Acceptable Use Policy

1. General rule

Users must use Summa lawfully, responsibly and in a manner that does not harm people, systems, property or rights. This policy forms part of the Terms and the Business SaaS Terms.

2. Prohibited activity

Illegal and exploitative content

• Create, solicit, possess or distribute child sexual abuse or exploitation material.
• Facilitate human trafficking, terrorism, violent extremism or serious crime.
• Evade lawful sanctions or export controls.
• Unlawfully obtain, disclose or trade personal data, or infringe intellectual-property, privacy, confidentiality or publicity rights.

Cyber abuse

• Create or deploy malware, ransomware, credential theft, phishing or destructive code.
• Gain unauthorised access to systems or accounts, or conduct denial-of-service attacks.
• Exfiltrate secrets, exploit vulnerabilities without authorisation, or bypass Summa’s technical restrictions, authentication, metering or safety controls.

Good-faith, authorised defensive-security work is permitted where lawful, proportionate and limited to systems for which the user has permission.

Fraud, deception and harm

• Impersonate another person deceptively, generate fraudulent documents, or engage in scams, spam or manipulative commercial practices.
• Conceal that AI-generated content is artificial where disclosure is legally required.
• Facilitate violence or serious harm, encourage suicide or self-harm, harass, threaten or unlawfully discriminate.
• Identify, locate or monitor people without a lawful basis, or infer sensitive characteristics where unlawful or materially harmful.

3. High-impact decisions

You may not use AI output as the sole or determinative basis for decisions concerning employment or worker management, education admission or assessment, credit or financial eligibility, insurance, housing, healthcare, legal rights, public benefits, law enforcement, migration, or biometric categorisation or emotion recognition. Any approved use in such a context requires a separate written agreement, a legal assessment, human oversight, and appropriate risk controls.

4. Sensitive information and platform protection

• Do not submit passwords, private keys or authentication tokens, full payment-card data, classified information, or information you are legally prohibited from disclosing.
• Do not scrape or systematically extract the service, resell access without written permission, or share personal accounts.
• Do not create excessive automated traffic, probe internal services without authorisation, or interfere with rate limits or billing.

5. Enforcement and reporting

Depending on severity, Summa may warn the user, restrict a prompt or output, rate-limit use, preserve evidence, suspend or terminate access, notify a business administrator, report conduct where legally required, and cooperate with authorities. Where legally required, Summa will provide reasons and a complaint route.

Reports of illegal or prohibited content may be sent to info@summalabs.ai. Security vulnerabilities should be sent to security@summalabs.ai and should not include unnecessary personal data.