Acceptable Use Policy

This Acceptable Use Policy applies to anyone using Vascend Technologies S.r.l. services: the accounting and financial management platform, the Horizon development environment and its agents, the Terminal, Talos, the SDK, and the training services. The Policy supplements the Terms of Service and forms an integral part of them. Accepting the Terms means accepting these rules. Where the two conflict, the more restrictive provision prevails.

The Service must be used lawfully, fairly, and for the purpose it was designed for: working on your own business data and your own code. Any use that compromises the security, availability, or integrity of the Service, the rights of other users or third parties, or that breaches applicable law, is prohibited even if not expressly listed in the sections below.

You may not use the Service to: - carry out unlawful, fraudulent, or deceptive activity, including accounting fraud, false invoicing, money laundering, and tax evasion - process personal data without a valid legal basis, or third-party data without proper authority - infringe intellectual property rights, trade secrets, or confidentiality obligations - generate, distribute, or automate defamatory, discriminatory, harassing, or unlawful content - develop, test, or distribute malware, exploits, or attack tooling - monitor individuals without their consent or in breach of employment law - circumvent plan limits, quotas, or access controls, including through multiple accounts - resell, sublicense, or make the Service available to unauthorised third parties

The agents available in Horizon and the Terminal operate on the user's instruction and under the user's responsibility. The user remains responsible for the output produced, the code executed, and the actions agents take on their systems. Agents may not be used to: circumvent the security measures of third-party systems, bulk-extract data from other services in breach of their terms, generate content designed to deceive as to the identity of a person or organisation, or produce financial assessments presented as licensed professional advice. Attempting to extract, reconstruct, or bypass the system prompts, safety filters, and operating limits of the integrated models is likewise prohibited.

Interfering with the operation of the infrastructure is prohibited. In particular: unauthorised probing and scanning, penetration testing without written authorisation, volumetric or saturation attacks, interference with tenant isolation, and attempts to access other customers' data. Automated use of the APIs must respect the documented rate limits. Systematic circumvention of those limits is treated as abuse.

You warrant that you have the right to upload and process the data you enter into the Service, including accounting documents, customer and supplier records, bank transactions, and source code. Where uploaded data contains third-party personal data, you act as data controller and Vascend as processor, under the applicable processing agreement. Data handling is described on the Data Use page.

Breaches of this Policy can be reported to abuse@vascend.it, including the details needed to identify the conduct. Security vulnerability reports follow a separate channel, described on the Security page.

Where a breach occurs, Vascend may, depending on its severity: require the conduct to stop, restrict or suspend the affected features, suspend the account, or terminate the contract. Where the breach poses an immediate risk to security, to other users, or to the infrastructure, suspension may be immediate and without notice. Breaches amounting to criminal offences are reported to the competent authorities. Suspension for abuse does not entitle the user to a refund of amounts already paid for the remaining period.