Team Clarity, Inc. DBA Iron Gorilla Acceptable Use Policy

Last updated: July 29, 2026

This Acceptable Use Policy (the "AUP") governs use of the Services provided by Team Clarity, Inc. DBA Iron Gorilla ("Team Clarity," "Iron Gorilla," "we," "us," or "our"). This AUP supplements, and is incorporated into, the Terms of Service, the EU AI Act Transparency Addendum, the Data Processing Addendum (the "DPA"), and any applicable Order Form (collectively, the "Agreement"). Capitalized terms used but not defined here have the meanings given in the Terms of Service, AI Transparency Addendum, or DPA. If there is a conflict between this AUP and the Terms of Service, the Terms of Service control; if there is a conflict between this AUP and an Order Form, the Order Form controls.

1. Purpose and Scope

This AUP describes the conduct, content, and uses that are prohibited on or through the Services. It applies to Customer, to each of Customer's users, administrators, developers, agents, and contractors, and to any person or system that accesses or interacts with the Services using Customer's credentials, API keys, tokens, or environments (each, a "User"). Customer is responsible for compliance with this AUP by every User and for any activity that occurs under Customer's account.

2. Definitions

"High-Risk Use" means any use described in Section 8 of this AUP and in Section 14 of the Terms of Service. "Regulated Data" means the categories of data described in Section 7 of this AUP. "Prohibited Conduct" means the conduct described in Sections 3 through 13 of this AUP. Other capitalized terms have the meanings given in the Agreement.

"Applicable AI Law" means Regulation (EU) 2024/1689 (the "EU AI Act"), as amended, including by Regulation (EU) 2026/1744, and other laws, binding rules, or regulatory requirements applicable to AI systems, models, outputs, or their use.

"AI Transparency Feature" means any machine-readable mark, watermark, content credential, provenance record, content hash or fingerprint, disclosure, label, icon, interaction notice, detection mechanism, or related technical or user-interface control.

"Deep Fake" has the meaning assigned by Applicable AI Law and includes AI-generated or manipulated image, audio, or video content that resembles an existing person, object, place, entity, or event and would falsely appear authentic or truthful to a person.

3. Compliance with Law and Other Policies

Customer and each User must use the Services in compliance with all applicable laws, regulations, and contractual obligations, including Applicable AI Law, export-control laws, sanctions, anti-money-laundering laws, consumer-protection laws, intellectual-property laws, and data-protection and privacy laws (including the Applicable Data Protection Laws as defined in the DPA). Customer and each User must also comply with the published policies of any model provider, integration, or third-party platform whose functionality is accessed through the Services, including the usage policies of supported AI model providers such as OpenAI and Anthropic, and must preserve transparency features supplied by those providers.

4. Prohibited Conduct

Customer and each User may not use the Services to:

(a) violate any law, regulation, contract, third-party right, or platform policy;

(b) engage in fraud, deception, phishing, credential theft, spam, unsolicited messaging, malware distribution, botnets, evasion of access controls, unauthorized access, or other security abuse;

(d) defame, harass, threaten, stalk, or intimidate any person, or facilitate harm to a person's safety, health, or property;

(e) interfere with, disrupt, degrade, or impose an unreasonable load on the Services, the infrastructure that supports the Services, or any other customer's use of the Services;

(f) reverse engineer, decompile, disassemble, scrape, or otherwise attempt to derive source code, model weights, prompts, or proprietary techniques from the Services, except to the extent this restriction is prohibited by applicable law; or

(g) take any other action that the Terms of Service identifies as a prohibited use.

