RESTORIA AI ACCEPTABLE USE POLICY

Last Updated: February 15, 2026

Effective Date: February 15, 2026

Version 3.0 - Final

INTRODUCTION

This Acceptable Use Policy ("AUP") is part of your agreement with Restoria AI, Inc. ("Restoria AI," "we," "us," or "our") and governs your use of the Restoria AI platform and services (the "Service"). This AUP is incorporated by reference into our Terms of Service.

By using the Service, you agree to comply with this AUP. Violation of this AUP may result in suspension or termination of your access to the Service and other consequences as described herein.

This AUP applies to all users of the Service, including account holders, invited users, and any person accessing the Service through your account.

TABLE OF CONTENTS

1. Purpose and Scope
2. Prohibited Activities
3. AI-Specific Prohibitions
4. Data and Privacy Requirements
5. Professional Conduct Standards
6. Content Standards
7. System and Security Requirements
8. Monitoring and Enforcement
9. Reporting Violations
10. Consequences of Violations
11. Updates to This Policy
12. Contact Information

1. PURPOSE AND SCOPE

1.1 Purpose

This AUP is designed to:

(a) Protect the integrity, security, and availability of the Service;

(b) Ensure compliance with applicable laws and regulations;

(c) Prevent misuse of AI-powered features;

(d) Maintain professional standards appropriate for the insurance industry;

(e) Protect the interests of all users, their clients, and third parties.

1.2 Scope

This AUP applies to:

(a) All use of the Service, including the website, platform, APIs, and any related services;

(b) All content uploaded, created, transmitted, or stored through the Service;

(c) All interactions with AI-powered features;

(d) All users, including account administrators, team members, invited users, and anyone accessing the Service through your credentials.

1.3 Relationship to Terms of Service

This AUP supplements our Terms of Service. In the event of any conflict, the Terms of Service shall control unless this AUP explicitly states otherwise. Capitalized terms not defined herein have the meanings assigned in the Terms of Service.

2. PROHIBITED ACTIVITIES

You agree NOT to engage in, facilitate, or encourage any of the following prohibited activities:

2.1 Illegal Activities

(a) Fraud: Submitting false, fabricated, or inflated insurance claims; creating fraudulent documentation; misrepresenting claim facts or damages; or engaging in any form of insurance fraud;

(b) Criminal Conduct: Using the Service to plan, facilitate, or commit any crime;

(c) Money Laundering: Using the Service to launder money or process proceeds of illegal activity;

(d) Regulatory Violations: Violating any applicable federal, state, or local laws, regulations, or professional licensing requirements;

(e) Bad faith practices: Processing claims in a manner that could constitute bad faith insurance practices under applicable state laws;

(f) Unfair trade practices: Engaging in any unfair, deceptive, or abusive acts or practices as defined by state consumer protection statutes or insurance regulations.

2.2 Unauthorized Access

(a) Accessing or attempting to access accounts, systems, or data without authorization;

(b) Using credentials that do not belong to you;

(c) Sharing your login credentials with unauthorized persons;

(d) Circumventing, disabling, or interfering with security features;

(e) Accessing non-public areas of the Service or Restoria AI's systems;

(f) Probing, scanning, or testing system vulnerabilities without written authorization.

2.3 System Abuse

(a) Overloading: Imposing unreasonable load on the Service infrastructure;

(b) Automation Abuse: Using bots, scrapers, or automated tools except through approved APIs and within rate limits;

(c) Interference: Interfering with or disrupting the Service or other users' access;

(d) Reverse Engineering: Decompiling, disassembling, or reverse engineering any part of the Service;

(e) Scraping: Extracting data through automated means without authorization;

(f) Circumvention: Bypassing usage limits, quotas, or access controls.

2.4 Harmful Content

(a) Malware: Uploading or transmitting viruses, worms, Trojan horses, ransomware, or other malicious code;

(b) Defamatory Content: Creating or distributing content that is defamatory, libelous, or constitutes tortious interference;

(c) Infringing Content: Uploading content that infringes copyrights, trademarks, patents, or other intellectual property rights;

(d) Obscene Content: Uploading or creating content that is obscene, pornographic, or sexually explicit;

(e) Violent Content: Creating content that promotes or glorifies violence;

(f) Discriminatory Content: Creating content that promotes discrimination based on race, ethnicity, national origin, religion, gender, sexual orientation, disability, or other protected characteristics.

2.5 Spam and Unsolicited Communications

(a) Sending unsolicited bulk communications;

(b) Using the Service to harvest email addresses or contact information;

(c) Sending communications that violate CAN-SPAM, TCPA, or similar laws;

(d) Misrepresenting your identity or affiliation in communications.

2.6 Misrepresentation

(a) Impersonating any person, business, or entity;

(b) Falsely claiming affiliation with Restoria AI;

(c) Creating fake accounts or using false registration information;

(d) Misrepresenting the capabilities or outputs of the Service.

