HENRYEXCHANGEJoin the Exchange

Acceptable Use Policy

Effective Date: February 26, 2026
Last Updated: February 26, 2026
Version: 1.0

Related Documents: This Acceptable Use Policy ("AUP") forms part of and is incorporated into our Terms of Service. It should be read together with the Privacy Policy and Service Level Agreement. Capitalised terms not defined here have the meanings given in the Terms of Service.

1. Purpose

1.1. This AUP defines the acceptable and prohibited uses of the Henry AI platform, website (https://henryexchange.ai), and application (https://app.henryexchange.ai) (collectively, "the Service").

1.2. By using the Service, you agree to comply with this AUP. Violation of this AUP may result in suspension or termination of your account in accordance with the Terms of Service.

2. General Conduct

2.1. You must use the Service in compliance with all applicable laws, including the Protection of Personal Information Act 4 of 2013 (POPI Act), the Electronic Communications and Transactions Act 25 of 2002 (ECT Act), and the Consumer Protection Act 68 of 2008 (CPA).

2.2. You must not use the Service in any way that could damage, disable, overburden, or impair the Service or interfere with any other party's use of the Service.

2.3. You are responsible for all activity that occurs under your account, including activity by users you have authorised within your tenant.

3. Prohibited Uses

3.1. Unlawful Activity: You may not use the Service for any purpose that is unlawful, fraudulent, or harmful, including but not limited to:

  • Money laundering or financing of terrorism
  • Fraud, phishing, or identity theft
  • Distribution of illegal content
  • Violation of any applicable law or regulation

3.2. Data Protection Violations: You may not:

  • Upload personal information of third parties without a lawful basis (such as consent or legitimate interest) as required by the POPI Act
  • Process sensitive personal information (racial/ethnic origin, political opinions, religious beliefs, health data, biometric data, sexual orientation) without explicit consent and appropriate safeguards
  • Use the Service to circumvent or violate data protection laws in any jurisdiction
  • Access or attempt to access personal information belonging to other tenants or users

3.3. Security Violations: You may not:

  • Circumvent, disable, or interfere with security measures of the Service
  • Probe, scan, or test the vulnerability of the Service without prior written authorisation
  • Introduce viruses, worms, trojans, malware, or other malicious code
  • Attempt to gain unauthorised access to any part of the Service, other accounts, or connected systems
  • Intercept, monitor, or forge communications not intended for you

3.4. AI-Specific Restrictions: You may not:

  • Engage in prompt injection, jailbreaking, or other techniques designed to manipulate, exploit, or circumvent AI safety measures
  • Use AI features to generate spam, phishing content, fraudulent communications, misleading information, or other harmful material
  • Systematically query AI features to reverse-engineer, extract, or replicate the underlying AI models or their capabilities
  • Use AI-generated outputs in a manner that misrepresents them as human-generated where such distinction is material
  • Submit content to AI features with the intent to produce illegal, harmful, or discriminatory outputs
  • Bypass or attempt to bypass content filtering, moderation, or safety mechanisms

3.5. Competitive Use: You may not:

  • Use the Service, its outputs, or data derived from it to build, improve, or market a competing product or service
  • Resell, sublicense, or redistribute the Service or its outputs to third parties, except to authorised users within your tenant
  • Benchmark the Service for publication or competitive purposes without prior written consent

3.6. Content Restrictions: You may not upload, transmit, or store content that:

  • Is defamatory, obscene, threatening, abusive, or hateful
  • Infringes any intellectual property rights of third parties
  • Contains malware, viruses, or other harmful code
  • Violates the privacy rights of any person

3.7. Resource Abuse: You may not:

  • Use the Service in a manner that consumes disproportionate system resources
  • Engage in data mining, scraping, crawling, or harvesting of the Service
  • Use automated tools to access the Service except through our documented API

4. API Fair Use

4.1. Rate Limits: API access is subject to rate limits as specified in your subscription tier. You must not attempt to circumvent or exceed these limits.

4.2. Authentication: You must keep your API keys confidential and secure. You are responsible for all API activity conducted with your keys. Report compromised keys immediately to security@henryapi.ai.

4.3. Payload Limits: API requests must comply with documented payload size limits. Excessively large or malformed requests that degrade service performance are prohibited.

4.4. Fair Use: Even within your rate limits, you must not use the API in a manner that degrades the Service for other users. We reserve the right to throttle or suspend API access if usage patterns indicate abuse.

4.5. Webhooks: Webhook delivery is provided on a best-effort basis. You must implement appropriate retry and error-handling logic. You may not rely on webhooks as the sole mechanism for critical business processes without independent verification.

5. Multi-Tenant Responsibilities

5.1. Tenant Administrator Obligations: If you are a tenant administrator, you are responsible for:

  • Ensuring all users within your tenant comply with this AUP
  • Managing user access, permissions, and roles appropriately
  • Promptly removing access for users who no longer require it
  • Reporting any suspected violations by your users

5.2. Tenant Isolation: You must not attempt to access, view, modify, or interfere with data belonging to other tenants. Each tenant's data is logically isolated, and any attempt to breach this isolation is a serious violation of this AUP.

5.3. User Management: You must maintain accurate user records and promptly disable or remove accounts for users who leave your organisation or no longer require access.

6. Reporting Violations

6.1. If you become aware of any violation of this AUP, you must report it promptly to:

6.2. We will investigate reported violations and take appropriate action, which may include the measures described in Section 7.

6.3. Reports may be submitted anonymously. We will not retaliate against good-faith reporters.

7. Consequences of Violations

7.1. Graduated Response: We will generally follow a graduated response to AUP violations, taking into account the severity, frequency, and intent:

Level 1 (Warning):

  • Written notice of the violation
  • Requirement to cease the prohibited activity immediately
  • Applicable for first-time, minor, or unintentional violations

Level 2 (Suspension):

  • Temporary suspension of access to the Service (see Terms of Service Section 15.3)
  • Requirement to remedy the violation within a specified timeframe
  • Applicable for repeated minor violations or first-time serious violations

Level 3 (Termination):

  • Permanent termination of your account (see Terms of Service Section 15.2)
  • Applicable for severe violations, repeated violations after warning/suspension, or violations involving illegal activity

7.2. Immediate Action: We reserve the right to skip graduated steps and take immediate action (including suspension or termination without prior notice) where:

  • The violation poses an immediate threat to the security or integrity of the Service
  • The violation involves illegal activity
  • The violation could cause harm to other users, tenants, or third parties
  • Continued access would expose the Company to legal liability

7.3. No Refund for Cause: If your account is terminated for AUP violations, you are not entitled to a refund of prepaid subscription fees, except as required by law.

7.4. Data Export: Where reasonably practicable and unless prohibited by law, we will provide an opportunity to export your data before account termination, in accordance with Terms of Service Section 15.5.

7.5. Legal Action: We reserve the right to pursue legal remedies for violations that cause harm to the Company, other users, or third parties.

8. Monitoring and Enforcement

8.1. We reserve the right, but are not obligated, to monitor use of the Service for compliance with this AUP.

8.2. Monitoring may include automated detection of unusual activity patterns, security scanning, and review of reported incidents.

8.3. We will not monitor the content of your data except as necessary to investigate a reported or suspected violation, comply with legal obligations, or protect the security of the Service.

9. Changes to This Policy

9.1. We may update this AUP from time to time. We will notify all users via email of material changes at least 14 days before they take effect.

9.2. Continued use of the Service after the effective date of changes constitutes acceptance of the updated AUP.

10. Contact

10.1. For questions about this AUP, contact:

END OF ACCEPTABLE USE POLICY