. Buyers

Buying a listing transfers the rights stated on that listing under the rights model defined in the Seller Agreement and your Buyer Agreement — nothing more. You are responsible for your own due diligence, for reviewing the scrub report, and for using purchased code lawfully. Reselling a non-exclusive purchase as if it were exclusive or assigned to you is a violation of this Policy.

5. Protected idea pitches

Some idea listings gate their full pitch behind sign-in and a confidentiality acknowledgment. Viewing a protected pitch binds you to the Idea Confidentiality Agreement: do not copy, share, build on, or train models on a protected pitch you did not purchase. Access is logged, and breach is grounds for termination and legal action.

6. Reporting

If you see a listing that violates this Policy — stolen code, leaked secrets, malware, or misrepresentation — use the report link on the listing or contact us via support. Policy-violation reports can also go to legal@cinderella.fyi. Copyright complaints are handled under our Takedown Policy.

7. Enforcement

We may remove content, freeze escrow, withhold payouts, and suspend or terminate accounts for violations. How we enforce depends on severity:

• Serious violations — fraud, malware, IP theft, leaked secrets, security

attacks — result in immediate action without prior notice, and may be reported to the relevant authorities and rights holders.

• Minor or first-time violations — e.g. a listing-description problem or

borderline conduct — will normally get a notice and a chance to cure before stronger action.

8. Appeals

If your content was removed or your account was suspended and you believe we got it wrong, email legal@cinderella.fyi with your account email and the listing or action in question. We will review and respond within 10 business days.

Questions? Reach us any time via Contact & support.