Legal

Acceptable Use Policy

  • Version 2.0
  • Effective 7 October 2026
  • Last updated 8 October 2026

This policy applies to everyone who uses Droqify and forms part of the Terms of Service. SKIFIN IT SERVICES LLP ("SKIFIN") may suspend access for breach, as the Terms describe.

1. You must not

  • use the Service unlawfully, or to process data you have no right or lawful basis to process;
  • upload malware, or attempt to gain unauthorised access to the Service, other tenants, or SKIFIN or third-party systems;
  • probe, scan or load-test the Service, or bypass rate limits or other protections, without SKIFIN's written permission;
  • reverse engineer the Service or extract models, prompts or configuration, except as law permits;
  • use outputs to build a competing document-processing service, or resell the Service except under a written reseller agreement;
  • share credentials, or use another person's account or API key;
  • submit content that is unlawful, infringing, or that depicts child sexual abuse, or that is used to harass or defraud;
  • use the Service for automated decisions with legal or similarly significant effects on individuals without meaningful human review; or
  • use the Service for any purpose prohibited by the EU AI Act or similar law applicable to you.

2. Restricted data

  • Protected health information (PHI) may be submitted only where a Business Associate Agreement is signed for an eligible plan.
  • Trials, pilots and the demo environment accept synthetic data only. Do not upload real personal data, health data or special-category data to them.
  • Payment card data (full card numbers, CVV) and government identity numbers must not be submitted unless your Order Form permits it and you have a lawful basis. The Service is not certified for PCI DSS card-data storage.

3. Security testing and reporting

If you find a vulnerability, report it to contact@skifin.com with the subject "Security / Vulnerability" and give us reasonable time to fix it before disclosure. Do not access, change or delete data that is not yours, or disrupt the Service. Testing your own tenant at modest volumes is allowed; anything wider needs written permission.

4. Enforcement

SKIFIN may investigate suspected breaches, remove content, limit or suspend access, and report unlawful activity to authorities. Where practicable we will tell the customer administrator first. Repeated or serious breaches may result in termination under the Terms.