Acceptable Use Policy

1.1. Service Disruption & System Degradation: You may not use the Services in any manner that materially degrades, disrupts, impairs, or interferes with the Services, data pipelines, network infrastructure, query engines, or other customers' authorized use of the platform.

1.2. Illegal & Fraudulent Activities: Any activity that violates applicable local, state, national, or international laws or regulations. This includes but is not limited to the transmission or storage of Child Sexual Abuse Material (CSAM), promoting fraudulent investment or “get-rich-quick” schemes, conducting phishing or identity theft campaigns, and running illegal gambling syndicates.

1.3. Infringing Content & Proprietary Misappropriation: Ingesting, processing, storing, or broadcasting content, databases, proprietary schema models, or files that infringe or misappropriate the intellectual property, trademark, patent, trade secret, or privacy rights of others, including wholesale data piracy or hosting unlicensed audio and media files.

1.4. Harmful Technology: Uploading, injecting, or transmitting viruses, malware, worms, Trojan horses, rootkits, spyware, ransomware, keyloggers, or any payload intended to compromise systems, corrupt data integrity, or surreptitiously intercept telemetry or analytical queries.

1.5. Obfuscation & Security Filter Evasion: Using obfuscation techniques, hidden payloads, or cryptographic cloaking within SQL queries, pipeline transformations, Python scripts, or application logic executed on VectorSift runtimes to conceal malicious intent, deceive automated query inspectors, or bypass platform safety boundaries.

1.6. Privacy Violations, Doxxing, and Targeted Harassment: You may not use the Services to publish, disclose, distribute, store, or facilitate the dissemination of another person's personal, sensitive, health, financial, or identifying information without an appropriate legal basis, explicit consent, or legitimate authorization. This includes using the Services to doxx, stalk, harass, intimidate, threaten, extort, or facilitate targeted abuse of individuals. This provision does not prohibit lawful processing of data for legitimate enterprise compliance, research, or public records uses authorized by applicable law.

2.1. Deepfakes & Deceptive Synthetics: Generating, synthesizing, storing, or broadcasting synthetic audio briefings, cloned executive voices, or synthetic visual representations within the Executive Briefing Podcast Studio or Multi-Vision modules intended to deceive, impersonate corporate executives, manipulate securities markets, commit fraud, or harass individuals without verifiable consent.

2.2. Safety Guardrails Circumvention & Prompt Injection: Using the Services, natural-language voice interfaces, or automated prompts to facilitate the “jailbreaking” of underlying Large Language Models (LLMs), executing prompt injection attacks, attempting to force synthesis of destructive SQL operations (e.g., unauthorized schema alterations, system catalog drops, privilege escalation), or bypassing semantic safety classifiers.

2.3. Unauthorized Scraping & Ingestion: Ingesting, caching, or processing datasets acquired through unauthorized automated web scraping, mass crawling, or network harvesting conducted in violation of third-party terms of service, robots.txt exclusions, or database protection statutes without verifiable license or authorization.

2.4. Reputation, SEO/AEO & Algorithmic Manipulation: Synthesizing nonsensical “gibberish” content, hallucinated metric reports, deceptive search engine optimization (SEO) artifacts, or Artificial Intelligence Engine Optimization (AEO) data designed to deceive algorithmic indexers, fabricate social proof, or falsify corporate financial audits.

3.1. Unauthorized Vulnerability Probing: Attempting to probe, scan, crawl, or test the vulnerability of any VectorSift system, container sandbox, analytical compute node, or network perimeter (including port scanning and automated fuzzing) outside the strict, pre-approved guidelines of our Vulnerability Disclosure Program.

3.2. Denial of Service (DoS) & Resource Exhaustion: Subjecting VectorSift compute infrastructure, the Zero-ETL Photon Accelerator, ClickHouse analytical clusters, DuckDB worker sandboxes, or third-party connected endpoints to volumetric flooding, recursive Common Table Expressions (CTE “query bombs”), unbounded Cartesian joins, infinite loop transformations, or synthetic traffic designed to degrade system responsiveness or exhaust memory and CPU quotas.

3.3. Proxy, Tunneling & Anonymization Farms: Operating open proxies, traffic forwarders, open mail relays, egress tunnels, or distributed proxy farms through VectorSift compute workers to bypass GeoIP controls, circumvent IP rate limiters, or mask malicious origin traffic.

3.4. Cryptocurrency Mining: Utilizing VectorSift compute resources, container runtimes, GPU-accelerated workers, or lakehouse background job schedulers to mine digital assets, execute blockchain validation routines, or solve proof-of-work puzzles.

3.5. Responsible Vulnerability Disclosure: Exploiting discovered platform vulnerabilities, exfiltrating cross-tenant data, or publicly releasing proof-of-concept exploits prior to providing reasonable notice and a private remediation window to VectorSift Security. All security findings must be reported directly to security@vectorsift.app.

4.1. Stolen or Unauthorized Credentials: Storing, testing, or utilizing database credentials, cloud access keys (AWS IAM, GCP Service Accounts, Azure Client Secrets), or API tokens in the VectorSift Multi-Cloud Credential Vault that you do not legitimately own or lack explicit, documented administrative authorization to configure and query.

4.2. Disposable & Burner Emails: Registering or maintaining accounts using temporary, disposable, anonymized throwaway, or “dead-drop” email domains designed to evade identity verification or system abuse tracking.

4.3. Automated & Bulk Registration: Creating accounts through automated bots, registration scripts, or provisioning excessive multi-account networks to artificially multiply free-tier compute quotas or bypass enterprise seat licenses.

4.4. Infrastructure Abuse & Drop-Zone Operations: Utilizing VectorSift storage buckets, workspace vaults, or connectors as a repository or “drop-zone” for exfiltrated corporate espionage data, stolen records, or command-and-control (C2) operational infrastructure.

5.1. Carding & Payment Fraud: Using the Services, checkout endpoints, or webhook integrations for card testing, payment fraud, storing stolen credit card repositories, or facilitating money laundering activities.

5.2. Regulated & Illegal Trade: Facilitating or coordinating commercial transactions in illicit substances, controlled narcotics, unlicensed firearms, explosive materials, or unlawful human trafficking.

5.3. High-Risk & Life-Critical Systems: The Services are not designed, manufactured, or intended for use in mission-critical environments where query engine latency, schema failure, or data processing errors could lead directly to death, personal injury, severe physical injury, or catastrophic environmental destruction (e.g., nuclear plant controls, aircraft avionics, emergency response dispatch, or life support medical equipment).

6.1. Investigation and Remedial Action: VectorSift reserves the right, in its sole discretion, to investigate suspected violations of this Policy, throttle query bandwidth, quarantine offending datasets, revoke compromised credentials, or suspend or permanently terminate access to the Services without prior notice if VectorSift determines that a user's conduct violates this Policy or poses legal, regulatory, security, reputational, or operational risk to VectorSift, the Services, or other customers.

6.2. Law Enforcement Reporting: We may report suspected illegal conduct to law enforcement authorities, regulatory agencies, or affected third parties. In response to valid legal requests, subpoenas, or emergency threats of imminent harm, we may disclose customer account identifiers, IP audit trails, query telemetry, and associated operational records.

6.3. No Affirmative Duty to Monitor: VectorSift has no legal obligation to proactively screen, monitor, or review customer datasets, SQL queries, audio recordings, or uploaded media, and does not assume responsibility or liability for user-generated content or queries processed through customer workspaces.