Power needs boundaries.

This Acceptable Use Policy applies to every person and organization using Oryxa. Customers are responsible for their users, connected services, permissions, instructions, content, and actions carried out through their workspace.

Use good judgment, respect people and systems, and keep a qualified human responsible for consequential decisions.

You may not use Oryxa to:

• violate applicable law, sanctions, court orders, or another person’s rights;
• facilitate fraud, deception, harassment, stalking, discrimination, exploitation, or credible threats;
• create, distribute, or support malware, phishing, credential theft, denial-of-service activity, or unauthorized surveillance;
• process unlawful content or content for which you lack required permission; or
• impersonate another person or misrepresent the source, authority, or approval status of a communication.

You may not probe, scan, exploit, disrupt, reverse engineer where prohibited, or attempt unauthorized access to Oryxa, another account, a connected system, or underlying infrastructure.

Do not bypass access controls, rate limits, safety measures, usage limits, or approval requirements. Do not scrape or extract the service at scale, resell access without permission, or use automated means that impose unreasonable load.

Do not submit secrets, special-category data, regulated records, children’s data, or confidential third-party information unless your agreement permits it and you have a lawful basis, appropriate safeguards, and necessary permissions.

Connected accounts must belong to you or be administered with explicit organizational authority. Permissions should be no broader than needed for the intended task.

Oryxa must not be the sole decision-maker for employment, credit, insurance, housing, education, medical treatment, legal rights, public benefits, safety-critical systems, or other decisions that can materially affect a person.

Where Oryxa assists with sensitive work, use qualified human review, disclose AI involvement where required, verify source information, preserve an appeal path, and comply with professional and sector-specific obligations.

Do not use Oryxa for unsolicited bulk messages, spam, deceptive engagement, or communications that violate consent, marketing, employment, or anti-spam rules. Automated follow-ups must remain appropriate to the relationship and context.

Customers are responsible for reviewing recipients, tone, accuracy, timing, and authority before enabling automated external communication.

We may limit, suspend, or terminate access; remove content; disable an integration; or preserve evidence where reasonably necessary to investigate or stop a violation. When practical, we will provide notice and an opportunity to cure.

Report suspected misuse through the contact information below. Security vulnerabilities should follow the process in our Security & Disclosure page.