Acceptable Use Policy

Last updated: 17 June 2026

1. About this Policy

This Acceptable Use Policy ("Policy") governs your use of AI Super Hub (the "Service"), a web application and installable Progressive Web App available at https://aisuperhub.app. The Service is operated by Koby Bryant, an individual operating as a sole trader, trading as "AI Super Hub" ("we", "us", "our").

By accessing or using the Service, you agree to comply with this Policy. This Policy forms part of, and should be read together with, our Terms of Service and Privacy Policy. Capitalised terms not defined here have the meaning given to them in our Terms of Service.

This Policy is governed by the laws of Queensland, Australia. Where your use involves personal information, you must also comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as overseen by the Office of the Australian Information Commissioner (OAIC). Where you, as a business customer, upload your own customers' or staff data, you act as the controller of that data and we act as your processor; you remain responsible for ensuring your collection and use of that data is lawful.

We may refuse, suspend, or terminate access for any use that breaches this Policy. Nothing in this Policy limits your rights under the Australian Consumer Law (ACL), which cannot be excluded.

2. Who this Policy applies to

This Policy applies to everyone who uses the Service, including:

• the account owner;
• managers and staff invited to the Team Portal;
• developers using our Developer API and webhooks; and
• any end customer who interacts with public-facing features you create (such as booking pages, forms, storefront chatbots, courses, or feedback surveys).

If you invite others to use the Service under your account or team, you are responsible for ensuring they understand and follow this Policy.

3. General principles

You must use the Service:

• Lawfully — only for purposes permitted by applicable Australian law and, where relevant, the laws of the jurisdiction in which you or your customers operate.
• Honestly — without deceiving, defrauding, or misleading others.
• Respectfully — without harming, harassing, exploiting, or endangering other people.
• Within your entitlements — only accessing the modules, seats, and features your subscription or grant entitles you to.

4. Prohibited conduct

4.1 No unlawful use

You must not use the Service, or any content generated through it, to do anything that is illegal or that facilitates illegal activity. This includes (without limitation) fraud, money laundering, distributing malware, infringing intellectual property, breaching privacy or consumer-protection laws, or facilitating any criminal offence under Australian law.

4.2 Content you upload — rights and lawful basis

The Service lets you upload and store a wide range of content and data, including receipts and financial records, business documents, legal knowledge documents, contracts, CRM contacts, marketing assets, brand voice examples, images, audio, video assets, and staff records in the Team Portal (which may include sensitive information such as dates of birth, tax file numbers, bank details, superannuation details, emergency contacts, certifications, and medical certificates uploaded for sick calls).

You must only upload content and data that:

• you own or are otherwise authorised to upload and use; and
• where it includes another person's personal information (for example, customers, leads, staff, or contacts), you have a lawful basis to collect, store, and process that information under the Privacy Act 1988 (Cth) and the APPs.

You must not upload others' personal data without a lawful basis, nor upload content that infringes a third party's copyright, trademark, or other intellectual property rights. Where you upload your customers' or staff data, you are the controller of that data and are responsible for any required notices, consents, and disclosures; we act only as your processor in handling it.

4.3 No misuse of AI features

The Service uses third-party AI models, including Anthropic (Claude), OpenAI (GPT, Whisper, gpt-image-1, vision and image-edit endpoints), ElevenLabs (text-to-speech), Stability AI (images), Replicate (MusicGen), and Shotstack (video rendering). These power features across modules such as Bo Chat, the Marketing Platform, Lead Generation, the AI Accountant, the Legal module, the CRM, Hospitality, Logo Builder, the Website Builder, and the owner-only Video Manager.

When using any AI feature, you must not:

• generate, store, or publish material that infringes a third party's intellectual property, including by producing images, logos, video concepts, voiceovers, music, or copy that copies or closely imitates protected works;
• generate deceptive, fraudulent, or misleading material, including impersonation, fake reviews, scams, or content designed to mislead consumers;
• generate content that is unlawful, defamatory, harassing, or that promotes harm to others;
• attempt to bypass the safety controls, content limits, or jurisdiction- and module-specific disclaimers built into the Service; or
• present AI-generated output (such as legal information, tax summaries, financial categorisation, fitness or nutrition guidance, or business recommendations) as professional advice. AI output may be inaccurate, biased, or incomplete, and you remain responsible for reviewing and verifying it before relying on or publishing it.

4.4 No misuse of the Video Manager

The owner-only Video Manager can research trends, generate scripts and assets, render videos, and (where connected via OAuth) publish to platforms such as YouTube. You must not use it to:

• generate or post content that infringes copyright or other intellectual property, including by downloading, copying, or re-uploading others' media (the module is designed to reference trends, not store third-party media);
• post deceptive or unlawful material, or content that breaches the terms of any connected platform; or
• circumvent the copyright-risk and moderation controls, posting-window limits, or rate limits in the automation settings.

