Scope
This policy applies to everyone who uses xorvyne.com and to every client engagement. It forms part of our Terms of Service. Where a client asks us to build or support something covered by the prohibitions below, we will decline, and we may terminate an existing engagement under the Terms.
Using this website
You may not:
- attempt to gain unauthorised access to the site, its server, or any connected system;
- probe, scan, or test the vulnerability of our infrastructure without prior written permission;
- introduce malware, or interfere with the site's normal operation;
- use automated tools to place unreasonable load on the site, or to scrape content at scale;
- harvest email addresses or contact details from the site for marketing;
- use our content to train machine-learning models without written permission;
- impersonate XORVYNE LLC or misrepresent your affiliation with us;
- submit false, misleading, or abusive enquiries through the contact form.
Security research
Good-faith security research is welcome. Contact legal@xorvyne.com before testing. We will not pursue action against researchers who avoid accessing, modifying, or exfiltrating data, avoid degrading service for others, give us reasonable time to remediate before disclosure, and stay within the law.
Work we will not build or support
We decline engagements whose purpose or predominant use is:
Unlawful or harmful
- Anything that violates applicable law in the jurisdictions where it will operate.
- Systems designed to facilitate fraud, money laundering, or sanctions evasion.
- Tools whose purpose is to gain unauthorised access to systems or data, to conduct denial-of-service attacks, to distribute malware or ransomware, or to evade detection by security software for malicious ends.
- Credential-harvesting or phishing infrastructure.
Deceptive by design
- Interfaces built around dark patterns: subscriptions that are deliberately hard to cancel, hidden costs surfaced only at checkout, consent flows engineered to produce a "yes".
- Fake reviews, engagement farms, or systems that manufacture the appearance of activity.
- Synthetic media intended to deceive people about the words or actions of a real individual.
- Misinformation or disinformation operations.
Abusive to people
- Stalkerware, covert location tracking, or monitoring of individuals without their knowledge and lawful basis.
- Systems designed to harass, threaten, defame, or discriminate against people or protected groups.
- Child sexual abuse material, or any system facilitating exploitation or trafficking.
- Mass unsolicited messaging systems and spam infrastructure.
Data misuse
- Scraping or aggregating personal data without a lawful basis, or in breach of a platform's terms.
- Selling or brokering personal data collected without informed consent.
- Biometric identification or surveillance systems operating without the consent and lawful basis their jurisdiction requires.
Weapons and critical safety
- Autonomous weapons systems and targeting software.
- Safety-critical control systems — medical devices, aviation, industrial safety instrumentation — where certification and specialist assurance are required and we are not the appropriately qualified vendor.
AI and automation specifically
We build AI features, and we hold them to the same rules. In addition, we will not build:
- systems that make consequential decisions about people — hiring, credit, housing, benefits, criminal justice — without human review, documented evaluation, and a route of appeal;
- agents with unrestricted, unaudited access to production systems or funds;
- models trained on data the client does not have the right to use;
- tools that impersonate a specific real person without that person's documented consent;
- AI features presented to end users as human without disclosure, where disclosure is expected or legally required.
Every AI engagement includes agreed evaluation criteria, guardrails, and defined human checkpoints. If we do not believe a proposed system can meet a reliability bar appropriate to its consequences, we will say so and decline rather than ship it.
Client obligations
When you engage us, you confirm that:
- the intended use of the software complies with applicable law;
- you hold the rights and consents needed for all content, code, and data you supply;
- you will obtain the consents required for any personal data you ask us to process;
- you will not use deliverables we build for you for any purpose prohibited by this policy;
- you hold the licences, permits, or regulatory approvals your sector requires.
How we handle a violation
If we become aware of a breach, we will normally raise it with you first and give you an opportunity to correct it. Depending on severity we may restrict website access, suspend work, terminate the engagement under our Terms of Service, retain fees for work already performed, or report the matter to the relevant authorities where the law requires it.
Where we terminate for a violation, you remain liable for work performed to that date. Where we decline an engagement before work begins, all fees paid are refunded in full under our Refund Policy.
Reporting a concern
To report misuse of this website, abuse of software we have built, or a suspected violation of this policy, email legal@xorvyne.com with as much detail as you can. We review every report and respond within one business day.
This document was last updated on September 2, 2026. XORVYNE LLC may revise it from time to time; the version published at xorvyne.com/acceptable-use/ is always the version in force. Material changes affecting active engagements are notified by email at least 30 days before they take effect.
Questions about this document: legal@xorvyne.com