Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs access to and use of the Nelle platform and related services operated by Made It Enterprises Inc. ("Provider"), including:

• the Nelle web application;

• the Nelle Microsoft Word Add-In;

• APIs;

• integrations;

• AI-powered functionality;

• beta features;

• related websites; and

• all related services and technology

(collectively, the "Services").

This AUP forms part of and is incorporated into the applicable Terms of Service, Order Form, Enterprise Agreement, or other agreement governing use of the Services. Capitalized terms used in the AUP and not defined within it have the meaning given to those terms in the Terms of Service.

Customers and Authorized Users must comply with this AUP at all times.

1. Purpose

The Services are designed to support contract review, contract workflow management, approvals tracking, legal operations, document analysis, and related business activities.

This AUP is intended to:

• protect the security, confidentiality, availability, and integrity of the Services;

• protect Provider, Customers, Authorized Users, and third parties;

• prevent misuse of AI-powered capabilities;

• support compliance with applicable laws; and

• ensure fair and responsible use of the Services.

2. General Obligation

You may use the Services only:

• for lawful purposes;

• for legitimate business purposes;

• in accordance with your agreement with Provider;

• in accordance with applicable laws and regulations; and

• in accordance with this AUP.

You are responsible for all activity occurring under your account and for ensuring that your Authorized Users comply with this AUP.

3. Prohibited Uses

You shall not use the Services for any purpose that is unlawful, harmful, fraudulent, deceptive, abusive, or otherwise prohibited by this AUP.

Without limiting the foregoing, you shall not:

Illegal Activities

• violate any applicable law, regulation, court order, or regulatory requirement;

• facilitate unlawful conduct;

• engage in fraud, deception, or misrepresentation;

• support criminal activity; or

• use the Services in a manner that infringes the rights of others.

Intellectual Property Violations

You shall not:

• upload content that you do not have the right to use;

• infringe copyrights, trademarks, patents, trade secrets, or other intellectual property rights;

• knowingly submit materials that violate contractual confidentiality obligations; or

• use the Services to facilitate intellectual property infringement.

Privacy and Data Protection Violations

You shall not:

• collect personal information unlawfully;

• upload personal information without appropriate authorization where required by law;

• process personal information in violation of applicable privacy laws;

• use the Services to monitor, profile, or track individuals in violation of applicable law; or

• attempt to obtain personal information belonging to another customer or user.

Harmful or Malicious Conduct

You shall not:

• distribute malware, ransomware, viruses, trojans, spyware, or other malicious code;

• conduct phishing activities;

• engage in credential theft;

• distribute harmful payloads;

• attempt to compromise systems or networks; or

• facilitate cyberattacks.

4. Security Restrictions

You shall not:

• attempt to gain unauthorized access to the Services;

• bypass authentication mechanisms;

• circumvent access controls;

• probe, scan, or test vulnerabilities without authorization;

• attempt to access another customer's information;

• interfere with security features;

• intercept data belonging to another person; or

• attempt to defeat system monitoring or logging mechanisms.

5. Interference With the Services

You shall not:

• interfere with the operation of the Services;

• overload the Services;

• consume unreasonable system resources;

• launch denial-of-service attacks;

• perform excessive automated requests;

• interfere with other users' access to the Services; or

• use the Services in a manner that impairs platform performance or stability.

Provider may determine, acting reasonably, whether particular activity places excessive demands on platform resources.

6. Artificial Intelligence Restrictions

The Services include AI-powered capabilities and may utilize third-party AI models.

You shall not:

• intentionally use the Services to generate unlawful content;

• attempt to circumvent safety controls or safeguards;

• perform prompt injection attacks intended to compromise system functionality;

• attempt to extract proprietary model instructions, system prompts, security mechanisms, or confidential platform information;

• use the Services to generate malicious software or harmful code;

• use the Services to impersonate individuals fraudulently;

• use the Services to facilitate fraud or deception; or

• use AI-generated outputs in violation of applicable law.

