Acceptable Use Policy

DRAFT — UNREVIEWED. This document has not yet been reviewed by counsel. Do not publish or rely on it.

Version: 2026-06-16 Effective date: [FILL IN — date of public ship]

This Acceptable Use Policy ("AUP") governs your use of the TraceBIM service (the "Service") and is incorporated into the Terms of Service. Defined terms have the meanings given in the Terms of Service. Violating this AUP is a material breach of the Terms.

1. Prohibited content

You may not upload, generate, store, or transmit through the Service any content that:

• Contains malware, viruses, worms, trojans, ransomware, or any code designed to harm or surreptitiously access a system;
• Infringes any third party's intellectual-property, trade-secret, publicity, or privacy right;
• Violates any non-disclosure agreement, data-handling obligation, security-clearance requirement, or export-control rule you owe to a client, regulator, or counterparty (including ITAR-controlled designs, classified-program work, and content covered by an NDA that does not permit AI subprocessing);
• Is unlawful, defamatory, obscene, harassing, threatening, or that promotes violence or discrimination on the basis of a protected characteristic;
• Contains sexually explicit material or child sexual-abuse material (CSAM); CSAM will be reported to the National Center for Missing & Exploited Children (NCMEC) as required by law;
• You do not have all necessary rights to upload.

2. Prohibited conduct

You may not, and may not permit any third party to:

• Probe, scan, or test the vulnerability of the Service or any system or network connected to it, except under a written authorization from us (e.g., a coordinated security-disclosure program);
• Breach or circumvent any authentication, authorization, rate-limiting, access-control, or audit measure of the Service;
• Interfere with the Service or with any other user's use of the Service, including by overloading, flooding, or sending malformed traffic;
• Scrape, crawl, harvest, or otherwise extract data from the Service except through documented APIs at documented rate limits;
• Impersonate any person or entity, including another user or a TraceBIM employee, or misrepresent your affiliation with any person or entity;
• Share, sell, or rent your account credentials;
• Use the Service to build, train, fine-tune, evaluate, or improve any machine-learning model;
• Resell, sublicense, lease, time-share, or provide the Service to third parties as a service;
• Use the Service to violate any law, regulation, professional-licensure rule, or third-party right.

3. AI-feature-specific restrictions

When you use AI Features, you additionally may not:

• Attempt to extract, exfiltrate, jailbreak, or otherwise manipulate the underlying model to disclose system prompts, training data, or other confidential information;
• Attempt prompt-injection attacks designed to cause the model to ignore safety instructions or to act outside the intended scope of the Service;
• Submit content that you are contractually, ethically, or legally prohibited from sharing with a third-party processor (see Section 1);
• Use AI outputs in any way that misrepresents AI-generated content as the independent work of a licensed design professional, including by removing or defeating the watermark applied to exported sheets;
• Use AI outputs to defraud, mislead, or evade any permitting authority, building inspector, regulator, or client — including by generating drawings that intentionally appear code-compliant but are not.

4. Architectural-licensure rules

The Service is a drafting tool, not a substitute for a licensed design professional. You may not use the Service to engage in the unlicensed practice of architecture, engineering, surveying, or any other regulated profession in any jurisdiction. You are responsible for ensuring that any drawing you produce with the Service is independently reviewed and stamped by a licensed professional qualified to practice in the relevant jurisdiction before it is submitted for permitting, used for construction, or otherwise relied on for a regulated purpose.

5. Reporting

To report a violation of this AUP, abuse, a security vulnerability, or unauthorized use of an account, contact [FILL IN — abuse@domain]. Include enough detail for us to investigate. We will respond as promptly as the circumstances warrant.

6. Enforcement

We may, at our sole discretion and with or without notice, take any of the following actions in response to an actual or suspected AUP violation:

• Remove or quarantine offending content;
• Throttle, suspend, or terminate your account or any AI Feature for your account;
• Refuse future service to you;
• Cooperate with law-enforcement and report illegal content to appropriate authorities;
• Pursue any remedy available at law or in equity, including injunctive relief.

Termination or suspension under this AUP does not entitle you to a refund of any fees paid.

7. Changes

We may update this AUP from time to time. The "Version" date at the top will change, and the prior version will be archived in legal/CHANGELOG.md. Material changes will be notified by email at least fourteen (14) days before they take effect where required by law or by the Terms of Service.