5. Prohibited Content and Outputs

Customer and each User may not use the Services to generate, solicit, store, transmit, or distribute content, prompts, agent instructions, or outputs that:

(a) sexually exploit or endanger minors, or constitute child sexual abuse material;

(b) facilitate non-consensual intimate imagery, sexual content involving identifiable real persons without consent, or sexual content depicting minors;

(c) promote, incite, or facilitate violence, terrorism, self-harm, or the targeting of a person or group on the basis of a protected characteristic;

(d) provide operational instructions for the creation, acquisition, or deployment of weapons capable of mass casualties, including chemical, biological, radiological, nuclear, or high-yield explosive weapons;

(e) constitute malicious code, exploit instructions, vulnerability exploitation, or other content intended to compromise the security, integrity, or availability of any system, network, or device; or

(f) are designed to deceive a person about the source, authenticity, or authorship of content in a manner that causes legal, financial, or reputational harm, including the creation of synthetic media for fraud, election interference, or impersonation.

(g) generate or manipulate realistic intimate or sexually explicit material of an identifiable natural person without that person's freely given, specific, informed, unambiguous, and explicit consent, including content produced by so-called "nudification" tools; or

(h) generate or manipulate child sexual abuse material or equivalent prohibited material, except for strictly authorised lawful testing carried out under a written agreement with Team Clarity and in compliance with applicable law.

5A. Prohibited AI Practices

To the extent prohibited by Applicable AI Law, Customer and each User may not place on the market, put into service, or use the Services or any connected AI system to:

(a) deploy subliminal techniques beyond a person's consciousness or purposefully manipulative or deceptive techniques that materially impair informed decision-making and cause or are reasonably likely to cause significant harm;

(b) exploit vulnerabilities due to age, disability, or a specific social or economic situation in a manner that materially distorts behaviour and causes or is reasonably likely to cause significant harm;

(c) conduct social scoring that results in detrimental or unfavourable treatment in unrelated contexts or treatment that is unjustified or disproportionate;

(d) assess or predict an individual's risk of committing a criminal offence based solely on profiling or personality traits, except lawful support of a human assessment based on objective and verifiable facts directly linked to criminal activity;

(e) create or expand facial-recognition databases through untargeted scraping of facial images from the internet or CCTV footage;

(f) infer emotions in workplaces or educational institutions, except where lawfully used for medical or safety reasons;

(g) categorise individuals using biometric data to deduce or infer race, political opinions, trade-union membership, religious or philosophical beliefs, sex life, or sexual orientation, except where a lawful statutory exception applies;

(h) conduct real-time remote biometric identification in publicly accessible spaces for law-enforcement purposes except where strictly authorised by applicable law and all required necessity, proportionality, assessment, registration, authorisation, and oversight conditions are satisfied; or

(i) intentionally generate or manipulate non-consensual intimate material or child sexual abuse material, or circumvent reasonable safeguards intended to prevent such content.

Customer must not circumvent safety measures intended to prevent prohibited AI practices and must promptly investigate, stop, and report known or suspected misuse.

5B. Additional U.S. AI and Consumer Protection Restrictions

Customer and each User may not use the Services to: (a) discriminate unlawfully or make a decision based on a protected characteristic or a proxy intentionally designed to produce that result; (b) manipulate a person through materially deceptive design or undisclosed impersonation in a manner likely to cause substantial harm; (c) engage in unlawful social scoring, unlawful biometric identification or categorisation, or unlawful inference of highly sensitive traits; (d) create or deploy an automated employment decision tool without required notice, bias audit, publication, and accommodation procedures; (e) make an adverse credit decision when the specific and accurate reasons for that action cannot be provided; or (f) falsely hold an AI system out as a licensed professional, government official, real individual, or human customer-service representative.

Customer and each User may not use an AI companion, chatbot, synthetic voice, or interactive system in a way that violates applicable safeguards for minors, suicide or self-harm response requirements, crisis escalation duties, or clear and conspicuous AI-disclosure requirements. Business-operational agents are not exempt from general deception, privacy, safety, or discrimination laws.

6. Security and Integrity of the Services

Customer and each User may not:

(a) probe, scan, or test the vulnerability of the Services or any system or network connected to the Services, except under a written authorized-testing program agreed in writing with Team Clarity;

(b) breach, circumvent, or attempt to circumvent any authentication, authorization, rate-limiting, quota, isolation, sandboxing, or other security or access-control measure;

(c) access any account, environment, tenant, model, dataset, or other resource that Customer is not authorized to access;

(d) introduce malware, ransomware, time bombs, trojans, or other harmful code into the Services or any connected system; or

(e) use the Services to attack, overwhelm, or impair any third-party system, including through denial-of-service or amplification techniques.

