Acceptable Use Policy

GliminTor OS Acceptable Use Policy Rules governing acceptable use of GliminTor OS Product GliminTor OS Operator XBLANC SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ Contact [email protected] Effective date April 2026 *v3.0 — April 2026* This AUP supplements the Terms of Service. Violations may result in immediate suspension or permanent termination.

You must not create, store, publish, or transmit: • Content illegal under EU law or applicable national law, including hate speech, CSAM, terrorist content, or IP-infringing material. • Spam, unsolicited bulk messages, or misleading commercial communications. • Malware, phishing materials, or content designed to deceive or defraud. • Defamatory, harassing, or threatening content directed at identifiable individuals.

Broadcast and Auto-Engage are messaging features subject to strict anti-spam compliance: • You must only send Broadcast messages to individuals who have given explicit, freely given, informed, and unambiguous prior consent in accordance with GDPR Article 6(1)(a) and applicable national marketing law (including Polish Ustawa o świadczeniu usług drogą elektroniczną). • Every Broadcast message must contain a clear, functional opt-out mechanism. Opt-out requests must be honoured within 24 hours. • You must maintain verifiable consent records for all Broadcast recipients and provide these to Xblanc on request. • Auto-Engage rules must not be configured to send unsolicited commercial messages, spam, or responses to users who have opted out. • You must not use Broadcast or Auto-Engage to conduct phishing, impersonation, or any deceptive communications. • You must comply with WhatsApp Business Policy, Telegram API Terms, Meta Messaging Policy, Instagram messaging rules, and all applicable anti-spam and e-marketing laws for the jurisdictions of your recipients. *Xblanc may suspend Broadcast and/or Auto-Engage access immediately and without notice if spam, unsolicited bulk messaging, or platform policy violations are detected. Repeated violations result in permanent termination.*

When using the Contacts module: • You must have a lawful basis under GDPR for storing each contact record. • You must provide required transparency notices to data subjects whose data is stored in Contacts. • You must handle data subject access, rectification, and erasure requests promptly. • You must not import contact data from sources where you do not have authorisation to do so. • You must not store special-category data (health, biometric, criminal-offence data) in Contacts without a lawful basis and appropriate safeguards.

When using Live Studio: • You must inform all broadcast participants that they are being recorded or streamed where applicable law requires notification. • You must not stream or record content that infringes third-party rights, violates destination-platform community guidelines, or constitutes illegal surveillance. • You must not use live streaming to broadcast prohibited content as defined in Section 1 of this AUP. • You must hold all applicable rights and licences for any third-party audio, video, or imagery used in streams.

When connecting Facebook, Instagram, Threads, LinkedIn, YouTube, Messenger, WhatsApp Business, Telegram, Discord, or other platforms, you must comply with those platforms' terms, API policies, and messaging rules. Xblanc is not responsible for platform-imposed restrictions resulting from your conduct.

When using CRM connectors (Slack, Notion, ClickUp, HubSpot, Asana), you must comply with those platforms' terms and not use the Service to exfiltrate or republish CRM data in violation of confidentiality obligations.

You must not use AI features (OpenRouter, fal.ai) to: • Generate deepfakes, synthetic identities, or deceptive audio/video without legally required disclosure. • Create fraudulent identity documents, compliance certificates, or official-looking materials. • Make automated decisions with material legal effects on individuals without qualified human review. • Bypass AI safety filters, jailbreak model behaviour, or extract training data from providers. • Generate content prohibited by the EU AI Act or applicable AI regulation.

• Video generation is priced in Ops Credits per job and gated by plan tier (Pro: 15-second budget tier; Studio: 30-second quality tier; Agency: 60-second premium tier). • You must not technically circumvent plan-tier gates, attempt to chain generations in a way that evades the metering, or use the Service to produce deepfakes or synthetic media presented as authentic without clear disclosure. • Video content must comply with Section 1 of this AUP.

• Do not create multiple accounts or use disposable identities to circumvent trial limits or obtain free credits. • Do not manipulate the credit ceiling rules, including coordinated balance manipulation across accounts. • Do not conduct chargeback abuse or attempt to access the Service without valid payment. • Do not share credentials to enable unauthorised access by third parties.

• Do not upload or process personal data without a lawful basis and transparency notices. • Do not upload special-category data without appropriate safeguards. • Do not connect accounts or import data where you lack authorisation.

• Do not conduct penetration testing or vulnerability scanning without prior written consent from [email protected]. • Do not attempt to access other customers' data or workspaces. • Do not interfere with rate limiting, queue management, or resource allocation systems.

Report violations or security issues to [email protected]. Xblanc may investigate, suspend accounts, remove content, and cooperate with law enforcement. Severe or repeated violations result in permanent termination without refund.