ACCEPTABLE USE POLICY
Last Updated: April 21, 2026
Effective Date: April 21, 2026
1. Purpose and Scope
This Acceptable Use Policy ("AUP") sets out the rules governing how you may, and may not, use the RamAIn application, website (https://RamAIn.ai/), APIs, and any related services (collectively, the "Service") provided by RamAIn, Inc. ("RamAIn," "we," "us").
This AUP applies to all users of the Service, including individual consumers, business users, developers accessing any RamAIn API, and any person who interacts with the Service directly or indirectly. Where you use the Service on behalf of an organisation, you are responsible for ensuring that your organisation and all of its users comply with this AUP.
This AUP is incorporated by reference into the Terms of Service and the Privacy Policy. Capitalised terms used but not defined in this AUP have the meanings given in the Terms of Service.
RamAIn is a local-first AI desktop agent. It processes screen content and other User Content on your device and, when you deliberately activate cloud inference features, transmits limited data to third-party AI infrastructure. Because RamAIn can see your screen and interact with third-party applications at your direction, the potential for misuse, intentional or accidental, is higher than with a purely passive tool. This AUP reflects that context.
2. Core Principles
These principles underpin every specific rule in this AUP. When in doubt about whether a particular use is permitted, apply these principles:
Principle What It Means in Practice
Legality Use the Service only for lawful purposes. Never use it to plan, facilitate, or commit any act that violates applicable law in your jurisdiction or the jurisdiction of any person affected by your use.
Respect for Do not use the Service to harm, harass, deceive, others surveil, or exploit any person. Treat third-party information that appears in your workspace with the same care you would want applied to your own.
Human The Service is a tool, not a decision-maker. You are oversight responsible for reviewing Outputs before acting on them. Never substitute AI-generated content for required human judgment, particularly in regulated, high-stakes, or sensitive contexts.
Honesty and Do not use the Service to deceive others about the transparency nature, origin, or accuracy of content. Disclose AI involvement where required by law or where material to the recipient.
Third-party Comply with the terms of service of any third-party respect platform you use alongside the Service. RamAIn operates within third-party ecosystems at your direction; it is your responsibility to ensure that direction is lawful.
Privacy by The Service is designed to keep User Content on your design device. Do not use it in ways that undermine this design or that expose personal data of others to unnecessary risk.
Security Do not use the Service to compromise the security, integrity, or availability of any system, including the Service itself.
3. Prohibited Conduct
The following uses of the Service are prohibited. This list is illustrative, not exhaustive. Conduct not listed below may still violate this AUP if it is inconsistent with the Core Principles in Section 2 or the Terms of Service.
Risk Level Key: Critical = immediate enforcement likely; High = serious violation; enforcement proportionate to circumstances.
Category Prohibited Conduct Risk Level
Illegal Using the Service to plan, facilitate, or Critical
Activity execute any activity that violates
applicable law, including fraud, money
laundering, identity theft, tax evasion, or
any other criminal act.
Illegal Generating, distributing, or transmitting Critical
Activity content that is unlawful in your
jurisdiction or the jurisdiction of the
recipient.
Child Safety Generating, storing, transmitting, or Critical
distributing child sexual abuse material
(CSAM) or any content that sexualises,
exploits, or endangers minors.
Child Safety Using the Service in any way that targets, Critical grooms, manipulates, or harms children.
Violence & Generating content that constitutes Critical
Harm credible threats of violence, incites
violence against individuals or groups, or
that could facilitate mass-casualty events.
Violence & Using the Service to plan, coordinate, or Critical Harm execute physical harm to any person.
Weapons & Generating detailed instructions for the Critical
Dangerous manufacture, acquisition, or deployment of
Materials weapons capable of mass casualties,
including biological, chemical, nuclear, or
radiological (CBRN) weapons.
Weapons & Generating instructions for the manufacture High
Dangerous or modification of conventional weapons in
Materials violation of applicable law.
