Acceptable Use Policy

This Acceptable Use Policy ("AUP") establishes the binding rules, conditions, and prohibitions governing the access to and use of all synthetic intelligence services, platforms, software, documentation, and application programming interfaces (APIs) provided by Iseer & Co. and its affiliates ("Iseer," "we," "us," "our"), hereinafter collectively referred to as the "Services." The express purpose of this AUP is to ensure the safe, ethical, lawful, and responsible use of the Services, thereby protecting the integrity of our systems, the rights of our users and third parties, and the public interest from potential harm arising from the misuse of advanced artificial intelligence technologies. This Policy applies to all individuals, entities, or automated systems that access or use the Services ("User," "you," "your"). Adherence to this AUP is a material condition of the license and right to use the Services granted by Iseer.

Responsible AI Use

Our Acceptable Use Policy ensures safe, ethical, and lawful use of our synthetic intelligence services.

Effective: October 26, 2025

Last Revised: October 26, 2025

SECTION 1: INTRODUCTION AND BINDING NATURE

1.1. Purpose and Scope

1.2. Agreement to Policy

By accessing, registering for, or otherwise using the Services, you acknowledge that you have read, understood, and agree to be legally bound by the terms and conditions of this AUP in its entirety. This AUP is incorporated by reference into the Iseer & Co. Master Services Agreement, Terms of Service, or any other primary agreement between you and Iseer governing your use of the Services (the "Master Agreement"). In the event of any direct conflict or inconsistency between a provision of this AUP and a provision of the Master Agreement, the terms of this AUP shall prevail and control with respect to the subject matter of acceptable use and prohibited conduct. Your continued use of the Services constitutes your ongoing acceptance of this AUP. If you do not agree to this AUP, you must immediately cease all access to and use of the Services.

1.3. Modifications to this Policy

Iseer reserves the right, at its sole and absolute discretion, to modify, amend, or replace this AUP at any time. We will provide notice of material changes by updating the "Last Revised" date at the top of this Policy and, where appropriate, through other communication channels. It is your sole responsibility to review this AUP periodically for any changes. Your continued access to or use of the Services following the posting of any modifications to this AUP constitutes your binding acceptance of such changes.

SECTION 2: DEFINITIONS

To ensure clarity and eliminate ambiguity, the capitalized terms used throughout this AUP shall have the meanings set forth in this Section. The adoption of precise, harmonized definitions drawn from authoritative global regulations and industry standards is a foundational element of Iseer's risk management framework. This approach is not merely a matter of legal formality; it establishes a clear, defensible, and "future-proofed" legal architecture that aligns our operations with best-in-class governance, demonstrating a commitment to responsible innovation that is essential for earning and maintaining the trust of our users, enterprise customers, and regulators.

2.1. "Synthetic Intelligence System" or "AI System"

A machine-based system that is designed to operate with varying levels of autonomy and that may exhibit adaptiveness after deployment, and that, for explicit or implicit objectives, infers from the input it receives how to generate outputs such as predictions, content, recommendations, or decisions that can influence physical or virtual environments.

2.2. "User Content"

Collectively refers to "Input" and "Output," as defined herein.

2.3. "Input"

Any and all data, text, prompts, code, images, audio, video, or other content and information that a User provides, uploads, submits, or otherwise transmits to the Services.

2.4. "Output"

Any and all data, text, code, images, audio, video, or other content and information that is generated, returned, or otherwise created by the Services in response to or based on Input.

2.5. "Personal Data"

Any information relating to an identified or identifiable natural person ("Data Subject"), consistent with the definition provided in Article 4(1) of the General Data Protection Regulation (Regulation (EU) 2016/679 or "GDPR"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (such as an IP address or cookie identifier), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. This definition shall be interpreted broadly to also encompass "personal information" as defined under other applicable data protection laws, such as the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which includes information that is reasonably linkable to a particular consumer or household.

2.6. "Sensitive Personal Information" or "Special Categories of Personal Data"

A subset of Personal Data that is subject to heightened legal protection due to its sensitive nature. This term includes, without limitation:

(a) "Special Categories of Personal Data" as defined under Article 9(1) of the GDPR, which includes Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data; biometric data for the purpose of uniquely identifying a natural person; data concerning health; and data concerning a natural person's sex life or sexual orientation.

