Acceptable Use Policy

This Acceptable Use Policy (the "AUP") governs use of the Synapse platform, the Synapse Recorder desktop app, and related services (the "Service") provided by Neivan Technology Holdings, LLC ("Neivan", "we", "us"). It is part of our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.

Synapse runs AI agents that can read from and act in real systems, so what they do has real-world consequences. You are responsible for your own conduct, for every Authorized User under your account, and for the actions your agents take. Violations may lead to suspension or termination as described in Section 10.

1. Hard prohibitions

You and your agents must never use the Service to:

• produce, store, or distribute child sexual abuse material (CSAM). We report it as the law requires and terminate the account immediately;
• plan, design, or carry out biological, chemical, nuclear, or radiological weapons, or other weapons capable of mass casualties;
• create code, configuration, or instructions intended to break into systems you do not own or do not have written authorization to test;
• harass, threaten, dox, or stalk anyone, or run non-consensual surveillance;
• create non-consensual intimate imagery of real people; or
• run influence operations, or create content that impersonates identifiable real people or organizations without their consent.

2. Lawful use only

Use the Service only for lawful business purposes and in line with all laws and third-party rights that apply to you, including data-protection, intellectual-property, consumer-protection, anti-spam, export-control, and sanctions laws. You must not use the Service to break the law or help anyone else do so, or to create, store, or send content that is fraudulent, defamatory, discriminatory, or infringes anyone's rights.

3. Observation, monitoring, and recording

The Service can observe work to find tasks worth automating — through activity data from connected apps and through the Synapse Recorder, which can capture window titles, on-screen control names and, at its optional "frames" setting, screenshots. See the Observation & Screen-Recording Disclosure. You must not:

• turn on any observation, monitoring, recording, or capture feature without giving every notice and getting every consent the law requires, including workplace-privacy, employee-monitoring, and recording-consent laws (one-party and all-party consent);
• use these features to covertly watch, profile, or track employees or anyone else;
• try to disable or get around consent gates, masking, retention limits, or the notices the Service shows; or
• point observation at people or systems you are not lawfully entitled to observe.

4. AI use and human oversight

• Consequential decisions. If your agents are involved in decisions about hiring, lending, credit, housing, insurance, education, healthcare, immigration, or public benefits, keep a person meaningfully involved, disclose AI involvement to the people affected where the law requires it, and comply with automated-decision and anti-discrimination laws. The Service's approval settings — which make an agent stop and ask a person before it acts — exist for this.
• No professional advice. Do not present AI output as legal, medical, financial, tax, or other professional advice. Where output resembles regulated advice, label it as AI-generated and have a qualified professional review it.
• Personal data. Do not submit anyone's personal data without a lawful basis and any notice or consent the law requires, including for processing by the AI providers listed in our Subprocessor List.
• Manipulation. Do not try to jailbreak, prompt-inject, or otherwise make the Service or its AI providers bypass safety, security, or policy controls, and do not use AI to deceive people about whether they are dealing with a machine where disclosure is required.

5. Connected accounts

When you connect an app (email, calendar, files, CRM, social media, or a custom API) so agents can read from it and act in it, you must not:

• connect an account, or grant permissions or keys, you are not authorized to grant;
• have agents act in a connected app beyond your authorization, against that app's terms, or against the law — including sending spam or unsolicited bulk messages, or posting as someone you are not; or
• use connected access to extract data for an unlawful purpose, or expose stored credentials outside the protections the Service provides.

6. Security and platform integrity

You must not, and must not let anyone else:

• probe, scan, or test the vulnerability of the Service, or bypass any security or authentication control, except under our published responsible-disclosure process;
• access any account, organization, or data you are not authorized to access, including through prompt injection or by social-engineering our staff;
• scrape or bulk-extract data from the Service except through the interfaces we provide;
• disrupt the Service or overload it, including denial-of-service activity, crypto mining, or large-scale network scanning; or
• reverse engineer the Service or try to derive its source code, except where the law does not allow this restriction.

7. Accounts, seats, and limits

• Accounts are for one identified person; do not share sign-in credentials.
• Do not get around seat limits, rate limits, usage limits, or wallet and billing controls — for example by sharing credentials, creating shadow accounts, splitting usage, or sharing API tokens across customers.
• Do not misrepresent your company size, affiliation, or authority, including to our support staff.

8. Your responsibility

Take reasonable steps to make sure your Authorized Users follow this AUP, deal promptly with any violation you learn about, and cooperate with reasonable requests from us to investigate or fix a suspected violation.

9. Reporting a violation

Email [email protected]. Anonymous reports are accepted, and we do not retaliate against anyone reporting in good faith. Report security vulnerabilities to [email protected].

10. Enforcement

• Severe violations (CSAM, weapons, active intrusion): we act immediately — including suspending or terminating access — and notify law enforcement where required.
• Other violations: we usually warn first, then restrict or suspend, then terminate. We may remove content, disable a configuration, revoke a connected-account authorization, or throttle usage.
• Imminent harm: where there is a risk of imminent harm to the Service, other customers, or third parties, or a legal obligation to act, we may act first and notify you afterward where practicable and lawful.

Our remedies under this AUP are in addition to those in the Terms. Not enforcing a provision is not a waiver of it.