Harassment & Using the Service to harass, stalk, Critical
Abuse threaten, intimidate, doxx, or abuse any
individual.
Harassment & Generating non-consensual intimate imagery Critical
Abuse (NCII) or deepfake content depicting real
individuals in a harmful, sexualised, or
degrading manner.
Deception & Generating phishing messages, fraudulent Critical
Fraud documents, fake invoices, impersonation
content, or other deceptive materials
intended to deceive or defraud.
Deception & Using the Service to create disinformation, Critical
Fraud fabricated news, synthetic media, or
deepfakes intended to deceive the public or
harm individuals.
Deception & Impersonating RamAIn, RamAIn personnel, or High
Fraud any other person or entity to deceive
others.
Third-Party Using the Service to automate actions that High
Platform violate the terms of service, acceptable
Violations use policies, or rate limits of third-party
platforms (e.g. sending spam, scraping in
violation of platform terms, automated
account creation).
Third-Party Directing the Service to access, transmit, High
Platform or process data from a third-party platform
Violations in a manner that violates that platform's
terms or applicable law.
Privacy & Data Using the Service to collect, profile, or High
Protection process personal data of third parties
without a lawful basis, appropriate notice,
or required consent.
Privacy & Data Processing sensitive personal data (health, High
Protection financial, biometric, or government ID
data) of third parties through the Service
without appropriate safeguards, consents,
and legal authority.
Privacy & Data Using the Service to conduct surveillance, Critical
Protection track individuals without consent, or
enable unauthorised access to third-party
accounts or systems.
Intellectual Generating content that reproduces High
Property substantial portions of third-party
copyrighted works without authorisation or
a lawful basis.
Intellectual Using the Service to circumvent High Property technological protection measures (TPMs) or digital rights management (DRM) systems.
Security & Attempting to probe, scan, penetrate, or Critical
Integrity exploit vulnerabilities in the Service,
RamAIn's infrastructure, or any
third-party system.
Security & Introducing malware, ransomware, viruses, Critical Integrity trojan horses, or other malicious code into the Service or any connected system.
Security & Conducting or facilitating Critical
Integrity denial-of-service (DoS/DDoS) attacks or
other actions intended to degrade, disable,
or overwhelm the Service or third-party
systems.
Security & Attempting to bypass, disable, or Critical
Integrity circumvent authentication, access controls,
rate limits, or other security measures of
the Service.
Misuse of AI Presenting AI-generated Outputs as High
Outputs human-authored without disclosure in
contexts where that distinction is material
(e.g. academic submissions, legal filings,
regulated communications).
Misuse of AI Using Outputs to make automated, material High
Outputs decisions about individuals (e.g. credit,
employment, housing, insurance) without
appropriate human oversight, legal basis,
or compliance with applicable AI/automated
decision-making laws.
High-Risk Using Outputs as a substitute for High
Regulated professional medical diagnosis, treatment
Contexts advice, or prescription, without
appropriate clinical oversight.
High-Risk Using Outputs as a substitute for High
Regulated independent legal advice in matters with
Contexts significant legal consequences, without
attorney review.
High-Risk Using Outputs to make binding financial, High
Regulated investment, or trading decisions without
Contexts independent professional review and
applicable regulatory compliance.
Competitive Using the Service --- including its High
Misuse Outputs, interfaces, or API responses ---
to develop, train, benchmark, or improve a
competing AI product or service.
Competitive Systematic extraction of prompts, model High
Misuse behaviours, or system design from the
Service to reverse-engineer RamAIn's
proprietary methods.
4. Screen Access and Local Processing
Because RamAIn's core function involves reading your screen and processing visible content, the following rules apply specifically to that capability:
-
You are responsible for what is on your screen. Do not use the Service on screens that display content you do not have the right to process, including content subject to confidentiality obligations, court orders, or licence restrictions that prohibit automated processing.
