Acceptable Use Policy

We want Orchard to power useful products — voice agents, podcast tooling, language learning, accessibility, content production — built by people who treat their users with respect. This AUP marks the line between use cases we'll support and use cases we'll terminate accounts over. If you're uncertain whether your use case is allowed, email contacto@orchardrun.com before you build on us.

You agree not to use the Service to:

• Violate any applicable law, regulation, or court order in the United States or in the jurisdiction where you operate.
• Infringe the intellectual property, privacy, publicity, or contractual rights of any person.
• Harass, threaten, defame, or stalk any person.
• Generate content that sexualizes minors. There are no exceptions to this rule.
• Generate content intended to incite violence, self-harm, or imminent lawless action.
• Build or operate spyware, stalkerware, or any covert surveillance tool that operates without the surveilled person's knowledge.

The following content categories are prohibited regardless of whether the input is text or audio, and regardless of who the end user is:

• Child sexual abuse material (CSAM) or any content that sexualizes a minor.
• Non-consensual intimate imagery or sexualized deepfakes of identifiable people.
• Detailed instructions for synthesizing chemical, biological, radiological, nuclear, or high-yield explosive weapons.
• Detailed instructions for attacks against critical infrastructure (power grid, water, financial systems, hospitals).
• Content that promotes terrorism or violent extremism, or solicits recruits, funds, or material support for designated terrorist organizations.
• Malware, exploit code, or tooling whose primary purpose is to compromise systems you are not authorized to access.
• Content designed to facilitate human trafficking, forced labor, or modern slavery.

You agree not to use the Service to:

• Operate a voice agent that denies being an AI when asked directly by the person it is speaking to.
• Impersonate Orchard, our employees, or our affiliates.
• Create fake reviews, fake testimonials, or fake user-generated content at scale.
• Generate audio that falsely presents itself as a news broadcast, an emergency alert, a 911 / 112 / 911-equivalent operator, or a government communication.
• Build robocall campaigns that violate the U.S. Telephone Consumer Protection Act, applicable state law, or the equivalent in your jurisdiction.

The following domains require additional care. You may use Orchard in these domains, but you accept full responsibility for ensuring that your use case is compliant with the relevant regulatory regime, and you agree that human oversight is in place for high-stakes decisions:

• Healthcare — clinical decision support requires a licensed human in the loop. Orchard is not HIPAA-certified by default; contact us about a BAA before processing PHI.
• Legal advice — output should not be presented as the advice of a licensed attorney.
• Financial advice — output should not be presented as the advice of a registered investment adviser, and must comply with applicable securities regulation.
• Employment, housing, credit, insurance — automated decisions in these domains are subject to fair-treatment laws; you are responsible for compliance.
• Public safety — Orchard is not certified for use in 911 / emergency response systems.

You agree not to:

• Probe, scan, or test the vulnerability of the Service except under a written authorization (e.g., responsible disclosure program).
• Circumvent, disable, or interfere with security or authentication features.
• Reverse engineer, decompile, or attempt to extract model weights, prompts, or training data from the Service, except to the extent applicable law cannot be waived.
• Use the Service to develop a competing product or service in a way that uses our model outputs as training data without our written consent.
• Send malicious payloads (prompt injection at scale, infinite loops, gigabyte audio bombs) designed to disrupt the Service.

Responsible-disclosure reports are welcome at contacto@orchardrun.com. We will not pursue legal action against good-faith researchers who comply with a standard safe-harbor policy.

Each plan has published rate limits and quotas. You agree not to circumvent rate limits by creating multiple accounts, by routing through shared IP space to disguise concurrency, or by deliberately misrepresenting your traffic profile when asking for a quota increase. If you need more capacity, ask: we'd rather know about your scale than discover it via an alert.

You may build products and services on top of Orchard, including products you charge your own customers for. You may not:

• Resell raw Orchard API access ("pass-through" reselling).
• Operate a service whose primary value proposition is providing access to Orchard's API to third parties.
• Represent your product as Orchard, or otherwise mislead your users about the underlying provider in a way that damages our reputation.

Enterprise plans include white-label provisions; contact contacto@orchardrun.com to discuss.

You are responsible for compliance with all laws applicable to your use of the Service, including but not limited to:

• U.S. export controls and economic sanctions administered by OFAC. You may not use the Service from, or for the benefit of any person in, a country subject to comprehensive U.S. sanctions, or any person on the SDN list.
• Data protection laws (GDPR, CCPA/CPRA, LGPD, PIPEDA, etc.) applicable to your end users.
• Sector-specific regulation (FTC, FCC, FDA, HHS, SEC, state attorneys general, etc.).
• Election integrity laws and rules around political advertising in your jurisdiction.
• Telephone Consumer Protection Act (TCPA) and state robocall statutes.

If you believe an Orchard customer has violated this AUP, or you are the subject of deepfake audio, impersonation, or other misuse you believe originated from Orchard, email contacto@orchardrun.com. Include enough detail for us to identify the content (URLs, audio file, approximate date) and the affected person. We triage abuse reports within one business day.

We may investigate suspected violations of this AUP. Depending on the severity and context, our response may include any of:

• Issuing a warning and requesting that you bring your use into compliance.
• Removing specific content or generated audio from our systems.
• Throttling or temporarily suspending API access.
• Terminating your account with or without notice.
• Reporting to law-enforcement, NCMEC, or other authorities when required by law or when we believe there is an imminent risk of serious harm.

We try to be proportionate. For first offenses that look like good-faith mistakes, we'll usually ask you to fix it. For severe violations — CSAM, non-consensual deepfakes, fraud, impersonation of public officials — we terminate first and discuss after.