Acceptable use policy

Introduction

This Acceptable Use Policy (AUP) describes the guidelines and restrictions that apply to all use of Nordvec's platform, APIs, and associated services (collectively referred to as the 'Service'). By accessing or using the Service, you agree to comply with this AUP. If you use the Service on behalf of an organisation, you accept this AUP on behalf of that organisation.

1. Legal violations and infringement of rights

You may not use the Service to: promote any form of illegal, fraudulent, or deceptive activity; infringe, misappropriate, or violate Nordvec's or any third party's intellectual property rights (including copyright, trademarks, and patents); violate applicable data protection laws (e.g. GDPR) by uploading, indexing, or sharing personal data for which you do not have a lawful basis for processing.

2. Harmful and security-compromising use

You may not: distribute viruses, worms, trojans, ransomware, or other malicious code; attempt to circumvent, disable, or interfere with security features of the Service (including Row Level Security/RLS and access controls); test, scan, or probe the vulnerability of the Service without prior written permission (penetration testing); attempt to gain unauthorised access to accounts, systems, or data belonging to other Nordvec customers.

3. Abuse of AI and service resources

You may not: perform prompt injection attacks to deliberately cause the AI model to bypass its safety filters or reveal underlying system instructions; use the Service for automated scraping or data extraction for the purpose of creating competing AI models or services; deliberately overload the Service's APIs, servers, or connector workers through unreasonably large volumes of requests (DDoS, spamming); attempt to extract, reconstruct, or reverse-engineer embeddings, vector representations, or underlying model parameters.

4. Prohibited high-risk AI uses (EU AI Act)

Under the EU AI Act (Regulation 2024/1689), certain AI applications are classified as high-risk or prohibited. You may not use the Service for: automated decision-making in employment, including recruitment screening, performance evaluation, promotions, termination decisions, or task allocation based on AI-generated outputs; biometric identification, categorisation, or emotion recognition of individuals; social scoring, creditworthiness assessment, or risk profiling of natural persons; any purpose listed as prohibited under EU AI Act Article 5, or classified as high-risk under Annex III. If you are unsure whether your intended use falls under these categories, contact compliance@nordvec.com before proceeding. Any use of the Service for high-risk purposes without Nordvec's explicit written authorisation constitutes a material breach of these terms.

5. Content indexing

The Service enables connecting third-party systems (for example Google Workspace, Microsoft 365 and Slack) and indexing content for AI search. You are fully responsible for the content you choose to index. You must not add connectors or upload files primarily containing: child sexual abuse material or illegal content, special categories of personal data (GDPR Art. 9) at scale unless specifically agreed in your DPA, state secrets or unlawfully obtained classified documents, or data subject to regulatory restrictions (e.g. ITAR, EAR) that prohibit cloud processing.

6. Desktop application

The Nordvec Desktop application synchronises local files to cloud storage. You are responsible for ensuring that the folders you choose to synchronise do not contain content this policy prohibits you from indexing.

7. Enforcement

If we have reasonable grounds to believe you have violated this AUP, we may: suspend or restrict access, remove access to specific connectors or data, terminate your account and permanently delete all associated data, or report illegal activities to relevant law enforcement authorities. Where only specific content is at issue, we will usually first ask you to remove it. We do not review the content you store unless a notice or an order from an authority concerns it. Uploaded files are scanned automatically for malware, and a file found to carry it is not processed; every other restriction is decided by a person, without automated means. When we restrict your account because of its content, we send the account owner a statement of reasons naming the measure, the facts, the term or law it rests on, and how to contest it. You can contest a restriction by replying to legal@nordvec.com, where a person reviews it, and you may also go to court. Suspension or termination does not relieve the Customer of payment obligations for the current subscription period.

8. Contact

If you discover a breach of this AUP or have a security-related question, report it to security@nordvec.com. To report content stored on Nordvec that you believe is illegal, use the notice form on our Digital Services Act page at nordvec.com/dsa.