Casewall Acceptable Use Policy

Effective: October 11, 2026
Version: aup-0.2

This Acceptable Use Policy ("AUP") is part of the Casewall Terms of Service. It explains what you may and may not do on Casewall. It applies to everything on the Service. Section 4, the Public Case Rules, applies additionally to any case that is public or is being made public.

Casewall exists to help people organize facts carefully. The rules below protect the people cases are about: victims, families, witnesses and people who've done nothing wrong. They protect you as well.

1. The short version

• Only post what you have the right to post.
• On public cases, don't name anyone as a suspect unless law enforcement or mainstream media already has, with a source.
• Leave victims, families, minors and witnesses alone.
• Don't dox anyone.
• Label theories as theories.
• Don't use Casewall to screen people for jobs, housing, credit or insurance.
• Don't harass, stalk or confront anyone.
• If you know something, tell the police.

2. Never allowed, anywhere on Casewall

Private cases included:

1. Child sexual abuse material (CSAM). A file reported as CSAM is hidden as soon as the report is filed and is decided by XenneX staff. We remove it and permanently terminate the account. Before public launch, we will also scan uploaded images and video against known CSAM, and have reporting to the National Center for Missing & Exploited Children (NCMEC) and legally required preservation in place.
2. Non-consensual intimate imagery (NCII), including AI-generated or altered intimate images of real people.
3. Stalking, harassment and threats. Don't use Casewall to monitor, track, locate, contact or intimidate a person, including anyone named in a case. Don't organize anyone to confront, contact or show up at the home or workplace of anyone involved in a case.
4. Illegally obtained material. No content obtained by hacking, unauthorized account access, illegal interception or recording, trespass, theft, or pretexting. No material you're under a legal duty (a court order, a protective order, a grand jury rule) not to disclose.
5. Criminal Justice Information (CJI) or other data covered by the FBI CJIS Security Policy, and non-public law enforcement records you're not authorized to share.
6. Regulated data outside its permitted purpose. Motor vehicle records obtained under the Driver's Privacy Protection Act (DPPA), and consumer financial data covered by the Gramm-Leach-Bliley Act (GLBA), may be used only for a permitted purpose you actually have. Full Social Security numbers, full financial account or card numbers, and passwords must never be posted.
7. Malware and abuse of the Service. No viruses or exploit files. No scraping or bulk downloading beyond what the Service's features provide. No getting around access controls, rate limits, credit limits or moderation, and no probing our security. Authorized research through our security contact is welcome.
8. Impersonation. Don't pretend to be law enforcement, a journalist, a lawyer, a family member or anyone else you're not, and don't create a false "Verified" affiliation.
9. Infringement. No content that infringes copyright, trademark or other intellectual property rights.
10. Anything illegal where you are or where the people involved are.

3. Images, video and audio of identifiable people

Casewall does not automatically blur faces. Investigators often need to see faces, so the responsibility for images of real people sits with the person who uploads them.

Any case. Only upload images, video or audio of an identifiable person if you have a lawful basis to possess and share them. Examples:

• you took them lawfully in a public place;
• they were published (by the media, law enforcement, or the person themselves);
• you received them from someone with the right to share them;
• the person consented.

Public cases. Images of identifiable people on a public case must also meet all of these:

• Newsworthy and relevant: the image is genuinely relevant to a matter of public interest in the case, not just a picture of someone.
• Designated people only, for suspects: a person shown as a suspect or person of interest must meet the naming rule in section 4.1. If an image shows someone who isn't designated (for example, a person on CCTV), label them as an unidentified subject. Don't suggest who they are.
• Protected people: don't post identifiable images of minors, witnesses, or victims' family members on a public case unless the image was already published by law enforcement or the family, or you blur or crop them first. Images of victims should be ones already made public (for example, missing-person flyers or media coverage), not private photos from their lives, unless their family has shared them.
• No graphic imagery of victims. Don't post images of the dead or of serious injuries on a public case. Keep that material on private cases.
• No nudity or sexual content of any kind on public cases.

Likeness takedowns. Anyone shown in an image on Casewall can ask us to review it (section 8). Their parent or guardian can ask for a minor, and a family member or representative can ask for someone who is deceased. We prioritize requests about minors, victims and their families.

