Reqursor Platform Acceptable Use Policy

About this Policy

This Acceptable Use Policy (the "Policy") sets out the conduct and content standards that apply to everyone who uses Reqursor Platform, the AI platform of Reqursor Technologies ("Reqursor", "we", "us") that builds, moves and runs online stores. Reqursor Platform is in early access. You describe a store in plain words, our AI proposes the changes, and you confirm every AI-proposed change before it takes effect. The platform then runs each store in its own isolated environment. Because many customers share the platform, the way you use it affects the security and stability of the others. This Policy keeps it safe and reliable for all of them.

This Policy is binding: By using Reqursor Platform, you agree to this Policy for yourself and for every team member you enable. It supplements section 9 (Acceptable Use) of the Reqursor Platform Terms of Service. Where this Policy conflicts with those Terms or with a written agreement with us, the Terms or that agreement prevail.

1. Purpose and Scope

This Policy covers all use of Reqursor Platform: its control plane, dashboard, AI services, APIs, managed infrastructure and every online store that is built, migrated or run through it (together, the "Services"). It applies to every customer and to every employee, contractor, agent and team member who acts for a customer or through a customer's account (each, a "User"). Reqursor Platform is for business customers. The customer is responsible for making sure all of its Users follow this Policy. Terms that this Policy does not define have the meaning given in the Terms of Service.

2. General Standard of Use

You may use the Services only for lawful purposes and in line with this Policy, the Terms of Service and all applicable laws, including the laws of the Netherlands and the European Union. You must not use the Services in any way that is unlawful, fraudulent or harmful, or that could damage, disable, overburden or impair the Services or interfere with another customer's use of them.

3. Prohibited Content

You must not use the Services to host, store, send, distribute, sell or make available content that is unlawful or that falls into the categories below. This applies to the content of your online stores, to store definitions, to the instructions you give the AI and to any other data you process through the platform.

• Content that is illegal under applicable law, or that promotes, facilitates or incites illegal activity.
• Malware, viruses, worms, trojans, ransomware, cryptominers or any other malicious or self-propagating code.
• Phishing pages, fraudulent payment forms, deceptive login screens or other content designed to trick people into giving up credentials, payment details or personal data.
• Content that infringes the intellectual property rights of others, including copyright, trademark, trade secret, patent or database rights, or that copies another party's brand or identity.
• Goods or services whose sale is illegal, restricted or prohibited where you or your customers are, including illegal drugs, weapons, counterfeit goods and unlicensed regulated products.
• Content that is defamatory, harassing, threatening or hateful, or that depicts or promotes the exploitation of minors or violence.
• Content that violates applicable privacy, data protection or consumer protection law.

4. Prohibited Activities

You must not engage in, and must not allow any User to engage in, any of the following when using the Services.

• Sending unsolicited bulk or commercial messages ("spam"), running mailing lists without valid consent, or using the Services to support spam that starts elsewhere.
• Spreading malware, or hosting command-and-control, exfiltration or drop sites for malicious campaigns.
• Running phishing, carding or any other fraudulent or deceptive scheme.
• Infringing, or helping others infringe, intellectual property or publicity rights.
• Collecting or scraping data about other customers, their stores or the platform without permission.
• Misrepresenting your identity or affiliation, or forging headers or identifiers to hide where content or traffic comes from.
• Reverse engineering, benchmarking or extracting the control plane, the AI services or the deployment logic, or using the Services to build a competing platform, beyond what applicable law expressly allows.
• Using the AI to produce content that breaks this Policy, or trying to make it ignore its safety rules, for example by hiding instructions in store content, imported pages or other material it reads.

5. AI Features and Confirmation of Changes

The AI proposes changes, and nothing takes effect until you confirm it. You are responsible for reviewing every AI-proposed change and for confirming only changes that comply with this Policy and the law. AI output can need adjusting: placeholder text, stock imagery and first settings are starting points, not final content. You must not give the AI content that you have no right to use, and you must not use confirmation shortcuts, automation or shared logins to approve changes on behalf of someone who has not reviewed them.

