Acceptable Use Policy

1. Purpose and Scope

This AUP governs your access to and use of Operum, including any related websites, applications, software, AI-agent tools, collaboration features, integrations, and services that link to this AUP (collectively, the "Service"). This AUP is incorporated into and forms part of the Operum Terms of Service (the "Terms"). If there is a conflict between this AUP and the Terms with respect to acceptable use of the Service, this AUP controls.

By accessing or using the Service, including by creating, editing, uploading, configuring, or running AI agents, Agent Instructions, prompts, knowledge-base materials, templates, integrations, or related files, you agree to comply with this AUP. If you do not agree to this AUP, you may not access or use the Service.

This AUP applies to every account holder, team, workspace, administrator, user, invited collaborator, and any individual acting under an account. It applies to all content, instructions, configurations, activity, outputs, and agent actions on or through the Service, including agent instruction files, Markdown or .md files, prompts, configurations, knowledge-base content, files, templates, workflows, integrations, API calls, logs, outputs, and any action an agent produces, recommends, automates, or performs.

For purposes of this AUP, "Agent Instructions" means any instructions, prompts, policies, Markdown files, configuration files, tool-use rules, templates, knowledge-base entries, memory entries, workflow definitions, or other user-controlled materials that define, guide, constrain, or influence an agent's behavior.

2. Your Content and Your Responsibility

2.1 Agent Instructions are User-Generated Content

Operum lets you customize the behavior of AI agents by authoring, editing, uploading, or configuring Agent Instructions. Agent Instructions are User-Generated Content that you create, select, control, and are responsible for.

Operum does not author your Agent Instructions and does not pre-screen, pre-approve, or curate them. You decide what your agents are instructed to do. You are responsible for ensuring that your Agent Instructions, and any actions or outputs that result from them, comply with this AUP, the Terms, all applicable laws, and any rights or obligations you owe to others.

You represent and warrant that:

• you have all rights, permissions, consents, licenses, and lawful bases necessary to create, upload, store, process, and use your Agent Instructions and other User-Generated Content through the Service;
• your Agent Instructions, prompts, files, knowledge-base content, configurations, and workflows do not violate this AUP, the Terms, applicable law, or the rights of any person or entity;
• you will not instruct, configure, prompt, or enable any agent to engage in prohibited conduct, even if an underlying AI model, plug-in, tool, integration, or third-party service would technically allow the conduct; and
• you are solely responsible for what you instruct your agents to do and for all resulting activity, output, decisions, recommendations, transmissions, integrations, and consequences, whether performed by an agent autonomously, semi-autonomously, or at your direction.

2.2 Engine-Independent Responsibility

Your responsibility is engine-independent. It applies regardless of which underlying AI model, engine, tool, plug-in, provider, or integration powers your agents at any given time. It does not depend on, and is not limited by, any safety behavior, refusal behavior, moderation feature, filter, or guardrail that a third-party model provider, infrastructure provider, or integration may or may not apply.

You may not rely on any model-provider guardrail, refusal, or automated filter as permission to attempt prohibited activity. You are responsible for designing and using Agent Instructions in a lawful and safe manner.

2.3 Review of Agent Outputs

AI-generated outputs may be inaccurate, incomplete, misleading, offensive, unsafe, or unsuitable for your intended use. You are responsible for reviewing, validating, and approving agent outputs before relying on them, publishing them, sending them to third parties, connecting them to external systems, or using them to make decisions that affect legal rights, safety, finances, employment, housing, credit, education, healthcare, insurance, or other material interests.

2.4 Account Credentials and Access

Operum accounts use passwordless, one-time-passcode (OTP) authentication. Your email address is the primary credential and security boundary for your account. You are responsible for maintaining control and security of the email account associated with your Operum account and for all activity that occurs under your account, team, or workspace.

You must promptly notify Operum at security@operum.ai or legal@operum.ai if you suspect unauthorized access, account compromise, loss of control of your email account, misuse of an invitation link, or any other security incident involving the Service.

3. Prohibited Uses

You may not use the Service, or instruct, configure, enable, assist, or allow any agent, user, team member, integration, workflow, or automated process to use the Service, to engage in, facilitate, attempt, or materially support any of the following.

3.1 Illegal Activity

• Any activity that violates applicable local, state, national, or international law, regulation, order, or sanction.
• Promoting, facilitating, instructing, concealing, or materially assisting illegal activity by others.

3.2 Unauthorized Access, Hacking, and Security Abuse

• Accessing, probing, scanning, scraping, testing, bypassing, or attempting to access any system, network, account, device, repository, credential, private key, token, data, or service without explicit authorization from the owner.
• Circumventing, disabling, bypassing, or interfering with authentication, authorization, rate limits, security controls, access controls, usage limits, monitoring, or billing controls.
• Using the Service to gain unauthorized access to, exfiltrate data from, or maintain persistence in any third-party system.
• Generating, improving, or operationalizing instructions, code, tools, or workflows primarily designed for credential theft, privilege escalation, vulnerability exploitation, stealth, evasion, or unauthorized data extraction.

