Arena Acceptable Use Policy

Last Updated: September 15, 2026

This Acceptable Use Policy (this “Policy” or “AUP”) applies to the use of the products and services offered by Arena Intelligence, Inc. (“Arena,” “we,” “us,” or “our”), including Arena’s gateway service, application programming interfaces (“APIs”), model routing functionality, and related documentation, websites, software, and services (collectively, the “Services”), and any content, results, or other output generated through the Services (“Output”). This AUP is incorporated by reference into, and forms a binding part of, the Arena API Developer Preview Terms of Service and any other agreement between you and Arena that references this AUP (in each case, the “Agreement”). Capitalized terms used but not defined in this AUP have the meanings given to them in the applicable Agreement. If there is a conflict between this AUP and the Agreement, the provision that is more restrictive of your use of the Services will control, unless the Agreement expressly states otherwise. We may update this AUP from time to time by posting the updated version at /acceptable-use-policy and revising the “Last Updated” date above. Updates are effective upon posting unless a later effective date is stated. Your continued access to or use of the Services after an update becomes effective constitutes your acceptance of the updated AUP. Because this AUP may be updated independently of the Agreement, you should review it regularly. The Services route requests to, and return Output generated by, third-party generative artificial intelligence models (“Third-Party Models”) operated by their respective providers (“Model Providers”). This AUP applies to all use of the Services and all Output, regardless of which Third-Party Model processes a given request. You are responsible for compliance with this AUP by every person or entity that you allow to access or use the Services (including your Organization Users) or that accesses the Services through your account, credentials, or API keys, and for all use of any Output that you distribute or make available to others. You may not, and may not attempt to, and may not assist or permit any third party to do anything that this AUP prohibits.

1. General Requirements

When accessing or using the Services or any Output, you must at all times: comply with all applicable local, state, national, and international laws, regulations, and legally binding orders, including data protection and privacy laws, consumer protection laws, export control and sanctions laws, intellectual property laws, and laws and regulations governing artificial intelligence; use the Services only in countries and regions that Arena currently supports; not access or use the Services if you are located in, resident in, or acting on behalf of any person or entity in, an embargoed jurisdiction, or if you are, or are acting on behalf of, a person or entity on any applicable sanctions or restricted-party list; not export, re-export, transfer, or provide access to the Services or Output, or submit any Input containing software, technology, or technical data that requires a government license for export, in violation of applicable export control, sanctions, or trade laws; and comply with the Documentation and any usage or rate limits.

2. Prohibited Uses and Content

You may not access or use the Services or any Output to engage in, facilitate, promote, or enable any of the following, and you may not create, generate, request, upload, store, distribute, publish, or make available Input or Output that does any of the following.

2.1 Illegal Activity and Regulated Goods

Engage in, facilitate, or promote any activity that is illegal, fraudulent, or deceptive, or that violates any applicable law or regulation. Produce, acquire, exchange, or provide instructions for synthesizing or accessing illegal or controlled substances, goods, or services, or promote or facilitate the sale of counterfeit or illicitly acquired goods. Engage in or facilitate human trafficking, sexual exploitation, or prostitution. Infringe, misappropriate, or violate the intellectual property, privacy, publicity, or other rights of any third party. Engage in regulated activities without complying with the applicable regulations, or evade or circumvent regulatory controls or licensing requirements.

2.2 Child Safety

Create, distribute, or promote child sexual abuse material (“CSAM”), including AI-generated, illustrated, animated, fictional, or role-played CSAM or any content that sexualizes minors. Arena reports CSAM to relevant authorities. Facilitate the trafficking, sextortion, grooming, abuse, or exploitation of minors, including generating content that impersonates a minor, promotes or depicts pedophilic relationships (including through roleplay), or provides instructions for concealing child abuse. Expose minors to age-inappropriate content, or build or offer tools, applications, or experiences directed at or accessible to minors that include sexually explicit or suggestive content, graphic violence, obscenity, or other content inappropriate for minors. Collect or process the personal data of children (including children under 13 or the applicable age of digital consent) in connection with the Services.

