Acceptable Use Policy

1. Prohibited uses

It is prohibited to use the Service to:

1. Break the law or third-party rights, including intellectual property, privacy and personal data protection rights.
2. Process personal data without a legal basis: uploading people's data without the right to do so, without having informed them or without the consent the law requires, especially sensitive data.
3. Issue false vouchers or documents, simulate transactions, alter accounting or tax records for fraudulent purposes, or use XEN's electronic signature to impersonate another person.
4. Send unsolicited communications through XEN's email features: messages sent on the Customer's behalf must be transactional (vouchers, quotes, payment reminders and the like) or have the recipient's prior consent when promotional, in accordance with Law 28493 and the Consumer Protection and Defence Code.
5. Compromise security: attempting to access other people's accounts, data or systems, circumventing access controls, scanning or testing the platform without authorisation (except as provided in the Responsible Disclosure Policy), introducing malicious code or interfering with the operation of the Service.
6. Abuse resources: automating access in a way that degrades the Service for others, deliberately exceeding rate limits, or using the interfaces of the Service for purposes other than those of the account.
7. Misuse XENI: generating unlawful, defamatory or discriminatory content; attempting to extract other customers' data; attempting to make XENI bypass its controls or the User's permissions; or using it for automated decisions about people in the high-risk areas that artificial intelligence rules reserve for human oversight (recruitment, credit scoring, health, education, justice).
8. Resell or sublicense the Service, or use it to build a competing product by copying its design or its operation.
9. Impersonate Xeneural, XEN or another Customer in communications or documents.

2. Customer responsibilities

The Customer is responsible for the use made by its Users and Affiliates, keeps its organisation's permissions up to date, removes access from anyone no longer authorised and notifies security@xeneural.com of any misuse it becomes aware of.

3. What Xeneural does in the event of a breach

1. Notice and cure period. If we detect or receive a report of prohibited use, we notify the Customer in writing with a description of the facts and a cure period of at least ten (10) days, where cure is possible.
2. Proportionate measures. We may remove the specific content, limit the affected functionality or restrict the account to read-only, always with access to data export.
3. Immediate suspension only when the use poses an immediate risk to the security of the Service, of other customers or of third parties, or when an authority requires it. In that case we notify the suspension at once, limit it to what is necessary and lift it as soon as the risk ceases.
4. Termination of the contract for serious breach, in accordance with the Terms of Service.
5. Cooperation with authorities when a law or a valid order requires it, informing the Customer unless legally prohibited.

We never delete Customer Content as a sanction within the export and deletion periods set by the Terms of Service.

4. How to report misuse

Write to security@xeneural.com with a description of the facts and, if possible, the organisation or User involved. Reports are acknowledged within one (1) business day and answered within ten (10) business days.

5. Changes

Xeneural may update this policy with thirty (30) days' notice. A change that restricts uses allowed today gives the Customer the right to terminate the contract without penalty before it takes effect.