1. Overview
This Acceptable Use Policy ("AUP") applies from 12 June 2026 and was last updated on 12 June 2026. It forms part of the Kuga Terms and Conditions and applies to all access to and use of Kuga websites, dashboards, hosted agents, widgets, scripts, APIs, integrations, client portals, previews, support channels and related services.
The purpose of this AUP is to protect Kuga, our customers, end users, third parties, infrastructure and the public from unlawful, harmful, abusive, deceptive, unsafe or disruptive use. If there is a conflict between this AUP and another Kuga agreement, the stricter standard applies unless Kuga expressly agrees otherwise in writing.
2. Customer responsibility
2.1 Your users and clients
You are responsible for your users, team members, clients, agents, deployments, prompts, knowledge sources, integrations, outputs, workflows, end-user communications and anyone who accesses the Services through your account or under your control.
2.2 White-label deployments
If you deploy Kuga under your own brand or for a client, you remain responsible for the deployment, end-user disclosures, legal compliance, moderation, accuracy controls, privacy notices, consents, support routes and any claims you make about the agent or service.
2.3 No circumvention
You must not use agents, automation, prompt engineering, alternate accounts, resellers, client accounts, integrations, scripts, proxies, API calls or other methods to evade this AUP, usage limits, security controls, billing controls, moderation systems or enforcement action.
3. Illegal or unlawful use
You must not use the Services to create, promote, facilitate, conceal, assist or organise illegal activity, unlawful discrimination, fraud, tax evasion, money laundering, sanctions evasion, corruption, bribery, intellectual property infringement, privacy violations, consumer law violations, unlawful gambling, unlawful financial activity, trafficking, exploitation or any activity prohibited by applicable law.
You must not use the Services in violation of export controls, sanctions, trade restrictions, anti-terrorism laws or rules that restrict dealings with particular persons, entities, regions, countries or end uses.
4. Harmful, abusive or exploitative content
You must not use the Services to generate, host, solicit, transmit, automate, distribute or encourage content that is abusive, harassing, hateful, defamatory, threatening, exploitative, sexually exploitative, invasive, violent, extremist, discriminatory, deceptive, malicious or otherwise harmful.
Prohibited content includes child sexual abuse material or exploitation, sexual content involving minors, non-consensual intimate content, credible threats, incitement to violence, instructions for self-harm, targeted harassment, doxxing, stalking, blackmail, extortion, impersonation intended to mislead, and content that promotes terrorist or violent extremist activity.
5. Regulated and high-risk use
5.1 Professional advice
You must not present Kuga outputs as professional legal, medical, financial, tax, insurance, employment, immigration, housing, mental health or other regulated advice unless you have all required licences, disclosures, human review, safeguards and legal authority. Kuga outputs should not replace qualified professional judgment.
5.2 High-impact decisions
You must not use the Services to make, automate or materially influence decisions that have legal, financial, employment, education, housing, insurance, credit, healthcare, criminal justice, migration or similarly significant effects on individuals without express written approval from Kuga and all legally required human oversight, notices, rights, testing and safeguards.
5.3 Safety-critical systems
You must not use the Services to control, operate or provide essential instructions for weapons, emergency services, critical infrastructure, transport control, life support, medical devices, industrial control systems or other safety-critical systems where failure could result in death, injury, property damage or serious harm.
6. Privacy, data and confidentiality abuse
You must not collect, process, upload, scrape, infer, disclose or use personal data through the Services without a lawful basis, required notices, required consents, contractual authority and appropriate safeguards. You must not submit unnecessary sensitive data or data you are not authorised to process.
You must not use the Services for covert surveillance, unlawful tracking, facial recognition identification, biometric categorisation, stalking, doxxing, unauthorised profiling, credential harvesting, phishing, identity theft, data brokerage, unlawful lead scraping, or attempts to infer sensitive characteristics about a person without a lawful basis.
You must not upload or connect confidential, proprietary, regulated or third-party data unless you have the right to do so and have configured the Services appropriately for that data.