You are responsible for ensuring you hold the necessary rights to publish any video, including rights to any voices generated through ElevenLabs, before posting.

4.5 No spam or unlawful marketing

The Service includes email tools (via Postmark, SendGrid, Resend, or AWS SES), SMS and WhatsApp tools (via Twilio or ClickSend), automated review requests, NPS surveys, and AI-generated outreach in Lead Generation and the Marketing Platform.

You must not use these tools to send spam or unsolicited commercial messages beyond what the law and recipients allow. In particular, you must:

• comply with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth), including obtaining the required consent, identifying yourself as the sender, and providing a working unsubscribe or opt-out mechanism;
• honour opt-outs, including STOP/UNSUB requests (the Service tracks SMS opt-outs to support this, but you remain responsible for compliance);
• comply with equivalent laws in any other jurisdiction where your recipients are located; and
• not use cold outreach, lead enrichment, or scraped signals to contact people without a lawful basis.

You are solely responsible for the lawfulness of all marketing and outreach you send through the Service.

4.6 No scraping, reverse engineering, or security circumvention

You must not:

• scrape, harvest, or systematically extract data from the Service except through features expressly provided for that purpose (such as the Developer API used within its documented limits);
• reverse engineer, decompile, or disassemble the Service, except to the extent this restriction is prohibited by law;
• probe, scan, or test the vulnerability of the Service, or breach or circumvent any authentication, Row-Level Security, encryption, CAPTCHA (Cloudflare Turnstile), or other security or access-control measure;
• access data, accounts, teams, or modules you are not authorised to access, or attempt to defeat tenant isolation; or
• introduce malware, or interfere with the integrity or performance of the Service.

4.7 No rate-limit evasion or overloading the Service

You must not evade or attempt to evade rate limits, usage caps, or cost controls (including those applied to AI usage, voice transcription, text-to-speech, and the Developer API), nor place an unreasonable or disproportionately large load on the Service or its infrastructure (including Supabase and our third-party processors). Automated access via the Developer API or webhooks must stay within the documented limits and use valid credentials.

4.8 No account or seat sharing beyond your licence

Access is licensed per account and, for the Team Portal, per seat. The base Team Portal includes the owner plus ten staff; additional staff are billed per the applicable seat pricing. You must not:

• share login credentials or sessions to give access to more people than your subscription, entitlements, or licensed seats permit;
• create or use accounts to circumvent seat limits, owner-bypass controls, or billing; or
• resell, sublicense, or provide access to the Service to third parties except as expressly permitted by your agreement with us.

4.9 No using the platform to harm others

You must not use the Service, or any data or feature within it (including location features, staff records, geofenced clock-in data, smart-home device controls, the panic button, friend location sharing, or messaging), to surveil, stalk, harass, intimidate, endanger, discriminate against, or otherwise harm any person. Staff and team data must be used only for legitimate, lawful employment and business purposes.

5. Your responsibilities

You are responsible for:

• all activity that occurs under your account and within your team;
• keeping your credentials, API keys, and any connected third-party tokens (such as Shopify, Xero, MYOB, YouTube, or exchange API keys) secure;
• ensuring the content and data you upload complies with this Policy and applicable law;
• reviewing AI-generated output before relying on or publishing it; and
• obtaining your own professional advice where the Service produces legal, tax, financial, medical, or other regulated output.

6. Consequences of breach

If we reasonably believe you have breached this Policy, we may, at our discretion and to the extent permitted by law:

• issue a warning;
• remove or disable access to offending content;
• throttle, suspend, or restrict access to some or all features;
• suspend or terminate your account or team; and/or
• report conduct to law enforcement or relevant regulators (such as the OAIC) where we are required or permitted to do so.

Where practicable and lawful, we will give notice and an opportunity to remedy a breach, but we may act immediately where a breach is serious, unlawful, poses a risk to others or to the Service, or where the law requires it. Suspension or termination does not entitle you to a refund except as required by the Australian Consumer Law. These rights are in addition to any other rights we have under our Terms of Service or at law.

7. Reporting abuse

If you become aware of any use of the Service that breaches this Policy — including infringing content, spam, security issues, or harm to a person — please report it to us at admin@aisuperhub.app. Please include enough detail to allow us to investigate. We take reports seriously and will assess and act on them as appropriate.

8. Changes to this Policy

We may update this Policy from time to time, for example to reflect new features, new third-party processors, or changes in the law. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice through the Service. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

9. Contact

For any questions, notices, or enquiries about this Policy, contact us at:

AI Super Hub Koby Bryant (sole trader, trading as "AI Super Hub") Queensland, Australia Email: admin@aisuperhub.app

Any disputes relating to this Policy are subject to the laws of Queensland, Australia, and the jurisdiction of the courts of Queensland.