Acceptable Use Policy

This Acceptable Use Policy ("AUP") applies to all use of Root Digit products, APIs, professional services, and managed services (collectively, the "Services"). It is incorporated by reference into the Root Digit Terms of Service and any master services agreement, statement of work, or order form. By accessing or using the Services, you agree to comply with this AUP and to ensure that any users acting on your behalf do the same.

1. Lawful and ethical use

You will not use the Services to engage in conduct that is unlawful, fraudulent, deceptive, or harmful. This includes, without limitation:

• Violating any applicable law, regulation, court order, or industry standard, including export control, sanctions, anti-bribery, anti-money-laundering, and data protection laws;
• Engaging in fraud, false advertising, deceptive trade practices, or impersonation of any person or entity;
• Infringing the intellectual property, privacy, publicity, or other proprietary rights of any party;
• Harassing, threatening, defaming, or stalking any individual or group;
• Generating, distributing, or facilitating content that exploits, sexualises, or endangers minors.

2. Security and integrity

You will not compromise, or attempt to compromise, the security or integrity of the Services or the systems or data of any other party. Prohibited activities include:

• Unauthorised access to any account, system, network, or data;
• Probing, scanning, or testing the vulnerability of the Services without express written authorisation, except as part of an approved coordinated disclosure programme;
• Distributing or developing malware, ransomware, exploits, or other malicious code through the Services;
• Bypassing or attempting to bypass authentication, authorisation, rate limiting, or other security controls;
• Impersonating Root Digit, its employees, or its other customers in a manner intended to deceive.

3. Network and resource use

The Services are shared infrastructure. You will not engage in conduct that degrades performance or availability for other customers, including:

• Sending unsolicited communications (including but not limited to spam, phishing, and bulk messaging) in violation of applicable law;
• Operating proxies, anonymisers, or relays that facilitate unlawful activity;
• Conducting unauthorised cryptocurrency mining or unauthorised distributed computing using compute resources allocated for other purposes;
• Generating excessive load through automated traffic, scraping, denial-of-service activity, or attempts to exhaust resources;
• Circumventing rate limits, usage caps, or other quotas, including by creating multiple accounts.

4. Use of AI and automated systems

Where you use the Services to develop, deploy, or operate artificial intelligence, automation, or autonomous systems, you will:

• Comply with applicable AI and algorithmic accountability laws, including but not limited to the EU AI Act, sectoral regulation in financial services and healthcare, and equivalent national regimes;
• Not deploy systems for high-risk uses prohibited under applicable law (including, where applicable, social scoring of natural persons by public authorities, manipulative or exploitative systems, or untargeted scraping of biometric data);
• Not use the Services to generate content depicting non-consensual intimate imagery, child sexual abuse material, or content intended to defame or harass identifiable individuals;
• Implement appropriate human oversight, transparency, and disclosure for AI-generated outputs presented to end users;
• Not use the Services to generate or operate disinformation campaigns, election interference, or large-scale coordinated inauthentic behaviour.

5. Robotics and physical systems

Where you use the Services to develop, integrate, or operate physical systems including robots, autonomous vehicles, or industrial automation, you bear sole responsibility for the safety of those systems. You will comply with applicable safety standards, regulatory approvals, and operational risk controls. The Services are not warranted as suitable for safety-critical applications without appropriate engineering, testing, and validation by qualified personnel.

6. Content responsibility

You are responsible for all content, data, code, models, and other materials you submit to or generate through the Services, and for ensuring that you have all necessary rights to do so. Root Digit may, at its discretion and to the extent permitted by law, remove or refuse to process content that violates this AUP, applicable law, or third-party rights.

7. Reporting and enforcement

Suspected violations may be reported to [email protected]. Reports should include sufficient detail to allow investigation, including affected accounts, timestamps, and evidence of the violation where available.

Where Root Digit determines, in its reasonable judgement, that this AUP has been violated, it may take actions including warning notices, throttling of usage, suspension of access, termination of the agreement, preservation and disclosure of relevant information to law enforcement or regulatory authorities (where legally required), and pursuit of any other remedies available under the agreement or applicable law. Where time permits and the violation does not pose imminent risk, Root Digit will use reasonable efforts to provide notice and an opportunity to remedy.

8. Updates to this policy

Root Digit may update this AUP from time to time to reflect changes in our Services, the legal and regulatory environment, or industry practice. Material updates will be communicated through the customer portal or by email. Continued use of the Services after the effective date of an update constitutes acceptance of the updated AUP.

9. Contact

Questions about this AUP can be directed to [email protected]. Suspected abuse should be reported to [email protected]. Coordinated security disclosures are handled through our security disclosure programme.