Acceptable Use Policy

Last updated: 10 October 2026

1. Scope

This Acceptable Use Policy applies where it is referenced by an Infocore website, hosted service, software platform, API, AI service, account, managed environment or customer agreement.

It is designed to protect Infocore, its customers, users, infrastructure and third parties from misuse.

2. General rule

You must use Infocore services lawfully, responsibly and in accordance with your agreement, applicable documentation and the rights of others.

You are responsible for activity performed through your users, accounts, credentials, integrations, agents, API keys and systems.

3. Prohibited illegal or harmful activity

You may not use Infocore services to:

• violate applicable law or regulation;
• facilitate fraud, deception, theft or unlawful financial activity;
• exploit, abuse or endanger minors;
• threaten, harass or unlawfully target individuals;
• promote or facilitate terrorism or violent criminal activity;
• distribute unlawful content;
• violate privacy, publicity or data-protection rights;
• infringe intellectual-property rights; or
• knowingly assist another person in prohibited activity.

4. Security abuse

You may not:

• gain or attempt unauthorised access to systems, accounts, credentials, networks or data;
• probe, scan or test systems without authorisation;
• bypass authentication, rate limits, usage limits or security controls;
• distribute malware, ransomware, credential-stealing tools or destructive code;
• operate botnets or command-and-control infrastructure;
• use services for phishing, credential harvesting or social engineering;
• perform denial-of-service or resource-exhaustion attacks;
• interfere with another user's access; or
• conceal abusive activity through Infocore infrastructure.

Authorised security testing must be expressly approved in writing.

5. Spam and unwanted communications

You may not use Infocore services to send or facilitate unsolicited communications in violation of applicable law or telecommunications rules.

Where consent is required for marketing, you are responsible for obtaining and recording it and providing a working opt-out mechanism.

6. Privacy, surveillance and biometrics

You may not use Infocore services to:

• unlawfully monitor, track or profile individuals;
• collect personal data without appropriate authority;
• perform covert or unauthorised biometric identification;
• process facial, fingerprint, voice or other biometric identifiers without the required legal basis, notices, approvals and safeguards;
• infer sensitive characteristics unlawfully; or
• disclose personal or confidential data without authority.

Customers using Infocore technology for surveillance, identity, access control, events or safety operations remain responsible for the lawfulness of their use unless a written agreement expressly allocates a different responsibility.

7. AI and agentic systems

You may not use AI or agentic functionality provided by Infocore to:

• bypass safety or access controls;
• instruct an agent to access systems or data you are not authorised to access;
• generate or deploy malware, phishing, credential theft or destructive actions;
• impersonate a person deceptively or create unlawful deepfakes;
• make fully automated legally significant decisions about individuals where prohibited or without required safeguards;
• provide regulated professional advice without required qualified human involvement;
• manipulate, deceive or exploit individuals unlawfully;
• use sensitive personal data in a way that violates applicable law or your agreement; or
• cause an agent to make purchases, transfers, deletions, external communications or other material actions outside the permissions configured for that agent.

8. Resource and platform abuse

You may not:

• use excessive resources in a way that degrades service for others;
• evade quotas, fair-use limits or billing;
• create automated accounts without permission;
• resell or sublicense services unless authorised;
• scrape or extract service data beyond permitted interfaces;
• use Infocore systems to create a competing hosted service by copying protected elements; or
• interfere with monitoring or audit mechanisms.

9. Customer content

You are responsible for content and data you submit to a service.

You must have the rights, permissions, notices and legal basis necessary for Infocore and its approved subprocessors to process that content as contemplated by the applicable agreement.

10. Investigation and enforcement

Infocore may investigate suspected violations and may take proportionate measures including:

• requesting corrective action;
• limiting features;
• blocking malicious traffic;
• suspending accounts or integrations;
• removing unlawful or prohibited content where applicable;
• preserving evidence;
• notifying the customer account owner; and
• cooperating with lawful authorities.

Where immediate action is reasonably necessary to protect systems, users or third parties, Infocore may act without advance notice where permitted by the applicable agreement and law.

11. Reporting

Suspected abuse:security@infocore.ai

Legal concerns:legal@infocore.ai

12. Changes

Infocore may update this Policy as services, risks or laws evolve. The current last-updated date will be displayed with the Policy.