Acceptable Use Policy

1. Purpose

This AUP is intended to protect the integrity, security, and lawful use of the Services and to ensure compliance with applicable laws, including those of the Commonwealth of Virginia and the United States.

2. General Use Requirements

Users ("Customer," "User," or "Client") agree to use the Services only for lawful, authorized, and legitimate purposes.

Users must:

• Comply with all applicable federal, state, and local laws
• Respect the rights of others, including privacy and intellectual property rights
• Use the Services in a manner consistent with contractual obligations and system design

3. Prohibited Activities

Users shall not use the Services to engage in, facilitate, or promote any of the following:

A. Illegal or Unauthorized Conduct

• Violating any applicable law or regulation
• Supporting criminal activity or unlawful enterprises
• Engaging in fraud, deception, or misrepresentation

B. Security Violations

• Attempting to gain unauthorized access to systems, accounts, or data
• Circumventing authentication, access controls, or security mechanisms
• Probing, scanning, or testing vulnerabilities without authorization
• Interfering with system integrity or availability

C. Abuse of Platform or Infrastructure

• Launching denial-of-service attacks or resource exhaustion activities
• Excessive or abusive API usage outside intended design
• Introducing malware, malicious code, or harmful payloads
• Disrupting or degrading Service performance

D. Reverse Engineering and Exploitation

• Reverse engineering, decompiling, or extracting proprietary logic
• Attempting to replicate, copy, or derive source code or models
• Bypassing system limitations or safeguards

E. Data Misuse and Privacy Violations

• Collecting or processing personal data without lawful basis
• Using the Services to conduct unlawful surveillance or tracking
• Attempting to access or expose data belonging to other users or tenants

F. Harmful or Abusive Conduct

• Harassment, abuse, or intimidation of individuals or groups
• Dissemination of defamatory or unlawful content
• Exploitation of individuals or vulnerable populations

G. Export and Sanctions Violations

• Use of the Services in violation of U.S. export control laws
• Access from embargoed jurisdictions or by restricted persons

4. AI and Automated System Use

When using AI-enabled features, Users shall not:

• Rely on outputs as a substitute for professional judgment in regulated domains
• Use AI systems to generate or distribute unlawful or harmful content
• Attempt to manipulate, exploit, or degrade model behavior
• Use AI outputs in ways that violate applicable law or rights of others

Users are solely responsible for reviewing and validating AI-generated outputs prior to use.

5. API and Developer Responsibilities

Users accessing the Services through APIs must:

• Secure API keys and credentials
• Avoid embedding credentials in public repositories or client-side code
• Respect rate limits and usage constraints
• Use APIs only for intended and authorized purposes

Unauthorized automation, scraping, or bulk extraction outside permitted interfaces is prohibited.

6. Multi-Tenant Environment Conduct

Users must respect tenant boundaries and shall not:

• Attempt to access or infer data from other tenants
• Interfere with shared infrastructure
• Exploit system behavior to bypass logical isolation

7. Monitoring and Enforcement

The Company reserves the right to:

• Monitor use of the Services for compliance with this AUP
• Investigate suspected violations
• Suspend, restrict, or terminate access without prior notice
• Report unlawful activity to appropriate authorities

Enforcement actions may be taken at the Company's sole discretion.

8. Reporting Violations

Suspected violations of this AUP may be reported to:

security@noirstack.com

Reports should include sufficient detail to allow investigation.

9. No Expectation of Unrestricted Use

Access to the Services is conditional and revocable. The Company may impose limits, controls, or restrictions necessary to protect:

• System integrity and availability
• Security of data and infrastructure
• Compliance with legal and contractual obligations

10. Relationship to Other Agreements

This AUP is incorporated into and governed by the Terms and Conditions.

In the event of a conflict between this AUP and a separately executed enterprise agreement, the enterprise agreement shall control.

11. Changes to This Policy

The Company may update this AUP periodically.

Material changes will be reflected by updating the "Last Updated" date. Continued use of the Services constitutes acceptance of the revised policy.

12. Contact

Questions regarding this Acceptable Use Policy may be directed to:

legal@noirstack.com

Noir Stack LLC · Commonwealth of Virginia