Build useful things.
Do not cause harm.

This Acceptable Use Policy ("AUP") forms part of the MaxLabs Terms of Service. It applies to every person and organisation using MaxLabs, regardless of plan or access method. You are responsible for your own use and for users, applications, and agents operating through your account.

MaxLabs is built for broad, legitimate developer work. These rules focus on unlawful conduct, serious harm, non-consensual activity, and abuse of the Services—not ordinary coding, research, discussion, or creative work.

1. Follow the law and respect rights

You may not use the Services to:

• violate applicable law, sanctions, export controls, court orders, or another person's legal rights;
• infringe or misappropriate copyright, trademark, trade-secret, privacy, publicity, confidentiality, or other rights;
• process personal, confidential, or regulated data without the authority, notices, permissions, and safeguards required by law; or
• help another person commit or conceal a prohibited act.

2. Fraud, deception, and abusive conduct

You may not use the Services for fraud, scams, phishing, spam, deceptive impersonation, forged records or credentials, identity theft, evasion of lawful controls, or materially misleading people about the origin or nature of AI-generated content. You may not use the Services for stalking, doxing, harassment, extortion, defamation, or non-consensual surveillance.

3. Exploitation and sexual abuse

You may not use the Services to create, obtain, transform, distribute, or facilitate child sexual abuse or exploitation material; sexualise a minor; groom or exploit a minor; produce non-consensual intimate imagery; or depict a real person sexually without valid consent. We may report apparent child sexual abuse material or imminent danger to appropriate authorities as required or permitted by law.

4. Physical harm and dangerous capabilities

You may not use the Services to meaningfully facilitate terrorism, violent extremism, murder, serious physical injury, torture, kidnapping, trafficking, or cruelty. You may not use them to design, acquire, deploy, or materially advance biological, chemical, radiological, nuclear, or other weapons of mass destruction, or to bypass controls governing dangerous materials.

Benign safety analysis, education, fiction, historical discussion, and protective work are allowed when they do not meaningfully enable harm.

5. Cybersecurity and malware

You may not use the Services to access a system without authorisation; steal credentials or data; deploy malware or ransomware; maintain malicious persistence; evade detection for abuse; disrupt services; conduct denial-of-service attacks; compromise a software supply chain; or exploit a vulnerability against systems you do not own or have permission to test.

Authorised defensive security research

Security research, red-team work, penetration testing, malware analysis, and exploit development require MaxLabs's prior written approval in addition to permission from the owner of every target system. Approved work must remain within the written scope, use reasonable safeguards, avoid unnecessary access to real data, and follow coordinated disclosure requirements. Request approval at support@cenmax.in.

6. Privacy, biometrics, and surveillance

You may not use the Services for unlawful surveillance, tracking, or interception; to identify or infer highly sensitive traits without a lawful basis; to build or use facial-recognition or biometric systems in violation of law; or to collect, expose, trade, or infer personal data in a way that creates a material risk of harm. You must honour consent, deletion, access, and data-minimisation duties that apply to your use.

7. High-impact decisions

You may not use Output as the sole basis for fully automated high-impact decisions about another person's employment, education, housing, credit, insurance, healthcare, legal rights, access to essential services, or similar matters. Any permitted use in these areas must comply with applicable regulation, use qualified human review, test for accuracy and unfair bias, provide required explanations and appeal routes, and avoid presenting Output as professional advice.

8. Abuse of MaxLabs

You may not:

• interfere with, overload, damage, or gain unauthorised access to the Services or their providers;
• bypass or manipulate authentication, safety controls, quotas, rate limits, billing, metering, regional controls, or technical restrictions;
• share, sell, or publish account credentials or API keys;
• reverse engineer, decompile, extract, copy, or discover non-public model weights, source code, algorithms, system prompts, or underlying components, except where law expressly permits it;
• scrape or harvest the Services or Output, operate automated access outside the documented API, or use Output to distil or train a competing foundation model;
• resell raw MaxLabs access or falsely suggest that a third-party product is MaxLabs or endorsed by MaxLabs; or
• use multiple accounts, users, organisations, or technical means to avoid restrictions or charges.

9. API applications and end users

API customers must design reasonable safeguards for their use case, authenticate users where appropriate, protect keys, monitor abuse, apply rate limits, provide required disclosures, and respond to reports. You must ensure that your end users follow this AUP. You may not knowingly provide an application whose primary purpose is to enable prohibited use.

10. Enforcement

We may use automated and manual methods to detect or investigate suspected violations. Depending on severity and context, we may warn you, block specific content or requests, limit a feature or model, require corrective action, suspend access, or terminate an account. We may act immediately when we reasonably believe there is an urgent security, legal, or safety risk.

Suspensions or terminations for AUP violations are not refundable. We may preserve evidence and report conduct to affected providers or authorities where required or permitted by law. You may appeal an enforcement decision at support@cenmax.in.

11. Reporting misuse and policy changes

Report suspected misuse, vulnerabilities, or safety concerns to support@cenmax.in. Include enough detail for us to assess the report without sending unnecessary personal data, credentials, or harmful material.

We may update this AUP as capabilities, threats, providers, or laws change. We will provide reasonable notice of material adverse changes when practical. Urgent security, abuse-prevention, or legal changes may take effect immediately.

12. Contact