Acceptable Use Policy

1. Purpose and Scope

This Policy applies to every User of the Platform — the web application, the client portal, and the mobile app — and to every Firm whose subscription those Users work under. The Firm is responsible for the conduct of its Users.

2. Permitted Use

The Platform exists for lawful, professional legal work by authorized Users of a subscribed Firm. Use it for your Firm's matters, clients, and internal practice management — nothing else.

3. Prohibited Activities

Users must not use the Platform to violate any applicable law, including Saudi law on intellectual property, confidentiality, and personal data protection.

Users must not submit another person's confidential or personal data without a lawful basis for doing so.

Users must not attempt to access another User's account, or another Firm's data, without authorization.

Users must not reverse engineer, decompile, or attempt to extract the source code of the Platform or the models behind its AI features.

Users must not probe, scan, or test the security of the Platform without our prior written authorization (see section 7).

Users must not scrape, harvest, or bulk-extract data from the Platform by automated means beyond ordinary use.

Users must not upload viruses, malware, or any code designed to disrupt the Platform or harm its users.

Users must not circumvent usage limits, AI credits, storage quotas, or access controls.

Users must not present AI-generated output as final legal advice, or issue it to a client or court without the professional review the Terms and Conditions require.

Users must not use the Platform to produce misleading, fraudulent, or knowingly inaccurate legal documents.

4. Fair Use of AI Features

AI drafting and assistant features draw on a usage allowance included with the Firm's plan, and that allowance is meant for genuine legal work on the Firm's matters. Generating bulk content unrelated to the Firm's practice, making the allowance available to anyone outside the Firm, or scripting automated requests to exhaust or resell it is a violation of this Policy. Where the plan states credit limits, those limits apply.

5. Messaging and Communications

Client-facing features — the client portal, notifications, and any email the Platform sends on the Firm's behalf — may be used only to communicate with the Firm's own clients about their matters. Sending spam, bulk marketing, or messages to people who have no relationship with the Firm is prohibited.

6. No Resale or Service Bureau

A subscription covers the internal use of the subscribing Firm alone. The Firm must not resell access to the Platform, offer it to third parties as a service bureau, or run the practice of another firm or business on a single subscription.

7. Security Testing

Vulnerability scanning and penetration testing against the Platform are prohibited without our prior written authorization. If you believe you have found a security flaw, report it to info@oai.sa under the responsible disclosure terms on our Security page; good-faith reports made that way will not face legal action from us.

8. Accounts and Credentials

Login credentials are personal to the User they are issued to and must not be shared. A Firm's administrator decides which individuals hold accounts under its subscription and must remove access promptly when someone leaves the Firm.

9. Reporting Violations

Anyone can report suspected misuse of the Platform to info@oai.sa. We review every report and act on those we can substantiate.

10. Enforcement and Appeals

Our response to a violation is proportionate to it: a warning for minor issues, suspension of the User or the Firm's account for serious or repeated ones, and termination where the Terms and Conditions allow. Except where immediate action is needed to protect the Platform or other users, we give notice before suspending an account.

A Firm that considers an enforcement step mistaken can appeal by writing to info@oai.sa. Each appeal is reviewed and answered.

11. Changes to This Policy

This Policy may change as the Platform does. Material changes are announced by email or in the Platform, normally 30 days before they take effect; continued use after the effective date is acceptance of the revised Policy.

12. Contact

Questions about this Policy, and reports of suspected violations, go to info@oai.sa.