4. Public Case Rules

These apply to every public case, and to content in a private case before it's made public. When you publish a case or contribute to a public one, you confirm you've read these rules.

4.1 Naming suspects

• Only give someone the Suspect or Person of Interest role if law enforcement or a mainstream news organization has publicly named them in that role. Attach the source link.
• Everyone else who might be involved is an Unidentified Subject ("Unidentified Subject A", "B", and so on). Don't add details, hints or links that point to who they might be.
• If the source is withdrawn or corrected (for example, police clear someone), update the case promptly. We may do it for you.
• Don't use theories, polls, titles, tags or images to imply that an undesignated person is responsible.

4.2 Protected people

Victims, victims' families, minors, and witnesses are protected people. On public cases:

• No dossiers: don't compile their personal history, relationships, finances, social media, or anything beyond what is directly relevant to the case facts and already public.
• Minors appear only by a neutral label ("Minor 1"). No names, images, schools or other identifying details, unless the minor is the missing person or victim and their identity was made public by law enforcement or their family.
• Families can reach us through a priority channel (section 8) to correct, restrict or remove content about them or their loved one.

4.3 No doxxing

For any private individual on a public case, don't post:

• home addresses, or any location precise enough to find where someone lives;
• phone numbers, personal email addresses or private social media accounts;
• workplace details that aren't already part of the reported case facts;
• vehicle license plates;
• government ID numbers, dates of birth, or financial details.

This applies to protected people and to anyone else who isn't a public official acting in their public role. Casewall automatically checks for some of this before a case goes public. The rule applies whether or not the check catches it.

4.4 Facts, sources and theories

• A factual basis is required. Statements of fact need a source you can point to: an exhibit, a document, a record, a news report. Cite it.
• Theories are theories. Speculation, inference and opinion must be posted as a Theory or Note, not as a fact or timeline event, and must be labeled that way wherever it's shown, including in exports and presentations.
• Don't present allegations as proven. Say "police named X as a person of interest", not "X did it."
• AI output isn't a source. AI-generated drafts must be checked against their cited sources before they're accepted as fact.
• Correct mistakes. If you learn something you posted is wrong, correct or remove it.

4.5 Creators and exports

If you use Casewall content in videos, streams, articles or other media, you're the publisher and responsible for it. Keep the theory and fact labels and the "allegations are unverified" notice, credit sources, and follow these rules in what you publish.

4.6 Breaking events

We may delay, queue or restrict new public cases about very recent events, active emergencies, or ongoing manhunts while facts are unclear.

5. Private cases

The Public Case Rules don't restrict private cases, but everything in sections 2, 3 (any case), 6 and 7 still applies. Owners of private cases are responsible for who they invite and for any decision to make a case public. Before a case is made public, its content must be brought into line with section 4.

6. Prohibited uses (FCRA and screening)

Casewall is not a consumer reporting agency and doesn't provide consumer reports. You may not use the Service, or any information from it, to decide or help decide:

• whether to hire, promote, retain or reassign someone (employment screening);
• whether to rent or lease housing to someone (tenant screening);
• someone's eligibility for credit, insurance, a professional license, or a government benefit;
• anything else listed as a permissible purpose in the Fair Credit Reporting Act (15 U.S.C. §1681b).

Don't use Casewall as a people-search or background-check tool, don't run facial recognition on content from it, and don't compile profiles of people for sale or resale.

7. Contact with people and law enforcement

• Tips go to police. If you have information about a crime, a missing person, or someone in danger, report it to the investigating agency or the FBI (tips.fbi.gov). In an emergency, call 911.
• Don't investigate in person. Don't contact, confront, follow or surveil anyone involved in a case, and don't go to crime scenes or private property.
• Don't flood agencies. Don't organize mass calls or messages to investigators or families.
• Don't interfere. Don't contact witnesses or jurors, interfere with an active investigation, or violate a court order.

8. Reporting, takedowns and appeals

8.1 How to report

Use Report on any public case or item, or email casewall-legal@xennex.app. You don't need an account to report content on a public case, and you don't need to be a Casewall user to ask us to review content about you. When emailing, use the subject line shown so urgent reports reach us first.

