Acceptable Use Policy

Lumevo gives a company AI access to the files, mail and systems that company chooses. That is useful only if people use it for ordinary business work and do not turn it into a way to steal data, harass someone, or run an ungoverned agent.

This policy applies to every Member. The Customer is responsible for its Members. A breach can lead to removal of a Member or suspension of the workspace.

• drafting, summarising, filing and tracking ordinary company work
• asking Tally to think through a problem and, if useful, turn it into a My Work task
• uploading company documents a manager or owner is allowed to share with colleagues
• connecting your own mailbox if your company allows it, so a task you own can read it or leave a draft
• reviewing drafts, answering questions, and approving or rejecting proposed actions

• Try to jailbreak, prompt-inject, or otherwise make the AI ignore Lumevo’s draft-first and approval rules.
• Use the workspace to send spam, phishing, or commercial electronic messages that break the Spam Act 2003.
• Upload or ask the AI to generate child sexual abuse material, or any sexual content involving a person who is or appears to be under 18.
• Upload malware, or files whose only purpose is to attack a system.
• Attempt to reach another company’s workspace, another Member’s mailbox, or Lumevo’s servers, credentials, or inference keys.
• Scrape, overload, or reverse engineer the service beyond ordinary use.
• Resell Lumevo, or run a bureau service on top of it, without a written agreement.
• Invite a person under 18, or use the workspace as a consumer social product.
• Pretend a Lumevo draft is independent professional advice, or that Lumevo sent, filed, paid, or decided something that a person has not actually done.

The product can hold whatever a Member pastes or uploads. That does not mean it is a good idea. Do not put the following into Ask AI, My Work, the Company Library, or a connected mailbox thread that the AI will read, unless the Customer has a lawful reason and has agreed the workflow with Lumevo in writing:

• health records, genetic or biometric data
• government identifiers (TFN, passport, driver’s licence) except where a scoped workflow needs a copy the company already holds
• payment-card PANs or full bank account credentials
• passwords, private keys, or other people’s authentication secrets
• content you do not have the right to share with an AI provider overseas

The contact form says the same thing in shorter form: do not include passwords or confidential customer data in an enquiry.

• Do not instruct the AI to take an external action that bypasses review. The product is built so it cannot send mail or write to company systems on its own; do not try to make it.
• Do not treat a draft as finished work. Someone who knows the subject has to read it.
• Do not use outputs that copy a third party’s material as if they were original when you know they are not.
• If a task reads a mailbox or a company system, only use that access for the task you created. Do not use it to snoop on colleagues.

We may refuse a request, remove content, disconnect a mailbox, disable a connector, or suspend a Member or workspace where we reasonably believe this policy, the law, or a provider’s rules are being broken. We will tell the Customer owner unless that notice would increase the risk. We may keep a record of the action.