Acceptable use policy

This Acceptable Use Policy (“AUP”) applies to all users of the Platform and forms part of the Platform Services Agreement (the “Agreement”). Any capitalised terms used in this AUP shall have the meanings defined below or in the Agreement or in the relevant additional documents that together form the Agreement.

1. Definitions

"Illegal Content" means content that infringes the rights of third parties, particularly intellectual property rights in the broad sense (e.g. copyright or trademark rights), or personality rights, or that constitutes a criminal offence (particularly in the areas of pornography, or the portrayal of violence, racism and hate speech).

2. Prohibition on Restricted Content

Users are prohibited from using the Platform to upload or create Illegal Content, including but not limited to:

2.1. Content that incites or promotes hate based on identity, or which is intended to harass, threaten, or bully an individual.

2.2. Content relating to illegal or dangerous substances or materials.

2.3. Content that is defamatory, obscene, abusive, invades an individual’s privacy, or is otherwise objectionable.

2.4. Content that infringes or misappropriates the intellectual property or proprietary rights of third parties.

2.5. Content that may, or may attempt to intercept, interfere with, or otherwise damage any systems, programs, or data.

3. Prohibition on Activities

Users are prohibited from using the Platform to perform or otherwise assist with any of the following prohibited activities.

3.1. The production of illegal goods, creation of falsified documents, exploitation of individuals, or generation and distribution of spam.

3.2. The creation or distribution of any form of malware, virus, trojan horse, worm, or other harmful software.

3.3. Providing legal, financial, or medical advice to end users, or using related outputs from the Platform without appropriate human intervention and review.

3.4. Inferring, or attempting to infer, sensitive information about an individual without their express consent, or otherwise attempting to violate the privacy of an individual.

3.5. The delivery or performance of services that rely on accurate, up-to-date information except where this information is uploaded by the user with the permission of any third-party rights holder where applicable.

3.6. Use any automated or programmatic method of requesting outputs or uploading documents that would place an unreasonable burden on the Platform or other users without the express written permission of Curvestone.

3.7. The submission of false or altered source documents, synthetic data, or deliberately misleading data to the Platform with the intention of manipulating outputs.

3.8. Any attempt to reverse engineer, probe, or extract the logic or methodology of any Platform workflow through repeated or systematic querying.

3.9. Any attempt to circumvent content filtering, prompt injection protections, or other AI safety controls implemented in the Platform.

3.10. Any attempt to manipulate the Platform into producing outputs that misrepresent the underlying data.

4. Account Restrictions

Users shall not undertake any of the following restricted actions without the prior written consent of Curvestone.

4.1. Intentionally bypass capabilities, restrictions, or other guardrails.

4.2. Attempt to circumvent any ban on usage through the use of a different account.

4.3. Attempt to falsify their usage of the Platform or permit access to the Platform to users who are not Authorised Users of the Customer.

4.4. Perform penetration testing or any other activity intended to deliberately attack the Platform or unreasonably impact on the available capacity of the Platform to the detriment of other users.

5. Regulated Sector Use

5.1. Where the Platform is used in connection with FCA-regulated activities, users must not: (i) represent any output of the Platform as constituting regulated advice or as satisfying any regulatory obligation without independent human review; (ii) rely on any output in connection with a lending decision without appropriate review by a suitably qualified individual; or (iii) represent to any person that use of the Platform substitutes for compliance with applicable FCA rules.

5.2. Compliance with SM&CR obligations, including the responsibilities set out in each user’s statement of responsibilities, remains solely with the relevant FCA-authorised firm and is not affected by use of the Platform.