Acceptable Use Policy

Contents

1 General prohibited uses
2 Prohibited uses specific to age estimation
3 Children
4 Our monitoring and enforcement
5 Reporting

This Acceptable Use Policy (“Policy”) describes prohibited uses of the cloud services and website (the “Services”) offered by Rank One Computing Corporation d/b/a ROC (“ROC”). It is incorporated into the ROC Customer Agreement. If you or your End Users violate this Policy, or authorize or help others to do so, we may suspend or terminate your use of the Services. We may update this Policy under the Customer Agreement.

1 General prohibited uses

You may not use the Services:

(a) for any illegal, fraudulent, harmful, infringing, or deceptive activity;

(b) to violate the rights of others, including privacy, publicity, and intellectual-property rights;

(c) to threaten, incite, promote, or encourage violence, terrorism, or other serious harm;

(d) for any content or activity that promotes child sexual exploitation or abuse, or that otherwise harms or exploits minors;

(e) to violate the security, integrity, or availability of any network, system, or data, or to attempt unauthorized access, probe, or circumvent authentication or usage limits; or

(f) to distribute malware, or to send unsolicited or unlawful messages or content.

2 Prohibited uses specific to age estimation

Because the Services estimate age from facial images, you may not, and may not permit any End User or third party to, use the Services:

(a) to identify or re-identify any individual, verify identity, or attempt to locate, surveil, profile, or track any person; the Services are not an identification tool;

(b) to infer any characteristic other than age (for example, gender, ethnicity, emotion, or health), or to represent that the Services do so;

(c) to create, enrich, or contribute to any facial-recognition or biometric-identification database or template store;

(d) without providing the notices and obtaining the consents required by law and by the Biometric Notice and Consent Terms;

(e) as the sole basis for a legal or similarly significant automated decision about a person without human oversight and a means of redress;

(f) to represent that the Services satisfy a specific statutory age-verification standard unless ROC has confirmed suitability in writing for that standard and jurisdiction; or

(g) in any use prohibited by the EU AI Act, or embedded in a high-risk AI system under that Act, without ROC’s prior written agreement.

3 Children

3.1 Because age assurance often involves minors, you must comply with all applicable child-protection and children’s-privacy laws (including COPPA and, where applicable, the UK Children’s Code) and configure the Services accordingly. You must not use the Services to profile or target children.

4 Our monitoring and enforcement

4.1 We may, but are not obligated to, investigate any suspected violation of this Policy, and may remove or disable access to any content or resource that violates this Policy or the Customer Agreement, or refuse Production requests. We may report activity we suspect violates the law to appropriate authorities. In assessing a violation we may consider your ability and willingness to comply and your processes for preventing prohibited activity.

5 Reporting

5.1 If you become aware of any violation of this Policy, please notify us at legal@roc.ai with a description of the activity and the relevant details.