Acceptable Use Policy

This Acceptable Use Policy ("AUP") applies to access to and use of the services offered by Zeroset, Inc. ("Zeroset"), including Zeroset's hosted software platform, APIs, SDKs, developer tools, memory infrastructure, retrieval and indexing services, dashboards, documentation, and related services that link to this AUP (collectively, the "Services"). This AUP is incorporated into Zeroset's Platform Terms of Service and any agreement that references it.

You may not use the Services, and may not allow anyone else to use the Services, in a manner prohibited by this AUP. Examples below are illustrative and not exhaustive.

1. Illegal, Harmful, or Abusive Use

You may not use the Services to violate any applicable law, regulation, contract, or third-party right, including laws relating to privacy, data protection, intellectual property, consumer protection, healthcare, financial services, employment, housing, export controls, sanctions, anti-corruption, anti-money laundering, or cybersecurity.

You may not use the Services to create, store, process, retrieve, distribute, or facilitate content or activity that is illegal, fraudulent, deceptive, defamatory, harassing, threatening, abusive, invasive of privacy, or otherwise harmful.

2. Security Abuse

You may not use the Services to:

• develop, distribute, store, retrieve, or facilitate malware, ransomware, spyware, credential theft, phishing, botnets, or harmful code;
• attack, scan, probe, exploit, or gain unauthorized access to systems, networks, accounts, credentials, data, or services;
• bypass authentication, authorization, rate limits, usage limits, monitoring, filtering, abuse prevention, or security controls;
• conduct vulnerability scanning, penetration testing, load testing, stress testing, or security testing of the Services without Zeroset's prior written approval; or
• interfere with, disrupt, degrade, overload, or harm the Services or any third-party systems.

3. Data Rights, Privacy, and Confidentiality

You may not submit, store, process, or retrieve data through the Services unless you have all rights, permissions, notices, consents, and legal bases necessary to do so. You may not use the Services to violate privacy rights, confidentiality obligations, contractual restrictions, data protection laws, or other rights of individuals or organizations.

You may not use the Services for doxing, unlawful surveillance, unauthorized profiling, stalking, scraping personal information, re-identification of de-identified data, or combining data in a way that violates law or third-party rights.

4. Regulated and Sensitive Data

You may not submit, store, or process Protected Health Information ("PHI"), payment card data subject to PCI DSS, children's personal information, biometric identifiers, precise geolocation, government identifiers, financial account information, criminal records, special category data, or other regulated or sensitive data through the Services unless expressly authorized in a written agreement with Zeroset and, where applicable, subject to a signed Business Associate Agreement, Data Processing Addendum, data use agreement, or other required terms.

Zeroset may support PHI only for customers that have entered into a signed Business Associate Agreement with Zeroset and only in environments, accounts, products, or configurations expressly authorized by Zeroset for PHI. Unless those requirements are satisfied, you must not submit PHI to the Services.

5. Child Safety and Exploitation

You may not use the Services to create, store, process, retrieve, distribute, or facilitate child sexual abuse material, sexual exploitation or abuse of minors, grooming, trafficking, or any content or activity that harms or exploits children. Zeroset may report such content or activity to law enforcement or other appropriate authorities.

6. Violence, Terrorism, and Extremism

You may not use the Services to create, store, process, retrieve, distribute, or facilitate credible threats, incitement of violence, instructions for violent wrongdoing, terrorist activity, extremist recruitment, or content that materially supports terrorism or violent extremism.

7. Fraud, Spam, and Platform Manipulation

You may not use the Services to facilitate fraud, scams, impersonation, phishing, spam, deceptive marketing, fake engagement, credential stuffing, account takeovers, evasion of bans, manipulation of systems or metrics, or other abusive automation.

8. High-Impact and Safety-Critical Use

You may not use the Services or any output as the sole basis for legal, medical, financial, employment, housing, lending, insurance, law enforcement, safety-critical, or other high-impact decisions unless expressly authorized in a written agreement with Zeroset and you implement appropriate human review, testing, monitoring, explainability, appeal processes, and legal compliance.

You may not represent that outputs or memory retrieval results are guaranteed to be accurate, complete, current, or appropriate for high-impact decisions without independent verification.

9. Competitive, Deceptive, or Excessive Use

You may not use the Services to build or operate a product or service that replicates, competes with, or is substantially similar to the Services, except as expressly authorized in writing by Zeroset. You may not publish benchmarks or comparative performance results of the Services without Zeroset's prior written approval.

You may not use the Services in a manner that exceeds documented limits, avoids fees, evades usage restrictions, creates excessive load, or degrades the Services for others.

10. Third-Party Services

If you use the Services with third-party model providers, tools, repositories, data sources, APIs, or integrations, you are responsible for complying with the terms and policies of those Third-Party Services and ensuring that data sent to them may lawfully be processed by them.

11. Enforcement

Zeroset may investigate potential violations of this AUP and may remove or disable access to content, limit usage, suspend accounts, terminate access, notify affected customers or users, preserve information, or report activity to law enforcement, regulators, or third parties where Zeroset believes doing so is appropriate or required.

Zeroset may consider the context, severity, intent, recurrence, and risk of a violation when deciding what action to take. Zeroset is not obligated to monitor all activity, but may do so to operate, secure, and enforce the Services.

12. Reporting Abuse

To report suspected violations of this AUP, contact abuse@zeroset.com or security@zeroset.com.