Acceptable Use Policy

Effective Date: November 11, 2026

Last Updated: November 11, 2026

This Acceptable Use Policy ("Policy") sets out what you may not do with the services of Terramind.com, Inc. ("Terramind," "we," "us," "our"). It is part of our Platform Service Terms (the "Terms"), which incorporate it in Section 4.2. Words with a capital letter that this Policy does not define, such as "Services" and "User Content," mean what they mean in the Terms. Breaking this Policy is a material breach of the Terms.

We wrote this Policy in plain English so that you can tell in advance what is allowed. It does not list every harmful thing a person could do. If something is not named here but is clearly abusive, unlawful or dangerous to other people, assume it is not allowed.

1. Who and What This Policy Covers

This Policy applies to every Terramind service, including:

• Nucleus, the desktop application, including its agents, cloud runs, Studio and Science modes;
• Terramind Spaces, including Scale, its email, social publishing, advertising and analytics features;
• Studio, for image, video, voice, music and 3D generation;
• Halo by Terramind, the iPhone app;
• Terramind Sites, which publishes sites, apps, pages, files and media to addresses under terramind.io (including share.terramind.io) and to custom domains you connect;
• Short links on terramind.link and tmnd.link; and
• The Terramind API and any key, SDK or integration that uses it.

It applies to you, to everyone in your organization who uses your account, and to anything that acts for you, such as an agent, an automation, a scheduled run or a script that calls the API. You are responsible for what they do. It applies to everything you put into the Services (prompts, files, data and connected accounts) and to everything you produce or publish with them, whether that content is public, unlisted, private or shared only with your team.

2. Illegal Content and Activity

Do not use the Services to break the law or to help anyone else break it. That includes the laws of the place where you are, the places where the people you reach are, and the United States. In particular, do not use the Services to:

• commit or promote fraud, scams, pyramid schemes, money laundering or the financing of terrorism;
• sell or facilitate the sale of illegal drugs, weapons, counterfeit goods, stolen data, stolen accounts or other unlawful goods and services;
• support human trafficking, sexual exploitation or forced labor;
• promote or support terrorism or violent extremist organizations;
• evade sanctions or export controls, or provide the Services to anyone on a government sanctions list; or
• offer regulated services, such as gambling, financial, legal or medical services, without the licenses and disclosures the law requires.

3. Child Sexual Abuse Material

We have zero tolerance for child sexual abuse material (CSAM) and for any content that sexualizes minors. Do not create, upload, store, generate, request, publish, link to or share it in any form, whether it is real, drawn, altered or generated by AI. Do not use the Services to groom, solicit or exploit a minor.

When we find or are told about apparent CSAM, we remove it, preserve what the law requires us to preserve, report it to the National Center for Missing & Exploited Children (NCMEC), and permanently close every account involved. We do this without warning, and we do not restore the content or the account.

4. Harassment, Hate, and Violent Threats

Do not use the Services to:

• threaten, intimidate, stalk or bully anyone, or encourage others to;
• attack or demean people because of race, ethnicity, national origin, caste, religion, disability, disease, age, sex, gender identity or sexual orientation;
• threaten or incite violence against a person or group, or glorify a violent attack in a way that encourages more of them;
• encourage or give instructions for suicide, self-harm or eating disorders; or
• publish graphic violence or gore meant to shock or harass.

News reporting, research, education, art and counter-speech that discuss these subjects are allowed, provided they do not themselves harass, threaten or incite.

5. Intellectual Property

Do not use the Services to infringe copyrights, trademarks, patents, trade secrets, publicity rights or other intellectual property. Do not publish, distribute or generate pirated software, films, music, books or other works, offer tools to bypass copy protection, or use another party's trademark in a way likely to confuse people about who you are. You must have the rights to everything you upload, generate and publish, including any names, logos and domains it uses.

If you believe content on the Services infringes your copyright, follow the notice process in Section 7 of the Terms (Copyright Complaints (DMCA)). We close the accounts of repeat infringers as described there.

6. Phishing, Credential Harvesting, and Impersonation

Do not use the Services to:

• create a page, message, email or link designed to trick people into giving up passwords, one-time codes, payment card details, bank details, recovery or seed phrases, or other personal or account information;
• collect sign-in credentials for any service you do not operate, or send credentials people enter to a chat bot, webhook or other third party;
• impersonate a person, brand, company, organization or government body, including through a name, domain, logo, design, email address or social account likely to be mistaken for theirs; or
• hide or misstate where a link leads, or who is really behind a site, message or account, in order to deceive.

