1. Purpose

This Acceptable Use Policy (“AUP”) governs your use of all Taqql services, including the web application, mobile applications, REST API, and MCP server. It supplements the Terms of Service.

2. Permitted use

You may use Taqql services for lawful business purposes, including:

• Managing project controls, timesheets, expenses, and procurement for your organization.
• Integrating Taqql with authorized third-party tools via the public API and MCP server.
• Accessing your organization’s data via third-party AI clients (Claude, ChatGPT, Cursor) through authorized OAuth connections.

3. Prohibited use

You must not:

3.1 Unauthorized access and security

• Attempt to gain unauthorized access to Taqql systems, other tenants’ data, or any Taqql infrastructure.
• Perform security testing, penetration testing, vulnerability scanning, or fuzzing against Taqql services without prior written authorization from Taqql.
• Bypass or circumvent authentication, authorization, or row-level security controls.
• Share credentials with unauthorized individuals.

3.2 Data misuse

• Upload, transmit, or store data that infringes third-party intellectual property rights.
• Use the platform to process data in violation of applicable privacy law (GDPR, CCPA, HIPAA, etc.).
• Scrape, bulk-export, or systematically copy Taqql data for purposes other than legitimate business use within your organization.

3.3 System integrity

• Introduce malware, viruses, ransomware, or any malicious code.
• Conduct or facilitate denial-of-service attacks.
• Send excessive API requests that degrade service for other users (rate limits apply; see API documentation).
• Attempt to reverse-engineer Taqql software.

3.4 Illegal or harmful use

• Use the platform for any illegal purpose or in violation of applicable law.
• Facilitate fraud, money laundering, or financial crime.
• Harass, threaten, or harm any individual.

3.5 MCP and AI connector misuse

• Construct prompts or inputs designed to manipulate the Q AI assistant into providing unauthorized data access, bypassing business logic, or producing harmful outputs.
• Use the MCP server to connect unauthorized third-party tools or to exfiltrate data outside your authorized organization scope.

4. Consequences of violations

Taqql may, at its sole discretion and without prior notice:

• Suspend or terminate your account.
• Remove or disable access to content violating this AUP.
• Report violations to appropriate authorities.

5. Reporting

If you believe someone is violating this AUP, or if you discover a security vulnerability, please report it to security@taqql.io.

6. Changes

We may update this AUP from time to time. Material changes will be communicated via email or in-app notice.

7. Contact

security@taqql.io
legal@taqql.io