(b) "Sensitive personal information" as defined under the CCPA/CPRA and similar U.S. state privacy laws, which includes government identifiers (e.g., Social Security numbers), account log-in credentials in combination with passwords, precise geolocation data, and the contents of a consumer's mail, email, and text messages where the business is not the intended recipient.

2.7. "Protected Health Information" (PHI)

Any "individually identifiable health information" as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. This includes demographic data and information relating to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual, which identifies the individual or for which there is a reasonable basis to believe the information can be used to identify the individual. The use of the Services to process PHI is strictly prohibited unless a valid Business Associate Agreement ("BAA") is in effect between you and Iseer.

2.8. "Cardholder Data"

As defined by the Payment Card Industry Data Security Standard (PCI DSS), this term includes, at a minimum, the full Primary Account Number (PAN). It may also include the cardholder name, expiration date, and/or service code. The storage, processing, or transmission of "Sensitive Authentication Data" (SAD), including full magnetic stripe data, CAV2/CVC2/CVV2/CID, and PINs, via the Services is strictly prohibited. By explicitly defining and prohibiting these data types, Iseer contractually prevents its platform from becoming subject to the extensive compliance obligations and liabilities associated with these regulatory regimes, thereby allocating this risk to the User.

2.9. "High-Risk Use Case"

Any use of the Services in an application, system, or environment where a failure, error, inaccuracy, or malfunction of the Service or its Output could reasonably be expected to lead to: (a) death or serious bodily injury of any person; (b) severe physical, environmental, or property damage; or (c) a significant deprivation of an individual's fundamental rights or their access to essential services, such as housing, employment, credit, or legal recourse. This definition is informed by and intended to be consistent with the principles underlying high-risk classifications in emerging regulatory frameworks, such as the EU AI Act.

SECTION 3: GENERAL OBLIGATIONS AND RESPONSIBILITIES

3.1. Compliance with Laws

You represent and warrant that your access to and use of the Services, including all Input you provide and any subsequent use, distribution, or publication of Output, will comply with all applicable international, federal, state, and local laws, regulations, statutes, and ordinances. This includes, but is not limited to, laws concerning data privacy, intellectual property, export controls, and sanctions. You are solely responsible for determining whether your intended use of the Services is lawful in your jurisdiction and for any specific context of deployment.

3.2. Account Security

You are solely and exclusively responsible for maintaining the confidentiality and security of your account credentials, API keys, and any other authentication mechanisms used to access the Services. You must not share your account credentials with any unauthorized third party. You are fully responsible for all activities that occur under your account, whether or not such activities are authorized by you. You agree to notify Iseer immediately at security@iseer.co of any suspected or actual unauthorized use of your account or any other breach of security. Iseer shall not be liable for any loss or damage arising from your failure to comply with this Section.

3.3. Responsibility for Content

You are solely responsible for the development, content, operation, maintenance, and use of all Input you provide to the Services. You represent and warrant that you have all necessary rights, licenses, and permissions to provide your Input to the Services and that your Input does not violate this AUP or any applicable law. Furthermore, you acknowledge the probabilistic and emergent nature of generative AI. The Services may produce Output that is inaccurate, incomplete, offensive, or does not reflect real people, places, or facts. You are solely responsible for conducting a thorough and independent evaluation of the accuracy, appropriateness, and safety of any Output before its use, reliance, or dissemination. Any use of or reliance on Output is at your own risk.

3.4. Requirement for Meaningful Human Oversight

For any application or use case that is not trivial in nature, and particularly for any use case that may have a legal, financial, professional, or otherwise material impact on any individual or entity, you must implement and maintain a process of meaningful human review of all Output before it is used, relied upon, or disseminated. The level of human oversight must be appropriate to the level of risk associated with the use case. The use of the Services to make fully automated, high-stakes decisions that produce legal or similarly significant effects concerning individuals, without an active and competent human in the loop to review and validate the decision, is strictly prohibited. This obligation reflects a core principle of responsible AI development and deployment, aligning with emerging regulatory standards and industry best practices that prioritize human accountability for AI systems.

