Acceptable Use Policy

This policy sets out what is and is not allowed when using “Bayan Flow”, to protect the Service, its users and others. It is part of the Terms of Service, and applies to everyone who uses the Service: account holders, Workspace owners, administrators and members, affiliates, and anyone who reaches the Service through another's account.

The Service is designed to help individuals and teams write, translate and improve text and generate content grounded in their own lawful documents, for lawful business purposes. Use it honestly and responsibly, in line with the Law of the Kingdom of Saudi Arabia and the law of the country you work from or address your customers in.

Do not enter, upload, generate or send through the Service content that:

• breaks the Law or infringes others' rights, including intellectual-property, privacy and confidentiality rights.

• involves fraud, phishing, deception, impersonation of an identity or capacity, or harmful misinformation.

• incites, glorifies or constitutes violence, hatred, discrimination, terrorism or crime, or is a threat, harassment or blackmail.

• offends religion, values, public morals or public order, or contains pornographic material or sexual exploitation, above all concerning minors.

• defames or slanders someone, or publishes their secrets or personal data without right.

• contains malware or harmful code, or urges its use.

• promotes unlawful products or services, or weapons, drugs or gambling where the Law prohibits it.

• is spam or unsolicited promotion.

This list is illustrative, not exhaustive.

You may not:

• Break into the Service, its systems or the systems of its users, or test its security or scan it for vulnerabilities without our written permission (responsible disclosure under section 10 is excepted).

• Try to reach accounts, Workspaces or data that are not yours, or go beyond your permissions or the separation controls between organisations.

• Disable or overload the Service, send excessive automated requests, or get around rate limits, Credits, Seats or daily limits.

• Extract data from the Service automatically (scraping), build a database from it or use the Service to train a competing model.

• Reverse engineer the Service, decompile it or remove proprietary notices from it.

• Share, sell or rent an account, or create multiple accounts to get around the free plan, a trial or limits.

• Resell the Service, or its access, or offer it as a service to a third party without written licence.

• Abuse payment, coupons, prepaid cards or the affiliate programme (such as self-referral, fake accounts and guessing coupon or card codes).

• Hide your identity or give false details at registration or billing.

Do not use the AI capabilities of the Service to:

• Generate content in the categories prohibited in section 3, or material that helps harm oneself or others or make weapons or dangerous substances.

• Impersonate a real person, or generate fake content that suggests it came from a person or body, or mislead the public.

• Try to get around the safeguards of the models or the Service, extract their internal instructions, or inject instructions into documents or messages in order to reach others' data or influence what is produced for them.

• Mass-send unsolicited messages automatically.

• Take fully automated decisions with legal or serious effects on individuals.

• Give legal, medical or financial advice to others as if from a specialist without a specialist's review.

• Process sensitive data, or others' personal data, without a lawful basis.

For detail see the AI Usage Disclosure.

• Do not enter personal data of others (such as your customers and employees) unless you have a lawful basis to process it in this way and have told them what they are due.

• Enter as little as needed, and avoid sensitive data (health, genetic, security, belief and credit data), ID numbers, bank cards and passwords unless necessary and lawful.

• Do not import from cloud storage services what you have no right to use.

• Do not try to re-identify de-identified data or to uncover information about other users.

Credits, daily limits, rate limits, Seats, storage and the number of documents exist to protect the Service and share its resources fairly. Use them in line with your Plan. If we see use that harms the Service's performance for others, we may slow or temporarily restrict your requests and contact you to find a solution, including a move to a better-fitting Plan.

A Workspace owner and administrators are responsible for:

• Inviting only those entitled to use the Service, and removing promptly those who have left the organisation.

• Telling their members about this policy and that the Service is used for work and for what administrators can see.

• Setting knowledge and template permissions to suit the organisation's confidentiality.

• Having lawful bases to process members' and customers' data through the Service.

• Dealing with any breach by their members and telling us of what calls for it.

A member's breach is attributed to the organisation unless it shows it took what was needed to prevent it.

9.1 We do not monitor your content generally. We may examine metadata and automated usage patterns to protect the Service, and we view specific content where necessary to investigate a report, a possible breach or a security risk, or by legal order, under logged access controls.

9.2 If we find a breach we may take steps proportionate to it: warn you, remove or disable content, restrict a feature or rate, suspend the account or Workspace temporarily or terminate them, void coupons and Credits obtained in breach, report to the competent authorities, or claim compensation.

9.3 We warn you in advance where possible, unless that endangers security or others or the Law prevents it, and the notice tells you the reason for the step and how to object.

9.4 You may object to a step we took by contacting us through the “Contact us” page, and we will consider your objection.

10.1 If you see content or conduct that breaches this policy, or content that infringes your rights, tell us through the “Contact us” page with the details.

10.2 If you discover a security vulnerability, tell us through the same page, putting “security vulnerability” in your message, with a description enough to reproduce it, without sending users' data. We ask that you do not access or modify others' data more than needed to demonstrate the vulnerability, do not disrupt the Service, and do not disclose the vulnerability before we have dealt with it within a reasonable time. So long as you act on this in good faith, we will not take legal action against you because of the research itself.

Suspension or termination of an account for breach of this policy gives rise to no refund of amounts paid, and does not affect our right to claim compensation or to take what the Law allows. Your obligations of confidentiality and data protection continue after termination.

We update this policy as needed, and its version and date appear at the top of the page. For material changes we notify you as the Terms of Service provide.