1. Overview
odel-labs is operated by FIXI Group Limited. This policy sets out what you must not do with the platform. Breach gives us the right to suspend or terminate your account immediately and to report unlawful activity to the relevant authorities.
2. Prohibited content
You must not use the platform to upload, store, transmit, or generate:
- Content that is unlawful under English law, including child sexual abuse material, content that incites terrorism, or content that infringes copyright or trade mark.
- Content that is defamatory, threatening, harassing, or that promotes violence, hatred, or discrimination against a person or group on a protected characteristic.
- Personal data of a person where you have no lawful basis under UK GDPR to process it.
- Special-category data (Article 9 UK GDPR) without explicit consent or another Article 9 lawful condition.
- Payment-card primary account numbers (PANs) or full magnetic-stripe data — we are not PCI DSS-certified for storage.
- Health records covered by the Caldicott Principles unless we have a written data sharing agreement with you.
3. Prohibited activities
You must not:
- Attempt to access another customer's data, account, or workspace.
- Probe, scan, or test the vulnerability of the platform without our written authorisation. Coordinated disclosure under our security contact is welcome and exempt from this rule.
- Bypass or circumvent rate limits, quotas, billing meters, or feature gates.
- Reverse-engineer, decompile, or disassemble the platform except where local law specifically permits this.
- Resell access to the platform without a written reseller agreement with us.
- Use the platform to send unsolicited commercial communications (“spam”) or to host content that violates the recipient's choices under the Privacy and Electronic Communications Regulations (PECR).
- Train a third-party model on outputs from the platform's AI features in a way that competes with us.
- Use the platform in connection with money laundering, sanctions evasion, fraud, or any other criminal activity.
4. AI-specific rules
- You must not use the platform's AI features to generate content that impersonates a real person without their consent, that misrepresents factual matters in ways likely to cause harm, or that interferes with electoral processes.
- You must not bypass or attempt to bypass safety classifiers, prompt-injection mitigations, or rate limits.
- You are responsible for verifying any AI-drafted output before sending or publishing it. AI-drafted does not mean AI-decided.
5. Enforcement
Where we suspect a breach we may, in our sole discretion:
- Issue a written warning.
- Restrict access to the affected feature.
- Suspend the account pending investigation.
- Terminate the account and delete the affected content.
- Refer the matter to law enforcement, the ICO, or another competent authority.
Where the breach is unintentional and you cooperate to resolve it, we will favour the lightest enforcement action consistent with the rights of others.
6. Reporting a violation
To report content or activity that breaches this policy, email abuse@hellofixi.com. We acknowledge reports within one working day and aim to take action within five working days, faster for child-safety or imminent-harm matters.
7. Changes
We notify you of material changes by email at least 30 days before they take effect.