Acceptable Use Policy

This Acceptable Use Policy ("AUP") outlines the acceptable behavior, content standards, and prohibited activities when utilizing the DocChat platform, APIs, and associated services (the "Services"). This policy is designed to protect AgileCatalyst ai LTD, our Customers, and the broader internet community from illegal, malicious, or irresponsible activity.

1. Introduction and Scope

By accessing or using the Services, you ("Customer", "User", or "you") agree to comply with this AUP. This policy is incorporated by reference into the AgileCatalyst ai LTD Master Services Agreement or Terms of Service applicable to your account. AgileCatalyst ai LTD reserves the right to modify this AUP at any time to address new threats, regulatory changes, or platform evolution.

2. Prohibited Content

You may not use the Services to collect, store, transmit, process, or distribute any content or material that falls into the following categories:

• Illegal Content: Any content that violates applicable local, national, or international laws or regulations, including but not limited to the laws of the United Arab Emirates. This includes materials related to money laundering, terrorism financing, or the distribution of illicit goods.
• Harmful or Abusive Content: Content that is defamatory, obscene, harassing, abusive, fraudulent, or promotes violence or discrimination based on race, sex, religion, nationality, disability, sexual orientation, or age.
• Infringing Content: Material that infringes upon or misappropriates the intellectual property rights, privacy rights, publicity rights, or other proprietary rights of any third party (e.g., unauthorized sharing of copyrighted documents).
• Deceptive Content: Phishing materials, scams, pyramid schemes, or any content designed to deceive, mislead, or defraud end-users or the public.

3. Prohibited Activities

To maintain the security and availability of the platform, the following activities are strictly prohibited:

• Unauthorized Access Attempts: Attempting to probe, scan, or test the vulnerability of the DocChat system or network, or breaching security or authentication measures without express written authorization from AgileCatalyst ai LTD.
• Service Disruption / DDoS: Interfering with, disrupting, or disabling service to any user, host, or network. This includes, without limitation, executing denial of service (DoS) attacks, distributed denial of service (DDoS) attacks, mailbombing, or deliberately overloading the system infrastructure.
• Reverse Engineering or Scraping: Reverse engineering, decompiling, disassembling, or otherwise attempting to derive the source code or underlying architecture of the Services. Utilizing automated scripts, bots, spiders, or scrapers to extract data from the platform is expressly forbidden.
• Spam and Unsolicited Messaging: Using the platform's notification or SMS gateway systems to transmit unsolicited bulk messages, commercial advertisements, or spam. The messaging capabilities must be used solely for legitimate, requested document collection workflows.
• Malicious Code: Transmitting viruses, worms, Trojan horses, ransomware, spyware, or any other malicious code or software designed to damage, destroy, or covertly intercept data.

4. Service Usage Limits

DocChat is a multi-tenant SaaS environment. To ensure high performance for all Customers, usage must remain within reasonable technical boundaries:

• API Rate Limits: Customers must adhere strictly to the documented API rate limits. Attempting to bypass or manipulate these rate limits through multiple IP addresses or automated evasion techniques is a violation of this AUP.
• Storage Constraints: While we provide substantial storage capacity for document payloads, Customers must not use the Services as a general-purpose file hosting or archiving service for data unrelated to the core document collection workflow.
• Messaging Quotas: SMS and email notifications are subject to fair use constraints as outlined in your specific Order Form. Excessive or abusive triggering of the notification infrastructure will result in throttling.

5. Content Standards for Collected Documents

DocChat facilitates the secure collection of sensitive documents from your end-customers. You acknowledge and agree to the following standards regarding this collection:

• Compliance with KYC/AML Regulations: The Customer bears sole responsibility for ensuring that the types of documents requested and collected via the platform comply with all relevant Know Your Customer (KYC), Anti-Money Laundering (AML), and industry-specific regulations governing their institution.
• End-Customer Consent: The Customer is responsible for obtaining all necessary consents and authorizations from end-customers prior to utilizing DocChat to request, process, or store their personal documentation.

6. Account Integrity and Security

Maintaining the integrity of Operator accounts is paramount to the security of the DocChat ecosystem.

• One Account per Legal Entity: Unless explicitly authorized, Customers may not create multiple isolated tenants or organizations to bypass billing or usage limits.
• Authorized Users Only: Account credentials (usernames, passwords) must not be shared among multiple individuals. Each employee or contractor must utilize their own unique provisioning.
• Breach Notification: If a Customer becomes aware of any unauthorized access to their Operator Console, compromised credentials, or any other security incident affecting their account, they must notify AgileCatalyst ai LTD immediately.

7. Reporting Violations

DocChat relies on our community of users to help maintain a safe environment. If you become aware of any violation of this AUP, or if you receive abusive content originating from the DocChat platform, please report it immediately to our abuse team.

Report Abuse: abuse [at] docchat.co (Please include relevant headers, timestamps, and details).

8. Enforcement Mechanisms

AgileCatalyst ai LTD takes violations of this AUP seriously and reserves the right to take appropriate enforcement action at its sole discretion. Depending on the severity of the violation, enforcement actions may include:

• Warning: Issuing a formal warning requesting immediate cessation of the prohibited activity.
• Content Removal: Quarantining, disabling access to, or permanently deleting content that violates this policy.
• Suspension: Temporarily suspending Customer or specific Authorized User access to the Services until the violation is resolved.
• Termination: In cases of severe or repeated violations, permanently terminating the Customer's account and Master Services Agreement for cause, without refund.

9. Cooperation with Law Enforcement

AgileCatalyst ai LTD respects the law and will cooperate fully with recognized law enforcement agencies, regulatory bodies (such as the CBUAE or Dubai Police), and judicial authorities in investigations of suspected illegal activity. This cooperation may include, subject to valid legal process, the disclosure of Customer account information, audit logs, and technical telemetry.

10. Changes to this Policy

AgileCatalyst ai LTD may periodically revise this Acceptable Use Policy. When material changes are made, we will notify the administrative contacts on your account. Your continued use of the Services following the posting of an updated AUP constitutes your acceptance of those changes.

Last Updated: May 15, 2026