Acceptable Use Policy

1. General Prohibitions

You may not use the Services to:

• Violate any applicable law or regulation, including securities laws, anti-money-laundering requirements, and sanctions or export-control rules.
• Facilitate market manipulation, insider trading, or the misuse of material non-public information.
• Infringe the intellectual property, privacy, or other rights of any person or entity.
• Engage in fraudulent, deceptive, or misleading conduct, including misrepresenting your identity or affiliation.

2. Security Violations

You may not:

• Probe, scan, or test the vulnerability of the Services, or breach any security or authentication measure, without our prior written authorization.
• Access, or attempt to access, data, accounts, or workspaces that do not belong to you.
• Upload or transmit malware, or introduce any code intended to disrupt, damage, or gain unauthorized access to any system or data.
• Launch denial-of-service attacks or otherwise interfere with the availability or performance of the Services.

If you discover a security vulnerability in the Services, please report it to us promptly at security@norric.ai and do not exploit it or disclose it publicly.

3. Service Integrity and Automated Access

You may not:

• Scrape, crawl, or use automated means to access the Services or extract data from them without our prior written consent.
• Circumvent rate limits, usage restrictions, or seat-based access controls.
• Share, sell, or transfer account credentials, or allow any person who is not an authorized user to access your account.
• Use the Services to develop, or assist a third party in developing, a competing product or service.

4. AI-Specific Restrictions

The Services include artificial-intelligence features. You may not:

• Attempt to extract, reconstruct, or reverse-engineer the models, system prompts, weights, or other non-public components underlying the Services, including through prompt injection or similar techniques.
• Use output from the Services to train, fine-tune, or improve any machine-learning model that competes with the Services.
• Attempt to bypass or defeat safety, content, or usage controls applied to AI features.

AI-generated output is provided for informational purposes only. It does not constitute financial, investment, tax, or legal advice, and you are responsible for applying independent professional judgment before relying on it in any investment, regulatory, or reporting context.

5. Customer Content Responsibilities

When you submit documents, data, or other content to the Services, you represent and warrant that:

• You have all rights, licenses, and permissions necessary to submit that content and to allow us to process it in order to provide the Services.
• You will not submit third-party confidential information unless you are authorized to do so.
• Where the content includes personal data, you have complied with the privacy and data-protection laws that apply to your collection and disclosure of that data.
• The content is not unlawful, defamatory, or malicious.

6. Monitoring and Enforcement

We are not obligated to monitor use of the Services, but we may investigate suspected violations of this AUP. Depending on the severity of a violation, we may issue a warning, restrict features, suspend access, or terminate accounts. Where a violation creates a risk of serious harm to the Services, our customers, or third parties, we may act immediately and without prior notice. We may also cooperate with law enforcement and regulators where required by law.

7. Reporting Violations

To report a suspected violation of this AUP, contact us at security@norric.ai. We review all reports and treat reporter identities as confidential to the extent permitted by law.

8. Changes to This Policy

We may update this AUP from time to time. If changes are material, we will provide notice on the Services or by email. Continued use of the Services after changes take effect constitutes acceptance of the revised AUP.