Parody, commentary and fan work are allowed when it is obvious to an ordinary person that they are not the real thing.

7. Malware, Unwanted Software, and Exploits

Do not use the Services to create, host, distribute or control:

• viruses, worms, ransomware, spyware, trojans, keyloggers, botnet clients or other malicious code;
• software that is deceptive, installs without informed consent, is hard to remove, or behaves in ways a user would not expect;
• command-and-control servers, drive-by downloads or exploit kits; or
• working exploits for vulnerabilities in systems you are not authorized to test, or that are meant to be used against people who have not agreed to it.

Defensive security work, such as writing detection rules, analyzing samples in a controlled environment, and testing systems you own or have written permission to test, is allowed provided nothing harmful is published or distributed through the Services.

8. Spam and Unsolicited Messaging

Spaces lets you send email, publish to social platforms, reply to comments and share short links, much of it through Scale and often at volume. Do not use those features, or any other part of the Services, to:

• send bulk or commercial email, messages or direct messages to people who have not agreed to receive them, or to lists you bought, rented, scraped or otherwise collected without consent;
• send email without an accurate sender, a working way to unsubscribe, and the other information the law requires, or keep emailing people who have unsubscribed;
• break the rules of anti-spam and electronic-marketing laws, such as CAN-SPAM, CASL and the ePrivacy rules in the EU and UK;
• post repetitive, misleading or unwanted content, comments or replies across social platforms, or use short links to disguise spam;
• fake engagement, such as buying or generating followers, likes, reviews or comments, or running networks of fake or coordinated accounts; or
• break the rules of any platform you publish to through a connected account, as described in Section 4.4 of the Terms.

9. Security Abuse and Circumventing Limits

Do not:

• probe, scan or test the vulnerability of the Services, or of any other system or network, without authorization; to test the Services you need our prior written consent, as Section 4.3 of the Terms says;
• use the Services to attack anyone, including through denial-of-service attacks, traffic flooding, brute-forcing passwords or credential stuffing;
• break or get around authentication, access controls, sandboxes or isolation between customers;
• access another person's account, data or published content without their permission;
• get around usage limits, rate limits, plan limits, model or content safeguards, or blocks we have placed on you, for example by opening multiple accounts or rotating IP addresses or API keys;
• get around billing, for example by creating accounts to reuse free trials or credits, using a payment method you are not authorized to use, filing chargebacks for charges you authorized, or reselling or sharing access in a way the Terms do not allow; or
• interfere with the Services or other customers' use of them, including by overloading them on purpose.

If you find a vulnerability in Terramind, report it to security@terramind.com and do not use or disclose it until we have had a reasonable chance to fix it.

10. Misuse of AI

The Services give you access to AI models that generate text, code, images, video, voice, music and 3D content. Do not use them to generate, or try to generate:

• child sexual abuse material, or any sexual content involving a minor (see Section 3);
• non-consensual intimate imagery: sexual or nude images, video or audio of a real person made or shared without that person's consent, including fake or altered ones;
• deceptive deepfakes of real people: realistic images, video or audio showing a real person saying or doing something they did not, made or shared in a way likely to deceive, including to defraud, defame, harass, or mislead voters about an election;
• a clone of a real person's voice or likeness without their permission;
• content that meaningfully helps anyone develop, produce, acquire or use biological, chemical, nuclear or radiological weapons, or any other weapon capable of mass casualties; or
• any other content this Policy prohibits.

Also, do not:

• try to defeat the safety measures of Terramind or of the model providers we work with, for example through jailbreaks or prompt injection aimed at producing prohibited content;
• use AI to make decisions with legal or similarly significant effects on people, such as about credit, employment, housing, insurance or access to public services, without the human review and disclosures the law requires, or for any use the law prohibits or treats as high risk without meeting its requirements (see Section 4.3 of the Terms); or
• present AI-generated content as human-made, or as a real record of events, where doing so is unlawful or deceives people in a way that harms them.

When you choose a model from a third-party provider, that provider's usage policies also apply to what you send it.

11. Privacy Violations

Do not use the Services to:

• dox anyone: publish or threaten to publish a person's home address, phone number, identity documents, financial details or other private information in order to expose, harass or endanger them;
• collect, use, share or sell personal data without a lawful basis, the notices and consents the law requires, or in breach of the terms under which you obtained it;
• process sensitive data, such as health, biometric, financial, precise-location or children's data, unless the law allows it and you meet its extra requirements;
• track, monitor or surveil a person secretly, or build profiles of people for stalking or discrimination; or
• use a connected account (for example email, calendar or social accounts) to reach data you are not authorized to access.

