This acceptable use policy sets out which uses of Velorith are not permitted. It forms part of the contract between the customer and us under our terms of service and applies to all members of the customer and to everything their agents do on their instructions, including actions that are executed without individual approval because of the customer's approval rules.
1. Basic principle
Velorith may only be used lawfully and in a way that does not harm us, other customers or third parties. An agent may not be used to do anything that the member would not be permitted to do themselves. The customer is responsible for the instructions that its members give to agents and for the approval rules it configures.
2. Prohibited content
It is not permitted to create, store, process or distribute with Velorith content that
- is unlawful, in particular criminal content, content that infringes the rights of third parties such as copyrights, trademark rights, personality rights or business secrets, or content whose distribution is prohibited in the country of the recipient,
- sexually exploits or endangers minors in any way, or
- glorifies violence, incites hatred against groups of persons or threatens persons.
3. Prohibited activities
It is in particular not permitted to use Velorith, its agents, workspaces or browsers for the following.
- Malware. Developing, testing against third-party systems, storing for distribution or distributing malware, ransomware, exploits or other harmful code
- Spam and unsolicited messages. Sending advertising or other messages to recipients who have not consented or with whom no legally sufficient relationship exists, including via email, messaging channels such as iMessage or WhatsApp, connected services or contact forms. Mass or automated outbound messaging that recipients have not requested is not permitted
- Attacks from workspaces. Port scanning, vulnerability scanning, denial of service, brute force or other attacks on systems that the customer is not authorised to test, as well as attempts to circumvent the isolation of workspaces, runtimes or other customers
- Credential stuffing and account misuse. Using stolen or leaked access data, automated sign-in attempts on third-party accounts, or using accounts for which the member is not authorised
- Scraping in breach of terms. Automated retrieval of websites or services in breach of their terms of use, their technical access restrictions or applicable law, as well as circumventing CAPTCHAs, paywalls or rate limits of third parties
- Crypto mining. Mining cryptocurrencies or similar compute-intensive activities that do not serve the intended use of the service
- Circumventing limits. Circumventing or manipulating spending limits, usage limits, approval rules, the emergency stop, billing or other protective and control mechanisms of the service, as well as creating multiple companies or accounts to obtain trial periods or free contingents repeatedly
- Impersonation. Pretending to be another person, company or authority, or creating the false impression that content originates from them
- Deceptive AI content. Distributing AI-generated text, images, audio or video in a way that conceals their artificial origin where disclosure is required by law, in particular under Art. 50 of the AI Act, or where the concealment is intended to deceive the recipients. This applies in particular to deepfakes and to agents communicating with third parties without indicating, where required, that they are an AI system
- Interfering with the service. Accessing the service other than through the interfaces we provide, overloading it, reverse engineering it beyond what is permitted by law, or testing its security outside our vulnerability disclosure policy
4. Prohibited and high-risk AI uses
4.1 Velorith may not be used for any practice prohibited under Art. 5 of the AI Act, in particular manipulative or exploitative techniques that materially distort behaviour, social scoring, untargeted scraping of facial images, emotion recognition in the workplace or in education outside the exceptions permitted by law, biometric categorisation based on sensitive characteristics, or assessing the risk that a person will commit a criminal offence based solely on profiling.
4.2 Velorith is not designed for high-risk uses within the meaning of Art. 6 and Annex III of the AI Act, such as decisions on recruitment, promotion or termination of employees, access to education, creditworthiness, insurance, essential public services or law enforcement. Such use is only permitted if it has been agreed with us in advance in text form. In that case the customer is responsible for complying with the obligations of a deployer of high-risk AI systems.
4.3 Velorith may not be used to make decisions that produce legal effects concerning persons or similarly significantly affect them based solely on automated processing, unless the customer ensures that the requirements of Art. 22 GDPR are met.
5. Minors
Velorith is intended for persons aged 18 or over who act on behalf of the customer. The customer does not admit minors as members. Agents may not be used to contact minors or to process personal data of children unless the customer has a legal basis and has implemented the necessary protective measures.
6. Browsing with hosted browsers
Agents browse through hosted browsers of Browser Use. Each member has a separate browser profile in which logins and cookies are stored. When using agent browsing, the following rules apply in addition.
- Members may only sign in to websites and online accounts for which they or the customer are authorised and whose terms permit use by an automated agent
- Members may not store access data of other persons in their browser profile unless those persons have authorised it
- Agents may not be used to make purchases, conclude contracts or make declarations on websites that the member would not be authorised to make
- The customer observes the terms of use and technical access restrictions of the websites visited, and agents may not be used to circumvent protective measures against automated access
- Members are aware that Browser Use processes the pages visited, the entries made and the stored logins and cookies, and do not use agent browsing for content that may not be passed on to this subprocessor
7. Enforcement
7.1 We may investigate indications of breaches of this policy. In doing so, we access customer content only to the extent necessary and in accordance with the data processing agreement.
7.2 In the event of a breach, we may, depending on its severity, warn the customer, halt individual agents or actions, remove or block content, suspend members or the company, and terminate the contract for good cause in accordance with our terms of service. We inform the customer of the measure and its reason, unless this would defeat its purpose or is prohibited by law.
7.3 We may report criminal offences to the competent authorities and pass on information where we are legally obliged to do so.
8. Reporting misuse
If you become aware of misuse of Velorith, of content that breaches this policy or of a security vulnerability, please report it to [SECURITY_EMAIL]. Please describe the incident as precisely as possible, including the time, the affected accounts or addresses and any evidence. Security researchers can find the rules for reporting vulnerabilities in our vulnerability disclosure policy.