Acceptable Use Policy

Effective date: July 19, 2026

This Acceptable Use Policy forms part of Xpitro's commercial terms and governs lawful business use of the service.

Prohibited Use

• violating applicable law or regulation
• infringing third-party intellectual property, confidentiality, or privacy rights
• uploading, distributing, or storing malware or malicious code
• probing, scanning, attacking, or attempting to bypass platform security without explicit authorisation
• interfering with platform performance or other customers' use
• impersonating another person or organisation
• using the service for fraudulent, deceptive, abusive, or harmful conduct
• reverse engineering the service except where non-waivable law permits it
• scraping, harvesting, or bulk extracting content or metadata without permission
• using AI-assisted outputs as if they were definitive legal, regulatory, or professional advice without human review

Customer Responsibility

Customers remain responsible for managing authorised users, configuring permissions appropriately, ensuring customer content is lawful and controlled, and reviewing their own downstream use of exports, reports, workflows, and AI outputs.

Security Cooperation

Customers must cooperate reasonably with Xpitro where there is a suspected account compromise, a material abuse pattern, a security investigation, or a legal or regulatory issue affecting service use.

Enforcement And Reporting

Xpitro may investigate suspected misuse and may warn the customer, restrict features, suspend accounts or tenants, block abusive requests, terminate access where misuse is material or repeated, and preserve evidence where needed for legal, audit, or security reasons.

Suspected abuse or security misuse should be reported to security@xpitro.com or legal@xpitro.com.