Acceptable Use Policy

1.1 Customer shall not use the Services to engage in, facilitate, or promote any activity that violates applicable law, regulation, or legal obligation in any jurisdiction in which the Services are accessed or used.

1.2 Without limitation, this includes using the Services to:

• Draft, analyze, or facilitate agreements for the purpose of money laundering, sanctions evasion, bribery, or corruption;
• Facilitate fraud, including the preparation of fraudulent contracts, fabricated supporting documentation, or misrepresented terms intended to deceive a counterparty, court, or regulator;
• Engage in or facilitate human trafficking, exploitation, or other activity that violates fundamental human rights; or
• Violate the export control, sanctions, or trade compliance laws referenced in the Terms.

2.1 Customer shall not use the Services to upload, process, reproduce, or distribute content that infringes the copyright, trademark, trade secret, patent, or other Intellectual Property Rights of a third party, except to the extent Customer holds the necessary rights or such use constitutes fair use, fair dealing, or another applicable exception under law.

2.2 Examples of prohibited conduct include:

• Uploading a third party's proprietary contract templates, playbooks, or precedent language obtained without authorization, for the purpose of building a competing product or service;
• Using the Services to systematically reproduce substantial portions of copyrighted legal treatises, commentary, or other published works beyond what is reasonably necessary for Customer's internal review and analysis; and
• Removing or altering copyright, trademark, or other proprietary notices contained within documents processed through the Services, where doing so would itself infringe the rights of the relevant rights holder.

2.3 Intello Legal will respond to well-founded notices of alleged Intellectual Property Right infringement in accordance with applicable law and its published intellectual property complaint procedure.

3.1 Customer shall not upload, transmit, or introduce into the Services any virus, worm, trojan horse, ransomware, spyware, or other malicious code, or any file designed to disrupt, damage, or gain unauthorized access to the Services or any other customer's environment.

3.2 Examples of prohibited conduct include:

• Uploading a document deliberately embedded with macro-based malware or an exploit payload disguised as a contract attachment;
• Uploading files designed to trigger a denial-of-service condition when processed by the Services, such as maliciously crafted files intended to exhaust memory or processing resources (“decompression bombs” or similar techniques); and
• Attempting to deliver malicious payloads to other Authorized Users or customers through shared workspace or collaboration features.

3.3 Intello Legal employs automated scanning and other security controls to detect malicious content, and reserves the right to remove or quarantine any content reasonably suspected of containing malicious code, with notice to Customer where reasonably practicable.

4.1 Reverse Engineering

4.1.1 Customer shall not reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, underlying models, model weights, training methodology, or algorithms of the Services, except to the extent such restriction is prohibited by applicable law.

4.1.2 Examples of prohibited conduct include:

• Systematically querying the AI Features with a structured series of inputs designed to infer the architecture, parameters, or training data of the underlying models;
• Disassembling the Services' client-side application code to extract proprietary business logic; and
• Attempting to circumvent obfuscation, encryption, or other technical protection measures applied to the Services.

4.2 Unauthorized Access

4.2.1 Customer shall not attempt to gain unauthorized access to the Services, to another customer's Organization Account or Customer Data, or to Intello Legal's underlying systems and infrastructure.

4.2.2 Examples of prohibited conduct include:

• Attempting to guess, brute-force, or otherwise improperly obtain another Authorized User's login credentials;
• Exploiting a misconfiguration or vulnerability to access data outside Customer's own Organization Account; and
• Using another customer's API credentials or session tokens without authorization.

5.1 Customer shall not engage in systematic or automated scraping, crawling, or harvesting of content, data, or AI Output from the Services other than through an interface expressly made available by Intello Legal for that purpose, such as a documented application programming interface used in accordance with its published terms and rate limits.

5.2 Examples of prohibited conduct include:

• Using a script or bot to repeatedly extract AI Output, pricing information, or other content from the Services' web interface outside of an authorized API integration;
• Harvesting the contact details, usage patterns, or Customer Data of other customers made incidentally visible through shared workspace features; and
• Aggregating publicly accessible elements of the Services, such as the marketing website, in a manner that imposes unreasonable load on Intello Legal's infrastructure.

6.1 Customer shall not submit prompts, files, or other inputs to the AI Features that are designed to manipulate, jailbreak, or otherwise cause the AI Features to bypass their intended safeguards, content policies, or operational constraints.

6.2 Examples of prohibited conduct include:

• Embedding hidden instructions within an uploaded document intended to cause the AI Features to disregard their operating instructions or disclose internal system prompts (“prompt injection”);
• Submitting adversarial inputs designed to extract another customer's Customer Data, AI Output, or session context through the AI Features;
• Iteratively probing the AI Features with crafted prompts intended to cause them to generate content that would otherwise be blocked by Intello Legal's content and safety policies; and
• Using the AI Features to generate outputs designed to be used as adversarial inputs against other AI systems, including Intello Legal's own systems or those of third parties.