Customer must promptly notify Team Clarity at legal@teamclarity.ai of any suspected unauthorized access, compromised credentials, unintended agent activity, misconfigured workflow, or other security incident affecting the Services, consistent with Customer's obligations under the Privacy Policy and the DPA.

7. Data Restrictions

Customer and each User may not submit to, process through, or generate within the Services any of the following categories of data unless expressly authorized in writing through a signed Order Form, DPA, business associate agreement, security addendum, or other written agreement with Team Clarity:

(a) protected health information subject to HIPAA or analogous laws;

(b) payment card data or cardholder data subject to PCI DSS;

(d) export-controlled data, including data subject to the International Traffic in Arms Regulations or the Export Administration Regulations;

(e) classified information;

(f) personal data of children under the age of 13, or under any higher age of digital consent that applies under local law;

(g) biometric identifiers or biometric information used for unique identification;

(h) genetic data; and

(i) precise geolocation data;

(j) emotion-recognition data; and

(k) biometric-categorisation data or biometric data used to infer sensitive characteristics.

Customer remains the controller of Customer Personal Data (as defined in the DPA) and is solely responsible for establishing a lawful basis, providing required notices, and obtaining required consents for any data submitted to the Services. Customer Personal Data will not be used to train or fine-tune any third-party foundation model, consistent with Section 6 of the DPA.

Customer must not submit consumer health data, substance-use-disorder records, nonpublic financial information, student records, voiceprints, face geometry, fingerprints, or other biometric identifiers except through an Eligible Service activated under the corresponding signed Regulatory Addendum. General terms, a standard DPA, or a support ticket do not constitute authorization.

8. High-Risk and Regulated Use

Customer and each User may not use the Services to make, materially inform, or automate decisions in credit, employment, housing, insurance, education, healthcare, legal, financial, government benefits, immigration, or similarly regulated contexts (each, a "High-Risk Decision") without:

(a) appropriate human review of each decision by a qualified person;

(b) a documented legal basis under applicable law;

(d) where required by the Agreement, Team Clarity's prior written approval.

Customer and each User may not use the Services for the design, development, testing, or operation of weapons systems, military targeting, law-enforcement surveillance, emergency response, or the control of critical infrastructure (including power, water, transportation, or telecommunications systems) without Team Clarity's express prior written approval. This Section 8 is in addition to, and does not limit, Section 14 of the Terms of Service.

Customer must assess whether each intended use is prohibited, high-risk, transparency-regulated, or otherwise regulated under Applicable AI Law. If a use qualifies as high-risk, Customer must implement all applicable risk management, data governance, documentation, logging, human oversight, accuracy, robustness, cybersecurity, impact-assessment, registration, conformity, monitoring, and reporting measures when those obligations apply. Iron Gorilla's availability for a use case does not constitute a legal classification or approval of that use case.

8A. Consequential Decisions

Before using the Services in a consequential decision, Customer must document the intended purpose, decision owner, affected population, data sources, material factors, performance limitations, foreseeable misuse, human-review process, appeal or reconsideration process, and monitoring plan. Customer must conduct and retain any legally required impact assessment, validation, bias audit, or risk assessment and must not suppress or mischaracterize material limitations communicated by Team Clarity or an upstream provider.

Customer must provide affected persons with any required pre-use notice, point-of-interaction notice, post-adverse-outcome explanation, correction right, access right, alternative process, disability accommodation, meaningful human review, or appeal. Human review must be performed by a person with appropriate training, authority, time, and access to relevant information, not merely a rubber-stamp of the automated result.

9. Identity, Authority, and Misrepresentation

Customer and each User may not:

(a) impersonate any person or entity or misrepresent their affiliation, authority, qualifications, or identity;

(b) misrepresent that content or output generated by the Services was authored by a human, where applicable law or platform policy requires disclosure of synthetic content;

(c) use the Services to engage in unlawful collection, processing, identification, tracking, monitoring, or surveillance of individuals, including biometric identification of individuals in publicly accessible spaces; or

(d) facilitate the foregoing by others.

