Usage Policy

Effective Date: October 12, 2026

This Usage Policy ("UP") governs Customer's use of Subquadratic's Services and is incorporated into the Subquadratic API Services Agreement or the Subquadratic Terms of Service, as applicable to Customer (the "Agreement"). This UP also applies to Customer's Authorized Users and to any End User. Capitalized terms not defined herein have the meanings set forth in the Agreement. References in this UP to "content" mean Inputs, Outputs, and any other Customer Content, each as defined in the Agreement. "End User" means any person to whom Customer makes the Services or any Output available, other than an Authorized User.

Customer will impose on its Authorized Users and End Users obligations at least as protective of Subquadratic as this UP, will enforce those obligations, and is responsible and liable for their compliance. Customer will promptly notify Subquadratic at abuse@subq.ai upon becoming aware of any actual or suspected violation of this UP by Customer, its Authorized Users, or its End Users, and will take commercially reasonable steps to investigate and stop it.

1. Prohibited Content and Activities.

Customer will not, and will not permit any Authorized User or End User to, use the Services to create, submit, generate, store, transmit, display, or distribute content that:

1.1 Illegal Activities.

Violates any applicable law, regulation, or governmental order, including but not limited to activities related to terrorism, money laundering, fraud, identity theft, sanctions evasion, or other criminal conduct.

1.2 Harmful or Dangerous Content.

Promotes, encourages, or provides instructions for illegal activities, violence, self-harm, suicide, disordered eating, or activities that could result in physical harm to individuals or property.

1.3 Child Safety.

Involves minors in sexual, suggestive, violent, or otherwise inappropriate contexts, or attempts to exploit, groom, abuse, or otherwise harm children. Customer acknowledges that Subquadratic is required by law to report apparent child sexual abuse material to the National Center for Missing & Exploited Children, and that Subquadratic will do so without notice to Customer.

1.4 Harassment and Abuse.

Constitutes harassment, bullying, stalking, threats, or abuse directed at individuals or groups, including content that promotes discrimination based on race, ethnicity, religion, gender, sexual orientation, disability, or other protected characteristics.

1.5 Hate Speech.

Promotes hatred, violence, or discrimination against individuals or groups based on protected characteristics, or contains content that dehumanizes or incites violence against specific communities.

1.6 Privacy Violations.

Violates the privacy rights of individuals, including unauthorized collection, use, or disclosure of personal information, doxxing, or non-consensual intimate imagery.

1.7 Intellectual Property Infringement.

Infringes, misappropriates, or violates intellectual property rights, including copyright, trademark, patent, trade secret, or other proprietary rights of third parties. Notices of claimed copyright infringement may be submitted to Subquadratic's designated agent at Subquadratic Inc., Attn: Head of Legal, 4040 NE 2nd Ave., Miami, FL 33137, copyright@subq.ai, as identified in the U.S. Copyright Office's DMCA Designated Agent Directory. Subquadratic will, in appropriate circumstances, suspend or terminate the accounts of Customers, Authorized Users, or End Users who are repeat infringers.

1.8 Misleading or Deceptive Content.

Creates or distributes false, misleading, or deceptive information, including deepfakes, manipulated media designed to deceive, misinformation, or content that impersonates individuals or organizations without authorization.

1.9 Biometric Data and Identity.

Customer will not use the Services to: (a) identify or attempt to identify an individual from an image, audio recording, or voice sample, including through facial recognition, facial matching, speaker identification, or voice matching, or through the generation, storage, or comparison of facial geometry, voiceprints, or other biometric identifiers; (b) categorize individuals by race, ethnicity, sex, gender identity, sexual orientation, disability, health status, religious or philosophical belief, political opinion, union membership, or immigration status on the basis of biometric or physical characteristics; (c) infer or assess the emotional state of an individual in a workplace or educational setting, except for medical or safety reasons; (d) build, train, or enrich a facial recognition database, including through untargeted scraping of facial images from the internet or from closed-circuit television footage; or (e) conduct biometric surveillance of individuals in publicly accessible spaces, whether in real time or retrospectively. Customer represents that it has obtained all notices, written releases, and consents required under applicable biometric privacy laws for any image, audio, or other Input containing a biometric identifier that Customer submits to the Services, will retain records of those consents, and will produce them to Subquadratic on request.