SECTION 4: PROHIBITED USES OF THE SERVICES

Your use of the Services must be consistent with their intended purpose and the principles of safety, legality, and respect for the rights of others. The following is a non-exhaustive list of activities and content that are strictly prohibited. The prohibitions outlined herein are not arbitrary; they represent a codification of industry-wide best practices and a proactive alignment with the "red lines" being drawn by global policymakers and regulators, such as the "unacceptable risk" categories defined in the EU AI Act. By integrating these principles directly into our binding terms, Iseer establishes a clear, defensible posture on AI safety and ethics, operationalizing our commitment to responsible innovation.

4.1. Illegal, Harmful, and Fraudulent Activities

You shall not use, or facilitate the use of, the Services to generate, distribute, or promote any content or engage in any activity that is illegal, harmful, or fraudulent. Prohibited activities under this section include, but are not limited to:

Violation Of Law

Violation of Law: Any activity that violates any applicable international, federal, state, or local law, regulation, or judicial order.

Child Safety

Child Safety: The generation, promotion, or distribution of Child Sexual Abuse Material (CSAM) or any content that exploits, abuses, endangers, or otherwise harms minors. Iseer maintains a zero-tolerance policy for such content and will report any apparent instances to appropriate authorities, such as the National Center for Missing and Exploited Children (NCMEC).

Promotion Of Self Harm

Promotion of Self-Harm: Generating or promoting content that encourages, provides instructions for, or glorifies suicide, self-harm, or disordered eating.

Violence Terrorism And Hate Speech

Violence, Terrorism, and Hate Speech: Generating, promoting, or inciting violence, terrorism, or hate speech against any individual or group based on race, ethnicity, national origin, religion, caste, sexual orientation, gender, gender identity, serious disease or disability, or any other protected characteristic.

Weapons And Illicit Goods

Weapons and Illicit Goods: The design, development, procurement, manufacturing, or use of weapons, including conventional, nuclear, biological, or chemical weapons. This also includes facilitating the sale or creation of illegal drugs, explosives, or other illicit goods and services.

Fraud And Deception

Fraud and Deception: Engaging in any form of deceit, fraud, scams (such as phishing), or the generation of malware, viruses, or other malicious code.

Regulated Activities

Regulated Activities: Engaging in or promoting real-money gambling or providing tailored professional advice in regulated fields such as law or medicine without the direct involvement and oversight of a licensed professional.

4.2. Violation of Third-Party Rights and Privacy

You shall not use the Services in any manner that infringes upon, misappropriates, or otherwise violates the rights of any third party. Prohibited activities under this section include, but are not limited to:

Intellectual Property Infringement

Intellectual Property Infringement: Using the Services to generate content that infringes upon a third party's copyright, patent, trademark, trade secret, or other intellectual property rights. This includes submitting Input for which you do not hold the necessary rights or generating Output that constitutes a derivative work of copyrighted material without authorization.

Privacy Violations

Privacy Violations: Any attempt to compromise the privacy of others, including:

The creation, maintenance, or enrichment of facial recognition databases or other biometric databases for identification purposes without the explicit, informed consent of the data subjects.
The use of the Services for real-time or post-hoc remote biometric identification of individuals in publicly accessible spaces, except where explicitly permitted by law for narrowly defined law enforcement purposes and subject to strict legal process and safeguards.
The generation of a person's likeness, voice, or other biometric identifiers to create synthetic or deceptive content ("deepfakes") without their explicit consent, particularly in a manner that could confuse authenticity or cause harm.
The unauthorized aggregation, monitoring, profiling, or distribution of an individual's private information or Sensitive Personal Information.
The implementation of "social scoring" systems or any other form of automated classification of individuals based on their social behavior, personal characteristics, or inferred attributes.
The use of the Services to infer an individual's emotional state in workplace or educational settings, except for documented and consented-to medical or safety applications.