7. Security abuse
You must not use the Services to develop, test, distribute, host, automate, support, conceal or facilitate malware, ransomware, spyware, credential theft, phishing, botnets, denial-of-service attacks, exploit chains, unauthorised scanning, vulnerability exploitation, account takeover, spam infrastructure, command-and-control activity or other security abuse.
You must not attempt to access another customer's data, accounts, agents, dashboards, logs, integrations or systems. You must not probe, scan, stress test, reverse engineer, bypass, tamper with, overload, degrade or interfere with Kuga systems except under a written security testing agreement with Kuga.
You must promptly report suspected vulnerabilities, exposed credentials, unauthorised access or security incidents affecting Kuga to security@kuga.ai.
8. Spam, deception and manipulative conduct
You must not use the Services to send or facilitate spam, unsolicited bulk messages, unlawful marketing, deceptive outreach, fraudulent offers, fake reviews, fake engagement, misleading claims, impersonation, social engineering, phishing, bait-and-switch flows, dark patterns or communications that conceal the sender, purpose, commercial nature or required opt-out mechanisms.
You must comply with applicable marketing, consumer protection, electronic communications, advertising, caller, email, SMS, anti-spam and consent laws. You are responsible for suppression lists, unsubscribe requests, consent records and claims made by agents or workflows deployed through your account.
9. Integrations, websites and customer systems
You must only connect integrations, websites, domains, data sources, client systems and third-party tools that you are authorised to use. You must not use integrations to bypass access controls, extract data without authority, violate third-party terms, overload services, or send data to unauthorised recipients.
You are responsible for maintaining appropriate access permissions, API credentials, webhook destinations, domain settings, embed locations, data mappings, retention choices, deletion processes and connected system security.
10. Resource abuse and platform integrity
You must not interfere with the normal operation of the Services or consume excessive resources. Prohibited activity includes rate-limit evasion, abusive automation, scraping, load testing without permission, account farming, token or usage abuse, resale outside agreed rights, sharing credentials, mining, benchmarking designed to harm Kuga, or activity that degrades performance for others.
Kuga may apply limits, throttles, filters, quotas, blocks, suspensions or other controls where reasonably necessary to protect service integrity, security, customers, end users or Kuga.
11. AI safety and output controls
You are responsible for configuring agents with accurate instructions, appropriate knowledge sources, escalation paths, safety boundaries, disclaimers, human review and restrictions that match the deployment. You must not instruct agents to hide material limitations, misrepresent identity, fabricate authority, conceal sponsorship, produce unlawful content or evade safety controls.
You must not use the Services to generate or distribute deceptive synthetic media, misleading impersonations, fraudulent claims, unverified accusations, regulated advice without review, or content designed to manipulate, exploit or mislead people.
You must monitor deployed agents where appropriate, correct inaccurate content, remove unlawful or harmful knowledge sources, review user reports and disable deployments that become unsafe or non-compliant.
12. Monitoring and investigation
Kuga may monitor usage, logs, metadata, reports, abuse signals, security events and account activity to operate the Services, enforce this AUP, protect safety, prevent fraud, comply with law, respond to complaints, improve security and investigate suspected misuse.
Kuga is not required to monitor every agent, message, output, integration or deployment and is not responsible for customer content solely because Kuga provides infrastructure or automated processing tools.
13. Enforcement
If Kuga reasonably believes this AUP has been violated, or that activity creates risk to Kuga, customers, end users, third parties or the public, Kuga may remove or disable content, suspend or limit accounts, block agents, restrict integrations, throttle usage, require remediation, notify affected parties, preserve evidence, report to authorities, terminate services or take other reasonable action.
Enforcement action may be immediate where Kuga believes there is serious risk, unlawful activity, security threat, privacy harm, non-payment, repeated breach, reputational risk, third-party claim, regulatory concern or potential liability.
You remain responsible for fees, damages, losses, claims and liabilities arising from your breach of this AUP or misuse of the Services.
14. Reporting abuse
To report suspected abuse, policy violations or illegal use of Kuga, contact legal@kuga.ai. To report security vulnerabilities or security incidents, contact security@kuga.ai. Include the relevant URL, agent, account, workspace, message, timestamp, screenshots, logs or other details that help us investigate.