Users remain responsible for reviewing and validating AI outputs before relying upon them for legal, business, operational, or commercial decisions.

7. Intended Use and Human Review

The Services are designed to assist with contract review, contract management, approvals workflows, document analysis, legal operations, and related business processes. The Services are intended to support human decision-making and professional judgment, not replace them.

You must not use the Services:

• as a substitute for qualified legal, business, compliance, procurement, or professional advice;

• as the sole basis for making legal, contractual, regulatory, or compliance decisions;

• to automatically approve, reject, execute, or otherwise make binding decisions regarding contracts without appropriate human review;

• to rely on AI-generated outputs without considering whether such outputs are accurate, complete, suitable, and consistent with your organization's requirements;

• in a manner inconsistent with the Documentation, intended functionality of the Services, or reasonable instructions provided by Provider;

• to evaluate legal rights, obligations, risks, or compliance requirements without appropriate human oversight; or

• in any manner that could reasonably be expected to create significant legal, financial, regulatory, or operational consequences without independent review by an appropriately qualified individual.

Customer remains solely responsible for:

• reviewing all AI Outputs;

• determining whether AI Outputs are accurate and suitable for use;

• making all legal, commercial, contracting, and compliance decisions;

• determining whether contracts should be approved, escalated, negotiated, executed, or rejected; and

• complying with applicable laws and regulations.

8. Unauthorized Access, Scraping, and Competitive Use

You shall not:

• scrape the Services;

• extract data through automated means except through approved APIs;

• use bots to harvest content or platform information;

• modify, reverse engineer, decompile, disassemble, or attempt to derive source code from the Services;

• build competing products or services using information obtained from the Services; or

• use the Services for benchmarking, competitive analysis, or product development purposes without Provider's prior written consent.

9. Misuse of Communications Features

Where the Services permit communications, notifications, or collaboration features, you shall not:

• distribute spam;

• send unsolicited bulk communications;

• distribute deceptive communications;

• engage in harassment;

• transmit unlawful content;

• distribute malware through communications features; or

• misuse invitation, notification, or collaboration functionality.

10. Customer Data Responsibilities

Customers are responsible for ensuring that:

• Customer Data is lawfully obtained;

• Customer Data may lawfully be submitted to the Services;

• appropriate permissions and consents have been obtained where required;

• uploaded content does not violate applicable law; and

• Customer Data does not infringe third-party rights.

Provider is not responsible for verifying the legality, ownership, accuracy, or appropriateness of Customer Data submitted to the Services.

11. Monitoring and Enforcement

Provider may monitor use of the Services to:

• protect the Services;

• maintain security;

• investigate suspected violations;

• comply with legal obligations;

• respond to complaints; and

• enforce its agreements and policies.

Provider is not obligated to monitor all activity but reserves the right to do so where reasonably necessary.

12. Reporting Violations

If you become aware of activity that violates this AUP, you should promptly notify Provider.

Reports may be submitted to:

Email: abuse@madeit.legal

or such other contact information as Provider may designate from time to time.

13. Consequences of Violations

Provider may investigate any suspected violation of this AUP.

Where Provider reasonably believes a violation has occurred, Provider may take any action it considers reasonably necessary, including:

• issuing warnings;

• requiring corrective action;

• removing content;

• limiting functionality;

• suspending access;

• terminating accounts;

• terminating services;

• reporting conduct to regulators or law enforcement authorities; or

• pursuing available legal remedies.

Such actions may be taken without liability to Provider and in accordance with the applicable agreement governing the Services.

14. Changes to This Acceptable Use Policy

Provider may update this AUP from time to time.

Updated versions become effective upon posting or as otherwise communicated to Customers.

Continued use of the Services after an update constitutes acceptance of the revised AUP.

15. Contact Information

Questions regarding this AUP may be directed to:

Made It Enterprises Inc.

General Inquiries: hello@madeit.legal

Privacy Inquiries: privacy@madeit.legal