2.7 Resale and Unauthorized Distribution

(a) Reselling, sublicensing, or redistributing access to the Service without authorization;

(b) Using the Service to provide a competing service;

(c) White-labeling or rebranding the Service without a written agreement;

(d) Sharing outputs in ways that violate third-party rights or our Terms.

3. AI-SPECIFIC PROHIBITIONS

The Service includes AI-powered features that require special care. You agree NOT to:

3.1 Fraudulent Content Generation

(a) Fake Claims: Use AI to generate false, fabricated, or inflated insurance claims;

(b) Fabricated Documentation: Create fake estimates, invoices, receipts, or other claim documentation;

(c) False Evidence: Generate fabricated photographs, descriptions, or evidence of damage;

(d) Forged Communications: Create fake correspondence purportedly from carriers, contractors, or other parties;

(e) Signature Forgery: Use AI to forge or simulate signatures.

3.2 AI Manipulation

(a) Jailbreaking: Attempt to bypass, disable, or circumvent AI safety measures or content filters;

(b) Prompt Injection: Craft inputs designed to manipulate the AI into producing prohibited outputs;

(c) Model Extraction: Attempt to extract, replicate, or steal AI model weights, parameters, or training data;

(d) Adversarial Inputs: Submit inputs specifically designed to cause AI malfunction or produce harmful outputs.

3.3 Harmful AI Outputs

(a) Misleading Content: Generate AI outputs intended to mislead carriers, regulators, or clients;

(b) Discriminatory Outputs: Use AI to create content that discriminates based on protected characteristics;

(c) Harassment: Use AI to generate harassing, threatening, or abusive content;

(d) Illegal Content: Use AI to generate content that facilitates illegal activity.

3.4 Unauthorized AI Decision-Making

(a) Using AI outputs as final professional work product without human review;

(b) Allowing AI to make binding determinations about coverage or claim value;

(c) Representing AI-generated content as human-created without disclosure;

(d) Using AI to make decisions that require professional licensure.

3.5 Regulatory Evasion

(a) Using AI to circumvent insurance regulations or licensing requirements;

(b) Using AI to generate content designed to evade regulatory oversight;

(c) Using AI in ways that would constitute unauthorized practice of public adjusting.

4. DATA AND PRIVACY REQUIREMENTS

4.1 Authorized Data Only

You may only upload, process, or store data through the Service that:

(a) You own or have the legal right to use;

(b) You have obtained in compliance with applicable laws;

(c) Is related to legitimate insurance claims you are handling;

(d) Does not violate any confidentiality obligations you have to third parties.

4.2 Third-Party Consent

If you upload personal information of third parties (such as insureds, claimants, or witnesses), you represent that:

(a) You have obtained all necessary consents;

(b) You have provided required privacy notices;

(c) Your use complies with applicable privacy laws;

(d) You will honor data subject rights requests.

4.3 PROHIBITED HEALTH DATA (NO HIPAA / PHI)

The Service is designed exclusively for property claims, not bodily injury or medical claims. Restoria AI is NOT a HIPAA-compliant platform and does not execute Business Associate Agreements (BAAs).

You are STRICTLY PROHIBITED from uploading, storing, or processing any "Protected Health Information" (PHI) or medical records subject to the Health Insurance Portability and Accountability Act (HIPAA).

If a property claim incidentally involves medical bills (e.g., to justify Additional Living Expenses or disability accommodations), you must completely redact all personally identifiable medical data, diagnosis codes, treatment information, and patient identifiers before uploading the document to the Service.

You agree to fully indemnify Restoria AI for any regulatory fines, legal fees, or damages resulting from your unauthorized upload of PHI.

4.4 Data Security

You must:

(a) Maintain the security of your account credentials;

(b) Use reasonable security measures when accessing the Service;

(c) Report any security incidents or unauthorized access immediately;

(d) Not store credentials in insecure locations.

4.5 Data Export

You are responsible for:

(a) Maintaining your own backups of critical data;

(b) Exporting data needed for statutory record retention;

(c) Complying with your own data retention obligations.

5. PROFESSIONAL CONDUCT STANDARDS

5.1 Licensing Compliance

You must:

(a) Maintain all required professional licenses in good standing;

(b) Only perform activities within the scope of your licensure;

(c) Ensure supervised users operate within licensing requirements;

(d) Promptly notify us of any changes to your licensing status.

5.2 Insurance Industry Regulations

You must comply with:

(a) State insurance department regulations and guidance;

(b) NAIC Model Bulletins and state implementations;

(c) Carrier-specific requirements regarding technology use;

(d) Professional conduct rules applicable to public adjusters.

5.3 Client Obligations

You must:

(a) Maintain appropriate professional liability insurance;

(b) Fulfill your fiduciary duties to clients;

(c) Not use the Service in ways that breach client trust;

(d) Maintain client confidentiality.

5.4 Conflicts of Interest

You must:

(a) Avoid conflicts of interest;

(b) Not use the Service to benefit yourself at the expense of clients;

(c) Disclose any conflicts as required by law or professional rules;

(d) Not use client data for unauthorized purposes.