3.3 Malware, Destructive Code, and Abusive Automation

• Creating, modifying, distributing, deploying, or assisting malware, ransomware, spyware, worms, viruses, botnets, keyloggers, credential stealers, destructive code, or code designed to disrupt, damage, surveil, or gain unauthorized access to systems or data.
• Using agents for denial-of-service attacks, abusive load generation, account creation abuse, fake engagement, CAPTCHA circumvention, credential stuffing, or other platform-manipulation activity.

3.4 Fraud, Deception, and Impersonation

• Fraud, phishing, social engineering, scams, spoofing, credential harvesting, impersonation, or any scheme to deceive, manipulate, or defraud others.
• Creating or distributing content designed to mislead others about its origin, authenticity, sponsorship, authority, or source for unlawful, fraudulent, or deceptive purposes.
• Misrepresenting that AI-generated content, communications, decisions, or actions were created, reviewed, approved, or sent by a human when such misrepresentation is unlawful, deceptive, or materially misleading.

3.5 Harassment, Abuse, Exploitation, and Harmful Content

• Harassing, threatening, stalking, doxxing, defaming, intimidating, abusing, or targeting any person or group.
• Producing, requesting, distributing, or facilitating content that sexually exploits or endangers minors or that is otherwise unlawful involving minors.
• Producing or distributing content that incites violence, facilitates credible threats, or promotes unlawful discrimination, unlawful harassment, or other content illegal in the applicable jurisdiction.
• Using the Service to encourage self-harm, violence, exploitation, or other serious harm.

3.6 Intellectual Property and Proprietary Rights

• Infringing, misappropriating, or violating any patent, copyright, trademark, trade secret, moral right, publicity right, privacy right, or other intellectual-property or proprietary right.
• Removing, circumventing, disabling, or evading any digital rights management, copyright-protection, license-key, access-control, watermarking, or usage-restriction mechanism.
• Using third-party content, code, data, or confidential information without necessary rights, permissions, or lawful basis.

3.7 Privacy, Personal Data, and Rights of Others

• Violating the privacy, publicity, confidentiality, contractual, employment, consumer, or other legal rights of any person or entity.
• Collecting, scraping, harvesting, inferring, selling, sharing, or processing personal data without a lawful basis, required consent, required notice, or other legal authorization.
• Using the Service to generate, enrich, combine, or act on sensitive personal data in a manner that violates law or applicable platform rules.
• Uploading or processing personal data, confidential information, regulated data, or customer data unless you have the right to do so and your use complies with the Terms, Privacy Policy, and any applicable data-processing agreement.

3.8 Regulated, High-Risk, or Professional Uses

• Using the Service as a substitute for professional legal, medical, financial, tax, accounting, insurance, employment, housing, credit, or safety advice where professional review is required or where reliance could materially affect a person's rights, safety, or well-being.
• Using agents to make, automate, or materially determine decisions about employment, housing, credit, insurance, education, healthcare, legal status, criminal justice, eligibility for essential services, or other high-impact matters unless expressly permitted by the Terms and compliant with all applicable laws.
• Using the Service for activities subject to export controls, sanctions, defense, weapons, dual-use, critical infrastructure, biometric identification, surveillance, or other highly regulated areas without all necessary legal authorization and Operum's prior written approval where required.

3.9 Spam, Unsolicited Communications, and Manipulative Activity

• Sending spam, unsolicited bulk communications, unlawful marketing messages, or communications that violate anti-spam, telemarketing, privacy, or platform rules.
• Generating fake reviews, fake engagement, fake accounts, coordinated inauthentic behavior, astroturfing, deceptive market manipulation, or other manipulative activity.
• Using the Service to evade sender requirements, unsubscribe requirements, consent requirements, platform rules, or other communication controls.

3.10 Abuse of the Service and Platform Integrity

• Interfering with, disrupting, overloading, reverse engineering, degrading, or attempting to gain unauthorized control over the Service or the infrastructure of Operum or any third party.
• Reselling, sublicensing, renting, leasing, white-labeling, providing service-bureau access to, or redistributing the Service without Operum's prior written authorization.
• Attempting to circumvent usage limits, access controls, subscription limits, billing systems, security controls, technical restrictions, or feature restrictions.
• Using the Service to compete with Operum by copying non-public features, system behavior, agent templates, orchestration patterns, or other proprietary aspects except as permitted by law and the Terms.
• Using the Service in a way that materially harms, disables, overburdens, impairs, or interferes with other users' access to or use of the Service.

4. Enforcement Posture: Report-Driven and Credible-Notice Driven

Operum does not proactively monitor the contents of user accounts, teams, Agent Instructions, knowledge bases, files, prompts, or private workspaces for AUP compliance. Operum cannot and does not generally inspect the contents of other users' accounts or teams, and we do not surveil what you instruct your agents to do. This is part of Operum's privacy posture.

Instead, enforcement of this AUP is report-driven and credible-notice driven. Operum may act on:

• abuse reports submitted to Operum;
• complaints from affected users, customers, rights holders, or third parties;
• valid legal notices, court orders, subpoenas, or law-enforcement requests;
• security alerts, integrity signals, payment-abuse signals, or platform-abuse signals;
• credible notice of a violation from trusted sources, service providers, infrastructure providers, or public authorities; and
• other facts or circumstances that give Operum a good-faith basis to believe this AUP, the Terms, or applicable law may have been violated.