-
Non-User Data. Your screen may display information about third parties (e.g. colleagues' messages, client data, counterparty documents). You are responsible for ensuring you have a lawful basis to process that information through the Service. See the Privacy Policy for how RamAIn handles Non-User Data.
-
Sensitive personal data. Exercise particular care when using the Service in contexts where sensitive personal data (health information, financial data, government IDs, biometric data, or special-category data under GDPR) is visible on your screen. Ensure you have appropriate consent, a contractual basis, or a regulatory permission before processing such data through any cloud inference feature.
-
Confidential professional information. If you are subject to professional confidentiality obligations (e.g. as a lawyer, doctor, accountant, or financial adviser), you are responsible for ensuring your use of the Service --- particularly any cloud inference features --- is consistent with those obligations. Review the Privacy Policy's description of Transient Cloud Processing before using cloud features with client data.
-
Workplace data. If you are using the Service in an employment context, ensure your employer's policies and any applicable data processing agreements permit use of the Service for the tasks you are performing.
-
Do not attempt to use the Service to capture, aggregate, or exfiltrate data from your screen at scale for purposes unrelated to the task you have initiated. The Service is designed to assist with individual tasks, not bulk data extraction.
5. Transient Cloud Processing
When you activate a cloud inference feature (by pressing the designated hotkey or otherwise triggering Transient Cloud Processing), the following rules apply in addition to all other sections of this AUP:
-
Only activate cloud features when you have reviewed what is currently on your screen and are satisfied that transmitting a snippet of that content to a cloud inference provider is appropriate given your privacy and confidentiality obligations.
-
Do not activate cloud features in environments where you are prohibited from transmitting data to cloud services (e.g. air-gapped systems, secure government networks, or environments governed by data localisation requirements that prohibit cloud processing).
-
Do not deliberately construct screen content or prompts intended to circumvent the zero-data-retention controls applied by RamAIn and its subprocessors, or to cause the Service to retain, extract, or aggregate content beyond the scope of a single inference request.
-
Data residency and cross-border transfers. Cloud inference providers may process data in jurisdictions outside your own. If you are subject to data localisation laws or contractual data residency obligations, review the Privacy Policy's description of international transfers before activating cloud features.
-
You remain responsible for the content of any prompt or screen snippet you transmit via Transient Cloud Processing. RamAIn's zero-data-retention design reduces but does not eliminate all risk associated with transmitting User Content to cloud infrastructure.
6. Restricted and High-Risk Contexts
The Service is a general-purpose AI assistant. It is not designed, validated, or certified for use in safety-critical, life-critical, legally determinative, or other high-risk contexts without appropriate professional oversight. The table below identifies key restricted contexts and the minimum safeguards required.
Context Specific Risk Required Safeguard
Medical / Diagnostic or treatment outputs Independent review by Clinical used without clinical review licensed clinician; do not rely on Output alone
Legal / Legal advice or documents used Independent review by Regulatory without attorney review qualified lawyer; no binding legal actions based on Output alone
Financial / Investment or trading decisions Independent review by Investment made solely on AI Output licensed financial adviser; regulatory compliance required
Employment / Hiring, firing, or performance Human decision-maker HR decisions informed by AI Output in loop; compliance with employment discrimination law
Automated AI-driven decisions on credit, Lawful basis under Decisions about insurance, housing, or similar applicable Individuals AI/automated decision law; right of explanation and appeal
Critical Outputs used to control or Not permitted without Infrastructure influence safety-critical bespoke agreement and systems validated safety processes
Government / Outputs used in government Mandatory human Public Sector administrative decisions review; compliance with relevant public law and sector-specific obligations
Minors Any context where minors' data Applicable child or interests are involved protection law compliance; parental consent where required
This table is not exhaustive. If you are considering using the Service in any context where an error in an Output could have serious consequences for health, safety, legal rights, financial welfare, or fundamental freedoms, you must apply independent professional judgment and human review before acting on any Output.