If a site or app you publish collects information from its visitors, you decide what it collects and why, and you are responsible for the notices, consents and other obligations that come with that, as Section 15.2 of the Terms explains.

12. Terramind Sites and Short Links

Terramind Sites and short links put what you make on the public web, so they carry extra rules. These are in addition to Section 15 of the Terms (Terramind Sites), which also lists what Terramind Sites may not be used for, and to the rest of this Policy. Do not use Terramind Sites or short links to:

• Host files or bandwidth: use Terramind Sites as storage, a content delivery network, or a download or media host for files that are not part of a site you publish, such as files served to other services, apps or websites;
• Mine cryptocurrency: run cryptocurrency mining, in your visitors' browsers or anywhere else, or any other workload unrelated to serving your site;
• Run proxies: run an open proxy, VPN, tunnel, relay or anonymizer, or forward traffic to or for other services;
• Impersonate a brand: publish a site, or point a link at one, that is designed to look like a brand, company, organization or government body that you do not represent, including through its name, address, logo or design;
• Hide what a page is: show reviewers or automated checks different content from what visitors see, or chain redirects and short links to hide where a link leads; or
• Use a domain you have no right to: connect a custom domain you do not own or are not authorized to use.

These rules apply to published content whether it is public, unlisted or shared only with your team or with specific people. As Section 15.4 of the Terms describes, we may check what you publish before or after it goes live and may hold a publish for review.

13. Automated Access and Scraping

Agents, automations and the API are part of how the Services are meant to be used. Within that:

• use the API and documented interfaces for automated access to the Services, and stay within the rate limits and usage limits we publish or tell you about;
• do not crawl, scrape or bulk-download the Services, or other customers' published sites and links, in a way that loads them beyond normal use, gets around access controls, or collects data in breach of this Policy (see the Data Scraping restriction in Section 4.3 of the Terms);
• do not create accounts, or sign up for trials, by automated means;
• when the Services browse or fetch the web for you, do not direct them to get around paywalls, CAPTCHAs, logins or other access controls, or to collect content or personal data in breach of the law or a website's terms; and
• do not use the Services or their outputs to build a competing model, as Section 4.3 of the Terms prohibits.

14. Enforcement

If we reasonably believe you have broken this Policy, or that content or activity on your account does, we may, with or without notice:

• remove, disable or block access to content, sites or links;
• hold a publish for review, or take down a site, link or custom domain, as Section 15.4 of the Terms describes;
• limit features, lower usage limits, revoke API keys or disconnect connected accounts;
• suspend your account; or
• terminate your account under Section 8 of the Terms.

We choose our response according to how serious and how deliberate the violation is, and how much harm it causes or risks. Phishing, malware, CSAM and threats of violence are acted on at once, usually without notice. We may decline to tell you why we acted where telling you could help someone evade our checks or where the law does not allow it.

We cooperate with law enforcement and respond to valid legal process. We may preserve and disclose information about an account and its content where the law requires or allows it, as described in our Privacy Policy, and we may tell affected people, platforms, registrars or other providers about abuse so that they can protect themselves.

If you think we made a mistake, email legal@terramind.com with the account, site or link involved and why you believe it does not break this Policy. We will review it. Section 15.4 of the Terms explains what happens to taken-down content on Terramind Sites.

15. Reporting Abuse

• Terramind Sites and short links: report a site, app, page or short link at terramind.com/legal/report, or email abuse@terramind.com. A short link on terramind.link or tmnd.link can also be reported at terramind.link/report.
• Copyright: send notices to our Designated Agent as described in Section 7 of the Terms.
• Security vulnerabilities in Terramind: email security@terramind.com.
• Everything else: email legal@terramind.com.

If you come across child sexual abuse material, report it to us and also to NCMEC's CyberTipline at report.cybertip.org. Do not download, copy or forward the material. How we handle the information in a report is described in the Terramind Sites section of our Privacy Policy. We do not tell the owner of a site or link who reported it.

16. Changes to This Policy

We may update this Policy as the Services, the law and the ways people misuse them change. The "Last Updated" date at the top shows when it last changed. We will give notice of material changes in the same way as for changes to the Terms. By continuing to use the Services after a change takes effect, you accept the updated Policy.

Questions about this Policy can be sent to legal@terramind.com.