Acceptable Use Policy

Effective June 5, 2026
Version 1.0 · Last updated June 5, 2026
Provider: Kirill Maximenko (Cyprus self-employed entity, TIN 60056031S)
3 Evagora Pitali, 4040 Germasogeia, Limassol, Cyprus
info@toolum.ai

1. About this Policy

This Acceptable Use Policy ("AUP") describes the uses of Toolum that we do not allow. It applies to every Builder, on every tier, in every Subscription Period. It applies to what you do with the Service, to what you build with it, and to what your Blueprints produce when they are run.

The AUP is enforced. Violations may result in warnings, restrictions on your account, suspension, account closure, and — for the most serious categories — reports to competent authorities. The enforcement framework is in Section 12 below.

1.1 How this AUP relates to other Toolum documents

This AUP forms part of the contractual framework set out in our Terms of Service. Section 10 of the Terms summarizes our enforcement powers; this AUP is the detailed list of the conduct that triggers them.

Where this AUP and any of those documents conflict on the specific subject of prohibited conduct, this AUP prevails.

1.2 Who this AUP applies to

This AUP applies to every Builder. There are no tier-based exemptions. The Free tier is bound by the same conduct rules as the Custom tier. Trial accounts, accounts created during free credit promotions, accounts created via partner referral, and accounts created via abuse-prevention review pathways are all bound by this AUP from the moment they are created.

This AUP also applies, on a pass-through basis, to anyone you authorize to use Toolum through your account. You are responsible for the conduct of any such authorized person on your account, and any violation by them is treated as a violation by you for AUP purposes.

1.3 Key terms

The terms below carry the meanings set out here when used in this AUP. Terms used in this AUP that are defined in the Terms of Service carry the meanings given there.

2. Prohibited content

The categories below describe content that you may not submit to Toolum, generate through Toolum, store on Toolum, or use Toolum to distribute. The list is comprehensive but not exhaustive — content that is materially similar to what is described below is also prohibited.

2.1 Child sexual abuse material

Toolum has zero tolerance for child sexual abuse material ("CSAM"). You may not submit, generate, store, or distribute CSAM through Toolum. You may not use Toolum to depict, simulate, or otherwise produce sexual content involving minors, in any medium, whether photorealistic, illustrated, or stylized. You may not use Toolum to build apps whose function is to produce, distribute, exchange, or grant access to such material.

Violations of this Section are reported to competent authorities in accordance with applicable law, including reporting to the National Center for Missing and Exploited Children ("NCMEC") or to its equivalent in the Cyprus jurisdiction. Accounts that violate this Section are closed without prior notice and without opportunity to cure.

2.2 Terrorist and violent extremist content

You may not use Toolum to produce, promote, distribute, or organize:

2.3 Content that infringes intellectual property rights

You may not submit, generate, or distribute content that infringes the copyright, trademark, patent, trade secret, or other intellectual property rights of any third party. This includes:

2.4 Hate speech, harassment, and content targeting protected groups

You may not use Toolum to produce or distribute content that:

2.5 Content that enables fraud, deception, or impersonation

You may not use Toolum to produce content that:

2.6 Disinformation campaigns and electoral interference

You may not use Toolum to produce or coordinate:

2.7 Content that enables physical harm

You may not use Toolum to produce:

2.8 Sexual content involving non-consent or coercion

You may not use Toolum to produce sexual content that:

Adult content in legal contexts between consenting adults is not the subject of this Section; that subject is addressed in Section 4 (Restricted uses) below.

3. Prohibited uses of the Service

The categories below describe uses of Toolum that are prohibited regardless of the content involved. These uses concern how you interact with the Service rather than what you put into it.

3.1 Service abuse and circumvention

You may not:

3.2 Automated abuse

You may not:

3.3 Misuse of AI inference

You may not:

3.4 Reverse engineering and intellectual property circumvention

You may not:

3.5 Tax, financial, and sanctions evasion

You may not use Toolum to:

4. Restricted uses

Some uses of Toolum are not categorically prohibited, but require additional care because of the regulatory environment, the audience affected, or the risk profile of the underlying activity. Toolum permits these uses under the conditions in this Section.

4.1 Adult content in legal contexts

Toolum permits the generation of adult content between consenting adults, in legal contexts, provided that:

4.2 Apps in regulated industries

Where you use Toolum to build apps in regulated industries — healthcare, financial services, legal services, gambling, alcohol, tobacco, firearms — you remain responsible for ensuring that the Deployed App complies with the regulatory requirements of the jurisdictions in which it is offered. Toolum's role is to provide the building tool; the regulatory compliance of the deployed product is yours.

