Acceptable Use Policy

1. GENERAL USAGE RULES

1.1 Permitted Use.

You may use the Service solely for legitimate business purposes in accordance with this AUP, the Subscription Terms of Service, and all applicable laws and regulations. You are responsible for all activity on your account and for ensuring that all Users and Authorized Parties comply with these terms.

1.2 Compliance with Laws.

You shall not use the Service in any manner that violates any applicable local, state, national, or international law, regulation, or directive, including but not limited to laws relating to data protection, export control, sanctions, intellectual property, fraud, and consumer protection. This includes compliance with the laws of the Republic of Cyprus and the European Union.

1.3 Lawful Purpose.

You shall use the Service only for lawful purposes and in a manner that does not infringe the rights of others or restrict their use and enjoyment of the Service. Prohibited conduct includes harassment, bullying, stalking, intimidation, and threatening or abusive communication.

2. PROHIBITED USES

2.1 Illegal Activity.

You shall not use the Service in connection with any illegal activity, including but not limited to:

• fraud, forgery, or deception;
• money laundering, terrorist financing, or sanctions evasion;
• trafficking in drugs, weapons, or other contraband;
• blackmail, extortion, or coercion;
• any activity that violates anti-corruption laws or regulations.

2.2 Harmful Content.

You shall not upload, transmit, store, or distribute any content that is:

• obscene, defamatory, libelous, or slanderous;
• threatening, harassing, or inciting violence;
• sexually explicit or exploitative;
• hate speech or discriminatory based on protected characteristics;
• otherwise illegal or harmful.

2.3 Spam and Unsolicited Communications.

You shall not use the Service to send unsolicited emails, SMS messages, or other communications (spam). This includes mass mailings, chain letters, spamming, and phishing.

2.4 Malware and Security Threats.

You shall not upload, transmit, store, or distribute any malware, viruses, worms, Trojan horses, ransomware, spyware, adware, or other malicious code. You shall not attempt to disrupt, damage, or gain unauthorized access to the Service or its infrastructure.

2.5 Unauthorized Access and Hacking.

You shall not attempt to breach the security of the Service, access data belonging to third parties, or attempt to gain unauthorized access to accounts, systems, or networks. This includes but is not limited to:

• password cracking or brute force attacks;
• exploiting security vulnerabilities;
• attempting to bypass authentication or authorization mechanisms;
• accessing or using another user’s account without permission.

3. AI ASSISTANT – ACCEPTABLE USE

3.1 Permitted AI Uses.

You may use the AI Assistant integrated into the Service to:

• obtain recommendations, analysis, and insights regarding your data and business processes;
• generate internal reports, summaries, and documentation for your own use;
• automate routine business processes and workflows, provided such automation complies with applicable laws;
• receive assistance and guidance on using the Service effectively.

3.2 Prohibited High-Risk AI Uses.

You shall not use the AI Assistant for:

• high-risk use cases under the EU AI Act that are prohibited or require specific governance, including but not limited to: social scoring, real-time biometric identification for law enforcement, or manipulation of human behavior;
• making or recommending decisions that significantly affect individuals’ legal rights, employment, or access to essential services without appropriate human review and oversight;
• generating content designed to deceive or manipulate others;
• discriminatory profiling or targeting based on protected characteristics;
• creating content that violates intellectual property rights of third parties.

3.3 No Automated Decision-Making Without Human Oversight.

You shall not use the AI Assistant to make automated decisions that have a legal or similarly significant effect on individuals without appropriate human review, approval, and oversight. Where automated decision-making is used, you shall provide Data Subjects with information about the decision and the right to request human intervention.

3.4 No Competitor Data Feeding.

You shall not feed or input data derived from competitors, including but not limited to competitor screenshots, competitor products, competitor source code, or any other proprietary information of competitors, into the AI Assistant. You shall not use the AI Assistant to analyze, reverse engineer, or replicate competitor products or services.

3.5 Prohibited AI Content Generation.

You shall not use the AI Assistant to generate:

• content that violates laws, including but not limited to illegal content, hate speech, or discriminatory material;
• disinformation, misinformation, or fraudulent content;
• non-consensual intimate content or deepfakes;
• content that infringes intellectual property rights;
• malware, ransomware, or other malicious code;
• content designed to manipulate or deceive users.

