Acceptable Use and Responsible AI Use Policy

You will not submit, upload, store, transmit to, or generate using the Services any Customer Data, prompts, inputs, or other content that:

• Is obscene, defamatory, deceptive, harassing, abusive, threatening, hateful, or discriminatory;
• Sexually exploits or endangers minors, or is child sexual abuse material;
• Is non-consensual intimate imagery, or is intended to depict an identifiable person in a sexual context without that person's consent;
• Promotes or glorifies terrorism, mass violence, or self-harm;
• Violates anyone else's intellectual property, privacy, publicity, or other rights, including by submitting copyrighted material, trade secrets, or personal information that you do not have authority to submit;
• Constitutes "special category" personal data (e.g., health, biometric, genetic, racial or ethnic, religious, sexual orientation, or other sensitive categories under applicable privacy laws) unless your Agreement expressly permits such submission and the parties have executed a Data Processing Addendum;
• Violates applicable laws or regulations, including by unlawfully marketing or selling controlled substances, firearms, explosives, or other regulated goods;
• Contains viruses, malware, malicious code, exploits, or other harmful code or materials; or
• Is intended to deceive, defraud, manipulate, or impersonate (including for purposes of social engineering, account takeover, or unauthorized access).

You will not, and will not attempt to, use the Services to:

• Engage in deceptive or illegal activities, including spoofing, phishing, pyramid schemes, business email compromise, or impersonation of any person or entity;
• Generate, distribute, or amplify spam or other unsolicited communications, or to artificially inflate engagement, ratings, reviews, or signals on any platform;
• Generate or distribute disinformation, misinformation, or content that is intended to deceive (including in connection with elections, public health, financial markets, or judicial proceedings);
• Publish benchmark or performance information about the Services without Vendor's prior written consent;
• Use the Services in violation of data protection, privacy, AI, consumer protection, anti-discrimination, or other applicable laws or regulations;
• Engage in, promote, support, or facilitate hateful, discriminatory, or violent activities;
• Make decisions that have legal or similarly significant effects on individuals (including credit, employment, insurance, healthcare, education, housing, public benefits, immigration, or criminal justice decisions) without appropriate human review and the protections required by applicable law;
• Engage in any activity that we reasonably determine, on advice of counsel, would cause liability to us, expose the Services to legal or regulatory risk, or jeopardize the trust of other customers.

The Services are powered by large language models and other machine-learning systems. The following rules apply specifically to your use of those AI capabilities.

3.1 Output Limitations

Outputs generated by the Services are probabilistic and may be inaccurate, incomplete, biased, out of date, or fabricated (including so-called "hallucinations"). The Services do not guarantee the accuracy, reliability, or completeness of any Output and do not produce professional advice. You are responsible for evaluating each Output for accuracy and suitability before relying on or distributing it.

3.2 Human Review

You will implement appropriate human review, quality control, fact-checking, and validation processes commensurate with the use case and the risks to affected individuals or third parties. Where Outputs may inform a decision that has legal or similarly significant effects on an individual, you will perform the human review, transparency, fairness assessment, and other measures required by applicable law.

3.3 Disclosure to End Users

If you incorporate Outputs into a product or service made available to end users, and disclosure of AI involvement is required by applicable law (for example, mandatory disclosure of synthetic media or AI-generated content), you are responsible for providing the required notices to end users.

3.4 Provenance and Watermarking

You will not remove, disable, or interfere with any provenance, watermark, content credentials, or similar markers that the Services apply to Output, except as expressly permitted by Vendor in writing or required by applicable law.

3.5 No Use to Train Competing Models

You will not use the Services, or any Output, to develop, train, fine-tune, or evaluate any product, model, or service that competes with the Services, including by extracting, scraping, or storing Outputs in bulk for that purpose.

3.6 No Reverse Engineering of Models

You will not reverse engineer, decompile, disassemble, extract, or attempt to derive or reconstruct the model weights, training data, model architecture, prompts, system prompts, safety filters, or other non-public components of the Services, except to the limited extent applicable law expressly prohibits this restriction.

