Acceptable Use Policy

1. Overview

This Acceptable Use Policy ("AUP") governs how you may use the products, services, APIs, software, websites, and AI models provided by Nunmathi Technologies Pvt Ltd ("Nunmathi", "we", "us", or "our"), a company incorporated in Coimbatore, India (collectively, the "Services"). This AUP is incorporated by reference into, and forms an integral part of, our Terms of Service.

Our mission is to make powerful AI and industrial automation tools accessible to businesses and developers while ensuring those tools are used responsibly, ethically, and lawfully. This AUP sets out the boundaries of acceptable use and protects our users, our platform, third parties, and the broader public from harm.

This policy applies to all individuals and entities — whether individuals, companies, or automated systems — that access or use the Services, including through direct product access, APIs, white-label arrangements, reseller agreements, or any integration. By using the Services you agree to comply with this AUP in full. Ignorance of this policy is not a defence.

2. Prohibited Activities

The following activities are strictly prohibited on the Nunmathi platform. This list is not exhaustive; activities that share the character of the examples listed below may also be prohibited at Nunmathi's sole discretion. We reserve the right to determine, in our reasonable judgement, whether any use of the Services violates this policy.

• Using the Services for any purpose that is unlawful under applicable Indian, international, or local law.
• Circumventing, disabling, or otherwise interfering with security-related features of the Services.
• Reverse engineering, decompiling, or attempting to extract source code from any part of the Services.
• Using automated scripts, bots, or other means to access or interact with the Services in a way that places an unreasonable load on our infrastructure.
• Attempting to probe, scan, or test the vulnerability of any Nunmathi system or network without prior written authorisation from Nunmathi.
• Impersonating any person or entity, or misrepresenting your affiliation with any person or entity.
• Using the Services to facilitate or encourage others to engage in any activity prohibited by this AUP.
• Reselling or commercially exploiting access to the Services in any manner not expressly authorised in writing by Nunmathi.

3. Illegal Activities

You may not use the Services to engage in, facilitate, promote, or enable any activity that violates applicable law. This includes but is not limited to:

• Violations of the Information Technology Act, 2000 (India) and its associated rules and amendments.
• Financial crimes including money laundering, terrorist financing, tax evasion, insider trading, securities fraud, or the operation of unlicensed financial services.
• Drug trafficking — manufacturing, distributing, selling, or facilitating the sale of controlled substances.
• Human trafficking — recruiting, transporting, transferring, harbouring, or receiving persons by means of coercion, deception, or abuse of power for exploitation.
• Weapons — assisting in the unlawful manufacture, acquisition, modification, or distribution of firearms, explosives, or other weapons.
• Child sexual abuse material (CSAM) — generating, distributing, possessing, or facilitating access to any material that sexually exploits minors. This is an absolute prohibition with zero tolerance.
• Sanctions violations — conducting business with sanctioned individuals, entities, or jurisdictions under applicable Indian, UN, US OFAC, EU, or UK sanctions regimes.

We will promptly report credible evidence of illegal activity to appropriate law enforcement authorities and will cooperate fully with any resulting investigations.

4. Malware & Cyberattacks

You may not use the Services to create, distribute, deploy, or facilitate any malicious code or cyberattack. Prohibited activities include, without limitation:

• Creating, testing, refining, or deploying viruses, worms, Trojans, ransomware, spyware, adware, keyloggers, rootkits, or other malicious software.
• Conducting or assisting with distributed denial-of-service (DDoS) or denial-of-service (DoS) attacks against any host, service, or network.
• Exploiting vulnerabilities in computer systems, networks, or software without explicit written authorisation from the system owner.
• Generating phishing kits, exploit code, or attack toolkits — even under the guise of security research, unless a specific written exception has been agreed with Nunmathi.
• Conducting port scans, network mapping, or other reconnaissance activities against systems you do not own or have not been authorised to test.
• Interfering with or disrupting the integrity or performance of the Services or any third-party network or systems.

Authorised security researchers who wish to use the Services for legitimate penetration testing or security research activities must obtain prior written approval from Nunmathi and operate strictly within the scope defined in that approval.

