Use the platform responsibly.

Prohibited activities

Users must not use Rumbe AI to:

• —Violate applicable law or another person’s rights
• —Access accounts, systems, data, or tenants without authorization
• —Circumvent authentication, domain restrictions, quotas, or security controls
• —Upload malware, exploit code, or malicious attachments
• —Probe, scan, or test systems without written authorization
• —Interfere with service availability or impose unreasonable load
• —Harvest credentials, payment data, health data, or identity information unlawfully
• —Misrepresent AI as a human where disclosure is required
• —Generate fraud, impersonation, harassment, threats, or illegal discrimination
• —Infringe intellectual-property or privacy rights
• —Resell or expose provider credentials
• —Use the service to train competing models from protected platform output where prohibited by agreement

High-impact restrictions

Rumbe AI must not be the sole decision-maker for medical diagnosis or treatment, legal advice, financial advice, lending, insurance claims or coverage, benefits eligibility, employment, housing, education admission, public benefits, or safety-critical decisions.

Human review and appropriate professional judgment are required.

Sensitive data

Customers may submit sensitive information only when the use case is approved, the plan and providers are suitable, required contracts are in place, and the customer has a lawful basis.

Credentials, complete payment-card data, government secrets, and unsupported regulated information should not be placed in prompts or knowledge sources.

Security research

Good-faith testing requires prior written authorization unless Vovance Inc. publishes a separate vulnerability disclosure policy. Researchers must avoid privacy violations, service disruption, persistence, extortion, and access beyond the minimum needed to demonstrate an issue.

Enforcement

Vovance Inc. may investigate suspected misuse and restrict, suspend, or terminate access according to the customer agreement and law. Where practical, customers should receive notice and an opportunity to remedy non-urgent violations.

Reporting abuse

The final published policy should include an approved abuse-reporting email or form and the information needed for investigation.