7. AI Output Transparency and Disclosure
You are responsible for ensuring that your use of AI-generated Outputs is transparent where required by law or where material to others. In particular:
-
Academic and educational contexts. Many educational institutions prohibit or restrict the submission of AI-generated content without disclosure. You are responsible for complying with your institution's academic integrity policies.
-
Professional and regulated communications. If you use Outputs in legal filings, regulatory submissions, financial reports, medical records, or other regulated documents, you must comply with any applicable disclosure or accuracy obligations imposed by law or professional rules.
-
Journalism and public communications. Do not present AI-generated content as original human-authored journalism or analysis without appropriate disclosure, particularly where that content could mislead the public on matters of public interest.
-
Commercial advertising and marketing. Ensure that AI-generated advertising content complies with applicable advertising standards, consumer protection laws, and platform-specific disclosure requirements (including FTC guidelines in the US and equivalent rules in other jurisdictions).
-
Political and electoral content. Do not use the Service to generate political advertising, voter suppression content, or electoral disinformation. Where AI-generated political content is lawfully permitted, comply with all applicable disclosure requirements.
-
Deepfakes and synthetic media. Do not use the Service to create synthetic media (including voice cloning, image or video manipulation, or text attributed to real individuals) that is intended to deceive or that misrepresents a real person's views, actions, or identity.
8. Third-Party Platform Compliance
RamAIn can interact with third-party applications and platforms at your direction. Because RamAIn acts on your behalf when you direct it to interact with third-party services, you bear responsibility for ensuring that your use of RamAIn with those services complies with their terms. The table below sets out platform-specific obligations.
Platform / Specific Obligation Category
Email platforms Do not use the Service to send spam, unsolicited (Gmail, Outlook, bulk mail, or phishing messages. Comply with the etc.) platform's sender policies and all applicable anti-spam laws (CAN-SPAM, CASL, etc.).
Social media Do not use the Service to create fake accounts, platforms manufacture inauthentic engagement, or circumvent platform moderation or rate limits.
Messaging apps Do not automate mass messaging or use the Service (Slack, Teams, to harvest user data from messaging platforms in WhatsApp, etc.) violation of their terms.
Productivity & Comply with the platform's API terms and usage document tools policies. Do not use the Service to extract data (Google Workspace, from these platforms in volumes that violate Microsoft 365, their terms. etc.)
Web browsers & web Do not use the Service to circumvent a website's scraping robots.txt, CAPTCHA systems, or other access controls. Scraping that violates a website's terms is prohibited.
Payment systems Do not use the Service to process, simulate, or automate payment transactions in violation of the payment processor's acceptable use policy or applicable financial regulation.
Any third-party Review and comply with the relevant platform's platform current terms of service before directing the Service to interact with that platform. RamAIn is not liable for consequences arising from your violation of third-party terms.
If a third-party platform bans or restricts your account as a result of activity you directed through the Service, RamAIn is not responsible for that outcome. You should review the terms of each platform you intend to use with the Service before doing so.
9. Professional Confidentiality and Workplace Use
9.1 Professional Obligations
If you are a licensed professional (including a lawyer, doctor, accountant, financial adviser, or other regulated professional), you are responsible for ensuring that your use of the Service is consistent with your professional confidentiality obligations, duties of care, and any applicable regulatory requirements. RamAIn does not provide professional advice and is not a substitute for the exercise of your professional judgment.
9.2 Privileged and Confidential Materials
If you use the Service to draft or review documents that are subject to legal privilege, professional secrecy, or contractual confidentiality obligations, consider carefully before activating cloud inference features. Review the Privacy Policy's description of Transient Cloud Processing and seek independent advice if you are unsure whether cloud inference is compatible with your obligations.
9.3 Employer Policies
If you use the Service in connection with your employment, you are responsible for ensuring your use complies with your employer's policies on AI tools, data security, and acceptable use of company systems. If your employer has entered into a separate enterprise agreement with RamAIn, that agreement's terms apply in addition to this AUP.
