Contents
1. Scope and status
This V1 policy applies where incorporated into the applicable agreement. It covers HERO, Code, Browser Extension, Orbit, Node, developer services and capabilities, including content generation, connected accounts and automated work, where those services are available. It addresses conduct, not the technical availability of a feature.
Users, organizations and developers must obey applicable law, respect others’ rights and limit actions to their authority. Developers must apply appropriate controls to their own users and applications. Authorized research does not exempt a person from law or third-party access conditions.
2. Serious harm and exploitation
Do not use Tessen to facilitate violence, terrorism, human trafficking, exploitation, self-harm encouragement or the unlawful production or procurement of weapons or dangerous substances. Do not solicit operational assistance to carry out serious physical harm or evade controls designed to prevent it.
Do not create, obtain, promote or distribute sexual exploitation material involving children, assist grooming or exploit vulnerable people. Do not create non-consensual intimate imagery or sexual content involving a person without the required consent. Report suspected child exploitation or immediate threats through appropriate emergency or competent-authority channels rather than relying on an AI response alone.
3. Fraud, deception and identity abuse
Do not conduct scams, payment fraud, credential theft, identity theft, deceptive fundraising or impersonation intended to mislead about authority or origin. Do not generate forged documents, evidence or records for fraudulent use, or manipulate others through false representations about human involvement.
Synthetic media must not be used to unlawfully impersonate people or conceal information when disclosure is legally required. Legitimate creative fiction, education or satire still requires attention to context, labeling and applicable rights. Do not misrepresent AI output as an independently verified professional opinion or official decision.
4. Cybersecurity and system integrity
Do not distribute malware, ransomware, destructive code or credential-harvesting tools; gain unauthorized access; exfiltrate information; or conceal malicious activity. Do not attack Tessen infrastructure, other users, providers or connected services. Do not defeat authentication, quotas, approval gates, isolation or monitoring.
Security testing must be within written authorization and a defined scope. Stop when testing creates a risk of disruption or exposes third-party data beyond that scope. The existence of a security contact is not blanket testing permission, a promise of payment or a legal safe harbor. Share only the minimum evidence necessary to explain a vulnerability.
5. Privacy, surveillance and sensitive decisions
Do not unlawfully obtain, disclose, sell or infer personal information; doxx people; conduct stalking; or use connected context for unauthorized surveillance. Respect account scopes and organization access permissions. Access granted to a shared workspace does not imply permission to use its contents for unrelated purposes.
Do not use Tessen as the sole decision-maker for consequential medical, legal, financial, employment, credit, housing or similar decisions. Do not deploy discriminatory or unlawful automated decision-making. Sensitive uses require a suitable lawful basis, appropriate notices, evaluation and meaningful oversight. Do not infer sensitive traits for prohibited or unlawful targeting.
6. Content rights and communications
Only submit or retrieve content that you have the right to use for the intended purpose. Do not use Tessen to facilitate copyright infringement, unauthorized distribution, trade-secret theft or removal of rights-management information. A generated output may still implicate rights even if it is not a verbatim copy.
Do not send unlawful spam, harassing communications or deceptive bulk outreach. Honor consent, opt-out requests and third-party communication rules. Connected-service access is not permission to contact everyone in an address book or publish private correspondence. Review recipient identity and sensitive attachments before authorizing person-directed actions.
7. AI safeguards and model access
Do not bypass safety controls, entitlement checks, capacity restrictions or service limits through deceptive accounts, manipulated inputs or routing changes. Do not attempt to extract confidential system instructions, credentials, other users’ content or proprietary model material.
Evaluation of AI systems should use authorized methods and appropriate safeguards. Merely naming an activity “research,” “red teaming” or “simulation” does not authorize harmful behavior. Do not redistribute model access in violation of the applicable license, provider conditions or Tessen agreement.
8. Compute, Node and Project Zero
Do not use Node to run unauthorized workloads, conceal resource consumption, compromise local isolation or obtain access to another participant’s files or network. Participate only with equipment and network resources you are authorized to use. Do not claim credits for fabricated execution, exploit accounting defects or misrepresent hardware capability.
Do not abuse Project Zero through automated account multiplication, quota evasion, resale of preview access or routing manipulation intended to reach paid capacity without authorization. Respect shared resource availability. Participation is not an employment relationship or a guaranteed income opportunity.
9. Enforcement and review
Tessen may assess suspected misuse using a proportionate process, including limiting a particular action, credential, integration or account where necessary. Enforcement should consider severity, evidence, recurrence, safety, applicable law and the effect on legitimate users. Urgent protective measures may be appropriate before an investigation is complete.
Where lawful and practicable, provide a reason and a route to request review. A restriction does not necessarily mean a user committed a crime, and a mistake should be correctable. Restrictions and enforcement should be proportionate to misuse and applicable law. Where lawful and practicable, Tessen provides a reason and a way to request review; mandatory reporting obligations and confidential security investigations may require exceptions. The policy does not authorize unrestricted inspection of private content.
10. Reporting and relationship to other terms
Report suspected misuse to the available support channel, including relevant request identifiers and a concise description. Do not include unnecessary personal data, secrets or harmful material. Immediate danger should be reported to the relevant emergency services. For suspected infringement, provide evidence of rights and the material concerned; the production process must be finalized for applicable notice-and-action rules.
This policy supplements the Terms, Developer Terms, Business Terms and product-specific terms. A signed agreement may provide additional controls but cannot authorize illegal conduct. The contracting entity and correspondence details are identified in the Terms.