SECTION 5: HIGH-RISK USE CASES

5.1. General Prohibition and Indemnification

The Services are not designed, tested, intended, or authorized for use in High-Risk Use Cases without a separate, executed written agreement with Iseer that explicitly permits such use and which may include additional safeguards, compliance requirements, and liability provisions. Any use of the Services in a High-Risk Use Case without such an agreement is a material breach of this AUP and is undertaken at your sole and exclusive risk. You agree to indemnify, defend, and hold harmless Iseer and its affiliates, officers, directors, employees, and agents from and against any and all claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising from or in any way connected with your unauthorized use of the Services in a High-Risk Use Case. This clause establishes a stringent default prohibition, creating a contractual gateway for Iseer to impose stricter terms on customers who wish to operate in these sensitive domains.

5.2. Regulated and Sensitive Domains

Without limiting the generality of Section 5.1, the use of the Services in the following domains is strictly prohibited unless explicitly authorized by Iseer under a separate written agreement and subject to mandatory, competent human oversight. The following table provides a non-exhaustive list of such domains and the conditions under which use may be permissible. This framework is designed to provide clear, actionable guidance, warning users away from dangerous applications while signaling a potential path for responsible deployment to sophisticated enterprise customers who are prepared to engage directly with Iseer on enhanced safety and compliance protocols.

Domain	Prohibited Applications	Conditions for Use
Legal	Provision of legal advice; automated legal decision-making; unauthorized practice of law.	Requires Separate Agreement & Human Review by a licensed legal professional.
Medical	Unsupervised medical diagnosis, treatment advice, clinical practice, or use as a medical device.	Requires Separate Agreement & Human Review by a licensed medical professional.
Financial	Automated credit scoring; automated eligibility decisions for loans, insurance, or other financial services.	Requires Separate Agreement & Human Oversight; Compliance with applicable fair lending and consumer protection laws.
Employment	Automated decisions for hiring, promotion, termination, or performance management.	Requires Separate Agreement & Human Oversight; Documented bias audits; Compliance with applicable employment law.
Law Enforcement	Predictive policing, biometric surveillance, individual criminal risk assessment, or evaluation of evidence.	Generally Prohibited. Exceptions for administrative or analytical use require explicit written approval from Iseer and must not impact fundamental rights.
Critical Infrastructure	Operation, control, or monitoring of essential services (e.g., energy grids, transportation systems, water supply).	Strictly Prohibited.

SECTION 6: DATA, CONTENT, AND INTELLECTUAL PROPERTY

6.1. Ownership of Input

As between you and Iseer, you retain all ownership rights, title, and interest in and to the Input you provide to the Services, subject to the licenses granted herein. Iseer claims no ownership over your Input.

6.3. Ownership and Use of Output

As between you and Iseer, and to the fullest extent permitted by applicable law, you own all right, title, and interest in and to the Output generated and returned by the Services based on your Input. Subject to your compliance with this AUP, you may use the Output for any lawful purpose. You hereby acknowledge and agree that, due to the nature of machine learning and large language models, Output may not be unique across users. The Services may generate the same or similar Output for other users who provide similar or identical Input. Iseer's assignment of its rights in Output to you does not extend to the Output generated for other users or to any third-party content that may be included in the Output.

6.4. Use of User Content for Service Improvement (Model Training)

Iseer is committed to transparency regarding the use of User Content for the improvement of our Services, including the training of our underlying AI models. Our policies are bifurcated to provide distinct levels of data protection based on the User's service tier, a structure that provides enterprise-grade confidentiality for our business customers while establishing a clear, consent-based framework for our consumer users. This approach is critical to avoid ambiguity and build trust across our user base.

Enterprise & Business Users

For Enterprise and Business Tier Users: Iseer shall not use any User Content (whether Input or Output) originating from accounts designated as "Enterprise" or "Business" to train, fine-tune, or otherwise improve its AI models. User Content from these service tiers is processed exclusively for the purpose of providing the Services to you and is retained only as long as necessary for that purpose, as governed by the terms of your Master Agreement and any applicable Data Processing Addendum (DPA).