2.3 Violence, Hate, and Harassment

Threaten, incite, facilitate, or promote violence, terrorism, or violent extremism, or provide material support, resources, or recruitment assistance to terrorist or violent extremist organizations or their members. Create or distribute hate speech or content that promotes hatred, violence, discrimination, or the denial of rights or benefits against individuals or groups on the basis of race, ethnicity, national origin, religion, age, sex, gender, gender identity, sexual orientation, disability, serious disease, veteran status, caste, or any other protected characteristic. Harass, bully, intimidate, abuse, defame, insult, threaten, stalk, or shame any person; coordinate or facilitate harassment or intimidation campaigns; celebrate or mock the suffering, injury, or death of any person; or engage in predatory conduct. Promote, trivialize, or depict gratuitous gore or graphic violence, including sexual violence, or create content depicting cruelty to animals. Plan, threaten, facilitate, or cause physical injury to any person, destruction of property, or applications designed to cause property destruction.

2.4 Self-Harm and Psychological Harm

Encourage, facilitate, or provide instructions for suicide, self-harm, or disordered eating. Spread health or medical misinformation. Develop or operate products or experiences that use deceptive, manipulative, or dark-pattern techniques designed to cause emotional or psychological harm or distort a person’s ability to make informed decisions.

2.5 Sexually Explicit Content

Generate, distribute, or provide access to pornographic or sexually explicit content, including depictions or descriptions of sexual acts, sexual fetish or fantasy content, erotic chat or companionship experiences, or content produced for the purpose of sexual gratification. Create, share, or facilitate non-consensual intimate imagery, including synthetic or “deepfake” intimate imagery of any real person and “nudifying,” undressing, or otherwise depicting real persons in intimate or pornographic contexts, or facilitate incest, bestiality, or sexual violence.

2.6 Privacy, Surveillance, and Biometrics

Collect, process, disclose, infer, solicit, or gain access to personal or private information about any person without the necessary rights, consents, and legal bases, including contact information, health data, financial data, biometric or neural data, or other confidential or sensitive information, or publish such information to harass, expose, or endanger any person. Track, monitor, or surveil a person’s physical location, emotional state, behavior, or communications without their consent, or engage in or facilitate espionage, including through spyware, stalkerware, communications interception or surveillance tools, or other unauthorized monitoring of devices or accounts. Create, expand, develop, or advance facial recognition or other biometric identification databases or systems (including of facial images or voiceprints) without the consent of the individuals concerned, including through untargeted scraping of facial images from the internet or CCTV footage. Use biometric identification, categorization, or evaluation systems to identify, assess, or classify individuals in ways that cause detrimental, discriminatory, or unjustified treatment, or to deduce, infer, or categorize sensitive attributes of a person (such as race or ethnicity, political opinions, trade union membership, religious or philosophical beliefs, sex life, or sexual orientation) from biometric data.

2.7 Fraud, Deception, and Exploitation

Engage in or facilitate fraud, scams, phishing, pharming, social engineering, clickfraud, clickbait schemes, or other deceptive or predatory practices, including creating content designed for fraudulent purposes or fraudulent or deceptive products and services. Generate, distribute, or facilitate spam, chain letters, unsolicited bulk or automated communications, artificial engagement (including fake reviews, comments, accounts, followers, or other inauthentic engagement or media), or harassing communications. Impersonate any individual (living or dead), organization, or entity, or misrepresent your identity, affiliation, or authorization to act on behalf of any person or entity, or create fake personas of real entities. Create falsified, forged, or fraudulent documents, records, or instruments, or materially misrepresent them, including identification documents, licenses, certifications, credentials, currency, financial records, signatures, endorsements, evidence, or government documents. Take actions on behalf of, or for the benefit of, any person or entity without their authorization. Deploy subliminal, purposefully manipulative, or deceptive techniques that materially distort a person’s behavior or impair their ability to make informed decisions, or exploit vulnerabilities of a person or group related to age, disability, or social or economic circumstances. Promote or facilitate multi-level marketing or pyramid schemes employing high-pressure or deceptive tactics, payday, title, or other exploitative or predatory lending, abusive or harassing debt collection practices, or real-money gambling, lotteries, or wagering. Engage in or promote academic dishonesty, including plagiarism or submitting AI-generated work as original human work without permission or required attribution.