You will not use the Services for any High-Risk Use without our prior written approval. We may condition our approval on additional terms (including human-in-the-loop requirements, technical safeguards, and additional indemnities). "High-Risk Use" means use of the Services in or for:

• Nuclear facilities;
• Weapons systems or weapon design, including chemical, biological, radiological, nuclear, or autonomous weapons;
• Aircraft navigation or air traffic control;
• Life-support equipment, or other circumstances where failure of the Services could reasonably result in death, personal injury, severe property damage, or environmental damage;
• Operation of critical infrastructure (such as power grids, water systems, or emergency services) where failure could result in significant disruption;
• Surveillance or social-scoring systems prohibited by applicable law;
• Biometric identification or categorization in publicly accessible spaces in a manner prohibited by applicable law; or
• Generation of content that sexually exploits or endangers minors.

In addition, you will not use the Services to develop, generate, or distribute content or capabilities that:

• Provide step-by-step technical instructions for the synthesis or weaponization of chemical, biological, radiological, or nuclear materials;
• Provide functional malware, exploits, or other code intended to compromise the integrity or availability of computer systems;
• Generate non-consensual intimate imagery of any identifiable person, or content that sexualizes minors;
• Are intended to harass, intimidate, or threaten an identifiable individual or group; or
• Are intended to engage in or facilitate human trafficking, child exploitation, or other serious human-rights abuses.

You will not, and will not attempt to:

• Access the Services through unauthorized means, including by scraping, crawling, automated tooling, or use of credentials not issued to you;
• Disable, interfere with, or circumvent any security feature, access control, rate limit, content filter, safety filter, abuse-prevention mechanism, or monitoring mechanism in the Services;
• Submit prompts, inputs, jailbreaks, or chained inputs designed to cause the Services to operate outside their intended scope, bypass policy enforcement, or generate content that the Services would otherwise refuse to generate;
• Monitor traffic or data on the Services without Vendor's prior written permission;
• Probe, scan, or test the vulnerability of Vendor's systems, networks, models, or filters except in compliance with Vendor's coordinated vulnerability disclosure process described below;
• Try to access other users' data, prompts, outputs, or accounts without their express permission;
• Use the Services to generate or assist with cyberattacks, including unauthorized access to systems, denial-of-service attacks, or credential theft.

You are responsible for the security of your account, including for keeping login credentials and API keys confidential and using multi-factor authentication where the Services make it available. You will not share credentials with anyone outside your organization, and within your organization, only with Authorized Users who need them. You will promptly notify us at security@4minds.ai of any actual or suspected unauthorized access, credential compromise, or security incident affecting your account or your use of the Services.

If you believe you have discovered a security vulnerability in the Services, please report it to us at security@4minds.ai. Good-faith research conducted in accordance with this policy will not be treated by us as a violation of this AUP, provided that you (a) do not access, modify, or destroy data belonging to other customers; (b) do not degrade availability of the Services; (c) give us a reasonable opportunity to investigate and remediate before public disclosure; and (d) do not extract, retain, or share data beyond what is necessary to demonstrate the vulnerability.

You will not permit or encourage others to commit any of the actions described in this AUP, and you are responsible for the acts and omissions of your Authorized Users and any third parties to whom you grant access to the Services.

We may monitor compliance with this AUP and investigate any actual or suspected violation. If we determine that you, your Authorized Users, or your content violates this AUP, we may take any action that we reasonably believe is appropriate, including (a) removing or disabling the offending content; (b) suspending or terminating your access to the Services; (c) revoking API keys or credentials; (d) requiring remediation steps; and (e) reporting suspected unlawful activity to law enforcement, regulators, or other appropriate third parties, and cooperating with their investigations. Our enforcement decisions and the timing of any notice are within our sole discretion. We may take enforcement action without prior notice where (i) the violation poses an imminent risk of harm to individuals or third parties; (ii) law or a Cloud Marketplace operator requires immediate action; or (iii) prior notice would defeat the purpose of the enforcement action.

If you become aware of any suspected violation of this AUP, please notify us at legal@4minds.ai (or, for security incidents, security@4minds.ai) and provide a full explanation. We may request your assistance to help stop or remedy the violation.

We may update this AUP from time to time. If we make material changes, we will provide reasonable notice (by posting the updated AUP at https://4minds.ai/acceptable-use with a new "Last updated" date and, where appropriate, by email or in-product notice) before the changes take effect. Continued use of the Services after the effective date constitutes acceptance of the updated AUP.

© 4MindsAI Inc. All rights reserved.