9A. AI Transparency, Marking, Detection, and Labelling

Customer and each User must use AI Transparency Features in accordance with the Agreement, Applicable AI Law, and current documentation. Customer and each User must:

(a) retain and not intentionally alter, strip, remove, disable, obscure, or circumvent existing machine-readable marks, content credentials, provenance metadata, watermarks, content fingerprints, detection signposts, or similar signals, including when content is uploaded, transformed, exported, downloaded, transmitted, republished, or redistributed;

(b) not forge, spoof, falsify, transplant, or misapply a mark, label, icon, provenance record, detection result, or disclosure, and not falsely represent the origin, authorship, authenticity, or human review of content;

(c) where Customer controls an interface through which natural persons interact directly with an AI system, enable and present a clear and distinguishable notice that they are interacting with AI no later than the start of the first interaction, unless a narrow statutory exception clearly applies;

(d) clearly disclose Deep Fake content no later than first exposure using a visible, audible, or otherwise directly perceivable label; a machine-readable mark alone is not sufficient for this deployer disclosure obligation;

(e) clearly disclose AI-generated or manipulated text published to inform the public on matters of public interest, unless the text has undergone substantive human review or editorial control and a natural or legal person holds editorial responsibility for the publication;

(f) when relying on a human-review or editorial-control exception, ensure that the review is substantive rather than limited to grammar, spelling, formatting, or other superficial checks, and keep reasonable evidence of the review and editorial responsibility;

(g) inform natural persons exposed to an emotion-recognition or biometric-categorisation system of the system's operation and satisfy all applicable privacy and data-protection requirements;

(h) provide required information clearly, distinguishably, accessibly, and in an appropriate language, no later than first interaction or exposure, and repeat or maintain the disclosure where necessary for it to remain perceivable;

(i) ensure that Customer's users, contractors, distributors, publishers, and other downstream recipients preserve required marks and disclosures and do not use the Services to evade them; and

(j) promptly notify Team Clarity of missing, defective, forged, removed, or compromised AI Transparency Features affecting the Services or of any regulatory inquiry concerning them.

For evidently artistic, creative, satirical, fictional, or analogous works, Customer may use an appropriately contextual disclosure that does not unnecessarily hamper the display or enjoyment of the work, where permitted by law. Optional EU icons or other approved indicators may be used, but they do not replace any required understandable text or audible disclosure.

Where Customer sends commercial email, telephone calls, SMS, automated messages, or artificial or prerecorded voice communications through or with assistance from the Services, Customer must obtain and document legally required consent, honor opt-outs and do-not-call requests, use accurate routing and caller information, provide required AI or artificial-voice disclosures, and maintain required records.

Customer and each User may not create, solicit, upload, host, publish, distribute, threaten to distribute, or facilitate nonconsensual intimate imagery, including digitally altered or AI-generated intimate depictions. Customer must not interfere with, evade, retaliate against, or submit a materially false request under any legally required intimate-image removal process, and must preserve and provide information reasonably necessary for lawful removal and duplicate-content controls.

10. Third-Party Integrations and Connected Systems

Customer is responsible for any third-party platform, model provider, data source, application, agent, plugin, or other system that Customer connects to or accesses through the Services, including the credentials, API keys, tokens, scopes, and permissions used for those connections. Customer must:

(a) have a valid lawful basis and any required consents to access and process data through each connection;

(b) comply with the terms and policies of each connected service;

(d) promptly revoke credentials and access when no longer needed or when compromise is suspected.

Customer may not use the Services to access any third-party system without authorization from the operator of that system.

Customer must configure connected systems and transformation workflows, where reasonably available, to preserve upstream AI Transparency Features and must not select formats, settings, or tools for the purpose of defeating or removing those features.

