Acceptable Use Policy

1. Principles

Use the Service to observe, operate, and improve your own agents responsibly. You are responsible for your agents’ behavior and for making sure that the data they report and the commands you configure comply with the law and this AUP.

2. Illegal, harmful, and abusive activity

You must not use the Service, or connect an agent to it, to:

• violate any law or regulation, or anyone’s rights, including privacy, publicity, and intellectual property rights;
• operate or control agents that commit fraud, phishing, impersonation, or deceptive practices;
• generate, store, or distribute child sexual abuse material, content that sexualizes minors, non-consensual intimate imagery, or content that promotes terrorism or violent extremism;
• harass, threaten, or incite violence or discrimination against any person or group;
• send spam or unsolicited bulk messages, or operate agents that do so;
• develop or operate malware, or agents designed to compromise systems, steal credentials, or evade security controls;
• make automated decisions with legal or similarly significant effects on individuals (for example, about credit, employment, housing, or access to essential services) without the human review, notices, and safeguards the law requires;
• facilitate activities prohibited by export control or sanctions laws.

3. Security and integrity of the Service

You must not:

• access or attempt to access another organization’s data, accounts, or agents, or probe the boundaries between organizations, except as permitted by our Responsible Disclosure policy;
• scan, load-test, or penetration-test the Service without our written permission, other than good-faith research under that policy;
• circumvent rate limits, quotas, credit limits, authentication, or access controls, or share API keys outside your organization;
• interfere with or disrupt the Service, its infrastructure, or other customers’ use of it;
• use the Service to send commands or webhooks to systems you do not own or have permission to control;
• submit content designed to manipulate ACP’s AI Features (for example, prompt injection intended to extract other customers’ data or our system instructions).

4. Data you send to the Service

• Send only data you are permitted to share with us, and configure your integration to minimize personal data in run records where you can.
• Unless we agree otherwise in writing, do not send special categories of personal data (such as health, biometric, or genetic data), payment card data, government identification numbers, or data about children. ACP is not designed for protected health information regulated under HIPAA and we do not sign business associate agreements.
• Do not send credentials, secrets, or private keys in run records or prompts.

5. AI Features and model providers

When you use AI Features, you must also comply with the usage policies of the AI providers listed on our Security & Trust page, as they apply to the content you send. Your agents’ own use of model providers is governed by your agreements with those providers.

6. Fair use of capacity

Use the Service within your plan’s limits and credits. We may throttle or pause activity that places an unreasonable load on the Service or that appears automated to evade plan limits, and will contact you to resolve it.

7. Reporting violations

Report suspected violations of this AUP to Founders@skaigroup.tech. Report security vulnerabilities as described in our Responsible Disclosure policy.

8. Enforcement

If we reasonably believe you or your agents have violated this AUP, we may remove or disable content, revoke API keys, disable control scopes, suspend access, or terminate your account, as described in the Terms. Where practical and lawful, we will notify you and give you a chance to fix the issue first. We may report illegal activity to the appropriate authorities.

9. Changes

We may update this AUP to address new risks. We will post changes here with a new “Last updated” date and notify account owners of material changes.