Quaspar
Contact sales
← Back to homepage

Acceptable Use Policy

Effective Date: August 30, 2026

What you may and may not do with the Quaspar platform

This Acceptable Use Policy is part of the Quaspar Terms of Service and applies to everyone who uses the Quaspar Workforce platform, browser extension, APIs, and marketplace. Violating it can lead to suspension or termination. If you see a violation, report it to support@quaspar.com.

1. Prohibited uses

Legal and safety

  • Breaking any law, or helping anyone else break the law.

  • Infringing anyone's intellectual property, privacy, or other rights.

  • Fraud, including generating false claims, false documentation, or misrepresentations to payers, regulators, patients, or research bodies.

  • Harassment, threats, or content that promotes violence or self-harm.

  • Generating malware, phishing content, or material designed to compromise systems.

  • Producing content that sexually exploits or endangers minors, or any child sexual abuse material.

Clinical and scientific integrity

  • Using the platform to make or communicate a diagnosis, treatment decision, or clinical determination without review by a qualified licensed clinician.

  • Presenting worker outputs to patients, research subjects, regulators, or journals as verified human-reviewed work when they have not been reviewed.

  • Fabricating research data, citations, or results, or using the platform to prepare submissions containing content the submitter has not verified.

  • Configuring a worker for an intended use that would make it a regulated medical device without meeting the applicable regulatory requirements as its manufacturer.

Decisions about people

Using outputs to make automated decisions with legal or similarly significant effects on an individual — including coverage denials, employment, credit, housing, insurance, or education decisions — without meaningful human review by a person with authority to change the outcome.

Data

  • Uploading protected health information, real patient data, or other regulated data on the free tier, which is for synthetic data only.

  • Routing PHI to a model provider or connector that our platform identifies as not covered by a Business Associate Agreement, or attempting to circumvent that gate.

  • Submitting data you do not have the right to submit, or that you have not obtained required consents or authorizations to process.

  • Uploading credentials, API keys, or secrets belonging to others.

  • Attempting to re-identify de-identified data.

Platform integrity

  • Attempting to bypass permission controls, budget caps, rate limits, authentication, or the policy engine, including through prompt injection or by embedding instructions in documents or connector data.

  • Probing, scanning, or testing the vulnerability of the platform without written authorization, other than good-faith reporting under our vulnerability disclosure process.

  • Reverse engineering, decompiling, or attempting to extract our models, prompts, archetype catalog, or source code.

  • Using the platform to build a competing product.

  • Excessive automated load, denial-of-service activity, or scraping.

  • Sharing account credentials, or reselling access without a written reseller agreement.

  • Violating a third party's terms through a connector, including rate limits, licensing restrictions, and attribution requirements of scientific databases and EHR developer programs.

Marketplace

Publishing templates containing PHI, personal data, credentials, or third-party material you do not have rights to; templates designed to bypass safety controls; or misleading names, descriptions, or performance claims.

2. Your responsibilities

  • Configure worker permissions on a least-privilege basis and set approval gates appropriate to the risk.

  • Set budget caps and monitor autonomous workers.

  • Keep your workspace join code secure and rotate it if it is exposed.

  • Remove members who no longer need access.

  • Train your staff on reviewing outputs before relying on them.

  • Report suspected security incidents to us promptly.

3. Enforcement

We may investigate suspected violations, and may suspend or limit access, remove content, or terminate an account. We will give notice and an opportunity to fix the problem where it is practical and safe to do so, but we may act immediately where there is risk of harm, legal exposure, or damage to the platform or other customers. We will cooperate with law enforcement where required by law.

4. Reporting

Report violations, abuse, or security concerns to support@quaspar.com. We acknowledge reports within two business days.

5. Changes

We may update this policy. Material changes are announced in the product or by email at least 30 days before they take effect.