5. Spam & Phishing

The Services may not be used to send unsolicited commercial communications or to operate phishing, smishing, vishing, or other social engineering campaigns. Specifically:

• Do not use the Services to send bulk unsolicited email, SMS, push notifications, or other messages to recipients who have not opted in.
• Do not generate fake or deceptive email headers, sender information, or message content designed to mislead recipients about the origin or nature of a communication.
• Do not create phishing pages, credential harvesting forms, or lure content designed to deceive users into disclosing sensitive information.
• Do not use the Services to generate voice scripts or chatbot flows designed to deceive users into believing they are communicating with a legitimate institution.
• Do not operate or assist in operating email or number spoofing services.
• Do not use the Services to build or expand spam lists, leads databases compiled without consent, or call lists in violation of applicable telemarketing regulations.

Legitimate email marketing and outreach is permitted provided it complies fully with applicable anti-spam law, including the Indian IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the US CAN-SPAM Act, the EU GDPR, and similar legislation in relevant jurisdictions.

6. Hate Speech & Harassment

Nunmathi is committed to maintaining an environment that is inclusive, respectful, and free from discrimination and harassment. You may not use the Services to:

• Generate, distribute, or promote content that incites hatred or violence against individuals or groups on the basis of race, ethnicity, caste, religion, nationality, gender, gender identity, sexual orientation, disability, age, or any other protected characteristic.
• Create content designed to dehumanise, degrade, or demean any individual or group.
• Stalk, threaten, bully, or harass any individual, including through the generation of threatening messages, doxxing content, or non-consensual intimate imagery.
• Coordinate or amplify harassment campaigns against individuals or organisations.
• Create content that promotes or glorifies terrorism, extremism, or mass violence.
• Generate disinformation or propaganda specifically designed to inflame communal, sectarian, or ethnic tensions.

Discussion of sensitive topics for educational, journalistic, research, counter-speech, or artistic purposes is generally permitted where content is clearly contextualised and does not itself constitute hate speech or harassment.

7. Adult & Harmful Content

The following categories of content are prohibited on all Nunmathi services regardless of account type, unless a specific written exception has been granted by Nunmathi for a lawfully operating adult platform operating under appropriate age-verification controls:

• Sexually explicit content involving minors in any form — this is an absolute prohibition.
• Non-consensual intimate imagery or "deepfake" pornography depicting real individuals without their verifiable consent.
• Detailed instructions for self-harm, suicide methods, or the acquisition of means to harm oneself or others.
• Content glorifying or providing instructions for acts of mass violence, terrorism, or genocide.
• Graphic violent content generated with the intent to shock, threaten, or traumatise specific individuals.

8. AI Misuse

You may not misuse Nunmathi's AI capabilities in ways that cause harm to individuals, communities, or the integrity of information ecosystems. Prohibited AI misuse includes:

• Generating synthetic media (deepfakes, voice clones, face swaps) of real individuals without their consent for deceptive or defamatory purposes.
• Using the AI to produce disinformation, fabricated news articles, or false scientific studies intended to deceive the public.
• Employing AI-generated content in academic, professional, or legal contexts where AI assistance is prohibited or must be disclosed, without making the required disclosure.
• Using the AI to make automated decisions that discriminate against individuals on the basis of protected characteristics in housing, employment, credit, or similar high-stakes domains.
• Deploying the AI to conduct psychological manipulation — e.g., exploiting cognitive biases, creating false urgency, or using deceptive persuasion techniques against users' interests.
• Using AI to generate weapons of mass destruction — biological, chemical, nuclear, or radiological — design information or production instructions.

9. Prompt Injection & Model Abuse

You may not attempt to subvert, circumvent, or abuse the safety systems embedded in Nunmathi's AI models. Specifically:

• Prompt injection — deliberately crafting inputs designed to override model instructions, extract hidden system prompts, or cause the model to behave contrary to its intended operation.
• Jailbreaking — using roleplay scenarios, hypothetical framings, encoding schemes, or adversarial inputs to bypass content policies and elicit prohibited outputs.
• Model extraction — systematically querying the model to replicate its outputs for the purpose of training a competing model or misappropriating our intellectual property.
• API abuse — making requests at volumes or patterns that constitute an unreasonable burden on our infrastructure, or that circumvent rate limits and access controls.
• Adversarial probing — systematically testing the model to find and publicly publish exploits without prior disclosure to Nunmathi under a responsible disclosure framework.
• Output laundering — using the model as an intermediary to generate prohibited content indirectly by disguising the true nature of a request through multi-step prompting.

