Acceptable Use Policy

Last Updated: June 26, 2026

This Acceptable Use Policy (the "Policy" or "AUP") governs use of the websites, products, software, applications, APIs, documentation, support services, and related services provided by Spherium.ai LLC ("Spherium.ai," "Spherium," "we," "our," or "us").

This Policy is incorporated into Spherium.ai's Terms of Service. Capitalized terms not defined in this Policy have the meanings given in the Terms of Service.

Customer is responsible for ensuring that all Users comply with this Policy.

1. Purpose

Spherium.ai provides an Enterprise AI Gateway and Collaboration Platform designed to help organizations use AI through approved access paths, workspaces, routing, rules, reporting, and audit visibility.

This Policy is intended to protect Spherium.ai, our customers, Users, AI Model Providers, Third-Party Services, and the public from misuse of the Services.

Customer and Users may not use the Services in a way that violates this Policy, applicable law, third-party rights, AI Model Provider policies, or the Documentation.

2. General Prohibited Conduct

Customer and Users may not use the Services to:

• Violate applicable laws, regulations, or legal rights;
• Infringe, misappropriate, or violate intellectual property, privacy, publicity, confidentiality, or other rights;
• Engage in fraudulent, deceptive, misleading, or unlawful activity;
• Upload, transmit, or distribute malware, ransomware, spyware, viruses, worms, or harmful code;
• Interfere with, disrupt, degrade, or overload the Services;
• Attempt to gain unauthorized access to the Services, accounts, systems, networks, APIs, or data;
• Bypass, disable, or circumvent security, access controls, usage limits, rate limits, routing rules, or platform restrictions;
• Probe, scan, penetration test, or vulnerability test the Services without Spherium.ai's prior written authorization;
• Use the Services to generate, facilitate, or distribute harmful, unlawful, or abusive content;
• Use the Services to harass, threaten, abuse, defame, or harm others;
• Misrepresent identity, affiliation, source, or authority;
• Use the Services to send spam, phishing, unsolicited bulk messages, or deceptive communications;
• Scrape, harvest, or collect data except as expressly permitted;
• Reverse engineer, decompile, disassemble, decode, copy, scrape, extract, or otherwise attempt to discover the source code, object code, architecture, structure, algorithms, routing logic, rules logic, security controls, prompts, workflows, or underlying technology of the Services;
• Use the Services, Documentation, APIs, outputs, interfaces, screenshots, performance information, or system behavior to build, train, benchmark, or improve a competing product or service without Spherium.ai's prior written consent;
• Resell, sublicense, rent, lease, or provide unauthorized third-party access to the Services;
• Use the Services in a manner that could damage Spherium.ai's reputation, infrastructure, customers, providers, or business operations.

3. AI-Specific Prohibited Uses

Customer and Users may not use the Services or AI Model Providers accessed through the Services to:

• Generate or facilitate unlawful instructions, conduct, or transactions;
• Generate malware, exploit code, credential theft tools, phishing kits, or other harmful cyber content;
• Conduct unauthorized cyber operations;
• Evade security tools, abuse detection, provider restrictions, or platform controls;
• Impersonate individuals or organizations in a deceptive or harmful manner;
• Generate deceptive, fraudulent, or manipulative content, including scams or social engineering;
• Create or distribute non-consensual intimate content;
• Generate content that promotes violence, exploitation, or abuse;
• Facilitate human trafficking, child exploitation, terrorism, or violent extremism;
• Generate content intended to unlawfully discriminate, deny rights, or make prohibited eligibility decisions;
• Make final decisions in high-impact areas without appropriate human review, legal authority, and safeguards;
• Generate medical, legal, financial, employment, housing, credit, insurance, law-enforcement, or similarly sensitive advice or determinations without qualified human review and compliance with applicable law;
• Use AI outputs as the sole basis for decisions that materially affect an individual's rights, opportunities, safety, finances, employment, education, healthcare, housing, or legal status;
• Violate AI Model Provider usage policies or safety requirements.

4. Customer Data Responsibilities

Customer is responsible for Customer Data submitted to, uploaded to, processed through, or generated through the Services.

Customer may not submit Customer Data unless Customer has all rights, permissions, consents, notices, and legal bases necessary for such submission and processing.

Customer is responsible for determining whether particular data is appropriate for use with the Services, selected AI Model Providers, selected workspaces, routing configurations, integrations, and workflows.

Customer should not submit information to the Services in a manner that violates applicable law, Customer policies, third-party rights, confidentiality obligations, or contractual restrictions.

Customer is responsible for reviewing and validating AI outputs before relying on them.