6. Security and Platform Integrity

Reqursor Platform runs every store in its own isolated environment, with its own private network and storage, and it checks every change before it goes live. These controls protect you and every other customer. You must respect them and must not try to get around them. In particular, you must not:

• Try to bypass, weaken or defeat the isolation between stores or organizations, or access data, stores or resources that belong to another organization.
• Gain or try to gain unauthorized access to any account, system, network, platform component or infrastructure, whether by exploiting a vulnerability, using stolen or shared credentials, or otherwise.
• Disrupt, degrade or interfere with the platform, its checks, its monitoring or the availability of the Services for other customers, including through denial-of-service or resource-exhaustion techniques.
• Get around the confirmation step, the checks that run before a change goes live, or the record of changes, or tamper with how changes are recorded.
• Bring in configuration, code or extensions meant to escape the isolation of a store, raise privileges, switch off monitoring or hide changes.
• Share your credentials, let anyone use your account who is not a User, or turn off multi-factor authentication when the platform asks you to use it.
• Probe, scan or test the platform or its infrastructure for vulnerabilities without our written permission.

Isolation and checks are security controls: Per-store isolation, the confirmation step and the checks before a change goes live protect every customer. Any attempt to defeat them is a serious breach of this Policy and can lead to immediate suspension.

7. Resource and Fair Use

You must use the Services fairly and within the limits of your plan. You must not place an unreasonable or disproportionate load on the platform or on shared resources, or affect other customers. This includes excessive automated requests, runaway or abusive AI or deployment activity, storage or bandwidth abuse, and cryptocurrency mining or similar workloads. If you need more than your plan includes, upgrade your plan. We may apply reasonable technical measures, such as rate limiting, to protect the stability and fairness of the platform.

8. Responsibility for Store Content

You own your store data and you are responsible for everything in the online stores you run on Reqursor Platform: the content, products, configuration and data, including everything the AI produced and you confirmed. You must make sure it is lawful, does not infringe the rights of others and follows this Policy. We operate the infrastructure and the deployment process. We do not review or endorse store content and do not take responsibility for it. You must make sure that every User and every person you give access to also follows the standards in this Policy.

9. Vulnerability Reporting

If you find or suspect a security vulnerability in Reqursor Platform, report it privately to [email protected]. Do not test our systems for vulnerabilities without our written permission; ask for it at the same address, and see our Responsible Disclosure Policy. If you find a problem by chance, stop, do not access, change or delete data that belongs to others, and report it. Do not disclose it publicly until we have had reasonable time to fix it. We acknowledge every report and keep you informed while we investigate. There is no bug bounty or other reward. Testing that we have authorized in writing, and that stays within that permission, is not a breach of this Policy.

How to report a vulnerability: Email [email protected] with the product and page or URL affected, the steps to reproduce it and the impact you expect. Never include live passwords or keys in a report. If a credential has leaked, tell us which one and change it first.

10. Enforcement, Suspension and Termination

We may investigate a suspected breach of this Policy and act in proportion to its nature and severity. Where we can, and where it does not put the platform or other customers at risk, we give notice and a chance to fix the problem first. We may act at once and without prior notice where a breach threatens security, integrity, availability or legal compliance, or where the law requires it. Our actions may include:

• Removing, disabling or isolating the content or the store concerned.
• Suspending or limiting access to affected accounts, stores or features.
• Throttling or limiting resource use.
• Ending your account in whole or in part, on the grounds the Terms of Service give us, in cases of serious or repeated breach.
• Keeping evidence, and cooperating with or reporting to the authorities where the law requires it or we have a lawful basis to do so.

Suspension or termination under this Policy does not limit any other right or remedy we have under the Terms of Service or the law. The Terms of Service say what happens to your data when an account ends, including how you can export it.

11. Reporting a Concern

If you see content or activity on Reqursor Platform that breaks this Policy, or you are unsure whether something is allowed, email [email protected]. Describe the issue and name the store or resource concerned, so that we can find and look into it. For anything else, email [email protected] or use the contact form at reqursor.com/contact. We handle reports in confidence as far as we reasonably can while we look into them.

12. Changes to this Policy

We may update this Policy when the platform, the law or our practice changes. We tell customers about material changes in advance, as the Terms of Service describe. The latest version carries its version number and effective date. If you disagree with a change, you may export your data and cancel before it takes effect.

13. Governing Law and Jurisdiction

Dutch law governs this Policy, without regard to its conflict-of-laws rules. The District Court of Rotterdam (Rechtbank Rotterdam), the Netherlands, has exclusive jurisdiction over any dispute that arises from or relates to this Policy and cannot be settled amicably, unless mandatory law says otherwise.

Questions about this Policy: [email protected]. Reqursor Technologies, Rotterdam, The Netherlands. Chamber of Commerce (KvK) number: 42184274.