Usage Policy

Effective Date: November 20, 2025

Last Updated: January 19, 2026

This Usage Policy (also referred to as our "Acceptable Use Policy" or "AUP") governs your use of Surfboard, the AI-powered platform provided by Artemis Software Works, Inc. ("Artemis," "we," "us," or "our").

When we say "you" or "your" in this AUP, we mean both (a) the individual accessing or using the Service and (b) any organization on whose behalf that individual is using the Service. If you are using Surfboard on behalf of an organization (such as your employer), you represent that you have authority to bind that organization to this AUP, and "you" refers to both you and the organization.

By accessing or using Surfboard (the "Service"), you agree to comply with this AUP, our Terms of Service, and our Privacy Policy.

1. Our Mission & Values

Surfboard helps teams create and maintain living documents from connected data sources. We're committed to providing a safe, trustworthy platform that respects user privacy and supports productive collaboration.

2. Permitted Use & Your Responsibilities

You may use Surfboard for your internal business purposes in accordance with:

  • this AUP,
  • our Terms of Service, and
  • applicable laws and your internal policies.

You are responsible for:

  • Ensuring all content you create or upload complies with this AUP and applicable laws.
  • Obtaining necessary permissions for any third-party data you integrate.
  • Maintaining the security of your account and access credentials.
  • Ensuring your users comply with this AUP.

3. Prohibited Uses

You may not use Surfboard (or allow others to use Surfboard) for any of the activities below. These prohibitions apply to all content you create, upload, process, or share through the Service, including AI-generated content.

3.1 Illegal Activity & Security Violations

You may not use the Service to:

  • Violate any local, state, national, or international law or regulation.
  • Engage in or promote illegal activities (including fraud, money laundering, or trafficking).
  • Infringe intellectual property rights (copyright, trademark, patent, trade secret).
  • Distribute malware, viruses, or other malicious code.
  • Attempt to gain unauthorized access to any system, account, or data.
  • Probe, scan, or test the vulnerability of any system or network without authorization.
  • Interfere with or disrupt the integrity or performance of the Service (including DDoS or similar attacks).
  • Circumvent or attempt to circumvent security or authentication measures.

3.2 Harmful Content & Abuse

You may not create, upload, or share content that:

  • Promotes or glorifies violence, terrorism, or serious harm.
  • Harasses, bullies, threatens, or intimidates individuals or groups.
  • Contains hate speech or promotes discrimination based on protected characteristics (e.g., race, ethnicity, religion, gender, sexual orientation, disability).
  • Depicts or promotes child sexual abuse or exploitation (zero tolerance; we will report such content to law enforcement).
  • Contains graphic violence or gore intended to shock or disturb.
  • Promotes self-harm or suicide.
  • Violates privacy rights, including doxxing (non-consensual sharing of personal information).

3.3 Deception, Fraud & Manipulation

You may not use the Service to:

  • Conduct or promote fraud, scams, or other deceptive practices.
  • Impersonate any person or entity, or misrepresent your identity or affiliation.
  • Engage in phishing, social engineering, or credential harvesting.
  • Generate or distribute spam, unsolicited advertising, or bulk marketing messages.
  • Create or distribute deepfakes or misleading AI-generated content intended to deceive.
  • Manipulate public opinion (e.g., fake reviews, astroturfing, coordinated inauthentic behavior).
  • Spread misinformation or disinformation, particularly related to health, elections, or emergencies.

3.4 Platform Abuse & Technical Misuse

You may not:

  • Reverse engineer, decompile, or attempt to extract source code from the Service (except where permitted by applicable law, and then only after notifying us).
  • Use automated systems (bots, scrapers, crawlers) to access the Service without our authorization.
  • Circumvent usage limits, rate limits, or access controls.
  • Use the Service to mine cryptocurrency or perform resource-intensive tasks unrelated to the Service's intended use.
  • Resell, sublicense, or otherwise provide the Service to third parties without our prior written consent.
  • Share your account credentials or allow unauthorized access to your account.

3.5 AI-Specific Misuse

You may not use Surfboard's AI capabilities to:

  • Generate or assist in generating content that violates any part of this AUP (including harmful, illegal, or deceptive content).
  • Attempt to bypass, disable, or manipulate content filters, safety systems, or usage safeguards.
  • Extract, replicate, or otherwise attempt to reconstruct the underlying AI models or training data.
  • Use the Service to train or fine-tune competing AI models without our written authorization.
  • Generate large volumes of content for the primary purpose of degrading Service performance or abusing the platform.

3.6 Privacy & Data Protection Violations

You may not:

  • Upload, process, or share data that you do not have the legal or contractual right to use.
  • Violate third-party privacy rights or data protection laws (e.g., GDPR, CCPA).
  • Process sensitive personal data (such as health, financial, or government ID data) in Surfboard without appropriate legal basis, safeguards, and—if required by your policies—our prior written approval.
  • Share confidential or proprietary information belonging to others without authorization.
  • Use the Service to surveil, track, or monitor individuals without their knowledge or consent, where required by law.

