1. Scope
1.1. This policy applies to the Customer, its employees, contractors and any person to whom the Customer has granted access to the Service.
1.2. The Customer is responsible for its users' actions as for its own and must make them aware of these requirements.
2. Prohibited use
The Service may not be used for:
- breaching the laws of the Republic of Kazakhstan or the applicable law of the user's country;
- spam, bulk unsolicited messaging or messaging without a legal basis;
- fraud, phishing, social engineering and credential harvesting;
- distributing malware, or scanning and penetration-testing the Service without written permission;
- publishing material inciting hatred or promoting violence, terrorism or extremism;
- processing child sexual exploitation material — such cases are reported to law enforcement;
- infringing third-party intellectual property rights;
- presenting bot output as the opinion of a doctor, lawyer or other licensed professional;
- reselling, sublicensing or granting third-party access beyond the terms of the Order.
3. Requirements for submitted data
3.1. The Customer warrants that it has a legal basis to process the data it submits to the Service, including consents from end clients.
3.2. Without prior written agreement, the following may not be submitted to the Service:
- biometric and health data;
- full payment card numbers, CVV codes and bank secrecy data;
- state secrets;
- data subject to mandatory storage localisation, unless such localisation is agreed in the Order.
3.3. The Customer must inform end clients that the conversation is handled by an automated assistant and provide a way to reach a human operator.
4. Technical limits
4.1. Creating artificial load, circumventing Dialogue Package quotas, or using unapproved API automation is prohibited.
4.2. Rate limits and quotas are set by the Tariffs and the technical terms of the Order.
4.3. If limits are exceeded, the Provider may throttle processing without terminating the Services, having notified the Customer.
5. AI-specific restrictions
5.1. The Service may not be used for automated decisions producing legal or similarly significant effects for individuals without human involvement.
5.2. Generated content may not be presented as human-authored where the law requires disclosure of automated generation.
5.3. Further requirements are set out in the Responsible AI Use Policy.
6. Enforcement
6.1. On detecting a breach, the Provider sends a notice requiring it to be remedied within 5 business days.
6.2. Where security, legality or Service operation is at risk, access may be restricted immediately, with notice to the Customer within 24 hours.
6.3. For a serious or repeated breach the Provider may terminate the agreement unilaterally. Amounts paid for the unused period are not refunded in that case.
6.4. The Customer indemnifies the Provider for losses and third-party claims arising from a breach of this policy.
7. Reporting abuse
7.1. Send abuse reports to alibek.abdekov2110@gmail.com with the subject "Abuse report" and a description of the circumstances.
7.2. We review reports within 5 business days and inform the reporter of the measures taken, to the extent permitted by law.