This policy is part of the Terms of Service. It applies to everyone who uses OneActor — the website, the dashboard, the agents, the workspaces — and to every app deployed on OneActor's infrastructure, including what that app's own users put into it. As the owner of a project, you are responsible for your app and its users following it.
1. Illegal content and activity
Do not use OneActor, or build or run an app on it, to store, publish or facilitate anything illegal under the law of the European Union or of Portugal, or of the country where it is aimed. In particular:
- child sexual abuse material, or anything sexualising minors;
- terrorist content, or content inciting violence;
- content that infringes someone else's intellectual property, trade secrets or privacy;
- illegal hate speech, harassment, threats, doxxing;
- fraud, phishing, scams, counterfeit goods, fake reviews, pyramid schemes;
- unlicensed gambling, financial or investment services that need a licence you do not hold, illegal drugs, weapons or other illegal goods;
- processing personal data without a lawful basis, or collecting it by deception.
2. Security and abuse of the infrastructure
Do not:
- attack, scan, probe or break into systems or accounts you are not authorised to test, including OneActor's, other customers' and third parties';
- write, host or distribute malware, command-and-control servers, exploit kits, or tools built to compromise systems without authorisation;
- send spam or bulk unsolicited messages from an app, or run open relays or proxies for others' abuse;
- mine cryptocurrency, run resource-heavy workloads unrelated to building and running your app, or try to exhaust shared resources (databases, caches, build capacity) other customers rely on;
- try to reach another customer's workspace, database, cache, keys or data, or to escape your workspace;
- get around billing, limits, the production approval, or other controls; or resell access to the platform or its AI models without our written agreement.
3. AI-specific rules
- Do not use the agents or deploy an app for any practice prohibited by Article 5 of the EU AI Act, including manipulative or deceptive techniques that distort behaviour and cause significant harm, exploiting people's vulnerabilities, social scoring, predicting crime from profiling, scraping facial images to build recognition databases, emotion recognition at work or in education, biometric categorisation to infer sensitive traits, and real-time remote biometric identification in public spaces for law enforcement — and, as the AI Act adds from 2 December 2026 (Regulation (EU) 2026/1744), AI systems that generate non-consensual intimate images, video or audio of real people, or child sexual abuse material.
- High-risk AI systems. OneActor must not be modified or used so as to become a high-risk AI system, and its agents must not be used to make or support decisions about people in the areas of Annex III of the AI Act (recruitment, credit, education, essential services…). Do not build or run on OneActor any app that is itself a high-risk AI system under Annex III.
- Do not use the agents to generate: instructions for weapons capable of mass casualties (biological, chemical, nuclear, radiological); malware; content sexualising minors; or content intended to deceive people into believing it was made by a real person when it was not (undisclosed deepfakes) in breach of Article 50 of the AI Act.
- Do not attempt to extract the platform's prompts, bypass the agents' safety rules, or use the Service to train a competing model on the output of its AI models where a provider forbids it.
- You are responsible for reviewing what the agents produce before you publish it or rely on it.
4. Sanctions and export controls
You may not use OneActor if you are, or act for, a person or entity subject to sanctions of the European Union, the United Nations, the United States or the United Kingdom, or the government of Russia or Belarus or a legal person established in Russia: EU law prohibits providing them IT consultancy, access to AI models and platforms for inference, and high-performance computing (Council Regulation (EU) No 833/2014 Art. 5n; Council Regulation (EC) No 765/2006 Art. 1jc). Accounts from Russia, Belarus and the occupied regions of Ukraine are not accepted. Do not use the Service to export or re-export technology in breach of export-control law.
5. Products our payment provider forbids
Do not use OneActor to build or run a business that Stripe, whose affiliate is our Merchant of Record, prohibits: its list is at https://stripe.com/legal/restricted-businesses.
6. Your app's users
If your app lets its users publish content, you must have your own terms and a way for people to report illegal content to you, and act on reports. OneActor may act on notices about content in your app as described below, but we do not monitor it.
7. How we enforce this policy
- We act on notices submitted through Report content, orders from authorities, and what we detect in running the platform. We do not monitor your content generally.
- Depending on how serious and how clear the problem is, we may: ask you to fix it; disable access to the specific content, app or environment; stop a workspace; suspend an account; or end the contract. For terrorist content ordered removed by an authority, we act within one hour as the law requires.
- When we restrict something, we tell you what, why, on what basis (illegal content, or which rule of this policy), whether it was detected automatically, and how to challenge it — a statement of reasons (Digital Services Act Art. 17). You can reply to that statement, or write to legal@oneactor.com, to ask us to review the decision; a person reviews it and answers within 10 working days.
- Where we suspect a criminal offence involving a threat to someone's life or safety, we inform the competent authorities (Digital Services Act Art. 18).
- Restrictions are proportionate: we restrict what is needed, and we lift them when the problem is fixed, unless the law or a repeated serious breach requires otherwise.
8. Changes
We may update this policy. For a material change we give at least 30 days' notice by email and on this page, unless a change is required by law sooner.