Acceptable Use Policy
Version 1.0
1. About this policy
This Acceptable Use Policy governs use of the Insightology Platform and forms part of the Agreement between Insightology.ai Ltd (company number 16631621) ("Insightology", "we", "us") and the Customer. Capitalised terms not defined here have the meaning given in the Terms and Conditions. This policy supplements, and does not limit, clause 4 of the Terms and Conditions.
We have deliberately kept this short and written it as commitments rather than an exhaustive catalogue of prohibited acts. Where something is not spelled out, the underlying principle still applies.
We may update this policy by publishing a new version at this address, in accordance with clause 23.5 of the Terms and Conditions, with material changes notified in accordance with the Agreement.
2. Who this applies to
This policy applies to the Customer and to all Authorised Users. The Customer is responsible for ensuring that each Authorised User complies with it, and remains responsible for all use of the Services under its account.
3. How the Platform may be used
4. Third-Party AI Providers, and what that means for you
Clause 8.3 of the Terms and Conditions provides that the Customer's use of the Services must comply with the applicable Third-Party AI Provider Terms. Three things follow, and they are the most important commitments in this policy.
First, Third-Party AI Provider Terms apply directly to Authorised Users, not only to us. Those policies extend to anyone submitting content through a product built on their services, so an Authorised User is bound by them whether or not they have read them. The Customer must ensure Authorised Users comply.
Second, the Customer is responsible for that compliance. A breach by an Authorised User is a breach of this policy. It can also put our own provider access at risk, which would affect every customer of the Platform and not only the Customer concerned.
Third, Authorised Users must be located in countries our Third-Party AI Providers support. We will tell the Customer if a provider's regional availability changes in a way that affects it.
We select the model best suited to each stage of the research workflow, and that selection will change as models improve. Our sub-processor page names the full set of Third-Party AI Providers we may use. We will give the Customer reasonable notice of material changes to Third-Party AI Provider Terms, and notice in accordance with the Agreement before we engage a provider that is not already named on that page.
5. What the Platform must not be used for
The Customer must not, and must not permit any Authorised User to, use the Platform for anything unlawful, fraudulent or seriously harmful.
Without narrowing that, our Third-Party AI Providers prohibit certain categories absolutely and so do we. These include anything involving weapons or dangerous materials, attacks on computer systems or critical infrastructure, child sexual abuse material or the exploitation of minors, violent extremism or incitement to violence, content promoting self-harm or disordered eating, sexually explicit material, harassment or intimidation of individuals, and the covert surveillance or tracking of people.
The Platform must also not be used to infringe anyone's intellectual property or privacy rights, to produce material that is defamatory or discriminatory, or to misrepresent the Customer's relationship with us.
6. Using AI responsibly in research
These are the commitments most likely to matter day to day.
Outputs may contain errors, omissions and inaccuracies, including invented content. The Customer must apply meaningful human review before relying on an Output or issuing it to a client or any third party.
Where research concerns healthcare, financial services, insurance, employment, housing, legal matters, or education and academic assessment, or where an Output will be published externally, that review must be carried out by someone qualified in the relevant field before the work is finalised or issued. Where an Output informs advice or a recommendation given to an individual, that individual must be told that AI was involved in producing it.
Where the Platform interacts directly with research respondents, respondents must be told at the outset of each session that they are interacting with AI rather than a person. The Customer must not present AI-generated content as human-generated, or use the Platform in a way designed to convince someone they are speaking to a person when they are not.
The Customer must not fabricate or misrepresent research data or findings. Synthetic or AI-generated respondent material must never be presented as real fieldwork, whether to the Customer's own clients or to anyone else.
Outputs must not be the sole basis for any decision producing legal or similarly significant effects on an individual.
Where the Customer's own client agreements or professional codes require disclosure of AI assistance in delivered work, making that disclosure is the Customer's responsibility.
7. Personal data and research involving young people
The Customer must not upload data without the necessary rights, consents and a lawful basis under applicable data protection law, including UK GDPR and EU GDPR. Special category personal data may only be uploaded where the Customer has confirmed an explicit lawful basis for doing so.
Research material about or from respondents under 18 may be uploaded to and analysed on the Platform, provided the Customer has a lawful basis and all necessary consents, including parental or guardian consent where required, and complies with the MRS Code of Conduct or equivalent professional guidance in its market. The Customer remains responsible for limiting material of this kind to what the research actually requires.
The Platform's AI interviewing features, and any other feature that interacts directly with respondents, must not be used with respondents under 18 without our prior written agreement. Sessions of that kind require additional safeguards, including age assurance, content moderation and monitoring, which must be in place before they can be enabled.
The Platform must not be used to infer sensitive characteristics about individuals from biometric data, including race, ethnicity, political opinions, religious or philosophical belief, trade union membership, health, sex life or sexual orientation, or to build or support emotion recognition systems. Our Third-Party AI Providers restrict these uses and in some jurisdictions they are also restricted by law.
8. Platform and model integrity
The Customer must not, and must not permit any Authorised User to: reverse engineer the Platform or attempt to extract its source code, models, model weights or prompts; use the Platform or any Output to train, fine-tune or improve any AI model; attempt to bypass the safety guardrails or content restrictions of the Platform or the underlying models, whether by jailbreaking, prompt injection or otherwise; circumvent any security, authentication, access control, rate limit or tenant isolation measure; scrape, harvest or benchmark the Services for competitive purposes; share credentials or permit access by anyone who is not an Authorised User; or access the Services by automated means except as we expressly permit.
9. Fair usage
Access is provided on a fair-usage basis, consistent with the usage anticipated for the Customer's plan as set out in the Order Form. Where usage is materially excessive, abusive, or inconsistent with normal good-faith use, we will investigate and discuss reasonable adjustments with the Customer in good faith. Persistent or serious abuse may be dealt with under section 10.
10. Monitoring, suspension and enforcement
We may monitor use of the Services for compliance with this policy. Without limiting our rights under clause 19 of the Terms and Conditions, we may suspend or restrict access where we reasonably suspect a breach of this policy, or a security, legal or regulatory risk.
Clause 8.3 of the Terms and Conditions allows us to modify the Services to comply with Third-Party AI Provider Terms or to accommodate changes in Third-Party AI Provider services. Where a change of that kind affects the Customer's use of the Platform, we will tell the Customer promptly, explain what we reasonably can, and restore normal service as soon as we are able.
If a Third-Party AI Provider asks us for information to verify how the Platform is being used, the Customer will help us respond promptly and in good faith. We will limit what we share to what is reasonably required.
Serious or repeated breaches of this policy may result in termination of the Agreement.
11. Reporting
Suspected misuse of the Services or security concerns should be reported to us at security@insightology.ai.