6.3 Intello Legal continuously monitors for and develops safeguards against adversarial use of the AI Features, and may suspend access in accordance with the Terms in response to suspected violations of this Section 6.

7.1 Customer shall not probe, scan, or test the vulnerability of the Services, or attempt to breach any security or authentication measures, except pursuant to a written authorization issued under Intello Legal's responsible disclosure program.

7.2 Examples of prohibited conduct include:

• Running automated vulnerability scanners or penetration testing tools against Intello Legal's production infrastructure without prior written authorization;
• Conducting denial-of-service testing, load testing intended to disrupt service for other customers, or similar disruptive testing without authorization; and
• Publicly disclosing a discovered vulnerability before Intello Legal has had a reasonable opportunity to investigate and remediate it, contrary to the coordinated disclosure timeline set out in the responsible disclosure program.

7.3 Security researchers wishing to test the Services should review and follow Intello Legal's responsible disclosure program, which authorizes good-faith security research conducted within defined scope and rules of engagement.

8.1 Customer shall not share, distribute, or permit concurrent use of an individual Authorized User's login credentials by more than one person, except for credentials expressly designated and approved as a shared service or functional account in accordance with the Terms.

8.2 Examples of prohibited conduct include:

• Multiple employees using a single Authorized User's login to avoid purchasing additional Authorized User licenses;
• Sharing API keys or access tokens issued to one Authorized User with personnel who have not been separately provisioned; and
• Continuing to use the login credentials of an individual who has left Customer's organization or whose access should have been revoked.

9.1 Customer shall not build, deploy, or operate automation, bots, or scripts that interact with the Services outside of supported integration points, including any automation that circumvents usage limits, rate limits, or licensing restrictions applicable to Customer's subscription plan.

9.2 Examples of prohibited conduct include:

• Using browser automation tools to simulate manual usage of the web application in order to exceed API rate limits or Authorized User-based usage restrictions;
• Building an unauthorized middleware layer that proxies multiple end users' requests through a single Authorized User account; and
• Operating automation that materially degrades the performance or availability of the Services for other customers.

10.1 Customer shall not use the Services to send unsolicited bulk communications, or to engage in phishing, pretexting, or other deceptive practices designed to mislead a recipient as to the sender's identity or purpose.

10.2 Examples of prohibited conduct include:

• Using AI Output generated by the Services as the basis for mass unsolicited outreach impersonating a law firm, financial institution, or other authoritative party;
• Generating fraudulent contract documents intended to deceive a counterparty into believing a binding agreement exists where none does; and
• Using the Services to facilitate advance-fee fraud, invoice fraud, or similar financial deception schemes.

11.1 Customer shall not use the Services to generate, upload, or disseminate content that is unlawful, hateful, discriminatory, harassing, or that promotes violence against individuals or groups on the basis of race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristic.

11.2 Examples of prohibited conduct include:

• Submitting prompts intended to cause the AI Features to generate discriminatory contract language designed to unlawfully exclude individuals from a protected class;
• Using the Services to draft or disseminate threatening or harassing communications directed at an individual or organization; and
• Uploading content whose primary purpose is to promote hatred or violence, where such content is not itself the legitimate subject matter of a legal document under review, such as evidentiary material in a litigation context.

11.3 This Section 11 does not prohibit the legitimate use of the Services to review, analyze, or redline lawful contractual language that addresses sensitive subject matter as part of a bona fide legal or business purpose, such as anti-discrimination provisions, employment terms, or content moderation clauses, provided that such use is consistent with the Services' intended purpose described in the Terms.

12.1 Customer shall not use the AI Features in a manner inconsistent with their intended purpose as a decision-support tool for contract review and legal intelligence, or in a manner designed to cause the AI Features to produce output that Customer knows or should reasonably know to be false, for the purpose of deceiving a third party.

12.2 Examples of prohibited conduct include:

• Repeatedly prompting the AI Features to generate a particular fabricated legal citation or precedent, with knowledge that no such authority exists, for use in a filing or communication to a third party;
• Using the AI Features to generate content falsely attributed to a real person or organization, such as a fabricated legal opinion presented as having been authored by a named licensed attorney who did not in fact author or review it; and
• Disabling, circumventing, or instructing Authorized Users to disregard the mandatory human review requirement described in the Terms in connection with client-facing or regulatory submissions, in a manner inconsistent with Customer's professional obligations.

13.1 Customer shall not attempt to extract, replicate, distill, or reconstruct the machine learning models underlying the AI Features, whether through systematic querying, output harvesting, or any other method, for the purpose of building, training, or improving a competing model or product.

13.2 Examples of prohibited conduct include:

• Systematically submitting a large volume of varied inputs to the AI Features and recording the corresponding outputs in order to train a separate machine learning model intended to replicate the AI Features' functionality;
• Using API access to the Services to generate training data for a competing AI-powered legal technology product; and
• Engaging a third party to perform model extraction activities on Customer's behalf using Customer's Organization Account.