1.10 Weapons and Malicious Code.

Relates to the development, design, targeting, or deployment of weapons, weapons systems, autonomous lethal systems, or chemical, biological, radiological, or nuclear weapons or their precursors; or consists of malware, ransomware, exploit code, or other code designed to gain unauthorized access to, damage, or disrupt any system, other than for security testing of systems that Customer owns or is expressly authorized to test.

2. Technical Abuse and Misuse.

2.1 System Interference.

Attempts to gain unauthorized access to, interfere with, damage, or disrupt the Services, Subquadratic's systems, or third-party systems connected to the Services.

2.2 Reverse Engineering.

Attempts to reverse engineer, decompile, disassemble, or derive the source code, model weights, architecture, or training data from the Services, except to the extent expressly permitted by applicable law.

2.3 Rate Limit Violations.

Deliberately circumvents or attempts to circumvent rate limits, usage restrictions, or other technical limitations imposed on the Services.

2.4 Competitive Use.

Uses the Services, or any Output, to develop, train, fine-tune, distill, or otherwise improve any machine learning model or artificial intelligence system, without Subquadratic's express written consent.

2.5 Automated Abuse.

Uses automated systems, bots, or scripts to abuse the Services, generate excessive traffic, or engage in activities that could degrade service performance for other users.

2.6 Circumvention of Safety Measures.

Attempts to circumvent, disable, or degrade any safety filter, content classifier, guardrail, usage restriction, or other protective measure implemented in the Services, including through adversarial prompting, prompt injection, encoding, or fine-tuning; or engages in systematic querying designed to elicit prohibited content or to characterize the Services' safety behavior other than as expressly permitted under a written research or red-teaming agreement with Subquadratic.

3. Commercial Restrictions.

3.1 Unauthorized Resale.

Resells, redistributes, or sublicenses access to the Services without Subquadratic's prior written consent, except as expressly permitted in the Agreement.

3.2 Circumventing Payment.

Attempts to avoid, bypass, or circumvent payment obligations through technical means or misrepresentation of usage.

3.3 Fraudulent Activity.

Engages in fraudulent billing practices, provides false payment information, or uses stolen payment methods.

3.4 Export Controls and Sanctions.

Customer represents that it is not, and is not owned or controlled by, a party identified on any U.S. government restricted-party list, and is not located in or organized under the laws of any country or region subject to comprehensive U.S. sanctions. Customer will not access, use, export, re-export, or make the Services or any Output available in violation of U.S. export control or economic sanctions laws, including the Export Administration Regulations and the regulations administered by the Office of Foreign Assets Control, or the comparable laws of any other applicable jurisdiction.

4. Communication Abuse.

4.1 Spam and Unsolicited Communications.

Generates or facilitates the transmission of spam, unsolicited commercial communications, or bulk messaging that violates applicable anti-spam laws.

4.2 Phishing and Social Engineering.

Creates content designed to deceive individuals into disclosing personal information, credentials, or engaging in fraudulent activities.

4.3 Malicious Communications.

Uses the Services to send malicious communications, including malware distribution, phishing attempts, or other security threats.

5. Data Misuse.

5.1 Prohibited Data Types.

Submits data types specifically prohibited under the Agreement or Data Processing Agreement, including special categories of personal data, except to the extent expressly permitted under an executed Business Associate Agreement, Data Processing Agreement, or other written agreement with Subquadratic.

5.2 Third-Party Data Violations.

Submits data belonging to third parties without proper authorization, consent, or legal basis for processing.

5.3 Sensitive Information Exposure.

Intentionally or negligently exposes sensitive personal information, financial data, health information, or other confidential data through the Services.