3.6 Prohibited Input Data.

You shall not submit to the Service, or permit any User to submit to the Service, any of the following categories of data: (i) special categories of personal data within the meaning of Article 9 of the GDPR, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, or data concerning health, sex life, or sexual orientation; (ii) financial account credentials, payment card numbers, bank account numbers, or any data subject to the Payment Card Industry Data Security Standard (PCI DSS); (iii) government-issued identification numbers, including national identity numbers, social security numbers, passport numbers, or tax identification numbers; (iv) data subject to the Health Insurance Portability and Accountability Act (HIPAA) or equivalent health data protection legislation; or (v) data classified at any level under any governmental security classification scheme. Submission of such data constitutes a material breach of this AUP and the Subscription Terms of Service.

Clinical Data exception. Limbs (i) and (iv) above do not apply to Clinical Data submitted to a Tenant for which the Clinical Data Schedule, available at https://eu.peakspitz.com/clinical-data, has been executed and Aradyne has enabled the Clinical Layer, as provided in Sections 6.9 and 9.5 of the Subscription Terms of Service. The submission of such Clinical Data is governed by the Clinical Data Schedule, not by this Section 3.6. All other data within limbs (i) and (iv), and all data within limbs (ii), (iii), and (v), remain prohibited, and submitting Clinical Data before those conditions are met, or to any other Tenant, constitutes a material breach of this AUP and the Subscription Terms of Service.

4. REVERSE ENGINEERING AND INTELLECTUAL PROPERTY PROTECTION

4.1 Comprehensive Prohibition.

You shall not, and shall ensure that no User, Authorized Party, or third party acting on your behalf shall, under any circumstances, engage in any Reverse Engineering Activities of any kind with respect to the Platform, the Service, or the Documentation. This prohibition applies regardless of the method or tool used.

4.2 Prohibited Methods.

Reverse Engineering Activities specifically include, but are not limited to:

• decompiling, disassembling, or decoding the Platform, Service, or any component thereof;
• using debugging tools, network traffic analysers, packet sniffers, or HTTP/API interceptors to reverse engineer;
• using browser developer tools for purposes of reverse engineering;
• using web scrapers, crawlers, bots, or spiders to extract information;
• using automated scripts or browser extensions to circumvent access restrictions;
• attempting to discover or derive source code, object code, algorithms, business logic, system architecture, or trade secrets;
• conducting any other manual or automated analysis intended to reverse engineer.

4.3 AI Tools Prohibition.

You specifically shall not use any AI Tools, machine learning models, or generative AI systems to:

• analyse, interpret, extract, reproduce, or generate any content, code, design, layout, functionality, business logic, or other element from the Platform or Service;
• feed screenshots or visual representations of the Platform into any AI Tool;
• extract or reconstruct user interface designs, page layouts, or navigation flows;
• use design-to-code or screenshot-to-code tools to replicate the Platform;
• train, fine-tune, or provide training data to any machine learning model derived from the Platform.

4.4 No Competitive Use.

You shall not access the Service or Documentation in order to build, assist in building, or develop any commercially available product, service, or platform that competes with or serves as a substitute for the Platform, whether directly or indirectly.

4.5 No Feature or Functionality Copying.

You shall not copy, imitate, or adapt any features, functions, integrations, interfaces, graphics, layouts, workflows, or other elements of the Service or Documentation.

5. SCREENSHOTS AND VISUAL REPRODUCTIONS

5.1 Limited Permission.

You may take Screenshots solely for the following permitted purposes:

• internal business use within your organization for training, internal presentations, or internal communications;
• communicating with Aradyne’s support team for bug reports or assistance;
• documenting your own Subscriber Data for internal record-keeping;
• including in proposals or marketing materials that reference your use of the Service, provided such use does not disclose Aradyne’s Confidential Information.

5.2 Prohibited Screenshot Uses.

You shall not:

• use any Screenshot as input to any AI Tool for analysing, extracting, or reproducing any element of the Platform;
• use Screenshots to reverse engineer, reconstruct, or derive any aspect of the Platform’s code or architecture;
• create, develop, or assist in creating any competing product or service using Screenshots;
• systematically or repeatedly capture Screenshots with intent to comprehensively replicate the Platform.

