Acceptable Use Policy

Use information and systems you have rights to use

Do not submit, request, distribute or facilitate illegal content, infringement, fraud, impersonation, threats, harassment, exploitation or unlawful discrimination. Do not use another person’s identity or confidential information without authority. You must have the rights and lawful basis needed to process your customer and end-user data through Huck and its providers.

Respect access boundaries

Do not steal credentials, bypass gates, probe other customers’ information, evade rate or spending limits, disrupt the service, send malware or perform unauthorized security testing. Do not conceal instructions in sources to override another customer’s controls. Testing your own integration and reporting a vulnerability responsibly are welcome within the scope of our Security Reporting page.

Keep restricted data out of ordinary workspaces

Do not submit complete payment-card data, passwords, private keys, government authentication secrets or highly sensitive personal records that are not necessary and lawfully supported. Do not use Huck to process protected health information requiring a HIPAA business associate agreement, regulated biometric identification, classified data or similarly restricted information unless BWD has expressly agreed to the required arrangement in writing. No such certification or agreement is included by default.

Do not use the service for sexual exploitation, child sexual content, trafficking, violent wrongdoing or unlawful surveillance. Do not deploy a child-directed assistant or knowingly collect children’s personal data without a separate approved arrangement. Do not use outputs as the sole decision-maker for consequential decisions about a person’s rights or access to essential services.

Be clear with your end users

Identify automated interactions and provide appropriate privacy and AI notices. Do not present AI output as a human professional’s verified advice, or claim that evaluation scores guarantee accuracy. Maintain a practical route to a person for consequential or disputed matters. Branding removal does not authorize misleading people about automation, the merchant or who handles their information.

Reports and proportionate enforcement

Report suspected misuse through support or the contact below. We may investigate, limit harmful activity, preserve necessary evidence or suspend access consistent with our terms and applicable law. We will consider context and provide notice where lawful and practicable. You may request review of an enforcement error. We do not undertake to review every source, conversation or output before it is used.