Acceptable Use Policy

• Use the Services for any illegal purpose or in violation of any applicable law (including export, sanctions, and consumer-protection law).
• Upload images of, or attempt to analyze the hair/scalp of, anyone who has not given you their consent.
• Upload sexually explicit content, content depicting minors in any non-consensual context, or content that violates another person's privacy or publicity rights.
• Reverse engineer, decompile, scrape, or extract data from the Services beyond what is permitted by an official API key, or attempt to circumvent rate limits or access controls.
• Use the AI features to generate medical, mental-health, or other professional advice and present it as such to a third party.
• Probe, attack, or test the security of the Services without our prior written authorization (security research is welcome — see Section 4).
• Send spam, run unsolicited bulk outreach, or use the messaging features for harassment.
• Misrepresent your identity, credentials, license status, or affiliation.
• Resell, sublicense, or expose paid features to third parties without our written authorization.
• Upload malware, conduct phishing, or attempt to defraud another user.

If you have a Professional or Salon Owner account, in addition to the rules above:

• You must obtain your own clients' informed consent before uploading their hair, scalp, or face imagery — even where local law would not require it. Maintain a written record.
• You must not present AI-generated recommendations as a substitute for licensed dermatological or medical advice.
• You are responsible for safe operation of the Cosmixx Machine in line with the manufacturer's instructions and applicable workplace safety regulations.
• You must comply with all applicable cosmetics regulations in your jurisdiction (see MoCRA Notice).
• The detailed contractual terms for B2B users live in the Professional & Salon Agreement.

Report abuse, fraud, or violations to legal@cosmixxology.com. Include URLs or user IDs and a description of what you observed.

We welcome good-faith security research. If you discover a vulnerability, email legal@cosmixxology.com with the subject "Security: [brief description]". Do not access more data than necessary to demonstrate the issue, never use the issue to harm users, and give us a reasonable time to fix it before public disclosure. We will not pursue legal action for research that complies with these guidelines.

We may investigate suspected violations and take any action we deem appropriate, including warning the user, removing content, suspending or terminating the account, or notifying law enforcement.