Acceptable Use Policy

1. Scope

This Acceptable Use Policy ("AUP") applies to everyone who uses EM3A, including free, paid, and enterprise accounts, integrations, the public API, and the MCP server. It is part of the Terms of Service.

2. Prohibited Conduct

You must not, and must not enable any third party to:

• violate applicable law, regulation, or court order;
• infringe the intellectual property, privacy, publicity, or other rights of others;
• send unsolicited bulk communications (spam) in breach of CAN-SPAM, CASL, GDPR direct-marketing rules, or local equivalents;
• harass, threaten, defame, or discriminate against any individual or group;
• conduct unauthorized security testing, penetration testing, or vulnerability scanning against EM3A or any third-party system;
• attempt to gain unauthorized access to accounts, infrastructure, or data not belonging to you;
• interfere with the Service through denial-of-service, malware, scraping at disruptive rates, or circumventing rate limits;
• reverse-engineer, decompile, or attempt to extract source code, model weights, or prompts of the Service, except where permitted by mandatory law;
• use the Service to build a competing dataset or competing product, including by systematically extracting outputs to resell;
• upload, generate, or distribute content that is unlawful, deceptive, malicious, pornographic, child-exploitative, terrorist, or that promotes self-harm;
• impersonate any person or entity or misrepresent your affiliation;
• use the Service against sanctioned parties or in sanctioned territories, or to evade export controls;
• use the Service to make automated decisions producing legal or similarly significant effects on individuals without meaningful human review.

3. Outbound Communications

When you use the Service to send or assist with outbound communications (email, calls, social outreach):

• you are the sender of record and the controller of the resulting processing;
• you represent you have a lawful basis (consent, legitimate interest with a balancing test, contract, or other legal basis) to contact each recipient;
• you must honor opt-outs, suppression lists, and unsubscribe requests promptly;
• you must include any sender identification and unsubscribe mechanism required by law;
• you must not use the Service to circumvent platform anti-spam controls (e.g., LinkedIn, Gmail) or to send communications that violate the receiving platform's terms.

4. Personal Data and Third-Party Sources

• Do not upload sensitive personal data (GDPR Article 9 categories), payment card numbers, or children's data unless a signed agreement specifically authorizes it.
• Do not scrape, import, or otherwise process personal data in violation of the source site's terms of service, applicable law, or the data subject's rights.
• Honor verifiable deletion or objection requests from data subjects whose data you processed using the Service.

5. AI Use Standards

• Do not present AI-generated content as human-authored where law or context requires disclosure (for example, EU AI Act transparency requirements).
• Do not use the Service to generate misleading deepfakes or impersonation content.
• Do not use the Service to produce content that infringes copyright, trademarks, or personality rights.
• Review AI outputs for accuracy before acting on them, especially when used in regulated workflows (finance, legal, security, health, public sector).

6. Fair Use and Rate Limits

Paid plans include credit allowances and rate limits. Even within those allowances, use must remain consistent with normal human-driven and integration-driven workflows. We may throttle, queue, or suspend accounts that:

• burst far beyond typical workflow patterns;
• script automated abuse of free tiers, trials, or referral mechanisms;
• create excessive load on shared infrastructure or third-party providers;
• operate multiple accounts to circumvent plan limits.

7. Reporting and Enforcement

Report suspected abuse to abuse@em3a.ai. Suspected security vulnerabilities should be reported to security@em3a.ai.

We may take any of the following actions, with or without prior notice, where warranted by the severity of the issue: written warning, rate-limiting, feature restriction, account suspension, account termination, removal of offending content, notification of affected parties, or cooperation with law enforcement. Egregious or high-risk abuse (illegal content, security attacks, large-scale spam) may result in immediate termination.

8. Contact

Questions: legal@em3a.ai.