Acceptable Use Policy
1. Lawful use
Do not use the platform to break the law, to infringe anyone's intellectual property or privacy rights, or to further fraud, market abuse, insider dealing, money laundering, or sanctions evasion.
2. Data you load
– Load only data you have the right to load, and only for purposes your own privacy notices and legal obligations cover.
– Do not load special-category or sensitive personal data — health, biometric, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, precise geolocation, government identification numbers, or payment card numbers. The platform is not designed for it, and the data processing agreement does not contemplate it.
– Do not load data about children.
– Do not use the platform as your system of record for anything you are legally required to retain elsewhere.
3. Security and integrity
– Do not attempt to access another customer's workspace, or any data you have not been granted access to.
– Do not attempt to bypass or probe workspace isolation, authentication, role permissions, entitlements, or rate limits.
– Do not conduct penetration testing, vulnerability scanning, or load testing against the platform without our prior written permission. Genuine vulnerability reports are welcome under the disclosure process in SECURITY.md; note that testing which touches another customer's data is out of bounds in every case.
– Do not upload malware, or use the platform to distribute it.
– Do not share credentials or accounts, and do not let anyone use an account provisioned for someone else.
4. AI features
– Do not present AI-generated output to a third party as verified human analysis unless a person has in fact verified it.
– Do not rely on output as professional advice, and do not resell it as such.
– Do not attempt to extract system prompts, model weights, configuration, or another customer's data through the assistant.
– Do not use the platform to generate material that harasses, defames, or threatens a person, or that provides instructions for causing physical harm.
– Do not use the platform to make automated decisions about individuals — for example about employment, credit, insurance, or housing. It is built to assess businesses, not people.
– Do not use the platform as an emergency, crisis, medical, or mental-health service, or present it as one. If someone is at risk, contact your local emergency number or a crisis service. The assistant screens the messages sent to it for language indicating self-harm and may reply with a fixed list of helplines, but it does not escalate, alert, or notify anyone — not you, not your administrators, and not us. See /ai-disclosure for exactly what that screening does and does not do.
5. Extraction and resale
– Export your data through the export paths we provide. Do not scrape, crawl, or bulk-extract from the interface or the APIs.
– Do not resell platform access, operate it as a service bureau, or redistribute market reference data as a standalone dataset.
– Do not use the platform to build a competing product, or publish benchmarks of it, without our written consent.
6. Reporting
If you become aware of a breach of this policy, a security vulnerability, or a compromised account, tell us promptly: support@exonix.com, and for security specifically the process in SECURITY.md.
7. Consequences
We may investigate suspected breaches and may suspend access under section 14 of the Terms, immediately where there is a credible security risk or unlawful use. We will give notice where practicable and reinstate access once the cause is resolved.
8. Changes
We may update this policy under section 17 of the Terms. Each version carries a version number and an effective date.