2.8 Misinformation and Deceptive Content

Create, disseminate, or amplify misinformation or disinformation, including deceptive or misleading information targeted at any group, entity, or person, conspiratorial narratives targeting specific groups or individuals, or deceptive information about laws, regulations, government services, procedures, or institutions. Claim or imply expertise, professional credentials, or authoritative standing that you or your application does not have, in sensitive or consequential areas such as health, medicine, finance, law, safety, or government services.

2.9 Political Uses and Democratic Processes

Engage in political campaigning or lobbying, including generating campaign materials, materials for dissemination in electoral campaigns, or personalized or targeted vote or campaign materials based on individual profiles or data, or engage in lobbying using false information or fabricated advocacy materials. Create or distribute false or misleading information about elections, candidates, parties, ballot measures, voting procedures, voting eligibility, election results, or election security, or synthetic media depicting political figures or public officials that is designed to deceive. Deter, suppress, or interfere with democratic participation, including misrepresenting voting processes or qualifications, discouraging voting, or intimidating voters, or incite, glorify, or facilitate the disruption of electoral or civic processes.

2.10 Weapons, Dangerous Materials, and Critical Infrastructure

Research, design, develop, produce, modify, assemble, test, acquire, market, or distribute weapons, explosives, or other dangerous materials or systems, including firearms and their illegal modification, high-yield explosives, and chemical, biological, radiological, or nuclear weapons, agents, precursors, or delivery mechanisms, or assist in weaponization, deployment, or the evasion of detection systems or medical countermeasures. Circumvent regulatory, licensing, or safety controls applicable to the acquisition or use of weapons or dangerous materials, or otherwise support the development of weapons of mass destruction or export-controlled defense articles or technical data. Compromise, disrupt, damage, or interfere with critical infrastructure or essential services, including power grids, water treatment facilities, telecommunications networks, air traffic control, financial market systems, medical devices, healthcare systems, voting systems and election infrastructure, or military and defense infrastructure, or obtain unauthorized access to any of the foregoing.

2.11 Cybersecurity Abuse and Malicious Code

Create, train, distribute, or deploy malware, ransomware, viruses, worms, trojans, logic bombs, or any other malicious, harmful, or technologically damaging code, files, or programs, or introduce any of the foregoing into the Services. Discover, exploit, or facilitate the exploitation of security vulnerabilities in any system, network, application, or device without authorization, or gain or attempt to gain unauthorized access to any account, system, network, or data, whether through technical means or social engineering. Develop or operate tools for denial-of-service attacks, botnets, credential stuffing or harvesting, large-scale automated system compromise, persistent unauthorized access (including firmware or hardware implants), or the unauthorized interception or monitoring of communications or devices. Bypass, disable, or undermine security controls, authentication mechanisms, endpoint protection, monitoring, or other technical safeguards of Arena, any Model Provider, or any third party.