4. Enforcement

4.1 Monitoring

We do not proactively monitor all content in Surfboard. However, we may review and process content or activity when:

  • You or another user reports a potential violation.
  • Automated systems flag suspicious or abusive behavior.
  • We detect technical anomalies suggesting abuse or security issues.
  • We receive a legal request, court order, or law enforcement inquiry.

4.2 Consequences

If we believe you have violated this AUP or our Terms of Service, we may take one or more of the following actions, in our discretion and as permitted by law:

  • Warning – Notify you of the issue and request corrective action.
  • Content removal – Remove or restrict access to content that violates this AUP.
  • Account suspension – Temporarily suspend your account or access to certain features while we investigate.
  • Account termination – Permanently terminate your account for serious or repeated violations, including (but not limited to):
    • Child sexual abuse or exploitation.
    • Terrorism or extreme violence.
    • Persistent harassment or hate content.
    • Repeated violations after warnings.
  • Legal action – Report suspected illegal activity to law enforcement or regulatory authorities and cooperate with investigations. We may also pursue civil remedies to protect Artemis, our users, or third parties.

4.3 Appeals

If you believe we have made a mistake in suspending or terminating your account, you may appeal by contacting us at support@surfboard.ai and including:

  • Your account information.
  • A description of the action we took.
  • A clear explanation of why you believe the action was incorrect.
  • Any supporting evidence.

We will review appeals in good faith and respond within 5 business days, subject to applicable law and safety obligations.

5. Reporting Violations

If you encounter content or behavior that may violate this AUP, please report it:

Include:

  • A description of the issue.
  • Links or identifiers for the relevant content or user (if available).
  • Any supporting details (screenshots, timestamps, etc.).

For reports involving child exploitation, imminent harm, or terrorism, we will:

  • Escalate internally and, where appropriate, preserve evidence.
  • Report to relevant authorities (e.g., NCMEC for child sexual exploitation).
  • Take immediate action to remove content and suspend relevant accounts.

6. Compliance with Laws & Regulated Use

6.1 Your Legal & Policy Compliance

You are responsible for ensuring that your use of Surfboard complies with:

  • All laws and regulations applicable to you and your organization.
  • Any industry-specific rules that apply to your data or activities (e.g., healthcare, finance, government).
  • Your organization's internal policies (e.g., information security, data classification).

6.2 Regulated Industries

If you operate in a regulated industry (for example, healthcare, financial services, or government), you must:

  • Confirm that your use of Surfboard is compatible with your regulatory obligations.
  • Obtain any required approvals from your legal, compliance, or security teams before connecting regulated data sources.
  • Implement any additional controls required by your regulators or policies.

Surfboard is not a substitute for your own legal, compliance, or security review. You should not use Surfboard for regulated workloads unless you have verified that our controls and agreements (including our Data Processing Addendum) meet your requirements.

7. Intellectual Property

7.1 Respecting Third-Party Rights

You must not use Surfboard to violate intellectual property rights. In particular, you must:

  • Only upload or integrate content you own or are authorized to use.
  • Respect copyright, trademark, and other IP rights.
  • Provide appropriate attribution where required.
  • Comply with license terms for any third-party materials.

7.2 Reporting Infringement

If you believe content on Surfboard infringes your copyright or other IP rights, please contact:

Include the information required by applicable law (e.g., DMCA), including:

  • A description of the copyrighted work.
  • The location of the allegedly infringing content.
  • Your contact information.
  • A statement that you have a good-faith belief that the use is not authorized.
  • A statement that your notice is accurate and you are authorized to act for the rights holder.
  • Your physical or electronic signature.

We will review and respond in accordance with applicable law.

8. AI Usage & Security – Recommended Practices

The following are recommended best practices to help you use Surfboard responsibly and securely. They complement, but do not replace, your obligations under Sections 2–7.

  • Review AI-generated content before relying on it for important or high-stakes decisions.
  • Verify critical facts, citations, and metrics before sharing content externally.
  • Follow your organization's policies on when and how to disclose AI-assisted content.
  • Use strong, unique passwords and enable multi-factor authentication where available.
  • Limit integration permissions to what is necessary and review connected integrations periodically.
  • Regularly review who has access to your projects and documents, and revoke access that is no longer needed.
  • Report problematic AI output or suspected account compromise promptly (see Contact Us below).

9. Changes to This Policy

We may update this AUP from time to time to reflect changes in our Service, legal requirements, or best practices.

  • Updates. We will post the updated AUP on our website and update the "Last Updated" date at the top of this page.
  • Material changes. Where required by law or our agreements with you, we will provide advance notice of material changes (for example, by email or in-product notifications).
  • Continued use. Your continued use of Surfboard after an updated AUP becomes effective constitutes your acceptance of the updated terms. If you do not agree to the changes, you must stop using the Service.

10. Contact Us

If you have questions about this AUP or need to report an issue, contact us at:

Email: support@surfboard.ai

Mail:
Artemis Software Works, Inc.
3610 Albion Place North
Seattle, WA 98103

© 2026 Artemis Software Works, Inc. All rights reserved.