Use powerful tools responsibly. Protect every workspace.

This policy applies to Customers, Authorized Users, administrators, contractors, API clients, integrations, service accounts, agents, automated workflows, and anyone accessing KoolArchitect through or on behalf of a Customer.

Users may use KoolArchitect only for lawful, authorized business purposes and in compliance with applicable law, contractual obligations, privacy rights, intellectual-property rights, sanctions, export controls, and third-party terms.

Users must not share named credentials, lend or resell accounts, falsely identify users, bypass seat limits, maintain unauthorized shared accounts, create fraudulent accounts, or permit access by suspended or otherwise ineligible users.

Users must protect passwords, API keys, tokens, service accounts, recovery codes, and authentication devices; use available security controls; promptly revoke unnecessary access; and report suspected compromise.

Users must not upload, generate, distribute, execute, store, or facilitate malware, ransomware, spyware, destructive code, credential stealers, botnets, cryptominers, backdoors, or payloads intended to damage, disrupt, surveil, or gain unauthorized access.

Users must not conduct unauthorized scanning, exploitation, password attacks, credential stuffing, session theft, privilege escalation, lateral movement, persistence, evasion, phishing, social engineering, or testing against KoolArchitect or connected systems.

Users must not perform denial-of-service, stress testing, resource exhaustion, artificial load generation, excessive concurrency, trial farming, mass account creation, or other activity likely to degrade availability, cost, or performance.

Automation is permitted only through supported features and within plan limits. Users must not operate unlimited loops, uncontrolled agents, excessive polling, abusive batch jobs, or automations that monopolize resources or evade safeguards.

API users must follow documented authentication, scopes, quotas, rate limits, pagination, retry, caching, and error-handling requirements. Users must not share keys, rotate identities to evade limits, call undocumented endpoints, or misrepresent request origin.

Users must not scrape, harvest, index, crawl, mirror, bulk-copy, or systematically extract platform content, metadata, interfaces, models, prompts, usage data, other Customers data, or Documentation except through expressly authorized export and API functions.

Users must not reverse engineer, decompile, disassemble, probe, derive source code, extract models, discover hidden prompts, bypass technical controls, defeat access restrictions, remove notices, or clone protected platform behavior except where law expressly prohibits restriction.

Users must not use the Platform, Outputs, APIs, metadata, evaluation results, prompts, Documentation, or access to train, benchmark, reproduce, or improve a competing product or model without Kool&Tech written authorization.

Users must not use KoolArchitect to create, store, process, or distribute unlawful content; fraudulent material; malicious instructions; stolen information; infringing content; deceptive impersonation; or material intended to facilitate harm, unauthorized access, or evasion of legal obligations.

Users must not collect, infer, monitor, identify, profile, track, or disclose Personal Data without lawful authority, required notice, appropriate consent, and applicable safeguards. Covert or unlawful surveillance is prohibited.

Users must not submit passwords, private keys, full payment-card data, government identifiers, highly sensitive health information, regulated secrets, export-controlled information, or other restricted data unless the applicable plan and written agreement expressly authorize that processing.

Users must have the rights necessary for inputs, files, prompts, brands, software, data, and instructions. Users must not use KoolArchitect to infringe, misappropriate, remove attribution, evade licenses, or distribute unauthorized proprietary material.

Users must not use AI Features for unlawful deception, fraudulent communications, unauthorized impersonation, manipulation, fabricated evidence, prohibited profiling, or high-impact decisions without lawful authority and appropriate human review.

Users remain responsible for validating AI-assisted analysis, documentation, recommendations, classifications, and actions. Users must not present unreviewed Output as verified fact or approved professional advice where errors could materially affect people, money, safety, compliance, or operations.

Agents may act only through approved tools, permissions, data, recipients, thresholds, and review gates. Users must not configure agents to exceed authority, bypass approvals, conceal actions, expand privileges, or continue after a stop condition.

Automated financial, purchasing, payment, billing, refund, provisioning, or contractual actions require appropriate authorization, limits, recipient validation, segregation of duties, and Customer controls. KoolArchitect must not be used to bypass Customer approval policies.

Users must not rely solely on KoolArchitect for hiring, firing, promotion, compensation, access to essential services, legal rights, credit, insurance, health, safety, or other consequential decisions. Qualified and authorized human review is required.

Users must configure integrations with minimum necessary permissions, approved accounts, secure tokens, appropriate data scopes, and lawful transfer authority. Users must not connect systems they do not own or administer with authorization.

Use of connected services must comply with provider terms. Users must not use KoolArchitect to circumvent third-party limits, scrape third-party data, automate prohibited actions, or access information outside granted permissions.

Customers are responsible for accuracy, relevance, legality, classification, retention, permissions, and minimization of data submitted to the Platform. Users should remove unnecessary sensitive content and manage exports and connected copies.

Users must not send spam, unsolicited bulk communications, phishing, deceptive messages, notification floods, or communications that conceal sender identity. Customer is responsible for consent, suppression, content, recipients, and applicable communications laws.

Security research is allowed only under the Kool&Tech Vulnerability Disclosure Policy and only for systems expressly in scope. This AUP does not authorize testing of Customer systems, third-party platforms, production data, or connected services.

Kool&Tech may use service telemetry, security signals, logs, abuse reports, usage metrics, and provider information to operate services, enforce limits, protect users, investigate suspected violations, and comply with law, subject to applicable privacy and contractual terms.

Customers must maintain authorized contacts, investigate suspected misuse, preserve relevant evidence, revoke compromised access, respond to reasonable inquiries, and take corrective action for activity under Customer accounts.

Suspected abuse, compromised credentials, harmful automation, unlawful content, security threats, or policy violations should be reported promptly through an authorized support or security channel with sufficient, safely redacted information.

Depending on severity, evidence, risk, history, and technical feasibility, Kool&Tech may warn, request correction, remove or restrict content, throttle usage, disable features, rotate credentials, block integrations, suspend access, or terminate the affected subscription.

Kool&Tech may act without advance notice when reasonably necessary to address active attacks, malware, credential compromise, data theft, legal demands, significant platform risk, threats to other users, or material service degradation.

Where practical, enforcement may be limited to affected users, workspaces, credentials, APIs, agents, integrations, content, or features. Kool&Tech may expand restrictions if limited measures do not adequately reduce risk.

A Customer may request review of an enforcement decision through the identified support channel, describing the affected account, relevant facts, corrective action, and requested outcome. Kool&Tech may maintain restrictions while risk remains under review.

This policy does not create a duty to proactively monitor every Customer action, prompt, file, Output, integration, or agent. Failure to detect one violation does not waive enforcement of another violation.

This policy is incorporated into the KoolArchitect Subscription Agreement. The Order Form, DPA, SLA, Master Services Agreement, Security & Trust Center, Responsible AI Statement, AI Use & Disclosure Policy, and Data Retention & Deletion Policy govern their respective subjects.

Kool&Tech may update this policy as KoolArchitect, APIs, AI models, agents, integrations, threats, regulations, and enforcement practices evolve. Application to an active subscription follows the governing agreement and applicable law.

Questions, abuse reports, or requests for clarification may be sent to info@koolandtech.com. Do not include passwords, complete secrets, full payment-card data, or unnecessary sensitive information.