In particular, where the Deployed App processes special categories of Personal Data under GDPR Article 9 — health data, biometric data, data about a person's sex life or sexual orientation — you are responsible for the additional legal-basis requirements of Article 9(2) and for any heightened security measures appropriate to the risk.

4.3 Election-related content

Toolum permits the creation of content related to elections, political campaigns, civic education, and political journalism. The categorical prohibitions in Section 2.6 (disinformation, coordinated inauthentic behavior, voter suppression) apply throughout. Builders working on election-related content should be aware that some jurisdictions impose additional disclosure requirements on synthetic media and political advertising; the Deployed App is responsible for meeting those requirements.

4.4 Personal Data of others

Where you upload, process, or generate Personal Data of natural persons other than yourself through Toolum, the framework in our Data Processing Addendum applies. The DPA is incorporated by reference into our Terms of Service and applies automatically; no separate signature is required.

In particular, you may not upload sensitive Personal Data — health records, financial records, government identifiers — into Toolum prompts or files unless you have a clear lawful basis for that processing and unless the data subjects whose Personal Data you upload have been informed in accordance with GDPR Articles 13 and 14.

4.5 Security research

Bona fide security research on Toolum may be conducted under the terms described in this Section. Permitted activities include:

Prohibited activities in the security-research context include accessing the data of Builders other than yourself, exfiltrating Customer Content of other Builders, sustained probing of Toolum infrastructure beyond what is necessary for the reported issue, and public disclosure of vulnerabilities before a reasonable remediation window has elapsed.

5. AI-specific prohibitions

This Section addresses uses of Toolum's AI capabilities that warrant additional explicit prohibition because of the technology's specific risk profile.

5.1 Misleading content about AI involvement

You may not represent AI-generated Output as the original creative work of a human author in contexts where the representation would mislead the recipient and where the recipient's reliance on human authorship has material consequences. Examples include misrepresenting AI-generated text as a human-written academic submission, a human-written professional opinion, or a human-written journalistic piece, where the institutional context requires human authorship.

5.2 Deepfakes and synthetic media of real persons

You may not use Toolum to produce synthetic media of identifiable real persons without that person's consent, particularly in the following contexts:

The categorical prohibitions in Section 2.5 (impersonation, deepfakes, forged documents) and Section 2.8 (sexual content involving non-consent) apply in addition to this Section.

5.3 AI marking and disclosure obligations

Where applicable law requires disclosure of AI involvement — for example, EU AI Act Article 50 obligations on certain categories of AI-generated content — you are responsible for ensuring that the Deployed App meets those disclosure requirements. Toolum's transparency framework, including the marking conventions described in our AI Transparency Statement Section 7, supports your compliance but does not substitute for it.

In particular, you may not strip, suppress, or alter the AI marking conventions on Outputs Toolum produces in any context where applicable law requires the marking to remain, even if our Terms of Service Section 9.2 permits suppression of optional markings (for example, the README badge) at the Service level.

5.4 Automated decision-making affecting individuals

Where you use Toolum to build a Deployed App that makes decisions about individuals with legal or similarly significant effects — credit decisions, insurance decisions, employment decisions, decisions about access to public benefits — you are responsible for the GDPR Article 22 framework that applies to those decisions, including provision of human review, meaningful information about the logic involved, and the opportunity for the affected individual to contest the decision.

Toolum's own processing under our Privacy Policy Section 13 does not extend to the automated decision-making the Deployed App carries out; that is the Builder's responsibility as Controller of that processing.

6. Responsibility for Customer Content and Deployed Apps

You are responsible for the Customer Content you submit to Toolum. You are responsible for the Deployed Apps you build with Toolum. Toolum's role is to provide the Service; what you put into it and what you build with it are yours.

6.1 Your warranties

By using Toolum, you warrant that:

6.2 Pass-through to End-Users of your Deployed Apps

You are responsible for the conduct of End-Users of your Deployed Apps to the extent that conduct involves Toolum infrastructure. Where End-Users of your Deployed Apps engage in conduct that would, if engaged in by you, violate this AUP, the violation is attributable to you for AUP purposes if you knew or should have known of the conduct and failed to take reasonable steps to address it.

This pass-through does not make Toolum responsible to your End-Users; Toolum's relationship with End-Users of your Deployed Apps is governed (if at all) by separate End-User License Agreements between you and your End-Users, not by this AUP.

