Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs your use of Xcity's AI-as-a-Service platform, including TokenHub APIs, Hermes Agent, Xcity Chat, and the developer dashboard (collectively, the "Services"). By using the Services, you agree to this AUP and our Terms of Service. Violations may result in suspension or termination of your account without refund.

1. Prohibited content & uses

You may not use the Services to generate, store, transmit, or distribute:

• Child sexual abuse material (CSAM) or any sexual content involving minors. We report all detected CSAM to NCMEC and equivalent authorities.
• Content that incites violence or terrorism, or that provides material support to designated terrorist organizations.
• Targeted harassment, threats, or doxxing of any individual or group.
• Malware, ransomware, exploits, or stalkerware, including AI-assisted creation of offensive cyber tools.
• Non-consensual intimate imagery, including AI-generated nudity or sexual content of identifiable real persons without explicit consent.
• Disinformation campaigns impersonating real persons, government officials, or media outlets, particularly during elections or public emergencies.
• Fraud and scams, including phishing, fake reviews, romance fraud, or pump-and-dump market manipulation.
• Content that infringes intellectual property, trade secrets, or rights of publicity.
• Illegal goods or services, including weapons, controlled substances, and human trafficking.

2. High-risk use cases requiring additional safeguards

The following uses are not prohibited but require you to deploy additional human review and disclosure to end users. You are solely responsible for your safeguards.

• Healthcare — any clinical, diagnostic, or treatment recommendation use must include qualified medical review and clear disclosure that AI was used.
• Legal advice — outputs must be reviewed by a licensed attorney before being relied upon.
• Financial advice — outputs may not be presented as personalized investment advice without appropriate licensing in the user's jurisdiction.
• Hiring, lending, housing, education, insurance — must comply with anti-discrimination laws (US ECOA / FCRA, EU AI Act high-risk obligations, etc.).
• Critical infrastructure — energy, water, transportation, and similar systems must keep humans in the loop.
• Government surveillance and biometric mass surveillance — see § 3.

3. Banned use cases

The following are categorically prohibited regardless of safeguards:

• Real-time biometric identification in public spaces.
• Social scoring systems that classify people based on aggregated behavior.
• Subliminal manipulation, exploitation of vulnerabilities of specific groups (children, persons with disabilities), or coercive influence.
• Automated weapons targeting; lethal autonomous weapons.

4. Service abuse

You may not:

• Probe, scan, or test the vulnerability of any system without authorization.
• Reverse-engineer, scrape, or systematically extract model weights, training data, or system prompts.
• Resell raw API access without a written reseller agreement.
• Use the Services in a way that exceeds reasonable usage patterns or violates rate limits, including by creating multiple accounts to evade quotas.
• Disable, circumvent, or attempt to defeat any safety filter, content moderation system, or rate limit.

5. Output ownership and watermarking

You own the outputs you generate, subject to our Terms. You must not represent AI-generated content as human-generated when doing so would deceive users (e.g. in journalism, peer review, expert testimony). When required by applicable law (e.g. EU AI Act Art. 52), you must label AI-generated synthetic content as such.

6. Reporting violations

If you encounter a violation of this AUP — content generated using our Services that violates the rules above — please report to abuse@xcity.one with as much detail as possible.

7. Enforcement

We may, in our sole discretion, investigate, suspend, terminate, or report to authorities any account suspected of violating this AUP. We do not pre-screen content but reserve the right to remove content and take action against accounts at any time. We may withhold refunds when termination is for AUP violation.

8. Updates

We may update this AUP to address new risks, regulatory changes, or attack patterns. Material changes are announced 30 days in advance via email and dashboard notification, except where immediate action is necessary to address urgent safety or legal concerns.

Questions: legal@xcity.one.