Reports filed with the Report button about CSAM or NCII go straight to XenneX staff. Other Report-button reports go to that case's moderators first; email us if you want XenneX staff to review one. Our targets for acting on reports that reach us:

• Child sexual abuse material: Report button ("Child sexual abuse material"), or subject "CHILD SAFETY". A reported file is hidden as soon as the report is filed.
• Non-consensual intimate imagery (NCII): Report button ("Non-consensual intimate imagery"), or subject "NCII". A reported file is hidden as soon as the report is filed, and removed within 48 hours of a valid request (section 8.2).
• Threat to someone's safety: subject "SAFETY", and call 911 in an emergency. Within 24 hours.
• Doxxing or private information: Report button ("Privacy / doxxing"), or subject "PRIVACY". Within 48 hours.
• Victim or family request: Report button ("Request from a victim's family"), or subject "FAMILY" (priority). Within 48 hours.
• Likeness, or an image of me: Report button ("This is my image"), or subject "IMAGE OF ME". Within 72 hours.
• Defamation or harassment: Report button ("Defamation or harassment"), or subject "DEFAMATION". Within 5 business days.
• Copyright (DMCA): by email to our designated agent (section 8.5). Promptly, as the DMCA requires.
• Anything else in this AUP: Report button, or email. Within 5 business days.

These response times are targets for when we act on a report. They aren't a guarantee of the outcome.

8.2 Removing intimate images shared without consent (TAKE IT DOWN Act)

If an intimate image or video of you (including an AI-generated or altered one) was published on Casewall without your consent, you or someone authorized to act for you can ask us to remove it. Use the Report button and choose "Non-consensual intimate imagery", or email casewall-legal@xennex.app with the subject line "NCII". To request removal, send:

• your physical or electronic signature (typing your full name is enough);
• enough information for us to locate the image, such as the page link;
• a brief statement that you believe in good faith the image was published without your consent;
• how to contact you.

We remove valid requests within 48 hours, and make reasonable efforts to find and remove known identical copies on Casewall.

8.3 What we may do

Depending on the content and its history, we may:

• remove, hide or restrict the content;
• make a case private or lock it;
• remove a role designation;
• limit features;
• warn the user, or suspend or terminate their account;
• refer the matter to law enforcement where the law requires or allows it.

Case moderators can also act within their own cases. XenneX staff decisions override theirs.

8.4 Appeals

If we act on your content or account, you can appeal within 30 days at casewall-legal@xennex.app (subject line "APPEAL"). Tell us why the decision was wrong. A different person from the one who made the original decision will review it where practical. We aim to decide within 14 days. We don't reinstate CSAM or NCII, whatever the appeal says.

8.5 Copyright (DMCA)

We respond to notices of alleged infringement under the Digital Millennium Copyright Act (17 U.S.C. §512). Send notices by email, not the Report button, so they reach us directly. Our designated agent is:

• Designated Agent, XenneX LLC, [mailing address: to be confirmed before publishing], casewall-legal@xennex.app (subject "DMCA"). [Agent registration with the US Copyright Office pending.]

A notice must include:

• your signature;
• the work you claim is infringed;
• where the material is on Casewall (its URL);
• your contact information;
• a statement of good-faith belief that the use isn't authorized;
• a statement, under penalty of perjury, that the notice is accurate and you're authorized to act.

Counter-notices. If your content was removed and you believe it was a mistake or misidentification, you may send a counter-notice with the elements 17 U.S.C. §512(g) requires. We restore content 10 to 14 business days after a valid counter-notice unless the complainant tells us they've filed a court action.

Repeat infringers. We terminate the accounts of repeat infringers in appropriate circumstances.

9. Enforcement

Breaking this AUP can lead to removal of content, loss of case roles, suspension or termination of your account, and, where the law requires it or someone is at risk, a report to law enforcement. We consider the severity, whether it was intentional, and your history. Serious violations (CSAM, NCII, credible threats, stalking) lead to immediate termination.

10. Changes

We'll update this AUP as the Service and the law change. Material changes take effect 30 days after we give notice, except changes needed to comply with law or to protect people, which may take effect immediately. Each version is numbered and dated.