Acceptable use policy

1. Scope

This policy applies to everyone using a Trivena Site: your staff, your contractors, anyone you invite to a portal, and any integration you build against the API. You are responsible for the conduct of the accounts you create.

2. What you may not do

Unlawful activity

• Anything unlawful under Dutch or European Union law
• Storing or distributing material that infringes intellectual property rights you do not hold
• Processing personal data without a lawful basis, or in breach of your own obligations as a controller
• Fraud, money laundering, or evading sanctions

Harm to others

• Sending unsolicited bulk email, or any messaging that would breach Dutch or European rules on electronic marketing
• Harassment, threats, or distributing material depicting abuse
• Distributing malware, or using a Site to host phishing content
• Using the platform to attack, scan or probe any system, ours or anyone else's

Harm to the platform

• Attempting to access another customer's Site, data or infrastructure
• Circumventing resource limits, billing meters or authentication mechanisms
• Deliberately generating load intended to degrade the service for others
• Reverse engineering, decompiling or attempting to extract the source of the platform
• Reselling, sublicensing or providing the platform as a service to third parties without a written agreement with us

Misuse of the AI agents

• Attempting to make an agent exceed the permissions of the invoking user
• Using an agent to generate content that would breach any other part of this policy
• Presenting agent output as professional legal, tax or medical advice without appropriate human review
• Automated bulk querying designed to extract platform behaviour rather than to run your business

3. Fair use of resources

Each plan includes allowances for compute, database size and file storage, published on the usage page. Ordinary business use, however intense, is fine. What is not fine is using a Site as generic infrastructure: crypto mining, media hosting unrelated to your business, file distribution to the public, or running workloads that have nothing to do with operating your company.

If you consistently exceed your allowances through legitimate business growth, we contact you and move you up a plan. That is a commercial conversation, not an enforcement action, and the two are never confused.

4. Security expectations of you

• Enable two-factor authentication for administrators, at minimum
• Remove accounts promptly when people leave
• Do not share credentials between people
• Keep API keys secret, and rotate them if exposure is suspected
• Tell us promptly if you suspect an account has been compromised

5. Reporting a problem

To report abuse, or to disclose a security vulnerability, write to khadeem.smart@tynk-tech.nl. Security reports are read the same day. If you are a researcher acting in good faith, testing only against your own trial Site and not accessing other people's data, we will not pursue you and we will credit you if you want to be credited.

6. Enforcement

Where something is reported or detected, our first step is almost always to contact you, because the overwhelming majority of cases are a misconfigured integration or a compromised account rather than intent. Where the activity is serious, ongoing, or actively harming others, we may suspend the specific activity or the Site while it is resolved.

Suspension is a last resort, never used as leverage in a commercial disagreement, and you keep the right to export your data throughout. Repeated or deliberate breach may lead to termination under the terms of service.

---

Questions about this document go to khadeem.smart@tynk-tech.nl. Trivena Technologies B.V. (i.o.) is established in the Netherlands, and these documents are governed by Dutch law.