Acceptable Use Policy

Version: Draft (pending counsel review) Last updated: 2026-06-14 Effective date: [To be set on publication]

This Acceptable Use Policy ("AUP") governs your conduct when using Blueprint, provided by NeuronKite LLC. The AUP is incorporated into the Terms of Service. Violation may result in account suspension or termination, plus the indemnity obligations set out in the Terms.

1. Things you must not do

1.1 Illegal activity

Do not use the Service for any purpose that is unlawful in your jurisdiction or in the jurisdictions where our infrastructure operates. This includes fraud, money laundering, harassment, stalking, distribution of child sexual abuse material, and any violation of applicable export-control or sanctions laws.

1.2 Prohibited content — ITAR / EAR / CUI

You must not submit:

• Data subject to the International Traffic in Arms Regulations (ITAR; 22 CFR §§120–130). This includes design data, technical manuals, and other "technical data" for items on the United States Munitions List (USML).
• Data subject to the Export Administration Regulations (EAR; 15 CFR §§730–774) that you are not authorized to export to the jurisdictions of our subprocessors, including data classified as EAR99 if your transmission would constitute a deemed export to a foreign national.
• Controlled Unclassified Information (CUI) as defined by 32 CFR Part 2002, including content marked CUI//SP-PRVCY, CUI//SP-PROCUREMENT, or any other CUI category.
• Classified information of any government (United States or foreign), at any level (Confidential, Secret, Top Secret, or equivalents).

Blueprint is not FedRAMP-authorized and is not approved for ITAR-controlled, EAR-controlled, or CUI workloads. The Service is intended only for Unrestricted data and limited Confidential data under our published sensitivity tiers.

1.3 Geographic restrictions

You must not use the Service from, on behalf of any person located in, or for the benefit of any person located in:

• Countries subject to comprehensive U.S. sanctions administered by the Office of Foreign Assets Control (OFAC): currently Cuba, Iran, North Korea, Syria, the Crimea, Donetsk, and Luhansk regions of Ukraine
• Any individual or entity on the OFAC Specially Designated Nationals and Blocked Persons (SDN) List, the Bureau of Industry and Security Entity List, or any other applicable denied-party list

1.4 Content you don't have rights to

Do not submit Briefs, support documents, or other content if you do not have the rights to do so, including content subject to a non-disclosure agreement that prohibits AI processing or third-party transmission.

1.5 Security and integrity

Do not:

• Reverse-engineer, decompile, or attempt to extract source code, prompts, model configurations, or other non-public Service components
• Bypass or attempt to bypass authentication, authorization, rate limits, or content moderation controls
• Probe, scan, or test the vulnerability of the Service without prior written authorization (see §3 for our security disclosure policy)
• Use automation, scrapers, bots, or AI agents to interact with the Service in ways that materially exceed normal human use patterns or that consume resources disproportionate to your plan
• Interfere with or disrupt the Service or the experience of other users

1.6 Misuse of AI Output

Do not present AI Output as the work of a licensed Professional Engineer or attribute it to a specific human author who did not review and adopt it. Do not use AI Output:

• For safety-critical, mission-critical, certification-bearing, or life-support applications without independent qualified human review (see Engineering Disclaimer)
• To impersonate a person or organization, or to create deceptive content
• To generate content that is defamatory, infringing, harassing, hateful, or sexually explicit
• To generate content that could reasonably be expected to incite violence or enable physical, financial, or reputational harm to identifiable persons

1.7 Resale and white-labeling

Do not resell, sublicense, or white-label the Service without our prior written agreement. Internal use within your organization is fine.

1.8 Disproportionate consumption

You may not consume Service resources at a level disproportionate to your plan, designed to circumvent CU metering, or that degrades the experience for other users. We reserve the right to apply rate limits and to suspend accounts engaged in evident abuse.

2. Things you must do

2.1 Maintain accurate account information

Keep your contact email current. Many compliance and security notices flow through it.

2.2 Select the appropriate sensitivity tier

Sensitivity tiers in the product are your declaration of the classification of the content you are submitting. You are responsible for selecting the correct tier; we do not independently verify content classification.

2.3 Report suspected violations

If you become aware of someone violating this AUP through the Service, please email [email protected]. Include enough detail for us to investigate.

2.4 Cooperate with investigations

If we contact you about a suspected AUP violation, you must respond within 5 business days. Failure to cooperate is itself a material breach.

3. Security disclosure

If you discover a security vulnerability in the Service, please report it to [email protected] with:

• Description of the vulnerability
• Steps to reproduce
• Impact assessment
• Your contact information

We will:

• Acknowledge within 24 hours
• Provide an investigation update within 5 business days
• Coordinate disclosure timing with you (typically 90 days embargo)

We do not take legal action against good-faith researchers who:

• Make a reasonable effort to avoid privacy violations, data destruction, and service degradation
• Report findings to us before public disclosure
• Avoid social engineering, physical attacks, denial-of-service attacks, and accessing or modifying data of other users

This is not a bug-bounty program. We may offer recognition or token rewards at our discretion.

4. Enforcement

4.1 Investigation

We may investigate suspected AUP violations using the access logs, usage telemetry, and Customer Content metadata available to us. We do not routinely inspect Brief or Artifact content.

4.2 Actions we may take

Depending on severity, we may:

• Send a warning
• Throttle or rate-limit your account
• Suspend your account pending investigation
• Terminate your account immediately for material violations
• Report you to law enforcement where required by law or where the violation involves illegal activity

4.3 Severity examples

4.4 Restoration

If your account is suspended for investigation and we conclude no violation occurred, we will restore it without loss of plan, credits, or content. If we conclude a violation did occur, we will notify you of our decision and your right to appeal in writing to [email protected] within 14 days.

4.5 No waiver

We reserve the right to enforce or not enforce this AUP at our discretion. Failure to enforce is not a waiver of the right to enforce later.

5. Changes to this AUP

We may update this AUP from time to time. Material changes will be announced at least 14 days in advance via email and in-product banner. Continued use after the effective date constitutes acceptance.

6. Contact

NeuronKite LLC Attn: Trust & Safety 4539 N 22nd St #6544, Phoenix, AZ 85016 [email protected] [email protected] [email protected] (appeals)