10. Data Scraping

You may not use the Services to scrape, harvest, or extract data in ways that violate the rights of data subjects, third parties, or Nunmathi. Prohibited scraping activities include:

• Automated scraping of personal data from third-party websites or databases in violation of those sites' terms of service or applicable data protection law.
• Using the Services to compile personal information about individuals without a lawful basis under applicable data protection legislation.
• Building datasets of personal data through the systematic querying of our APIs without a data processing agreement in place.
• Scraping Nunmathi's own platform, documentation, or API responses for competitive intelligence or model training without prior written consent.
• Using the Services to bypass technical measures (such as CAPTCHAs or rate limits) on third-party platforms that prevent automated access.

Lawful data collection activities conducted in compliance with all applicable law, with appropriate consent or legitimate interest basis, and with respect for robots.txt exclusions are not prohibited by this section.

11. Fraud & Impersonation

You may not use the Services to deceive, defraud, or impersonate others. This includes:

• Creating fake identities, synthetic personas, or fraudulent accounts for any deceptive purpose.
• Impersonating Nunmathi, its employees, partners, or affiliates in any communication or content.
• Generating fake reviews, testimonials, ratings, or endorsements for products or services.
• Creating fraudulent invoices, contracts, legal documents, or financial instruments.
• Operating romance scams, investment scams, advance-fee fraud, or any other social engineering scheme intended to defraud victims.
• Spoofing the identity of trusted brands, government agencies, financial institutions, or other entities to deceive individuals.
• Using AI-generated voice or video to impersonate real individuals in the context of fraud or manipulation.

12. Copyright Violations

You are responsible for ensuring that your use of the Services does not infringe the intellectual property rights of third parties. You may not:

• Use the Services to reproduce, distribute, or create derivative works from copyrighted material without the rights holder's authorisation or a recognised legal exception (such as fair use, fair dealing, or education exemptions).
• Upload, process, or submit third-party copyrighted content to the Services in violation of the applicable licence terms.
• Use the Services to generate content that systematically replicates the protectable expression of copyrighted works.
• Circumvent technological protection measures (TPMs) or digital rights management (DRM) systems on copyrighted works.
• Facilitate software piracy, including generating licence key generators, serial number databases, or tools to bypass software activation.

Nunmathi will respond to valid notices of copyright infringement in accordance with applicable law. Repeat infringers will have their accounts terminated.

13. Enforcement & Consequences

In determining the appropriate enforcement action, Nunmathi will consider the severity and nature of the violation, whether it was intentional or negligent, the degree of harm caused, and any prior violations. Enforcement measures available to Nunmathi include, but are not limited to:

• Warnings — formal written notice that a violation has been detected and must cease immediately.
• Content removal — deletion or suppression of violating content generated through the Services.
• Feature restriction — limiting access to specific Services or features while an investigation is pending.
• Temporary suspension — suspension of account access for a defined period.
• Permanent termination — irreversible closure of the account with forfeiture of any remaining subscription value.
• Legal action — pursuit of civil or criminal remedies including injunctions, damages, and referral to law enforcement authorities.
• Reporting — mandatory disclosure to regulators, law enforcement, or competent authorities where required by law or where public safety is at risk.

Nunmathi is not obligated to disclose the specific reason for enforcement action in all cases, particularly where disclosure could compromise an ongoing investigation or the security of the platform.

14. Reporting Violations

We rely on our community of users to help maintain a safe and trustworthy platform. If you observe or become aware of a violation of this AUP — whether by another user, a third-party integration, or any other actor — we encourage you to report it to us promptly.

To report a violation, please email info@nunmathi.com with the subject line "AUP Violation Report". Your report should include, to the extent possible:

• A description of the violation and the harm or potential harm it causes.
• Any relevant evidence such as screenshots, URLs, API request identifiers, or timestamps.
• Your contact information so we can follow up if we need additional information.

Reports may be submitted anonymously; however, anonymous reports may be harder to action if we are unable to obtain clarifying information. All reports are reviewed by our Trust & Safety team. We will not retaliate against any user for making a good-faith report of a suspected AUP violation.

15. Contact

For questions about this Acceptable Use Policy, to seek clarification on whether a specific use case is permitted, or to report a violation, please contact:

• Company: Nunmathi Technologies Pvt Ltd
• Registered Office: Coimbatore, Tamil Nadu, India
• Email: info@nunmathi.com
• Subject line: Acceptable Use Policy Enquiry

We aim to respond to all AUP-related enquiries within three (3) business days. Urgent safety or security matters will be triaged and escalated within twenty-four (24) hours.