Closed-Alpha Acceptable Use Policy

Scope and responsibility

This Acceptable Use Policy is part of the Closed-Alpha Terms of Use. You are responsible for your use of Echo, anyone using credentials or API keys issued to you, the Input you submit, and how you use Output.

Do not use Echo, or help another person use Echo, for any activity prohibited below. An attempt is prohibited even if it is unsuccessful.

Illegal, abusive, or harmful activity

Do not use Echo to:

• violate a law, regulation, court order, contractual duty, or another person's legal rights;
• facilitate violence, credible threats, terrorism, human trafficking, exploitation, or instructions intended to cause physical injury;
• harass, stalk, intimidate, extort, defame, or target a person or protected group for abuse or unlawful discrimination;
• encourage or provide instructions intended to facilitate suicide, self-harm, or eating-disorder behavior; or
• create, obtain, or distribute content when doing so is illegal or infringes privacy, publicity, intellectual-property, or other rights.

Malware, credential theft, and privacy abuse

Do not use Echo to:

• develop, deploy, improve, or conceal malware, ransomware, destructive code, botnets, credential stealers, phishing, or systems for unauthorized access or persistence;
• obtain passwords, tokens, API keys, financial credentials, or other authentication information through deception, intrusion, or unauthorized collection;
• attack, scan, exploit, disrupt, or gain unauthorized access to a device, account, network, model, or service;
• collect, infer, expose, or trade personal or sensitive information without a lawful basis and required permission, including through doxxing, stalking, re-identification, or unauthorized surveillance; or
• generate or maintain dossiers, location tracking, biometric surveillance, or identity inferences in ways that violate law or a person's reasonable privacy expectations.

Security research, vulnerability testing, and red teaming require Tracer's prior written authorization and must remain within the authorized scope.

Child sexual exploitation and weapons

Child safety

Never use Echo to create, transform, describe, solicit, obtain, distribute, or facilitate child sexual abuse or exploitation material, including synthetic or fictional depictions; to sexualize a person under 18; or to groom, entrap, or exploit a minor. Tracer may preserve and report apparent child exploitation material or conduct to the appropriate authorities as required or permitted by law.

Weapons

Do not use Echo to design, construct, acquire, deploy, or materially increase the harmful capability of weapons, explosives, or chemical, biological, radiological, or nuclear agents. Do not use it to evade safeguards or controls governing weapons or dangerous materials.

Spam, fraud, and deceptive practices

Do not use Echo to:

• send or facilitate unsolicited bulk communications, spam, coordinated inauthentic activity, or abusive automated engagement;
• defraud, scam, impersonate, forge, misrepresent identity or origin, or conceal that content is AI-generated when disclosure is required;
• manipulate people through targeted deception, including deceptive political persuasion or false emergency communications; or
• circumvent platform rules, academic or professional integrity requirements, or legally required disclosures.

High-impact and regulated decisions

Do not use Echo to make or recommend decisions that determine a person's eligibility, selection, access, or terms in healthcare, legal services, credit, lending, insurance, employment, housing, education, government benefits, immigration, or law enforcement unless:

• qualified humans meaningfully review the relevant facts, reasoning, and proposed decision;
• the use is lawful, authorized, appropriately tested, and subject to required notice, consent, explanation, and appeal processes; and
• Echo is not the sole or determinative basis for the decision.

Echo is not a HIPAA-compliant service. Do not submit protected health information or other regulated sensitive data.

Service integrity and safety controls

Do not:

• bypass, disable, defeat, or interfere with safety filters, content controls, monitoring, authentication, rate limits, quotas, or other technical restrictions;
• hide request origin, coordinate accounts, rotate keys, or use proxies or automation to evade an access decision or usage limit;
• overload, disrupt, degrade, or interfere with Echo or its providers, or introduce malicious content into the service;
• share credentials, sessions, or API keys with unauthorized people, or sell, rent, sublicense, or resell access; or
• misrepresent Output as verified, professionally reviewed, or endorsed by Tracer.

Model extraction, distillation, and competitive use

No systematic extraction. Echo's closed alpha is for invited, ordinary evaluation. It is not a source of training data, benchmark data, or behavioral labels for another model or competing service.

Without Tracer's prior written authorization, do not:

• systematically harvest, scrape, record, aggregate, or republish Echo outputs;
• use bots, scripts, agents, coordinated accounts, prompt grids, adaptive queries, or other automated probing to map Echo's behavior or obtain outputs at scale;
• scrape benchmarks, replay evaluation sets, conduct automated benchmarking, or collect comparative performance data;
• use Echo, Output, or observations about Echo to train, distill, fine-tune, align, validate, evaluate, benchmark, route, or improve a competing model or AI system;
• create or assist an imitation, substitute, replica, or service that reproduces Echo's behavior, capabilities, routing, presentation, or commercial function;
• reverse engineer or attempt to discover or infer models, weights, source or object code, system prompts, hidden instructions, routing logic, safeguards, architecture, or nonpublic methods; or
• circumvent safety systems, rate limits, access controls, telemetry, or other measures in support of extraction or competitive analysis.

Monitoring, enforcement, and reports

Tracer may monitor requests, Content, usage patterns, credentials, and technical logs as described in the Privacy Notice to detect abuse, investigate suspected violations, secure Echo, and enforce this Policy.

We may warn, block Content, restrict features, rate-limit, suspend or terminate access, preserve evidence, or report conduct to authorities when appropriate. Serious risks may result in immediate action without prior notice. We may consider context, intent, severity, history, and available remediation, but are not required to use progressive enforcement.

Report suspected abuse, compromised credentials, or questions about authorization to adam@tracerml.ai.