6. CONTENT STANDARDS

6.1 Accuracy

All content you create or upload must:

(a) Be accurate to the best of your knowledge;

(b) Not contain knowing misrepresentations;

(c) Be based on genuine documentation and evidence;

(d) Be clearly labeled when based on estimates or assumptions.

6.2 Intellectual Property

You must:

(a) Respect copyrights, trademarks, and other IP rights;

(b) Only upload content you have the right to use;

(c) Not remove or alter proprietary notices;

(d) Comply with software license requirements.

6.3 Professional Standards

Content should:

(a) Meet professional standards for public adjusters;

(b) Be appropriate for submission to carriers and regulators;

(c) Not bring the profession into disrepute;

(d) Reflect accurate use of industry terminology.

7. SYSTEM AND SECURITY REQUIREMENTS

7.1 Access Security

You must:

(a) Use strong, unique passwords;

(b) Enable multi-factor authentication when available;

(c) Not share credentials with unauthorized persons;

(d) Log out when using shared or public devices;

(e) Promptly revoke access for departed employees.

7.2 Device Security

You should:

(a) Keep devices and software updated;

(b) Use reputable security software;

(c) Not access the Service from compromised devices;

(d) Use secure network connections.

7.3 API Usage

If you use our APIs, you must:

(a) Comply with API documentation and rate limits;

(b) Not attempt to overwhelm or abuse API endpoints;

(c) Keep API credentials secure;

(d) Not share API access without authorization.

7.4 Reporting

You must promptly report to us:

(a) Any suspected security incident;

(b) Unauthorized access to your account;

(c) Lost or stolen credentials;

(d) Any vulnerability you discover in the Service.

8. MONITORING AND ENFORCEMENT

8.1 Our Right to Monitor

We reserve the right to:

(a) Monitor use of the Service for compliance with this AUP;

(b) Investigate suspected violations;

(c) Use automated tools to detect prohibited activities;

(d) Access and review User Content when reasonably necessary for enforcement, security, or legal compliance.

8.2 User Privacy

While we reserve monitoring rights, we:

(a) Do not routinely review the contents of User Content;

(b) Use automated systems where possible to minimize human review;

(c) Limit access to authorized personnel;

(d) Handle information in accordance with our Privacy Policy.

8.3 Cooperation

You agree to:

(a) Cooperate with reasonable investigations;

(b) Provide information requested for compliance verification;

(c) Preserve relevant records when notified of an investigation.

9. REPORTING VIOLATIONS

9.1 How to Report

If you become aware of any violation of this AUP, please report it to:

Email: [email protected]

Subject Line: AUP Violation Report

9.2 What to Include

Please provide:

(a) Description of the violation;

(b) Date and time (if known);

(c) Account or user involved (if known);

(d) Any supporting evidence;

(e) Your contact information.

9.3 Good Faith Reporting

We encourage good faith reporting and will not retaliate against users who report violations in good faith.

9.4 Investigation

We will:

(a) Acknowledge receipt of reports;

(b) Investigate in a timely manner;

(c) Take appropriate action;

(d) Maintain confidentiality where appropriate.

10. CONSEQUENCES OF VIOLATIONS

10.1 Remedial Actions

Violations of this AUP may result in one or more of the following:

(a) Warning: Written notice of the violation and required corrective action;

(b) Content Removal: Removal or disabling of content that violates this AUP;

(c) Feature Restriction: Temporary limitation of access to certain features;

(d) Suspension: Temporary suspension of account access;

(e) Termination: Permanent termination of your account;

(f) Legal Action: Referral to law enforcement or civil legal action.

10.2 Factors Considered

In determining the appropriate response, we may consider:

(a) Severity of the violation;

(b) Whether the violation was intentional or negligent;

(c) Impact on other users or third parties;

(d) History of prior violations;

(e) Cooperation with our investigation;

(f) Steps taken to remediate the violation.

10.3 No Refunds

If your account is terminated for violation of this AUP, you are not entitled to any refund of prepaid fees.

10.4 Survival

Your obligations under this AUP survive termination of your account.

11. UPDATES TO THIS POLICY

11.1 Changes

We may update this AUP from time to time. When we make material changes:

(a) We will update the "Last Updated" date;

(b) We will provide notice through the Service or by email;

(c) Continued use after changes take effect constitutes acceptance.

11.2 Review

We encourage you to review this AUP periodically.

12. CONTACT INFORMATION

For questions about this AUP:

Restoria AI, Inc.

Email: [email protected]

Abuse Reports: [email protected]

Appeals: [email protected]

Mailing Address: Restoria AI, Inc. 1207 Delaware Ave #1021 Wilmington, DE 19806

SUMMARY OF KEY PROHIBITIONS

Restoria AI, Inc.

A Delaware Corporation

© 2026 Restoria AI, Inc. All rights reserved.