Individual & Consumer Users

For Individual and Consumer Tier Users: Unless you affirmatively opt out of this use through the controls provided in your account settings, you agree that Iseer may use your User Content to develop and improve the Services. This includes, but is not limited to, using your User Content as training data for the refinement and development of our AI models and related technologies. Where technically feasible and commercially reasonable, Iseer will take steps to de-identify or aggregate User Content before it is used for model training purposes. You may change your preference at any time via your account's privacy settings. An election to opt out will apply prospectively to all new User Content generated after the change is made.

SECTION 7: SECURITY AND VULNERABILITY DISCLOSURE

7.1. Iseer's Security Measures

Iseer is committed to protecting the security, confidentiality, and integrity of User Content. We implement and maintain a comprehensive information security program with administrative, physical, and technical safeguards that are commercially reasonable and consistent with industry standards. These measures include, but are not limited to, encryption of data at rest (e.g., AES-256) and in transit (e.g., TLS 1.2+), network security controls, and access control mechanisms. To provide independent assurance of our security posture, Iseer maintains compliance with and undergoes regular third-party audits against recognized security and privacy frameworks, including SOC 2 Type II (for the Security, Confidentiality, Availability, and Privacy Trust Services Criteria) and ISO/IEC 27001.

7.2. Coordinated Vulnerability Disclosure Policy

Iseer values the work of the independent security research community and is committed to a transparent and collaborative process for identifying and remediating security vulnerabilities. This policy outlines the terms for conducting good-faith security research on our Services.

Scope

Scope: This policy applies to security vulnerabilities discovered in Iseer's public-facing Services and APIs. It does not extend to third-party services or systems that integrate with Iseer.

Reporting

Reporting: If you believe you have discovered a security vulnerability, you must promptly and confidentially report it to our dedicated security team at security@iseer.co. Your report should include a detailed description of the vulnerability, its potential impact, and precise, reproducible steps or a proof-of-concept to allow us to validate and triage the finding.

Safe Harbor

Iseer will not initiate civil or criminal legal action against individuals who conduct and report security research in good faith and in full compliance with this policy. We consider research to be in "good faith" if it is conducted solely for the purpose of security testing and avoids:

Violating the privacy of any individual.
Disrupting or degrading the performance of the Services for other users.
Destroying, altering, or exfiltrating any data not your own.
Accessing or attempting to access data beyond what is necessary to demonstrate the vulnerability.

Frequently Asked Questions

What is Iseer's Acceptable Use Policy?

Our AUP establishes binding rules and conditions for using our synthetic intelligence services. It ensures safe, ethical, lawful, and responsible use of our AI systems while protecting user rights and system integrity.

What activities are prohibited under the AUP?

Prohibited activities include illegal or harmful content, child safety violations, violence and terrorism, fraud and deception, intellectual property infringement, privacy violations, deceptive behavior, and activities that compromise service security.

Can I use Iseer's services for high-risk applications?

High-risk use cases require a separate written agreement with Iseer. This includes legal advice, medical diagnosis, financial decisions, employment decisions, law enforcement applications, and critical infrastructure operations.

Who owns the content I create with Iseer's services?

You retain ownership of your Input and own the Output generated by our services. However, you grant Iseer necessary licenses to provide and improve our services, with different policies for enterprise vs. consumer users.

How does Iseer handle security vulnerabilities?

We have a coordinated vulnerability disclosure policy. Security researchers can report vulnerabilities to security@iseer.co with safe harbor protections for good-faith research. We commit to 90-day remediation windows.

What happens if I violate the AUP?

Violations may result in warnings, content removal, temporary suspension, or permanent account termination. We may also report illegal activities to law enforcement. Appeals processes are available for certain enforcement actions.

Does Iseer monitor my use of the services?

We reserve the right to monitor service use to detect policy violations and ensure security. This monitoring is conducted in accordance with our Privacy Policy using automated systems and human review.

How often is the AUP updated?

We may modify the AUP at any time and will provide notice of material changes. Your continued use of the services constitutes acceptance of any updates. It's your responsibility to review the policy periodically.

Questions About Our Acceptable Use Policy?

Contact our legal team for clarification on any AUP provisions or to discuss your specific use case requirements.

Contact Legal Team legal@iseer.co