6. Platform Integrity.

6.1 Gaming or Manipulation.

Attempts to manipulate, game, or exploit the Services in ways that undermine their intended functionality or provide unfair advantages, other than conduct addressed by Section 2.6.

6.2 False Information.

Provides false or misleading information during account registration, verification processes, or in communications with Subquadratic.

6.3 Multiple Account Abuse.

Creates multiple accounts to circumvent usage limits, pricing tiers, or other restrictions imposed under the Agreement.

7. High-Risk Use Cases.

Customer acknowledges that the Services are general-purpose AI tools and are not designed, validated, or certified for use in high-risk contexts. Customer will not use the Services without implementing the human oversight, independent verification, and safeguards described in Subquadratic's documentation and, in any event, safeguards reasonable for the applicable regulatory and risk environment, in connection with:

7.1 Medical and Health Decisions.

Clinical diagnosis, treatment recommendations, prescription of medications, mental health counseling, or any other application where AI-generated outputs could directly influence patient health outcomes.

7.2 Legal and Financial Advice.

Provision of legal advice, legal document generation intended to be relied upon without attorney review, financial investment advice, or credit decisioning in a manner that triggers applicable regulatory requirements.

7.3 Safety-Critical Infrastructure.

Operation of, or decision-making for, critical infrastructure including power grids, water systems, transportation networks, emergency response systems, or industrial control systems where AI errors could cause significant harm.

7.4 Consequential Decisions About Individuals.

Decisions producing legal or similarly significant effects concerning an individual, including decisions regarding employment, lending or credit, housing, insurance, education, healthcare access, or government benefits; and inference of an individual's emotional state, to the extent not prohibited by Section 1.9.

7.5 Regulatory Compliance.

Customer is solely responsible for determining whether its use of the Services complies with applicable laws and regulations governing its industry, including without limitation HIPAA, FDA regulations, financial services regulations, and applicable AI-specific regulations. Subquadratic makes no representation that the Services are suitable for use in any regulated industry without Customer implementing appropriate compliance measures. Customer will not represent to any third party that the Services are validated, certified, or approved for any high-risk use.

8. Output Misuse.

Customer will not, and will not permit any Authorized User or End User to, use Outputs generated by the Services, including text, audio, or other content produced by Subquadratic's foundational models, for any of the following purposes:

8.1 Disinformation and Influence Operations.

Creating, distributing, or amplifying false or misleading content at scale for the purpose of manipulating public opinion, interfering with electoral processes, or conducting coordinated inauthentic behavior on social media or other platforms.

8.2 Synthetic Identity Fraud.

Generating synthetic identities, falsified credentials, fabricated personal histories, or other content intended to deceive individuals, institutions, or automated verification systems.

8.3 Deceptive AI Personas.

Deploying AI-generated content or interactions in a manner that falsely represents a human speaker or author to End Users who have not consented to interacting with an AI system, except where clearly understood by context to be fictional or entertainment in nature.

8.4 Automated Harm at Scale.

Using AI-generated outputs to automate harassment campaigns, generate non-consensual intimate imagery of real individuals, produce targeted defamatory content, or otherwise cause harm to identifiable persons at scale.

9. AI Disclosure Requirements.

9.1 End-User Disclosure.

Where Customer deploys the Services in a product or application that interacts directly with End Users, Customer will implement clear and conspicuous disclosure to those End Users that they are interacting with or receiving content generated by an artificial intelligence system.

9.2 Regulatory Compliance.

Customer is responsible for monitoring and complying with all applicable laws and regulations requiring disclosure of AI-generated content in Customer's jurisdiction and the jurisdictions in which Customer's End Users are located, including any labeling, watermarking, or provenance requirements that may apply. Customer will not remove, alter, or obscure any watermark, provenance signal, or content credential embedded in an Output by the Services.

9.3 No Misrepresentation of Capabilities.

Customer will not represent to End Users or third parties that AI-generated outputs from the Services constitute professional advice, are infallible, or carry any certification or endorsement by Subquadratic beyond what is expressly stated in the Agreement.

