Legal & Privacy

Acceptable Use Policy

This Acceptable Use Policy ("AUP") is incorporated by reference into the Terms of Service for the AI chat and data-masking gateway service (the "Service", "Filterit") provided by the operator of filterit (the "Operator"). Capitalised terms have the meaning given in the Terms. Violating this AUP is a breach of the Terms.

1. Purpose and Scope

1.1 This AUP sets out conduct and content that are prohibited when using the Service. It applies to all Users and all use of the Service, including chat, document and image upload and OCR, visual redaction, the Email Assistant and mail automation, meetings, the review grid, the Masking API, the MCP server, the editor plugins, the browser extension, the Word add-in and the desktop agent.

1.2 Because the Operator funds AI usage under its own provider accounts, your use must additionally comply with the usage policies of the integrated AI providers, currently Anthropic (Section 6).

2. Prohibited Content

You must not use the Service to create, upload, transmit, or generate content that:

2.1 is illegal under applicable law, or that promotes, facilitates, or incites illegal activity;

2.2 sexually exploits or endangers minors, or constitutes child sexual abuse material (CSAM), strictly prohibited and reported as required by law;

2.3 is defamatory, harassing, threatening, hateful, or that incites violence or discrimination against individuals or groups;

2.4 infringes intellectual-property rights, trade secrets, or other proprietary rights;

2.5 contains malware, exploits, or code intended to disrupt or gain unauthorised access to systems;

2.6 facilitates fraud, deception, phishing, or impersonation;

2.7 provides instructions for the creation of weapons (including chemical, biological, radiological, nuclear, or conventional weapons) or for other activities that pose a serious risk of physical harm.

3. Prohibited Conduct: Data and Privacy

3.1 You must not input personal data of others without a lawful basis and all required consents and notices (see Terms Section 4). You are responsible for ensuring you are entitled to submit any data you upload, including special-category data.

3.2 You must not use the Service to surveil, profile, or de-anonymise individuals unlawfully, or to process biometric, health, or other sensitive data without an applicable legal condition.

3.3 You must not submit data that you are not authorised to share. The Service's masking is best-effort pseudonymisation, not anonymisation, and must not be treated as a compliance substitute.

4. Prohibited Conduct: Security and Integrity

You must not:

4.1 attempt to defeat, bypass, disable, or degrade the masking, redaction, safety, rate-limiting, or security mechanisms of the Service, other than through the options the Service itself offers (RAW mode, Original file mode), which you use at your own responsibility;

4.2 use prompt injection, jailbreaks, or similar techniques to cause the Service or the underlying AI to ignore safety instructions, reveal system prompts, or behave outside the intended scope;

4.3 attempt to extract, infer, or access other users' data, the Vault contents, tokens-to-value mappings, or the Operator's confidential information;

4.4 reverse-engineer, decompile, or attempt to derive the source code, models, or tokenisation scheme, except as permitted by mandatory law;

4.5 probe, scan, or test the vulnerability of the Service without prior written authorisation, or breach any security/authentication measure.

5. Prohibited Conduct: Abuse and Automation

You must not:

5.1 engage in automated abuse, including scraping, bulk harvesting, or using bots/scripts except via interfaces and within limits we expressly permit;

5.2 evade or attempt to evade rate limits, usage quotas, tier restrictions, or billing controls, including by creating multiple accounts;

5.3 resell, sublicense, or provide the Service (or AI capacity consumed under the Operator's accounts) to third parties without written authorisation;

5.4 impose an unreasonable or disproportionately large load on the infrastructure, or interfere with other Users' use of the Service.

6. Compliance with AI Provider Policies

6.1 Because AI inference runs under the Operator's account with Anthropic, PBC (and any provider added under Section 6.2), you must comply with that provider's usage/acceptable-use policies as updated from time to time, including their restrictions on prohibited use cases.

6.2 You must not use the Service in any manner that would cause the Operator to breach its agreements with those providers. The Operator may add or change AI providers with notice (see the sub-processor page); the same flow-down obligation applies to any added provider.

7. Email Assistant: Additional Rules

7.1 You may connect only mailboxes you own or are authorised to access. You must not use the Email Assistant to send spam, to impersonate others, or to process third-party email content without a lawful basis.

7.2 You remain responsible for reviewing and sending any draft; the Operator does not send messages on your behalf without your action. Mail automation prepares drafts in your mailbox; nothing is sent, created in a calendar or filed as a work item without your decision.

8. Reporting

8.1 To report abuse or a security issue, contact contact@filterit.app. Do not include unnecessary personal data in your report.

9. Consequences of Violation

9.1 We may, at our discretion and without prior notice where appropriate: remove or block content; throttle, suspend, or terminate your access or account; preserve and disclose information to comply with law or protect rights; and pursue any available legal remedies.

9.2 Serious violations (including CSAM, threats of harm, or unlawful access) may be reported to law-enforcement and to the affected AI providers.

9.3 These measures are in addition to the Operator's rights under the Terms of Service, including indemnity and termination.

10. Changes

10.1 We may update this AUP with notice as provided in the Terms. The "Last updated" date reflects the current version.