7. AI provider safety layer

Toolum routes AI inference requests to the third-party AI providers identified in our Subprocessor List Section 5.1 and in our AI Transparency Statement Section 3. Each of those providers operates its own safety systems that may filter, refuse, or modify Outputs based on the provider's own content policies.

Provider-side safety decisions are made by the provider, not by Toolum, and are governed by the provider's own terms. If a provider refuses a generation, Toolum surfaces the refusal to you so that you can revise the prompt or try a different approach.

The provider-side safety layer operates independently of this AUP. Conduct that is permitted under this AUP may still be refused by a provider; conduct that violates this AUP is prohibited by Toolum regardless of whether a particular provider would also refuse it.

8. Inheritance of AI provider terms

When Toolum routes your requests to a third-party AI provider, your interaction with that provider is subject to the provider's own usage policies in addition to this AUP. This means that:

Toolum's contract with each provider obliges Toolum to ensure that Toolum's customers — that is, you — comply with the relevant provider's usage policy when routing through Toolum. Where the provider's policy is more restrictive than this AUP on a specific subject, the provider's policy applies to the routed request. Where this AUP is more restrictive than a provider's policy on a specific subject, this AUP applies.

You do not need to read each provider's policy separately to comply with this AUP. The categories prohibited under this AUP are intended to be at least as restrictive as the union of the providers' policies in the categories that matter for Toolum's deployment. If a request you submit is refused by a provider on policy grounds, the refusal is the operative signal; you do not need to determine whose specific policy is the basis for the refusal.

9. Children's safety

This Section addresses the protection of minors specifically. Provisions throughout this AUP — in particular Sections 2.1 (CSAM) and 2.4 (NCII) — apply to conduct affecting minors with the most serious enforcement consequences.

9.1 Toolum is not for use by persons under sixteen

Toolum is available to natural persons aged sixteen (16) or older, as described in our Terms of Service Section 2.4. If you are under sixteen, you may not create or use a Toolum account.

9.2 No sexual or sexualized content involving minors

The prohibition in Section 2.1 (CSAM) applies in all forms, including photorealistic, illustrated, stylized, computer-generated, and text-based depictions. There is no creative, satirical, or artistic exception to this prohibition.

9.3 No grooming, exploitation, or harm-facilitating content

You may not use Toolum to:

9.4 Reporting and authorities

Suspected child sexual abuse material and other content described in Section 9.2 is reported to the National Center for Missing and Exploited Children ("NCMEC") or to its equivalent in the Cyprus jurisdiction, as required by applicable law. Toolum cooperates with law enforcement in the investigation of such reports in accordance with our Privacy Policy Section 6.2.

10. Reporting AUP violations

If you become aware of AUP violations — whether by another Builder, by an End-User of your Deployed App, or by content that you have encountered on Toolum surfaces — you may report them as described below.

10.1 General abuse reports

For general reports of conduct that violates this AUP, write to info@toolum.ai with:

Toolum aims to acknowledge abuse reports within seven (7) business days and to investigate and act on them within a further reasonable period, depending on the complexity and severity of the report.

10.2 Reports involving CSAM, NCII, or imminent harm

For reports involving child sexual abuse material, non-consensual intimate imagery, credible threats of imminent harm, or other content of the highest severity, write to info@toolum.ai with "URGENT" in the subject line and a brief description of the issue. Toolum prioritizes these reports for immediate review and may take action without waiting for the standard review cycle.

10.3 Confidentiality and non-retaliation

Reporters are not identified to the parties they report on, except as required by applicable law or by a binding legal process. Builders who make abuse reports in good faith are protected from retaliation; Toolum does not penalize an account for making an abuse report, and Toolum prohibits other Builders from retaliating against reporters whose identity becomes known.

False or bad-faith reports — for example, reports made to harass another Builder, to interfere with another Builder's account, or to manipulate enforcement decisions — are themselves a violation of this AUP and may result in enforcement action against the reporter.

11. Cooperation with authorities and legal process

Toolum cooperates with law enforcement and with competent regulatory authorities in accordance with our Privacy Policy Section 6.2.

Before complying with any binding legal request, Toolum verifies that the request is lawful, that it is properly served on the appropriate entity, and that the scope of disclosure is limited to what the request actually requires. Where the law allows, Toolum informs the affected Builder of the request.

For categories of conduct described in this AUP that require mandatory reporting under applicable law — in particular, conduct described in Section 2.1 (CSAM) and Section 9 (children's safety) — Toolum's reporting obligations apply independently of the Builder's awareness or consent.