5. Security Responsibilities

Customer and Users must:

• Keep credentials, API keys, access tokens, and authentication methods secure;
• Use reasonable access controls and administrative practices;
• Promptly remove access for Users who no longer require access;
• Promptly notify Spherium.ai of suspected unauthorized access or credential compromise;
• Use the Services in accordance with Documentation and security guidance;
• Ensure integrations and connected systems are configured securely.

Customer and Users may not:

• Share accounts except as expressly permitted;
• Share API keys with unauthorized parties;
• Attempt to access another customer's tenant, workspace, account, or data;
• Attempt to bypass authentication, authorization, routing, rules, logs, or platform controls;
• Use the Services to test, attack, scan, or disrupt systems without authorization.

6. API and Integration Use

Customer may use Spherium.ai APIs and integrations only as permitted by the applicable Terms, Order Form, Documentation, and technical limits.

Customer may not:

• Use APIs to bypass platform controls, billing, usage limits, or access restrictions;
• Interfere with the availability, integrity, or performance of the Services;
• Send excessive, abusive, or fraudulent traffic;
• Use automated systems in a manner that disrupts the Services;
• Use integrations in violation of third-party terms;
• Use API access to build a competing service, copy platform functionality, or extract non-public platform information;
• Circumvent rate limits, token limits, routing restrictions, or other technical measures.

Spherium.ai may enforce rate limits, usage limits, routing controls, and technical restrictions to protect the Services.

7. Regulated and High-Risk Uses

Unless expressly authorized in writing by Spherium.ai, Customer may not use the Services for activities where failure or inaccurate AI output could reasonably be expected to result in death, personal injury, serious property damage, unlawful discrimination, denial of critical services, or significant legal or financial harm.

Examples may include:

• Emergency services;
• Critical infrastructure control;
• Medical diagnosis or treatment decisions without qualified professional review;
• Legal advice or legal determinations without qualified professional review;
• Financial, credit, lending, insurance, employment, housing, education, or benefits determinations without required safeguards;
• Law-enforcement or surveillance decisions without legal authority and appropriate safeguards;
• Fully automated decisions that materially affect individual rights or opportunities without required human review.

Customer is responsible for determining whether its use of the Services is subject to industry-specific laws, regulations, professional obligations, or internal policies.

8. Content and Communication Restrictions

Customer and Users may not use the Services to generate, upload, transmit, or distribute content that:

• Is unlawful, fraudulent, deceptive, defamatory, or harmful;
• Infringes or misappropriates third-party rights;
• Contains malware or harmful code;
• Promotes violence, exploitation, or abuse;
• Harasses, threatens, or targets individuals or groups;
• Is intended to deceive recipients about source, authorship, or authenticity;
• Violates confidentiality, privacy, data protection, or contractual obligations;
• Violates AI Model Provider policies.

This Policy does not require Spherium.ai to monitor Customer Data. Customer remains responsible for Customer Data and use of the Services by its Users.

9. Advertising, Marketing, and Outreach Use

Customer may not use the Services to send spam, unsolicited bulk messages, deceptive communications, phishing attempts, or unlawful marketing communications.

Customer is responsible for complying with applicable email, telemarketing, advertising, privacy, and consumer-protection laws, including consent, unsubscribe, disclosure, and recordkeeping requirements.

10. Model Provider Policies

Use of AI Model Providers through the Services may be subject to provider-specific usage policies, safety rules, rate limits, terms, and technical limitations.

Customer and Users must comply with applicable AI Model Provider policies when using models through the Services.

Spherium.ai may suspend, block, route, restrict, or reject requests where Spherium.ai reasonably believes the use may violate provider policies, applicable law, this Policy, or platform safety requirements.

11. Monitoring and Enforcement

Spherium.ai may investigate suspected violations of this Policy.

Spherium.ai may take action it reasonably determines necessary to protect the Services, customers, Users, Third-Party Services, AI Model Providers, or the public. Actions may include:

• Warning Customer;
• Requesting corrective action;
• Removing or disabling access to content or workflows where technically feasible;
• Limiting, throttling, or blocking requests;
• Suspending accounts, Users, API keys, integrations, workspaces, or tenant access;
• Notifying AI Model Providers or Third-Party Services where appropriate;
• Reporting unlawful activity where required or appropriate;
• Terminating access in accordance with the Terms of Service.

Where reasonable, Spherium.ai will provide notice and an opportunity to cure. Spherium.ai may act immediately without prior notice where necessary to address urgent security, legal, operational, provider, or platform-integrity concerns.

12. Reporting Violations

Suspected violations of this Policy may be reported to:

support@spherium.ai

Reports should include a description of the suspected violation and any relevant details that may help Spherium.ai investigate.

13. Changes to This Policy

Spherium.ai may update this Policy from time to time.

If changes are material, Spherium.ai will provide notice through the Services, website, email, or other reasonable means.

Continued use of the Services after the effective date of an updated Policy constitutes acceptance of the updated Policy.