1. SCOPE

This Acceptable Use Policy (”AUP”) applies to the use of any website, product or service provided by Planhat AB and its subsidiaries (“Planhat”) (together the “Services”), by any person. Your use of the Services may be subject to additional terms and conditions, such as the agreement between Planhat and the applicable account holder for the Services. Where such an agreement exists, this AUP forms part of that agreement, and any conflict between the two is resolved in accordance with the order of precedence stated in that agreement. Where no such agreement exists, the version of this AUP published at the time of use applies.

By using the Services, you agree to comply with this AUP. Where the use of the Services is governed by an agreement between Planhat and the applicable account holder, a violation of this AUP is a breach of that agreement. Where no such agreement is in place, a violation of this AUP entitles Planhat to deny, suspend, and/or terminate access to the Services.

Where this AUP prohibits conduct that is also restricted by the agreement under which the Services are provided, nothing in this AUP limits or qualifies that restriction.

2. PROHIBITED CONTENT AND CONDUCT

You may not use the Services, or permit or facilitate any other person to use the Services, in a manner that:

• is deceptive, false, misleading or fraudulent;

• impersonates any person or entity, including Planhat or any Planhat employee or representative, or otherwise misrepresents your identity or affiliation;

• is violent, threatening, harassing, defamatory, obscene, or otherwise objectionable;

• infringes a third party's intellectual property rights or violates a third party’s privacy, publicity or other rights;

• is harmful to minors, or involves the sexual exploitation or abuse of any person;

• is used to stalk, track or monitor any individual without that individual’s knowledge, or to infer sensitive characteristics about any individual;

• discriminates against, or promotes discrimination against, individuals or groups on the basis of any characteristics protected by applicable law;

• compromises the security or availability of the Services or of any third party’s systems, networks or data in any way;

• violates applicable export control laws or economic sanctions, including by accessing the Services from an embargoed territory or providing access to any person named on an applicable restricted-party list;

• is in violation of any laws or regulations applicable to Planhat or you; or

• could reasonably be expected to damage Planhat’s reputation or the reputation of the Services.

You may not upload to the Services any content that you do not have the right to provide, or any special category personal data or other regulated data type that the Services are not documented as supporting, unless Planhat has expressly agreed otherwise in writing.

You may not use the Services to make or support a decision about an individual that produces legal effects concerning that individual or similarly significantly affects them, unless you do so in accordance with applicable law on automated decision-making.

3. SECURITY AND INTEGRITY OF THE SERVICES

You may not:

• attempt to gain unauthorized access to the Services, or to any account, system, network or data used to provide them;

• access the Services using credentials issued to another individual, or share your credentials with any other individual;

• attempt to obtain login credentials, account information or other private information from any other user of the Services, including by phishing;

• probe, scan or test the vulnerability of the Services, or conduct penetration, load or stress testing, without Planhat’s prior written consent;

• access the Services other than through the interfaces Planhat makes available for that purpose, including by using any robot, spider, scraper or other automated means to access the Services or extract data from them;

• circumvent or attempt to circumvent any access control, authentication or session management applied to the Services, or use the Services after your access has been suspended or terminated;

• impose an unreasonable load on the Services, or consume system resources or bandwidth disproportionate to normal use of the Services, in a way that affects or may affect the performance of the Services for others;

• use the Services to transmit malware or any other code, file or program intended to disrupt or damage any system or data, or to gain unauthorized access to it;

• misrepresent or conceal the origin of any traffic sent to or from the Services, including by falsifying headers or routing information; or

• use the Services to host, distribute or link to malware, phishing pages or other content intended to deceive or harm any person, whether or not directed at the Services.

These restrictions apply regardless of your intent and whether you act intentionally or unintentionally.

4. OUTBOUND COMMUNICATIONS

When you use the Services to send email, surveys, or other communications, you may not:

• send unsolicited commercial communications, or communications to a recipient who has not given any consent required under applicable law or to whom any required notice has not been given;

• send communications from a sender address or identity that is false or misleading, or that disguises the origin of the communication;

• send communications to addresses obtained from purchased, rented or harvested lists; or

• ignore or delay actioning an opt-out or unsubscribe request;

• send communications that omit any sender identification, postal address, or unsubscribe mechanism required by applicable law; or

• send communications to recipients on a suppression list, or re-add a recipient who has opted out.

You may not use the Services in any manner that results in Planhat sending domains or IP addresses being blocklisted, or that otherwise degrades the deliverability or reputation of Planhat's sending infrastructure. Responsibility for communications sent using the Services is allocated in the agreement under which the Services are provided.

5. ARTIFICIAL INTELLIGENCE AND AGENTIC FEATURES

Where you use any Planhat feature that uses artificial intelligence, including any feature that takes actions on your behalf, you may not:

• use it in a way that misleads any individual into believing that they are communicating with a human being rather than with an automated system, or represent that content generated by such a feature was generated by a human;

• seek to override or circumvent any technical or safety measure applied to the feature, including by prompt injection or jailbreaking, or deliberately prompt the feature to act in a manner that violates this AUP; or

• use any output of the feature to train, fine-tune or improve any machine learning model, or systematically extract outputs for that purpose.

• submit content to the feature that you know to be false or misleading in order to influence its output;

• use the feature to generate content intended to deceive, defraud or harass any person;

• allow the feature to take an action on behalf of a person who is not authorised to take that action; or

• use the feature in a manner inconsistent with any identification of artificial intelligence involvement that the Services present to recipients.

6. MODEL PROVIDER ACCEPTABLE USE POLICIES

Planhat AI is enabled by Google Cloud Vertex AI and OpenAI. You must use Planhat AI in a manner that does not violate Google’s Generative AI Prohibited Use Policy (https://policies.google.com/terms/generative-ai/use-policy) and OpenAI's Usage Policies (https://openai.com/policies/usage-policies/), respectively.

7. REPORTING AND ENFORCEMENT

If you know of, or suspect, a violation of this AUP, please notify us immediately via email at compliance@planhat.com.

Planhat may remove or disable access to content, and may suspend or terminate access to the Services, in accordance with the agreement under which the Services are provided, or where no such agreement is in place, as set out above. Planhat may interpret this AUP and reasonably decide whether to act on a suspected violation at its discretion. Planhat may also act where conduct is not expressly listed in this AUP but threatens the security, integrity or availability of the Services or the data of any other customer. You will cooperate with Planhat in investigating and remedying any suspected violation.