Rondo Acceptable Use Policy

1. Use Rondo lawfully and respectfully

You may not use Rondo to:

• break any law or regulation that applies to you;
• record or transcribe anyone without giving the notice and getting the consent the law requires (see section 6 of the Terms of Service);
• harass, threaten, bully, defame or stalk anyone, or incite violence;
• infringe anyone's intellectual property, privacy, publicity or other rights;
• share child sexual abuse material or any content that sexualizes minors (we report it to the National Center for Missing and Exploited Children and to law enforcement as the law requires), or intimate images of anyone without their consent;
• promote or support terrorism, human trafficking, or the unlawful sale of weapons or controlled substances;
• discriminate unlawfully against any person or group.

Rondo is for people aged 18 or over. Do not invite anyone under 18 to a workspace.

2. Do not attack or misuse our systems

You may not:

• access, or try to access, Rondo, its infrastructure, another customer's data, or any connected system without permission;
• probe, scan or test the vulnerability of our systems, except as allowed in section 7;
• interfere with or disrupt the Service, for example by flooding it, overloading it on purpose, or deliberately exhausting rate limits;
• upload or send malware or any other harmful code;
• get around sign-in, permissions, seat limits, quotas, rate limits or other access controls, or use someone else's sign-in;
• scrape or bulk-download data, except through features and interfaces we provide (including our MCP server) and within their limits;
• reverse engineer, decompile or disassemble the Service, except where the law does not allow this restriction.

3. Do not put prohibited data into Rondo

Rondo is not designed or certified for the data below. Do not put it into Rondo unless we have agreed otherwise in a signed agreement:

• protected health information under HIPAA (we are not a business associate and do not sign business associate agreements under these terms);
• payment card data, such as full card numbers or security codes;
• government identification numbers, such as Social Security, passport or driver's license numbers;
• export-controlled data, such as technical data controlled under ITAR or the EAR;
• other data under special legal regimes (for example financial, education or defense rules) that we have not agreed in writing to support.

4. Do not misuse messaging, connectors or AI

You may not use Rondo, including its Google and Microsoft connectors and its AI features, to:

• send spam, bulk unsolicited messages or phishing, including through a connected Gmail or Outlook account;
• impersonate any person or organization, or misrepresent your connection to them;
• create content meant to deceive, such as fake records, synthetic media presented as real, or fake reviews;
• produce anything this policy prohibits, or try to extract system prompts, model data or another customer's content;
• try to defeat the safety controls of Rondo or of its AI providers;
• make decisions about people, such as hiring, firing, pay, credit, housing or insurance, based only on AI output without meaningful human review;
• infer people's emotions, or classify people by biometric data or protected characteristics.

5. Do not misuse your subscription

You may not resell, sublicense, rent or lease Rondo, or run it as a service for others; share one seat among several people; have more active members than paid seats; use Rondo to build or train a competing product; or publish benchmark results without our written consent.

6. Fair use

Use Rondo in a way that does not degrade it for others. We may apply rate limits and quotas to protect the Service. If your organization needs unusual volumes, talk to us at sales@rondohq.com first.

7. Security research

We welcome good-faith security research. If you think you have found a vulnerability, email nelson@foundryonelabs.com with enough detail for us to reproduce it. If you act in good faith (you do not access, change or keep other people's data beyond the minimum needed to show the issue, you do not degrade the Service, and you give us reasonable time to fix the issue before you disclose it), we will not take action against you under this policy.

8. Reporting

Report abuse, illegal content, content you believe infringes your copyright or other rights, or security issues to nelson@foundryonelabs.com. Tell us where the content is and why you are reporting it. For anything urgent, such as a risk to someone's safety, put URGENT in the subject line.

9. Enforcement

If you break this policy, we may remove or disable content, limit or suspend access to a user, workspace or feature, or end your subscription under the Terms of Service. Where practical, we will tell you first and give you a chance to fix the problem. Where there is an urgent threat to the Service, to other customers or to anyone's safety, or where the law requires it, we may act immediately and tell you afterwards. We will limit any action to what is reasonably needed. We may also preserve information and report to authorities, without notice where giving notice would be unlawful or would defeat the purpose.

10. Changes

We may update this policy in the same way as the Terms of Service (section 18 of the Terms of Service). For a material change, we will give at least 30 days' notice by email before it takes effect, except for changes needed to address an urgent legal or security risk, which may take effect sooner. The date at the top shows when it last changed.