Effective from 8 July 2026 - Version 2.0

1. Purpose

This Acceptable Use Policy ("AUP") sets out the content and conduct that are not permitted on ToRun, and how we enforce these rules. It applies to every feature — chat, image, audio, video, translation, workflows, personas, the community, and the marketplace — and to every account (Free, Paid, and bring-your-own-key). It forms part of, and is incorporated into, our Terms of Service.

2. Zero-tolerance content

The following are strictly prohibited. Accounts that generate, upload, request, store, or distribute them are terminated immediately, the content is removed, and — where the law requires or permits — the matter is referred to the competent authorities:

• Child sexual abuse material (CSAM) and any sexual content involving minors, real or synthetic, including sexualized depictions of anyone who is, or appears to be, a minor. Where we become aware of CSAM we remove it, terminate the account, and report it to the National Center for Missing & Exploited Children (NCMEC) and/or the relevant national authority as required by law.
• Non-consensual intimate imagery (NCII) of real people, including sexual "deepfakes."
• Content that facilitates terrorism, mass violence, or attacks on critical infrastructure, or that provides operational instructions for weapons capable of mass casualties (biological, chemical, radiological, nuclear, or high-yield explosives).
• Human trafficking, or the exploitation, sexualization, or endangerment of children in any form.

3. Prohibited content and conduct

You may not use ToRun to create, generate, upload, share, or distribute:

• Sexually explicit or pornographic content. ToRun is not an adult-content platform and does not support generating it.
• The likeness or voice of a real, identifiable person without their consent, including deceptive "deepfakes" of public figures, or content that impersonates a person or organization in order to deceive.
• Illegal goods or activities — the sale or facilitation of illegal drugs, weapons, stolen data or credentials, counterfeit goods, or other unlawful transactions.
• Fraud, deception, or malware — phishing, scams, spam, coordinated disinformation, or malicious code.
• Hateful, harassing, or violent content targeting people on the basis of a protected characteristic; threats; bullying; or incitement to violence or self-harm.
• Infringement of intellectual-property or privacy rights — content that infringes copyright, trademark, or trade-secret rights, or that discloses another person's private or identifying information ("doxxing").
• Regulated advice presented as authoritative — medical, legal, or financial advice presented as a substitute for a qualified professional. Informational output in these areas carries an advisory disclaimer.
• Platform abuse — circumventing rate limits, security controls, or usage restrictions; scraping in violation of our Terms; or reselling access in violation of your plan.

4. How we enforce this policy

We combine automated screening, human review, and account-level enforcement. We are transparent about what these controls do and do not cover:

• Automated screening of uploaded images. Every image you upload is checked by an automated moderation classifier before it is stored. The classifier flags harmful categories, including sexual content involving minors, non-consensual sexual content, and graphic violence. Flagged uploads are rejected and are never stored.
• Automated screening of publicly shared content. Text you publish to a public surface — a shared canvas artifact or a community / forum post — is screened before it goes live; flagged content is blocked from publication.
• Public-visibility gating. Content shown publicly (for example, community persona posts) is gated to an approved state before other users can see it.
• Human review and reports. We review abuse reports and act on them. Depending on severity, enforcement ranges from content removal and a formal warning to temporary suspension and permanent account termination.
• Cooperation with authorities. We remove illegal content once we become aware of it and cooperate with lawful requests from, and referrals to, the competent authorities.

For transparency: our automated screening today is a machine-classifier applied to uploaded images and to publicly published text — it is not a hash-matching database (such as PhotoDNA), and it does not screen every private, in-session generation. We are actively expanding automated coverage across the platform, and all content remains subject to this AUP and to removal on report or review.

5. Bring-your-own-key (BYOK) does not create an exception

Routing requests through your own provider API key does not exempt you from this AUP. Our platform policies — content rules, billing audit, and disclosure requirements — continue to apply to all activity on ToRun.

6. Reporting abuse

If you encounter content that violates this policy, report it to [email protected], or through the contact form at /company/contact (category: Trust & Safety). Include the URL or identifier (persona, workflow, artifact, or message) and a brief description of the violation. Reports concerning child sexual abuse material are treated as the highest priority.

7. Enforcement decisions and appeals

Enforcement is proportionate to the severity and recurrence of the violation. If your content was actioned or your account restricted and you believe this was a mistake, you may appeal by contacting [email protected]. We review appeals and restore content or access where an error is confirmed.

8. Changes

We update this policy as the platform and adversarial misuse patterns evolve. Material changes take effect on the date stated above and are announced through our changelog. Continued use after the effective date constitutes acceptance.