5.3 Reference to Full Terms.

For a comprehensive understanding of Screenshot restrictions, please refer to Section 5 (Screenshots and Visual Reproductions) of the Subscription Terms of Service. The restrictions in this section are supplementary to and consistent with those full terms.

6. NETWORK AND SECURITY RESTRICTIONS

6.1 No Penetration Testing.

You shall not conduct any penetration testing, vulnerability assessments, security assessments, or similar security testing on the Service without Aradyne’s prior written consent. Any testing must be authorized in advance and conducted under documented terms.

6.2 No Interference.

You shall not interfere with, disrupt, damage, or degrade the performance, functionality, or security of the Service or its underlying infrastructure. This includes:

• performing denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks;
• flooding the Service with excessive requests;
• attempting to bypass rate limiting or access restrictions;
• introducing malicious code or intentionally destabilizing the Service.

7. MONITORING AND ENFORCEMENT RIGHTS

Aradyne reserves the right to:

• monitor your use of the Service to detect violations of this AUP;
• implement technical measures to prevent, detect, and enforce compliance with this AUP;
• access your account and Subscriber Data as necessary to investigate suspected violations;
• cooperate with law enforcement and regulatory authorities in investigating illegal activity;
• implement rate limiting, caching, or other technical measures to ensure fair use and system stability.

8. CONSEQUENCES OF VIOLATION

8.1 Progressive Enforcement.

Aradyne may take the following actions in response to violations of this AUP, in its sole discretion:

8.2 Warning.

For minor or first-time violations, Aradyne may issue a written warning to the Subscriber. The warning will specify the nature of the violation and the required corrective action.

8.3 Temporary Suspension.

For violations that pose a risk to the Service or other users, Aradyne may temporarily suspend your access to the Service while the violation is investigated and remedied. Suspension may be imposed with or without notice, depending on the severity of the violation.

8.4 Permanent Termination.

For serious, repeated, or material violations of this AUP, including but not limited to:

• illegal activity;
• reverse engineering or unauthorized access attempts;
• distributing malware or harmful content;
• violation of intellectual property rights;
• repeated violations after warning;
• any violation that poses a significant risk to the Service or other users;

Aradyne may terminate your account and subscription immediately, with or without notice. Upon termination, you will lose access to the Service and all Subscriber Data stored therein. Termination may be without refund, in accordance with the Subscription Terms of Service.

8.5 No Liability.

Aradyne shall not be liable for any consequences of enforcement actions, including loss of data, business interruption, or other damages. Any enforcement action is taken at Aradyne’s sole discretion and is final.

9. REPORTING VIOLATIONS

9.1 Self-Reporting.

If you discover that your account has been compromised or that another user is violating this AUP, you shall immediately notify Aradyne in writing at the contact details provided in the Subscription Terms of Service.

9.2 Aradyne Investigation.

Upon receipt of a report, Aradyne will investigate the violation and take appropriate action, which may include suspension or termination of the violating account.

9.3 Cooperation with Law Enforcement.

Aradyne will cooperate fully with law enforcement and regulatory authorities in investigating alleged violations of law. This may include providing access to logs, user data, or other information without notice to the Subscriber, to the extent permitted or required by law.

10. MODIFICATION OF THIS POLICY

Aradyne may modify this AUP at any time by providing at least thirty (30) days’ prior written notice to the Subscriber. Continued use of the Service following the effective date of modifications constitutes acceptance of the modified terms. If the Subscriber does not agree to any modification, the Subscriber may terminate its subscription in accordance with the Subscription Terms of Service before the modification takes effect.

11. GOVERNING LAW AND JURISDICTION

This AUP is governed by the laws of the Republic of Cyprus and the European Union. Both parties submit to the jurisdiction of the courts of Cyprus. In the event of any conflict between this AUP and the Subscription Terms of Service, the Subscription Terms of Service prevail, except that the more specific acceptable-use provision governs the particular conduct it addresses. Where the Clinical Data Schedule has been executed for a Subscriber, that Schedule, and not Section 3.6 of this AUP, governs the submission of Clinical Data to a Tenant for which Aradyne has enabled the Clinical Layer.