11. Resale, Competitive Use, and Benchmarking

Customer and each User may not:

(a) resell, sublicense, white-label, distribute, or provide managed services using the Services without a separate written partner agreement with Team Clarity; or

(b) use the Services or any information derived from the Services, including outputs, telemetry, benchmarks, evaluations, or documentation, to develop, train, improve, benchmark, or operate a competing AI governance, runtime, orchestration, model proxy, compliance, observability, policy, or agent-execution platform. Customer may publish performance or evaluation results regarding the Services only with Team Clarity's prior written approval.

12. Automated Decisions and Human Review

Where Customer uses the Services to configure agents, workflows, or models that produce decisions, recommendations, or actions affecting individuals, Customer is responsible for:

(a) determining whether the use constitutes solely automated decision-making under applicable law;

(b) providing the notices, legal bases, and human-review or appeal rights required by applicable law; and

(c) implementing appropriate human-in-the-loop review for High-Risk Decisions described in Section 8. Iron Gorilla's features for human review, logging, and policy enforcement do not relieve Customer of these obligations.

For regulated automated decisions, Customer must also document the intended purpose, legal classification, human-review process, decision authority, relevant notices, and any appeal or contest mechanism required by law. Detection results and AI-origin signals may not be treated as the sole basis for an adverse decision about a person.

Customer must not disable, hide, materially delay, or place behind deceptive interface elements any legally required notice, consent request, privacy choice, accessibility mechanism, correction route, human-review request, appeal process, or synthetic-content disclosure.

13. Customer Responsibility for End Users

Customer must:

(a) require each User to comply with this AUP, including through written terms or internal policies that are at least as protective as this AUP;

(b) ensure that each User is at least 18 years of age and is not a child whose data is subject to enhanced protections under applicable law;

(c) configure and use the Services securely, including by protecting credentials, assigning appropriate permissions, and managing connected systems consistent with the Privacy Policy and the DPA; and

(d) promptly investigate and address any suspected violation of this AUP by a User.

Customer is liable to Team Clarity for acts and omissions of its Users to the same extent as if Customer had taken those acts or omissions itself.

(e) take proportionate measures to support the development of AI literacy among Users who operate or use AI systems on Customer's behalf, taking into account their knowledge, experience, training, use context, and affected persons.

14. Reporting Violations

To report a suspected violation of this AUP, abuse of the Services, a security issue, a missing or compromised AI Transparency Feature, or an AI-law compliance concern, contact Team Clarity at legal@teamclarity.ai. Customer must notify Team Clarity promptly upon becoming aware of any actual or suspected violation involving Customer's account, Users, Customer Data, outputs, published content, or connected systems. Reports should include sufficient detail to enable Team Clarity to investigate, including affected accounts or environments, the nature of the conduct, the time period involved, relevant content or output identifiers, and supporting evidence.

15. Investigation, Suspension, and Termination

Team Clarity may investigate suspected violations of this AUP, including by reviewing logs, telemetry, and configurations to the extent permitted under the Agreement and applicable law. Without limiting any other rights or remedies under the Agreement, Team Clarity may, with or without prior notice:

(a) suspend or restrict access to all or part of the Services;

(b) remove or disable content, prompts, agents, workflows, or integrations;

(d) terminate the Agreement,

in each case where Team Clarity reasonably believes that a violation has occurred, is occurring, or is likely to occur, or that action is necessary to protect the Services, Team Clarity, its customers, or third parties. Where practicable and consistent with legal, security, and operational considerations, Team Clarity will provide notice and an opportunity to cure before suspension or termination for a non-emergency violation.

16. Changes to this Policy

Team Clarity may update this AUP from time to time. Changes reasonably necessary for legal or regulatory compliance, AI transparency, security, abuse prevention, or protection of persons may take effect when posted or on a shorter notice period where reasonably necessary. Other material changes will be communicated as described in the Terms of Service. Continued use of the Services after the effective date of an update constitutes acceptance of the updated AUP.

17. Contact

Team Clarity, Inc.
1111B S Governors Ave #41605
Dover, Delaware 19904
legal@teamclarity.ai