9.4 Whistleblowing and Legal Disclosures
Nothing in this AUP prohibits you from disclosing information to a regulator, law enforcement authority, or other competent authority where you are legally entitled or required to do so, including making protected disclosures under applicable whistleblowing or whistleblower protection laws.
10. Data Protection Responsibilities
RamAIn's local-first design means most User Content stays on your device. However, you have independent data protection obligations that apply regardless of where processing occurs. This Section identifies key responsibilities.
-
Lawful basis. Where you direct the Service to process personal data of third parties (e.g. a colleague's email address, a client's details visible on your screen), you are responsible for having a lawful basis for that processing under applicable data protection law.
-
Data minimisation. Do not use the Service to process more personal data about third parties than is necessary for the specific task you are performing.
-
Controller obligations. If you are acting as a data controller (or data fiduciary under India's DPDPA) in respect of personal data visible in your workspace, your obligations under applicable data protection law apply to your use of the Service, including any obligations to maintain records of processing, conduct DPIAs, or notify regulators.
-
Children's data. Do not use the Service to process personal data of children under 18 (or the applicable age threshold in your jurisdiction) without appropriate parental or guardian consent and compliance with applicable children's privacy law (including COPPA in the US, GDPR Article 8 in the EU, and equivalent rules).
-
Health and special-category data. Treat health, biometric, financial, and other sensitive personal data visible on your screen with heightened care. Before using cloud inference features with such data, ensure you have explicit consent or another specific legal basis permitting cloud processing of that data category.
-
Security incidents. If you become aware that your use of the Service has resulted in unauthorised access to, or disclosure of, personal data, notify us promptly and comply with your own notification obligations under applicable data protection law.
11. Security Research and Responsible Disclosure
RamAIn values the security research community. If you believe you have identified a security vulnerability in the Service, we encourage responsible disclosure:
-
Do not exploit the vulnerability or access data beyond what is necessary to demonstrate the issue.
-
Do not disclose the vulnerability publicly before we have had a reasonable opportunity to investigate and address it.
-
Report the vulnerability to us at security@RamAIn.ai with a description of the issue, steps to reproduce it, and your assessment of its potential impact.
-
We will acknowledge receipt of a valid security report within 5 business days and keep you informed of our progress.
Good-faith security research conducted in accordance with this Section and any published bug bounty programme will not be treated as a violation of this AUP or the Terms of Service. RamAIn reserves the right to determine, in its reasonable discretion, whether conduct constitutes good-faith research.
12. Enforcement
12.1 How We Enforce This AUP
RamAIn enforces this AUP through a combination of automated monitoring, user reports, and manual review. We aim to apply enforcement actions that are proportionate to the severity of the violation and the circumstances of the user. The table below summarises our general approach.
Severity Example Conduct Likely Response
Critical CSAM, CBRN weapons Immediate, permanent instructions, credible account termination; threats of violence, referral to law serious fraud, NCII, enforcement; no warning critical infrastructure required attack
High Repeated harassment, Immediate suspension serious third-party pending investigation; platform violations, termination on systematic deception, confirmation; may refer to processing sensitive data regulators without basis
Medium First-time or isolated Warning and opportunity to policy violations, cure; suspension if not accidental misuse, minor remedied within stated third-party term breaches timeframe
Low / Unclear Ambiguous or borderline Notice and clarification conduct, good-faith request; monitoring; no mistakes immediate enforcement action if resolved promptly
12.2 Right to Investigate
RamAIn reserves the right to investigate any use of the Service that we reasonably suspect may violate this AUP, the Terms of Service, or applicable law. During an investigation, we may temporarily suspend access to prevent further harm. We will endeavour to resolve investigations promptly and will restore access where we determine no violation occurred.
