Acceptable use policy
A room takes what you say out loud and sends it to a model vendor. That is what these rules are about, and it is why they are not the rules you have read on somebody else's site.
Version 1.0.0 Effective 2026-08-24 Last updated 2026-08-25
In short
Applies to: Everyone who uses Tingvar
- What a room may not be used for.
- What happens to an account that is used that way.
- How an enforcement decision is appealed.
The version of this document
Every legal document here carries a version string and two dates, and the same values appear in the legal index. Both read one register, so the stamp above and the row below cannot disagree.
Every document, with its version and its date
| Document | Version | Published | Updated | When |
|---|---|---|---|---|
| Acceptable use policy | 1.0.0 | 2026-08-24 | 2026-08-25 | Annually |
What a room is not for
Eight rules. Each one carries the reason it is on the list, because a prohibition with no reason attached is one nobody can apply to a case it does not name exactly.
| Item | Rule | Why |
|---|---|---|
| AU-1 | Do not say a password, an access key or a token out loud in a room, or write one into a brief. | Speech in a room reaches the model vendor and a brief is stored with the session. A secret said in a room is a secret disclosed to a third party. |
| AU-2 | Do not put special category personal data into a room, about yourself or about anybody else. | Health, biometrics, sex life, religion, politics and trade union membership carry conditions we cannot meet for a spoken transcript sent to a model vendor. |
| AU-3 | Do not put another person's personal data into a room unless you have a lawful basis for us to process it. | You are the controller of what you say. We process it for you, and a basis you do not have is not one we can supply. |
| AU-4 | Do not put material into a room that an agreement forbids you to send to a third party. | A room is not a private notebook. The sub-processors page names every party your words reach, and an agreement that forbids that is one this service breaks. |
| AU-5 | Do not use a session to produce material that harasses, defames or threatens a person. | Arguing against a proposal is what the room is for. Building a case against a named human being is not the same thing and it is not permitted here. |
| AU-6 | Do not present persona output as the work of a person, or as advice from a qualified professional. | The personas are AI, the AI disclosure page says what they get wrong, and passing their output off as human judgement transfers a risk to somebody who did not accept it. |
| AU-7 | Do not script or automate a room, and do not resell access to one. | The floor arbitration assumes one human who can interrupt. A scripted participant breaks the mechanism the product is, and a resold seat has no account we can reach. |
| AU-8 | Do not test this service for vulnerabilities outside the published disclosure policy. | Research inside that policy is authorised and carries safe harbour. Research outside it is indistinguishable from an attack while it is happening. |
What happens when a rule is broken
| Stage | What happens |
|---|---|
| We suspend access, then tell you | Access to the room stops first and the notice follows by email to the address on the account, naming the rule and what we saw. Speed first, explanation immediately after. |
| A first breach that reads as a mistake | A warning, the offending material deleted, and the account stays open. Most of AU-1 to AU-4 is somebody moving too fast rather than somebody acting in bad faith. |
| A repeat breach, or a deliberate one | The account is closed and the subscription ends on the same day. The refunds page states what happens to money already taken, and nothing on this page changes it. |
| Something we are required to report | We report it, and the notice to you says that we have. We will not tell you afterwards that a report was made silently at the time. |
Nothing on this page changes what the refunds page says about money already taken, and nothing here creates a right to a refund that the refunds page does not already give you.
Billing, cancellation and refunds
How to appeal
- Reply to the enforcement notice. It reaches a person rather than a queue, and the address is on the notice and on this page.
- Say what you think we saw and why the decision is wrong. A decision made from a summary is the one most likely to be the wrong one.
- We answer inside the response time this register publishes for legal contact, and the answer says whether the decision stands and what changed our mind if it did not.
- The account and its content are held rather than destroyed while an appeal is open, so a decision reversed is a decision that can be undone.
The address for an appeal is legal@tingvar.com. A reply comes within 5 business days, and it reaches the person who made the decision, which is the point rather than an oversight.
What the personas will refuse
The personas argue against a proposal. They are not built to produce material that is illegal to hold, and a session that keeps pushing at that boundary is one this policy covers whether or not the room cooperates. What the personas get wrong, including inventing figures that sound exactly like the rest of a session, is on the AI disclosure page rather than here.
What the personas get wrong, and what they are not for
Reporting a use of this service
If somebody is using a room against these rules and it affects you, write to legal@tingvar.com with what you saw and when. A security vulnerability is a different route with its own scope, its own response times and safe harbour.