Acceptable Use Policy

This Acceptable Use Policy ("AUP") sets out the conduct, content, and technical activities that are prohibited when accessing or using any of Kroonen AI's Services, and is incorporated by reference into the Terms of Service.

1. Purpose & Scope

This AUP describes activities and content that are not permitted in connection with the products and offerings of Kroonen AI, Inc. ("Kroonen AI", "we", "us", or "our"), a Delaware C-corporation with a registered address at 8 The Green, Ste B, Dover, DE 19901, United States. It is incorporated by reference into, and forms part of, the Terms of Service. In the event of any conflict between this AUP and the Terms of Service regarding permitted use, the more restrictive provision controls.

This AUP applies to all of our Services, including our Open-Source Software (Libre WebUI and Libre Claw) where hosted, distributed, or supported by us; our SaaS Services (Libre Bot at librebot.ai); our research previews (the Genesis 1B hosted playgrounds); and our Professional Services (including telephony development under "Libre Phone"). It applies to the Customer, to all Authorized Users, and to any other person or system accessing the Services through Customer's account or credentials. Customer is responsible for ensuring that its Authorized Users and anyone acting on its behalf comply with this AUP.

Capitalized terms not defined in this AUP have the meanings given to them in the Terms of Service.

2. Prohibited Content & Conduct

You may not use the Services to create, upload, store, transmit, generate, distribute, or facilitate any of the following:

• Illegal activity. Anything that violates applicable law or regulation, or that promotes, facilitates, or instructs others in unlawful conduct.
• Intellectual property infringement. Content that infringes or misappropriates any patent, copyright, trademark, trade secret, publicity, or other intellectual property or proprietary right of any party, or that removes or circumvents technical protection measures.
• Malware and malicious code. Viruses, worms, trojans, ransomware, spyware, or any other code designed to disrupt, damage, disable, or gain unauthorized access to any system, device, data, or network.
• Spam, phishing, and deceptive messaging. Unsolicited bulk or commercial messaging, phishing, credential harvesting, social-engineering campaigns, or impersonation of any person, organization, or entity.
• Harassment and harmful content. Content that harasses, threatens, defames, stalks, bullies, or incites violence against any individual or group, or that promotes self-harm or discrimination.
• Child sexual abuse material (CSAM). We maintain a zero-tolerance policy toward any content that sexually exploits or endangers minors, including child sexual abuse material, sexualization of minors, and grooming. Such content will be removed, the account terminated, and the matter reported to the National Center for Missing & Exploited Children (NCMEC) and/or other appropriate authorities as required by law.
• Fraud and deception. Fraudulent schemes, financial scams, pyramid or Ponzi schemes, fake reviews or engagement, deepfakes intended to deceive, or any other deceptive or misleading practice.

3. Prohibited Technical Activity

You may not, and may not permit or assist any third party to:

• Unauthorized access. Access or attempt to access any account, system, network, data, or portion of the Services that you are not authorized to access, including through stolen, shared, or fabricated credentials.
• Scraping and quota abuse. Scrape, crawl, harvest, or systematically extract data from the Services except as expressly permitted; circumvent, disable, or interfere with rate limits, usage quotas, metering, or access controls; or use scripts, bots, or automation in a manner that imposes an unreasonable load on our infrastructure.
• Reverse engineering. Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, model weights, architecture, or underlying ideas of the SaaS Services or research previews, except to the extent this restriction is prohibited by applicable law. (This restriction does not limit rights expressly granted under the applicable open-source license for our Open-Source Software.)
• Denial-of-service. Conduct or facilitate any denial-of-service or distributed denial-of-service (DoS/DDoS) attack, flooding, or any activity intended to disrupt or degrade the availability or integrity of the Services or any connected system.
• Unauthorized security testing. Conduct penetration testing, vulnerability scanning, or other security testing of our systems without our prior written authorization. Responsible disclosure of suspected vulnerabilities is welcome via the contact in Section 7.
• Unauthorized resale. Resell, sublicense, rent, lease, time-share, or otherwise make the Services available to third parties, or operate the Services as a service bureau, without our express written authorization.

4. Telephony-Specific Use (Libre Phone)

If you use any telephony, voice, or messaging functionality developed, hosted, or facilitated by us (including "Libre Phone" built on providers such as Twilio and Cloudflare), you must comply with all applicable telecommunications laws and the following requirements:

• TCPA and anti-robocall compliance. Comply with the U.S. Telephone Consumer Protection Act (TCPA), the Telemarketing Sales Rule, FCC and STIR/SHAKEN anti-robocall requirements, and all other applicable federal, state, and local laws governing calls and text messages.
• Consent. Obtain and maintain all legally required consent before placing calls, sending SMS/MMS messages, or recording any call. Where call recording is used, provide all notices and obtain all consents required by applicable one-party or two-party (all-party) consent laws.
• No caller-ID spoofing. Do not transmit false, inaccurate, or misleading caller identification information, or otherwise spoof, falsify, or disguise the origin of any call or message.
• A2P 10DLC registration. For application-to-person (A2P) messaging over 10-digit long codes, complete and maintain required A2P 10DLC brand and campaign registration, and comply with carrier requirements, opt-out handling, and messaging content policies.
• No emergency calling. The Services are not a telephone service and are not intended or capable of supporting calls to emergency services (such as 911 in the United States or 112/999 elsewhere). Do not rely on the Services for any emergency communications. You are responsible for maintaining an alternative means of contacting emergency services.

5. AI-Specific Use

Your use of AI-enabled features of the Services — including Output generated by Libre Bot, the Genesis 1B research previews, and AI components delivered through Professional Services — is also subject to the AI Addendum. The AI Addendum addresses prohibited and high-risk AI uses, prohibited model-extraction and training-on-Output restrictions, human-oversight expectations, and disclaimers regarding the accuracy and reliability of Output. In the event of any conflict between this AUP and the AI Addendum with respect to AI-specific use, the AI Addendum controls.

6. Enforcement

We may, but are not obligated to, investigate any suspected violation of this AUP. We have no obligation to monitor the Services, content, or Output, but we reserve the right to do so and to access, review, and remove content as permitted by law and the Privacy Policy.

If we determine, in our reasonable discretion, that a violation has occurred or is reasonably suspected, we may take any action we consider appropriate, including: issuing a warning; removing, disabling, or restricting access to offending content; throttling or suspending access to the Services; suspending or terminating affected accounts, Authorized Users, or the Customer's access; and pursuing any other remedy available under the Terms of Service or at law. Where a violation poses an imminent risk of harm, legal liability, or threat to the security or integrity of the Services, we may act immediately and without prior notice.

We may preserve and disclose any information, and report any activity, to law enforcement or other authorities where we believe in good faith that doing so is necessary or appropriate to comply with law, respond to legal process, protect the rights, property, or safety of Kroonen AI, our users, or the public, or address suspected illegal activity. Suspension or termination under this AUP does not relieve the Customer of any payment obligations and does not entitle the Customer to any refund, except as expressly stated in the Terms of Service.

7. Reporting Violations

To report a suspected violation of this AUP, abusive content, a security concern, or a suspected vulnerability, please contact us at [email protected] or by phone at +1 (916) 999-5979. For reports involving child sexual abuse material, we will act immediately and report to NCMEC and/or appropriate authorities as required by law. Please include sufficient detail (such as relevant URLs, account identifiers, timestamps, and a description of the conduct) to allow us to investigate.

Last updated: June 19, 2026