Acceptable use policy

This policy lists what you may not do with Worksi AI Control. It is part of our terms of service and applies to everyone in your organization and to every application that uses your API keys.

You may not use the Service to

• break the law, or infringe the rights of others, including intellectual-property and privacy rights;
• process personal data without a lawful basis, or send raw personal identifiers (names, email addresses) as end‑user ids, tags, attributes or entity names, which are stored as sent;
• break the terms or usage policies of the model providers you connect, such as OpenAI’s usage policies;
• create or distribute child sexual abuse material, malware, or content that incites violence or harasses people;
• build systems meant to deceive people about whether they are dealing with an AI in ways that cause them harm, or to make automated decisions with legal or similarly significant effects on people without the human oversight the law requires;
• send spam or run fraud, phishing or scams.

You may not attack or abuse the Service

• Don’t try to access another organization’s data, or probe, bypass or disable authentication, tenant isolation, rate limits, plan limits, policies or redaction.
• Don’t use the gateway, the MCP gateway, webhooks or any other outbound feature to reach systems you are not authorized to use, or to scan networks.
• Don’t run load or stress tests against the hosted Service without our written agreement.
• Don’t create several organizations or accounts to obtain repeated free trials or to evade plan limits.
• Don’t resell the Service, or offer it to third parties as a standalone product, without an agreement with us.

Security research

If you find a vulnerability, report it privately to info@xeoo.io and do not access or keep data that is not yours. Only test against organizations you own.

Enforcement

If we believe this policy is being broken, we may suspend affected API keys, users or organizations, as described in the terms of service. To report abuse of the Service, email info@xeoo.io.