Acceptable Use Policy

Clear rules prohibiting infrastructure attacks, prompt injection, automated scraping, credential abuse, and unlawful activities.

Audience: All users, API consumers, and workspace collaborators

Developer: Zambezi Digital

Official Policy Publication — Enforced Standards

This document is an active, binding operational policy published by Zambezi Digital governing the security, data privacy, and usage regulations of Kairo OS across all jurisdictions.

On this page

View All 16 Policies

1. Core Use Principles

Kairo is designed to empower legitimate business operations. You must use Kairo lawfully, respect the privacy and intellectual property of others, and ensure you have proper authority for all content uploaded to the platform.

Key takeaway: Use Kairo only for legitimate, lawful business operations.

2. Prohibited System Activities

You may NOT: • Access, probe, or tamper with another organization's workspace or tenant data. • Bypass authentication, role permissions, or Row-Level Security (RLS) policies. • Upload malware, viruses, exploit payloads, or corrupted documents. • Overload infrastructure, launch denial-of-service attacks, or evade rate limits. • Scrape platform data or use automated bots without authorization. • Share login credentials or permit unauthorized third-party access.

Key takeaway: Attacking infrastructure, evading permissions, or sharing credentials is strictly banned.

3. Prohibited AI & Model Exploitation

You must NOT: • Attempt prompt injection, jailbreaking, or delimiter breakout attacks against Ask Kairo. • Issue directives to extract system instructions, hidden prompts, or server credentials. • Instruct the AI model to generate malicious scripts, phishing content, or defamatory material. • Represent unverified AI outputs as certified professional advice in consequential decisions.

Key takeaway: Prompt injection, jailbreaking, and system extraction are strictly prohibited.

4. Abuse Reporting & Enforcement

We monitor rate velocity and security events. Violations may result in immediate warning, session revocation, workspace suspension, or permanent account termination. To report suspected abuse or security vulnerabilities, contact security@zambezidigital.agency or submit an abuse report via /legal/ip-abuse.

Key takeaway: Violations trigger immediate account action; abuse reporting is actively monitored.

Have questions about this policy?

Our legal and privacy desk is available for corporate inquiries.

Contact Legal Desk