Acceptable Use Policy

This AUP applies to your use of the Services and to anyone you let access your account, including your employees, contractors, and end users. It is incorporated by reference into the Terms of Service and into any Master Services Agreement. If this AUP and the "PROHIBITED ACTIVITIES" section of the Terms of Service conflict, the stricter rule applies.

We may update this AUP from time to time. For material changes we will give you at least 30 days' notice, the same as the Terms of Service.

You may not use the Services to:

• Break any law or regulation that applies to you.
• Infringe someone else's intellectual property, privacy, or other legal rights.
• Build, store, or distribute malware, ransomware, or other harmful code.
• Harass, threaten, defraud, or otherwise harm another person.
• Support terrorism, human trafficking, or other serious harm to people.

Do not connect or process, through the Services:

• Data you do not have the right to access, use, or share.
• Health information regulated by HIPAA or payment card data, unless a separate signed agreement between you and us says otherwise.
• Special categories of personal data (such as data about health, sexual orientation, religion, or biometrics) or data about children, unless you have the legal basis and safeguards that data requires.
• Content that infringes another party's copyright, trademark, trade secret, or other rights.
• Malware or any file designed to damage or disrupt a system.

See the "OUR SERVICES" section of the Terms of Service for more on regulated data.

You may not:

• Attack, probe, or attempt to disrupt the Services or the systems they run on.
• Bypass authentication, plan limits, or any access control.
• Access another customer's workspace, account, or data without authorization.
• Scan for vulnerabilities or run a penetration test against the Services without our prior written permission. See "REPORTING ABUSE OR SECURITY ISSUES" below for how to report a vulnerability instead.
• Share, sell, or transfer your account credentials to anyone else.
• Interfere with another customer's pipelines, compute, or use of the Services.
• Reverse engineer the Services beyond what applicable law allows.

Each plan has limits on pipelines, data sources, data volume, and pipeline runs, described on our pricing page. You may not use multiple accounts or workspaces, or any other method, to get around those limits.

• Do not place automated load on the Services beyond ordinary use of the product.
• Use the BYOC agent and any compute it provisions only to run OptimaFlo workloads.
• Do not resell, white-label, or offer the Services as a service bureau to others without a written agreement with us that permits it.
• If you use our API, follow the documentation and its rate limits.

When you use the AI features (the Manager and the specialist AI roles, SQL generation, dashboard generation, and data-quality rule generation), you may not:

• Use them to produce malware, harassment, or content that breaks the law or infringes someone else's rights.
• Attempt prompt injection or other attacks against the platform, other customers, or the AI model providers through the AI features.
• Attempt to extract an AI model provider's underlying systems, weights, or training data.

AI output can be wrong. Do not rely on it, without qualified human review, for decisions that have legal or similarly significant effects on a person, such as employment, credit, housing, insurance, or medical decisions.

Content you submit to AI features must also comply with the usage policies of the AI model provider handling that request. The providers are listed in our Data Processing Agreement and at optimaflo.io/subprocessors.

• Do not use the Services to send spam.
• Only invite people to your organization or workspace who have agreed to receive that invitation.
• Do not use the Services for phishing or any other attempt to deceive someone into giving up information.

• Do not harass, threaten, or abuse our employees, contractors, or agents.
• Do not impersonate another person or misrepresent your identity or your affiliation with a company or organization.

You may not use the Services from a country or region subject to a US embargo, or if you are on a US government list of prohibited or restricted parties. You agree to comply with US export control and sanctions laws that apply to your use of the Services.

Where reasonably possible, we will give you notice and a chance to fix a violation of this AUP before taking further action. We may suspend or terminate access immediately, without notice, where needed to protect the security or integrity of the Services or other customers, as described in the "TERM AND TERMINATION" section of the Terms of Service. We may report illegal activity to law enforcement. Except where the law requires otherwise, we do not refund fees for a termination under this AUP.

To report abuse of the Services or a security vulnerability, email evan.rosa@optimaflo.io. See our Security page for how we handle vulnerability reports.

Questions about this AUP: email evan.rosa@optimaflo.io or write to OptimaFlo, LLC, 18310 Montgomery Village Ave, Gaithersburg, MD 20879, United States.