1. Scope and responsibility
This Policy applies to every person, Organization, agent, host, client, integration, and automated process that accesses Siglata. It is incorporated into the Terms of Use, and Customer is responsible for activity authorized through its accounts, credentials, connected agents, and Organization.
A permitted use must satisfy this Policy, applicable law, the rights of others, and any documented capability or usage boundary presented by the Service.
- Owners and administrators should review members, connected clients, scopes, and agent instructions regularly.
- Customer must promptly disable or report access it no longer authorizes.
2. Lawful and authorized use
Use the Service only for lawful purposes and only with Content and systems you are authorized to access. You must provide any notices, obtain any permissions, and satisfy any professional, contractual, employment, or sector-specific duties that apply to your use.
You remain responsible for evaluating whether the Service is appropriate for personal data, confidential information, regulated records, or high-impact decisions before submitting that material.
- Do not use another person or organization's account, Organization, token, client, or Content without authorization.
- Do not use the Service to evade a legal restriction, court order, contract, or access decision.
3. Prohibited content and conduct
You must not use Siglata to create, upload, transmit, store, or distribute content that is unlawful, fraudulent, defamatory, threatening, harassing, discriminatory, sexually exploitative, or intended to facilitate serious physical harm. You must not use the Service to impersonate a person or organization, misrepresent a result, or conceal a material automated action where disclosure is required.
You must not use agent instructions or generated output to make a high-impact decision about a person without the human review, notices, rights, and safeguards required by applicable law and your obligations.
- No malware, ransomware, credential theft, phishing, spam, unlawful surveillance, or unauthorized collection of personal data.
- No content that infringes intellectual property, privacy, publicity, confidentiality, or other rights.
- No use to plan, facilitate, or conceal violence, exploitation, abuse, or other serious wrongdoing.
4. Security and access boundaries
Do not probe, scan, overload, disable, reverse engineer, or bypass Siglata's authentication, authorization, rate limits, capability restrictions, review steps, Organization boundaries, or other security controls, except for a coordinated report under the Security Practices disclosure channel.
Do not introduce code, macros, external links, or other material intended to execute implicitly or compromise a user, agent, host, provider, or connected system. Supported file handling and computation boundaries must be respected.
- Do not test credentials, tokens, endpoints, or Organizations that you do not control or have written authorization to test.
- Do not use automated traffic that creates unreasonable load or interferes with another customer's use.
- Report suspected vulnerabilities privately to security@mail.siglata.com rather than exploiting or publicly disclosing them first.
5. Agents and human review
Customer must configure connected agents and hosts with only the access, scopes, and instructions needed for the intended task. An agent may read or propose changes within its granted capabilities, but Customer remains responsible for the agent's instructions, selected targets, and resulting actions.
Human review is required wherever the Service presents a confirmation step. A confirmation is not permission to ignore law, policy, security warnings, or the need to validate source data and output.
- Do not instruct an agent to conceal its identity, bypass human confirmation, or override an Organization role.
- Do not use an agent to copy Content outside the Organization without authorization and a lawful purpose.
6. Reports and enforcement
Report suspected abuse, unauthorized access, or harmful content to support@mail.siglata.com; report security vulnerabilities to security@mail.siglata.com. Include the relevant URL, Organization or client context, time, and evidence only to the extent you can share it lawfully and safely.
Estirpia may investigate, preserve relevant records, request information, remove or restrict access to material, suspend an account or connected client, or terminate use when reasonably necessary for safety, security, legal compliance, or protection of the Service and others.
- We may act without advance notice when delay would create material risk or law requires immediate action.
- We may consider scope, severity, repeat conduct, good-faith mistakes, remediation, and impact when deciding a response.
- We do not promise that every report will produce a particular enforcement outcome.
7. Changes and contact
This Policy is effective on September 3, 2026. We may update it by posting a revised version with a new effective date and by providing notice where appropriate. The current Policy applies prospectively, subject to any stronger commitment in an applicable written agreement.
Questions about permitted use belong at support@mail.siglata.com; vulnerability reports belong at security@mail.siglata.com.
- The Terms of Use govern issues not addressed by this Policy.
- A written commercial agreement may impose stricter use requirements for a specific Service or Organization.