3. High-Risk and Regulated Uses

You may not use the Services or any Output: to make automated decisions that produce legal or similarly significant effects on any person, or that materially affect a person’s safety, rights, or access to essential services or opportunities, including in the domains of employment, housing, credit and lending, insurance, healthcare, education and academic admissions, social welfare and government benefits, migration and border control, law enforcement, and critical infrastructure; to make criminal justice determinations or predictions, including decisions or recommendations regarding arrest, prosecution, sentencing, parole, or release eligibility, or for predictive policing; for any practice prohibited under the EU Artificial Intelligence Act or other applicable AI laws, or in any manner that violates human rights, civil rights, civil liberties, or fundamental freedoms; to analyze, identify, or classify content or individuals on behalf of any government for the purpose of censorship or the suppression of lawful speech; as a substitute for clinical practice, professional medical judgment, or licensed professional services, including to provide medical diagnosis, treatment, therapy, or mental-health services, or legal, financial, or other regulated professional advice; to create, receive, maintain, transmit, or otherwise process protected health information subject to HIPAA (unless expressly agreed by Arena in a written business associate agreement), payment card or cardholder data subject to PCI DSS, nonpublic personal financial information subject to the Gramm-Leach-Bliley Act, or other data whose processing is subject to security- or sector-specific legal requirements that the Services have not been represented in writing to meet; or to operate or offer services directed at children, or in weapons systems, autonomous targeting, or other military or defense end-uses prohibited by applicable law or Model Provider restrictions.

4. Transparency and Output Integrity

If you deploy any consumer- or user-facing chatbot, agent, or other conversational or automated experience using the Services, you must clearly and prominently disclose to users that they are interacting with an AI system rather than a human, at a minimum at the beginning of each session or interaction. Do not represent Output as human-generated where it is not, and do not remove, alter, obscure, or strip watermarks, digital signatures, metadata, content-provenance signals, or notices or disclosures indicating that content is AI-generated. You are responsible for evaluating the accuracy and appropriateness of Output for your use case (including by testing outputs across a range of inputs and determining where human review is necessary) before using, relying on, publishing, or distributing it. Do not use, quote, publish, or display Arena’s or any Model Provider’s name, trademarks, logos, or other identifiers, publicly attribute Output to any Model Provider or Third-Party Model, or state or imply any endorsement, sponsorship, or affiliation, in each case without Arena’s prior written consent. If you make Output available to other people, you must inform them that factual assertions in AI-generated content should not be relied upon without independent verification, and of the appropriate use cases and limitations of the AI features you provide.

5. Service, API, and Platform Integrity

You may not, and may not attempt to, and may not assist or permit any third party to: reverse engineer, decompile, disassemble, decode, translate, or otherwise attempt to discover or derive the source code, object code, underlying models, model weights, algorithms, structures, ideas, know-how, training data, routing logic, model-selection criteria, or methodologies of the Services or any Third-Party Model, or duplicate or create derivative works of the Services, except to the extent such restriction is prohibited by applicable law; access or use the Services or any Output to build, train, research, develop, improve, market, or assist any product, model, technology, dataset, or service that competes with the Services, any Third-Party Model, or any product or service of Arena or any Model Provider; use the Services or any Output (in whole or in part) to train, fine-tune, calibrate, validate, test, distill, or otherwise develop or improve any machine learning or artificial intelligence model or technology, or include Output in any dataset that may be used for such purposes, or engage in model extraction, model scraping, model stealing, or model distillation; conduct benchmarking, performance testing, load testing, penetration testing, or competitive analysis of the Services or any Third-Party Model, or publish, disclose, distribute, or sell any benchmark, evaluation, or performance results; sell, resell, rent, lease, loan, sublicense, distribute, transfer, assign, or otherwise commercially exploit or make available the Services, API keys, Input, Output, or access to any of them, to any third party, or use the Services on a timesharing or service-bureau basis or otherwise for the benefit of third parties, except as expressly permitted in the Agreement; manipulate, interfere with, or circumvent subscription, billing, balance, or usage-metering systems, whether directly or through automation, or exploit account provisioning, team management, promotional, or trial workflows to avoid fees or obtain funds, usage, or access to which you are not entitled; circumvent, bypass, disable, or interfere with any usage or rate limits, quotas, fair-use guidelines, safety mitigations, guardrails, content filters, abuse protections, or other protective or security measures of the Services or any Third-Party Model, including through “jailbreaking,” adversarial prompting, prompt injection, or manipulation of models into producing prohibited content, or circumvent the guardrails or protective measures of any other platform or third-party service; interfere with, disrupt, damage, or impose an undue or disproportionately large burden on the Services or the servers, networks, or infrastructure of Arena, any Model Provider, or any third party, or introduce excessive or abusive usage patterns; use any robot, spider, crawler, scraper, data-mining, or data-harvesting tool, or other automated means, to access the Services or to extract data from the Services or any Third-Party Model beyond what the Agreement, this AUP, and Documentation expressly permit, or use the Services to scrape, proxy, or act as a VPN; remove, alter, cover, or obscure any copyright, trademark, attribution, or other proprietary rights notices on or in the Services or Output; coordinate activity across multiple accounts to evade detection, rate limits, bans, or suspensions; create accounts by automated means; use alternate accounts to circumvent a suspension or termination; or provide access to the Services to any person or entity whose access Arena or a Model Provider has suspended, terminated, or banned, or that is barred from using the Services under applicable law; or modify, translate, or create derivative works of the Services, or export, copy, display, distribute, or sublicense the Services or APIs, except as expressly permitted by the Agreement.

