Acceptable Use Policy.

1. Purpose

This Acceptable Use Policy ("AUP") defines the permitted and prohibited uses of the Dataviz by DemanualAI platform ("Service"). This AUP is part of our Terms of Service and applies to all users of the Service.

2. Permitted Use

You may use the Service to:

• Connect databases that you own or are authorized to access
• Ask natural language questions to generate SQL queries against your connected databases
• View, analyze, and export query results
• Generate PDF analytics reports from your data
• Invite authorized team members from your organization
• Access the Service via web application, Slack bot, or WhatsApp
• Use the query history, favorites, and audit log features
• Configure database connections, including SSH tunnel access

3. Prohibited Use

3.1 Unauthorized Access

You must not:

• Connect to databases without proper authorization from the database owner
• Use credentials that were obtained without authorization
• Attempt to access other tenants' data, conversations, or connections
• Share your account credentials with unauthorized individuals
• Attempt to bypass authentication, authorization, or tenant isolation mechanisms

3.2 Security Violations

You must not:

• Attempt prompt injection attacks to manipulate the AI system
• Try to extract system prompts, schema information, or internal configurations
• Attempt SQL injection through natural language inputs
• Probe, scan, or test the vulnerability of the Service without written authorization
• Attempt to bypass rate limits, usage quotas, or security controls
• Introduce malware, viruses, or other harmful code
• Attempt to gain unauthorized access to our infrastructure, servers, or databases

3.3 Service Abuse

You must not:

• Use automated scripts, bots, or scrapers to access the Service without prior authorization
• Generate excessive load intended to degrade the Service for other users
• Reverse-engineer, decompile, or disassemble any part of the Service
• Resell, redistribute, or sublicense the Service without a reseller agreement
• Use the Service to compete with DemanualAI or build a competing product

3.4 Illegal Activities

You must not:

• Use the Service for any activity that violates applicable laws or regulations
• Query databases containing data that you are legally prohibited from accessing
• Use query results in ways that violate data protection laws (GDPR, DPDP Act, etc.)
• Use the Service to facilitate fraud, harassment, or any criminal activity

3.5 Data Misuse

You must not:

• Export and use personal data from query results in violation of data protection laws
• Use the Service to build profiles of individuals without their consent
• Share query results containing personal data with unauthorized parties
• Use the Service to access medical, financial, or other regulated data without proper compliance measures

4. Usage Limits

The Service enforces the following limits to ensure fair use:

Exceeding these limits will result in HTTP 429 (Too Many Requests) responses. Limits can be adjusted based on your plan.

5. AI-Generated Content

5.1 Accuracy

The Service uses AI to generate SQL queries from natural language. AI-generated queries are:

• Validated through multiple safety checks before execution
• Not guaranteed to be 100% accurate or optimal
• Subject to the limitations of the underlying AI models

5.2 Your Responsibility

You are responsible for:

• Reviewing query results before making business decisions
• Verifying the accuracy of AI-generated reports
• Understanding that AI responses are best-effort interpretations of your questions

5.3 Prohibited AI Interactions

You must not:

• Attempt to manipulate the AI into generating harmful, offensive, or misleading content
• Use adversarial prompts to bypass safety controls
• Attempt to make the AI reveal its system instructions, internal prompts, or schema information

6. Monitoring and Enforcement

6.1 Monitoring

We monitor the Service for:

• Security threats and suspicious activity
• Compliance with usage limits and this AUP
• System health and performance

All query executions are logged in our immutable audit trail.

6.2 Enforcement Actions

Violations of this AUP may result in:

We will provide notice before taking enforcement action except in cases of severe or critical violations where immediate action is necessary to protect the Service or other users.

6.3 Appeals

If you believe an enforcement action was taken in error, you may appeal by emailing support@demanualai.com within 15 days.

7. Reporting Violations

If you become aware of any violation of this AUP, please report it to:

• Email: security@demanualai.com
• Response: We will acknowledge reports within 24 hours and investigate within 48 hours

8. Responsible Disclosure

If you discover a security vulnerability in the Service, we encourage responsible disclosure:

• Email security@demanualai.com with details of the vulnerability
• Allow us reasonable time (minimum 90 days) to address the issue before public disclosure
• Do not exploit the vulnerability beyond what is necessary to demonstrate it
• Do not access or modify other users' data

We will not take legal action against security researchers who follow responsible disclosure practices.

9. Changes to This Policy

We may update this AUP to address new threats or clarify existing policies. Material changes will be communicated via email or in-app notification. Continued use of the Service after changes take effect constitutes acceptance.

10. Contact

For questions about this Acceptable Use Policy:

This Acceptable Use Policy is effective as of March 18, 2026.