12. Enforcement

This Section is the operative enforcement framework. The substantive prohibitions are in Sections 2 through 9; this Section describes how those prohibitions are enforced.

12.1 The range of enforcement actions

Toolum's enforcement actions, in approximate order from least to most severe, are:

12.2 Curable versus non-curable violations

For violations that are curable — for example, the upload of content that infringes a third party's intellectual property right where the content can be removed and not re-uploaded — Toolum will generally provide notice and a reasonable cure period before progressing to suspension or termination. The cure period is set by reference to the nature of the violation and the operational risk.

For violations that are not curable — in particular, conduct described in Section 2.1 (CSAM), Section 2.7 (mass-casualty enablement), and similar categories of irreversible harm — Toolum may proceed directly to termination and to reporting to authorities without prior notice or cure period.

12.3 Multiple-violation accounts

An account that violates this AUP repeatedly, even in categories that are individually curable, may be terminated on the basis of the pattern of violation rather than on the basis of any specific violation. The threshold for pattern-based termination is set by reference to the severity of the underlying violations, the time period over which they occur, and the Builder's response to prior warnings.

12.4 Abuse-prevention system actions

Toolum's abuse-prevention system, described in our Privacy Policy Section 3.4, may identify accounts as part of mass-registration abuse clusters or as exhibiting patterns associated with automated abuse. Accounts so identified may be restricted, suspended, or closed by the system.

Where the abuse-prevention system action results in account suspension or closure, your right to request human review of the decision under GDPR Article 22 applies, as described in our Privacy Policy Section 13.

12.5 Effect on refunds

AUP violations affect refund eligibility as described in our Refund Policy Section 6.2. In summary, AUP-violating accounts are not eligible for the Category A (unused AI Credits) or Category B (Code Export Entitlement) refunds described in the Refund Policy. The Category C (Service defects) refund right is unaffected by AUP violation, because Category C addresses Toolum's failure to deliver the Service rather than the Builder's conduct.

12.6 Effect on data

Account termination for AUP violation triggers the data handling described in our Privacy Policy Section 8. The post-termination Export window described in the Terms of Service Section 15.6 applies in the ordinary course; however, where the AUP violation involves content that Toolum is legally prohibited from facilitating the further dissemination of — in particular, content described in Section 2.1 (CSAM) — the Export window does not extend to that content.

12.7 Appeals

If you believe an enforcement action has been taken in error, you may appeal by writing to info@toolum.ai with a description of the action, the basis for your appeal, and any context that would help Toolum reconsider. Toolum aims to respond to appeals within fourteen (14) calendar days.

For enforcement actions triggered by the automated abuse-prevention system, the human-review pathway described in our Privacy Policy Section 13 applies in addition to this Section 12.7. Both pathways are available; you may use either or both.

13. Changes to this AUP

The categories of misconduct addressed in this AUP reflect the current state of how Toolum is used and how the surrounding regulatory landscape applies. Both evolve.

13.1 How changes are published

When Toolum updates this AUP, the Last Updated date at the top of the document is revised. For substantive changes — new prohibited categories, material changes to the enforcement framework, or material changes to the scope of restricted uses — Toolum also revises the Effective Date and publishes a short summary of what changed.

Historic versions of this AUP are available at their dated URLs under /legal/aup/<date> and preserved in our public repository.

13.2 When Toolum notifies you of changes

For changes that materially affect your obligations under this AUP, Toolum provides at least fourteen (14) days advance notice through one or more of the channels described in our Terms of Service Section 23.2.

13.3 Non-material changes

Corrections of typographical errors, clarifications of existing language, and structural improvements that do not change the substance of any prohibition are made by updating the Last Updated date without separate notice.

14. Contact

For questions about this AUP, for abuse reports, for appeals of enforcement actions, or for any other matter under this AUP:

Toolum
Kirill Maximenko (Cyprus self-employed entity)
Tax Identification Number: 60056031S
Address: 3 Evagora Pitali, 4040 Germasogeia, Limassol, Cyprus
Email: info@toolum.ai

For complaints relating to the processing of Personal Data by Toolum in connection with AUP enforcement, the lead Supervisory Authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, the contact details for which are in our Privacy Policy Section 10.4.

Related documents

This Acceptable Use Policy is published by Toolum (Kirill Maximenko, Cyprus self-employed entity). It forms part of the contractual framework defined in our Terms of Service. Violations of this AUP may result in enforcement action up to and including account termination and reporting to competent authorities, as described in Section 12.

Document version 1.0. Effective June 5, 2026.