14.1 Customer shall not conduct or publish benchmarking, performance testing, or competitive comparative analysis of the Services without Intello Legal's prior written consent, except to the extent such restriction is unenforceable under applicable law.

14.2 Examples of prohibited conduct include:

• Publishing a comparative accuracy benchmark of the AI Features against a competing product without Intello Legal's prior written consent; and
• Disclosing non-public performance metrics or test results obtained through the Services to a third party for competitive purposes.

14.3 Customer may request permission to conduct and publish benchmarking by contacting Intello Legal using the details in Section 21. This Section 14 does not restrict Customer's internal evaluation of the Services for its own procurement purposes.

15.1 Customer shall not exceed the API rate limits, usage quotas, or other technical restrictions applicable to its subscription plan, and shall not attempt to circumvent such limits through the use of multiple accounts, distributed requests, or other workaround techniques.

15.2 Examples of prohibited conduct include:

• Distributing API requests across multiple Organization Accounts or Authorized User credentials to circumvent a documented rate limit;
• Submitting an unreasonably high volume of requests in a manner inconsistent with genuine business need, such as automated repeated submission of identical or near-identical documents; and
• Failing to implement reasonable request throttling or backoff logic in an integration built against the Services' API, resulting in a sustained, abnormal load.

15.3 Customer experiencing legitimate usage needs that exceed its current plan's limits should contact Intello Legal to discuss an appropriate subscription upgrade rather than circumventing applicable limits.

16.1 Customer shall not circumvent, disable, or interfere with any technical safeguard, content policy, access control, rate limit, licensing restriction, or other protective measure implemented within the Services.

16.2 Examples of prohibited conduct include:

• Using a virtual private network, proxy, or similar technique for the purpose of evading a geographic or access restriction applicable to Customer's subscription;
• Modifying client-side code or intercepting network traffic to bypass licensing checks or feature-gating logic; and
• Attempting to disable safety filters or content moderation features applied to the AI Features' outputs.

17.1 Customer shall not upload Customer Data containing confidential, privileged, or legally protected information unless Customer has the right and authorization to disclose such information to Intello Legal for processing through the Services, consistent with the Terms and the Privacy Policy.

17.2 Examples of prohibited conduct include:

• Uploading a third party's confidential business information obtained under a non-disclosure agreement that prohibits disclosure to third-party service providers, without obtaining any required consent or exception;
• Uploading privileged client communications in circumstances where doing so would result in a waiver of privilege that Customer has not assessed or accepted, contrary to Customer's professional obligations; and
• Uploading government, classified, or other legally restricted information that Customer is not authorized to disclose to a third-party processor under applicable law or contract.

17.3 Customer remains solely responsible for assessing whether particular Customer Data is appropriate for processing through the Services, including any heightened security or contractual restrictions applicable to specific categories of information.

18.1 Customer shall not attempt to exploit any known or suspected vulnerability in the Services, whether for the purpose of gaining unauthorized access, extracting data, disrupting service, or any other purpose, except pursuant to Intello Legal's responsible disclosure program described in Section 7.3.

18.2 Examples of prohibited conduct include:

• Using a discovered vulnerability to access Customer Data belonging to another customer, even where the discovery itself occurred inadvertently;
• Exploiting a known vulnerability for financial gain, including through extortion or demands for payment in exchange for non-disclosure; and
• Continuing to exploit a vulnerability after Intello Legal has acknowledged the report and requested that testing cease pending remediation.

18.3 Good-faith discovery and prompt, responsible reporting of a vulnerability in accordance with Intello Legal's responsible disclosure program is encouraged and will not be treated as a violation of this AUP, provided that the individual does not access, modify, or exfiltrate data beyond what is strictly necessary to demonstrate the vulnerability, and ceases activity upon Intello Legal's request.

19.1 A violation of this AUP constitutes a material breach of the Terms. Intello Legal may investigate suspected violations and take action in accordance with the Suspension and Termination provisions of the Terms, including suspension or termination of access to the Services, removal of violating content, and, where appropriate, reporting to law enforcement or regulatory authorities.

19.2 Intello Legal will exercise its enforcement rights under this AUP in a manner proportionate to the nature and severity of the violation, and will provide notice and an opportunity to cure where reasonably practicable.

19.3 Intello Legal's decision not to act upon a particular instance of conduct described in this AUP does not constitute a waiver of its right to enforce this AUP with respect to that or any other instance of similar conduct.

20.1 Suspected violations of this AUP, including suspected security vulnerabilities reportable under Intello Legal's responsible disclosure program, may be reported using the contact details below.

To report a suspected violation of this AUP, a security vulnerability, or an intellectual property complaint, or for questions regarding its application, please contact Intello Legal's Trust and Safety team at intellolegal@gmail.com.