When Operum receives credible notice of a suspected violation, Operum may investigate, request information, preserve relevant records, and take action as described in this AUP and the Terms. Operum will limit access to account content to what Operum believes is reasonably necessary and legally permissible to evaluate and respond to the specific notice, protect the Service, comply with law, enforce the Terms, prevent harm, or preserve evidence.

Nothing in this AUP requires Operum to monitor user content generally, affirmatively seek illegal activity, adjudicate disputes between users and third parties, or make legal determinations about the merits of third-party claims except to the extent required by applicable law.

5. Reporting Abuse

If you believe a user, team, workspace, agent, Agent Instruction, output, integration, or activity is violating this AUP or using the Service unlawfully, the preferred way to report it is our abuse-reporting form. You may also email abuse@operum.ai.

To help Operum evaluate your report, include as much of the following as reasonably available:

• your name and contact information;
• the account, team, workspace, URL, asset, message, output, file, agent, integration, or activity involved, if known;
• a clear description of what happened and why you believe it violates this AUP or applicable law;
• dates, times, screenshots, logs, message headers, file identifiers, links, or other supporting evidence;
• whether anyone is at immediate risk of harm; and
• whether the report involves intellectual property, personal data, security, a minor, a legal order, or law-enforcement request.

Reports should be made in good faith. Knowingly false, misleading, or abusive reports may themselves violate this AUP or the Terms.

5.1 Copyright Complaints

If Operum hosts or stores user content that you believe infringes copyright, send copyright complaints to legal@operum.ai. Operum may require copyright complaints to include information sufficient to identify the copyrighted work, the allegedly infringing material, the complaining party, authority to act, and a good-faith statement as required by applicable law.

6. Enforcement Actions

Where Operum has credible notice of a suspected or actual violation, Operum may, in its discretion and to the extent permitted by law:

• request additional information from the account holder, administrator, team, reporter, affected party, or relevant third party;
• warn the account holder, administrator, team, or user;
• require removal, correction, modification, or disabling of specific Agent Instructions, prompts, files, configurations, integrations, outputs, workflows, or content;
• remove or disable access to specific content or features where Operum is able and legally required or permitted to do so;
• limit, suspend, or terminate access to specific agents, tools, integrations, projects, teams, workspaces, accounts, or the Service;
• block, rate-limit, quarantine, or otherwise restrict activity that threatens platform integrity, security, other users, third parties, or legal compliance;
• preserve and review relevant logs, metadata, account records, and content to the extent reasonably necessary and legally permissible;
• cooperate with law enforcement, regulators, rights holders, infrastructure providers, payment providers, and other third parties when appropriate or required by law;
• comply with valid legal process, court orders, subpoenas, sanctions obligations, regulatory requests, and law-enforcement requests;
• terminate repeat infringers, repeat abusers, or accounts that pose unacceptable risk to Operum, users, third parties, or the Service; and
• take any other action described in the Terms or reasonably necessary to protect Operum, the Service, users, third parties, or the public.

Operum may act immediately and without prior notice where a violation is serious, ongoing, unlawful, security-sensitive, harmful, likely to expose Operum or others to liability, or where immediate action is required by law, legal process, infrastructure providers, payment providers, or platform-integrity needs.

Suspension or termination for an AUP violation is distinct from billing-related suspension. Billing grace periods, cancellation windows, payment-failure windows, refund provisions, or subscription cure periods described in the Terms do not limit Operum's right to take immediate enforcement action for suspected or actual AUP violations.

Operum may maintain audit logs, security logs, operational logs, metadata, and other records of platform activity and may use those records to investigate and respond to reports, enforce this AUP and the Terms, maintain security, comply with legal obligations, and protect the Service, consistent with the Privacy Policy.

7. Appeals and Account Review

If Operum suspends or terminates your account or disables content based on an AUP violation, you may contact legal@operum.ai to request review unless Operum determines that review is unavailable, unlawful, unsafe, impractical, or not required. Your request should include the account, team, workspace, affected content or feature, the enforcement action, and why you believe the action should be reversed or modified.

Operum may decline, delay, or limit review where required by law, where the matter involves security-sensitive information, where disclosure could harm another person or the Service, where the account was used for serious abuse, or where Operum is preserving evidence or responding to legal process.

8. Changes to this AUP

Operum may update this AUP from time to time. Material changes will be communicated as described in the Terms or through the Service. The updated AUP will be effective when posted or on the effective date stated in the update notice. Your continued access to or use of the Service after an update takes effect constitutes acceptance of the revised AUP. If you do not agree to the revised AUP, you must stop using the Service.

9. Contact

For acceptable-use, abuse, security, or legal matters, use the form below and we'll route your message to the right team.

Prefer email? You can also reach us directly at abuse@operum.ai (acceptable-use & abuse), security@operum.ai (security reports), or legal@operum.ai (legal & copyright notices).