12.3 Referrals to Law Enforcement and Regulators
Where we identify conduct that constitutes a serious criminal offence, particularly conduct involving child safety, credible threats of violence, or significant fraud, we will report that conduct to appropriate law enforcement authorities and, where applicable, to specialist bodies such as the National Center for Missing and Exploited Children (NCMEC). We may be required by law to make such referrals without prior notice to you.
12.4 No Obligation to Monitor
RamAIn is not obligated to monitor all use of the Service or to proactively identify violations of this AUP. Our enforcement is primarily reactive, based on user reports, automated signals, and targeted review. The absence of monitoring or enforcement in a particular case does not constitute approval of the conduct.
12.5 Appeals
If your account is suspended or terminated and you believe the action was taken in error, you may appeal by contacting us at founders@ramain.ai within 30 days of the enforcement action. Please include your account details, a description of the action taken, and the reasons you believe the action was in error. We will review your appeal and respond within 15 business days.
13. Reporting Violations and Security Issues
If you become aware of a potential violation of this AUP by another user, a security vulnerability in the Service, or any other concern, please report it to us using the appropriate contact below.
Report Type Contact What to Include
Security security@ramain.ai Description of vulnerability / vulnerability, affected bug feature, steps to reproduce, potential impact. Do not exploit or publicly disclose before we respond.
Abuse / policy legal@ramain.ai Nature of the violation, violation by how you became aware, any another user supporting information. Do not include personal data beyond what is necessary.
CSAM or child legal@ramain.ai Any suspected CSAM must be safety concern reported immediately. Do not share, store, or transmit the content. We will refer to NCMEC and law enforcement.
Copyright / IP legal@ramain.ai See DMCA notice infringement requirements in the Terms of Service Section 7.9.
General policy legal@ramain.ai Description of your questions question or concern. We aim to respond within 5 business days.
We take all reports seriously and will investigate promptly. We will not retaliate against users who make good-faith reports. Reporter confidentiality will be maintained to the extent permitted by law and consistent with our ability to investigate.
14. Your Responsibility for Downstream Use
If you are a developer, business, or enterprise customer who deploys the Service to or on behalf of end users (for example, by integrating RamAIn into a workflow or platform), you are responsible for:
-
ensuring your end users are made aware of and agree to terms at least as restrictive as this AUP;
-
implementing appropriate controls to prevent end users from using the Service in violation of this AUP;
-
monitoring your deployment for compliance with this AUP and applicable law;
-
promptly reporting to RamAIn any violations you identify; and
-
maintaining appropriate contractual and technical safeguards for any personal data processed through your deployment.
Enterprise or API customers should contact us to discuss whether a Data Processing Agreement (DPA) or bespoke terms are required for their deployment.
15. Changes to This AUP
We may update this AUP from time to time to reflect changes in the Service, emerging risks, regulatory developments, or feedback from users. If we make material changes, we will provide notice consistent with the notice provisions in the Terms of Service. The Last Updated date at the top of this AUP reflects when it was most recently revised. Your continued use of the Service after the effective date of any update constitutes acceptance of the revised AUP.
16. Relationship to Other Documents and Order of Precedence
This AUP forms part of the agreement between you and RamAIn, together with the Terms of Service and Privacy Policy. In the event of conflict:
-
The Terms of Service controls for contractual matters (including fees, liability, and dispute resolution).
-
The Privacy Policy controls for data processing and privacy matters.
-
This AUP controls for conduct-specific matters (what you may and may not do with the Service).
Where a specific Order or Subscription Confirmation contains conduct-specific terms that conflict with this AUP, the Order controls only to the extent of that specific conflict and only for the customer who is party to that Order.
17. Contact
Questions about this AUP should be directed to:
Contact Type Details
Policy questions privacy@ramain.ai
Abuse / violation legal@ramain.ai reports
Security / security@ramain.ai
vulnerability
reports
Trust & Safety founders@ramain.ai
(CSAM / child
safety)