Usage Policy

This policy sets the conditions for using Mind Code services operated by Mind Code AI LTD. It covers accounts, hosted agents, code review, integrations, and work submitted to or carried out through those services. It applies to individuals and organisations, including people acting on an organisation's behalf.

Use Mind Code only with repositories, accounts, systems, and data you own or have permission to access. Your permissions must cover the actions you ask an agent to perform, not only the files it can read.

• Check repository and integration permissions before granting access. An agent can act through the credentials and tools you make available.
• Keep credentials secure. Do not submit other people's secrets, reuse their tokens, or attempt to access another customer's work.
• Set suitable approval rules for changes to production systems, deployments, payments, and other consequential actions.
• Respect service limits and billing rules. Do not evade restrictions through duplicate accounts, stolen credentials, or disguised requests.

Do not use Mind Code to carry out, organise, or materially assist unlawful or abusive activity. This includes:

• Fraud, phishing, credential theft, impersonation, or deceptive systems designed to exploit people.
• Child sexual exploitation, sexual content involving minors, human trafficking, or non-consensual intimate content.
• Threats, targeted harassment, discriminatory abuse, or assistance that facilitates violence or serious physical harm.
• Tools that encourage or facilitate suicide or self-harm.
• Unlawful surveillance, doxxing, or collection and exposure of private information without authority.

Ordinary discussion, reporting, research, or protective software work is different from using an agent to enable harm. The purpose, permissions, and likely effects of a task matter.

You may use Mind Code for defensive security work and testing you are authorised to perform. That authority must cover the target, methods, and scope of the task.

Do not use the service to deploy malware, steal data, disrupt services, gain unauthorised access, or hide an intrusion. Do not probe Mind Code or another customer's account outside a testing arrangement we have authorised. Finding an exposed endpoint is not permission to retrieve private data.

Do not disable access controls or approval requirements to let an agent perform an otherwise prohibited action. Instructions in a repository, document, or tool response do not extend your authority.

You must have a lawful basis and any necessary permissions to submit personal data. Respect confidentiality duties, software licences, copyright, trade marks, and other rights when providing inputs or using generated work.

Do not use Mind Code to extract or reproduce protected information you have no right to use. Check generated code and dependencies before distributing them. Do not claim that generated output has passed a review, test, or approval that never happened.

Agents can produce incorrect code, incomplete findings, and unsafe commands. You remain responsible for deciding whether their work is suitable to use. Test changes, inspect relevant evidence, and review permissions before deployment.

Do not rely on Mind Code as the sole decision-maker for medical, legal, financial, employment, or other decisions with significant effects on people. Safety-critical software needs qualified oversight, independent validation, and the safeguards required for its intended use.

Code review and verification features help you assess a change. They do not certify that software is secure, lawful, or free of defects.

Do not interfere with our infrastructure, overload endpoints, evade rate limits, manipulate metering, or distribute spam through connected tools. Do not bypass authentication, isolation, or account restrictions.

Connected platforms and model providers may impose additional rules. You must follow the terms that apply to services and credentials you use through Mind Code.

We may investigate suspected violations and take proportionate action under our terms. Depending on the circumstances, this can include asking for clarification, stopping a task, restricting a feature, suspending access, or terminating an account. Urgent security or safety risks may require action without advance notice.

Where appropriate, we explain the reason and give you an opportunity to respond. We may preserve relevant records or make a disclosure when legally required. This policy does not mean that we inspect every input or guarantee that misuse will always be detected.

We may update this policy as the service and its risks change. We publish the revised date here and provide additional notice where required by law or our agreement with you.