6. Applications and End Users

If and only to the extent the Agreement permits you to make an application, integration, or other offering built on the Services available to any other person (each an “Application” and such persons “End Users”), you must: contractually bind your End Users to use restrictions at least as protective as this AUP, and remain responsible for your End Users’ compliance; make available to End Users your own terms of use and a privacy policy that accurately discloses your collection, use, and processing of End User data, and comply with those policies and all applicable data protection laws, including honoring data subject rights requests; disclose to End Users in advance, including in your terms and privacy policy, that your Application uses AI, and provide the AI disclosures described in Section 4; provide End Users with a reasonable mechanism to report errors, harmful Output, or abuse, and act on such reports; implement and maintain industry-standard administrative, technical, and physical safeguards to protect End User data, and maintain independent backups of your own content; not solicit, collect, or receive End Users’ credentials, tokens, or API keys for the Services or any third-party service, and not use End User data to train or fine-tune any AI or machine-learning model; and not represent that your Application is provided, endorsed, or sponsored by Arena or any Model Provider.

7. Model Provider Restrictions

Certain Third-Party Models are subject to additional use restrictions imposed by the terms and conditions of their respective Model Providers (“Model Provider Terms”). Arena may publish model-specific restrictions in the Documentation, and such restrictions form part of this AUP with respect to your use of the applicable Third-Party Model. Arena may also publish a list of Third-Party Models in the Documentation, and you are responsible for consulting the applicable Model Provider Terms for all license conditions and restrictions on use of the Output. Where a Model Provider’s restriction is stricter than this AUP, the stricter restriction controls for Output generated by that Model Provider’s models.

8. Monitoring and Enforcement

Arena may use automated and manual systems to detect and act on violations of this AUP, in each case consistent with the Agreement and Arena’s Privacy Policy. If Arena determines, in its sole discretion, that you or your authorized third parties, including End Users, have violated or are likely to violate this AUP, Arena may, with or without notice: throttle, limit, or restrict your access to the Services; block or modify Input or Output; remove content; suspend or terminate your account or access to some or all of the Services or particular Third-Party Models; and, where Arena believes there is a risk of real-world harm or as required by law, refer the matter to law enforcement or other appropriate authorities (including reporting apparent CSAM to the relevant authorities). Arena’s failure to enforce any provision of this AUP is not a waiver of its right to do so. Arena may also act to enforce restrictions requested by a Model Provider with respect to that Model Provider’s models.

9. Reporting Violations and Appeals

If you become aware of any violation of this AUP, or if any Output raises safety concerns, please report it to Arena at [email protected]. If you believe your account was suspended or terminated, or your content was blocked or removed, in error, you may contact [email protected] to request review. Arena will consider appeals in good faith but retains sole discretion over enforcement decisions.