10. API Key and Account Security.

10.1 Credential Security.

Customer is responsible for maintaining the confidentiality and security of its API keys, access tokens, and account credentials. Customer will implement reasonable security measures to prevent unauthorized access to or use of its credentials, including access controls, key rotation practices, and secure storage.

10.2 Accountability for Account Activity.

Customer is responsible and liable for all activity conducted through its account or using its API keys, whether authorized or not, except to the extent directly caused by Subquadratic's breach of its obligations under the Data Processing Agreement. Customer will promptly notify Subquadratic at security@subq.ai upon becoming aware of any unauthorized access to or use of its credentials or account.

10.3 No Credential Sharing.

Customer will not share, publish, or otherwise make available its API keys or credentials to any person other than its Authorized Users. Each API key may be used only by or on behalf of the Customer entity to which it was issued, and may not be published in a publicly accessible code repository or embedded in a client-side application.

11. Compliance and Reporting.

11.1 Law Enforcement Cooperation.

Customer acknowledges that Subquadratic may cooperate with law enforcement investigations and may be required by law to disclose information about Customer's use of the Services pursuant to legal process, and that Subquadratic may be subject to mandatory reporting obligations, including those described in Section 1.3, that it will satisfy without notice to Customer where notice is prohibited or would frustrate the purpose of the report.

11.2 Monitoring and Detection.

Subject to any data retention or human review limitations expressly set forth in the Agreement or an order, Subquadratic may monitor use of the Services for compliance with this UP using automated classifiers and, where those classifiers flag a potential violation or where required to investigate a report, limited review by authorized personnel, but has no obligation to do so.

11.3 Reporting Violations.

Suspected violations of this UP may be reported to Subquadratic at abuse@subq.ai.

12. Enforcement.

12.1 Investigation.

Upon receiving notice of potential UP violations, Subquadratic may investigate and take appropriate action, including requesting additional information from Customer. Customer will cooperate in good faith with any such investigation.

12.2 Remedial Actions.

Subquadratic may take any of the following actions in response to UP violations:

  • Issue warnings or requests for corrective action
  • Temporarily or permanently suspend Customer's access to specific Services or features
  • Terminate Customer's account and access to all Services
  • Remove or disable access to violating content
  • Report violations to appropriate law enforcement authorities
  • Take legal action to enforce compliance or seek damages

12.3 Immediate Suspension.

Where Subquadratic reasonably believes that continued use presents a risk of imminent harm to any person, to the Services, or to Subquadratic's legal position, Subquadratic may suspend access immediately and without prior notice, and will notify Customer promptly thereafter. Suspension or termination under this UP does not relieve Customer of its payment obligations for the Services, does not entitle Customer to service credits or other remedies under any service level commitment, and any termination under this UP constitutes termination for cause under the Agreement.

12.4 No Liability for Actions.

Customer acknowledges that Subquadratic has no liability for any action taken in good faith to enforce this UP, including temporary or permanent suspension of Services.

13. Updates and Modifications.

Subquadratic may update this UP from time to time to address new technologies, legal requirements, or evolving best practices. Material changes will be communicated to Customer with thirty (30) days advance notice, except that changes required to comply with applicable law or to address an imminent safety or security risk may take effect immediately upon notice. If Customer objects to a material change, Customer may terminate the Agreement for convenience on written notice given within the thirty (30) day notice period, and Subquadratic will refund any prepaid, unused fees. Continued use of the Services after the effective date of an update constitutes acceptance of the updated UP.

In the event of a conflict between this UP and the Agreement, the Agreement will control, except with respect to the prohibitions in Sections 1, 2, and 3.4, which will control unless the Agreement expressly references and modifies the applicable provision of this UP.

14. Contact Information.

Questions about this UP or reports of potential violations should be directed to:

This Usage Policy is effective as of the date set forth above and applies to all use of Subquadratic's Services.