Legal

Acceptable Use Policy

Rules that govern how the Kuration AI Services and Kuration Data may be used. Supplements the Terms of Service and Data License Agreement.

Last updated 17 April 2026

Last Updated: 17 April 2026

This Acceptable Use Policy ("AUP") supplements the Terms of Service and the Data License Agreement. Terms used but not defined here have the meanings given in the Terms of Service.

The AUP applies to everyone who uses the Kuration AI Services — including the web platform, APIs, the Chrome extension, and Managed Services. We update the AUP from time to time to reflect new product capabilities and new misuse patterns. The current version is always published at https://kurationai.com/acceptable-use. In the event of conflict between this AUP and the Terms or DLA, the more restrictive provision applies.

Why we have this policy. Kuration AI builds B2B data products. The quality of those products, and the rights of the individuals whose data appears in them, depend on the Services being used for their intended purpose. Misuse — for consumer spam, harassment, regulated decisions, or redistribution — damages our data subjects, our customers, and our ability to operate. Breach of this AUP is a material breach of the Terms and can result in immediate suspension or termination.

1. Prohibited decisions and uses

You must not use Kuration Data, alone or in combination with other data, to make or inform any decision about a natural person that:

  • falls within the U.S. Fair Credit Reporting Act (FCRA) or equivalent laws — including consumer credit, credit scoring, lending, and insurance underwriting;
  • relates to employment screening, hiring, promotion, demotion, discipline, compensation, or termination;
  • relates to housing, rental, or tenancy eligibility;
  • relates to education, scholarships, government benefits, licences, or services;
  • relates to healthcare, diagnosis, or treatment of a natural person; or
  • otherwise produces legal or similarly significant effects on the person within the meaning of applicable data protection law.

We are not a "consumer reporting agency" and the Services are not a "consumer report."

2. Consumer marketing

The Services are provided for business-to-business purposes only. You must not:

  • market products or services to individuals in their personal capacity;
  • send communications to personal email addresses or personal phone numbers for non-business purposes; or
  • build, enrich, or score consumer profiles for consumer-facing use cases.

3. Discriminatory and harmful uses

You must not use the Services to:

  • discriminate on the basis of race, ethnicity, national origin, religion, gender, sex, sexual orientation, gender identity, disability, age, or any other protected characteristic;
  • harass, stalk, threaten, intimidate, or harm any individual;
  • perpetrate fraud, impersonation, phishing, social engineering, account takeover, or any deceptive practice; or
  • violate any anti-discrimination, consumer protection, or anti-fraud law.

4. Resale and redistribution

Kuration Data is licensed for your internal business use only. You must not:

  • resell, sublicense, rent, lease, or commercially redistribute the Services or the Kuration Data;
  • make the Kuration Data publicly available (including on the internet, through a public API, via search-engine indexing, in a published directory, or on any public download);
  • use the Services in a service-bureau, time-sharing, managed-service, or outsourcing arrangement for the benefit of third parties; or
  • share access with any affiliated entity, subsidiary, or partner without prior written authorisation.

You may load the Kuration Data into your own CRM, marketing system, or workflow tools, and may share it internally with your employees, contractors, and professional advisers who are bound by appropriate confidentiality obligations and are acting on your behalf.

5. AI and machine-learning training

You must not use the Services or the Kuration Data to develop, train, fine-tune, evaluate, or benchmark any machine-learning model, foundation model, or AI system that produces a product or service competing with Kuration AI, nor provide the Kuration Data to any third party for that purpose.

This restriction applies regardless of whether:

  • the model is used internally, made available via an API, embedded in a product, or distributed to a third party;
  • the model is labelled as "AI," "machine learning," "pattern recognition," "statistical model," or any equivalent term; or
  • the Kuration Data is used as training data, validation data, fine-tuning data, reinforcement-learning signal, retrieval-augmented generation (RAG) source, embedding corpus, evaluation set, or any other means of model development, improvement, or evaluation.

6. Outbound messaging and telemarketing compliance

When you use the Services for outreach (email, SMS, voice, LinkedIn, or any other channel), you must:

  • comply with all applicable anti-spam and telemarketing laws, including GDPR, UK GDPR and PECR, the EU ePrivacy Directive, the U.S. CAN-SPAM Act, the Canadian Anti-Spam Legislation (CASL), the Telephone Consumer Protection Act (TCPA), and local equivalents in every country where your recipients are located;
  • honour unsubscribe, opt-out, and erasure requests promptly;
  • scrub your outreach lists against applicable Do Not Call, Do Not Contact, and suppression lists;
  • identify yourself truthfully in every communication — never disguise the sender, "from" address, or origin;
  • include a functional unsubscribe link in every email; and
  • maintain records of consent and opt-out as required by Applicable Law.

7. Technical conduct

You must not:

  • reverse-engineer, decompile, disassemble, or attempt to derive the source code of any part of the Services, except to the extent that restriction is prohibited by Applicable Law;
  • circumvent, disable, or otherwise interfere with rate limits, authentication, or other technical protections;
  • use scraping, spidering, crawling, or automated extraction methods against the Services, except through our documented APIs within the applicable rate limits;
  • probe, scan, or test the vulnerability of the Services except under an authorised security-testing or bug-bounty programme agreed with us in advance;
  • introduce malware, back doors, or similar harmful code, or use the Services to distribute any of the foregoing;
  • share, sell, or publish your Account credentials, API keys, or tokens; or
  • interfere with or disrupt the integrity or performance of the Services.

8. Account hygiene

You are responsible for all activity under your Account. You must:

  • keep your credentials, API keys, and tokens confidential, and not share them;
  • maintain reasonable security controls on the systems used to access the Services, including current OS patching and anti-malware protections;
  • notify us promptly at security@kuration.ai if you suspect any unauthorised access or a security incident; and
  • keep your billing and primary contact information accurate and current.

9. Reporting misuse

If you believe someone is using the Services in a way that violates this AUP, please tell us. We investigate every report we receive.

10. Enforcement

We enforce this AUP consistently but proportionately. Depending on the severity of a violation, enforcement may include:

  • a warning and a cure period;
  • temporary suspension of the Account or specific Services;
  • removal or quarantine of the offending content or data;
  • immediate suspension or termination under §14 or §15 of the Terms of Service for severe or repeated violations; and
  • legal action where warranted.

We may cooperate with law enforcement and regulators where legally obligated or where necessary to protect data subjects, customers, or third parties.

11. Changes

We update this AUP to respond to new risks. The effective date at the top indicates the current version. For material changes, we will give reasonable advance notice through the Services or by email to the primary contact on your Account.