Usage Policy

This Usage Policy (also called the Acceptable Use Policy) sets the rules for how you may use Terralyn's platform. It is a standalone policy that is incorporated into and forms part of the Terms and Conditions ("Terms") between you and Climate Data Inc., doing business as Terralyn ("Terralyn," "we," "us," or "our"). Capitalized terms that are not defined here have the meaning given to them in the Terms, including "Service," "Customer Data," and "Outputs."

If there is a conflict between this Usage Policy and the Terms, the Terms govern, except where this Usage Policy is more specific about a permitted or prohibited use, in which case the more specific rule applies.

1. Purpose and Scope

Terralyn is a sustainability consulting firm that prepares sustainability reports, disclosures, and related analysis for its clients as a service, using its own AI-powered sustainability analyst platform. Clients access the platform as their client portal. The platform draws on (a) your Customer Data, (b) our curated knowledge base of sustainability standards, frameworks, and emission factor libraries, and (c) licensed third-party sources, and it produces Outputs using large language models supplied by our AI providers.

This Usage Policy defines the bounds within which the Service may be used so that you, your colleagues, your auditors, and regulators can rely on those bounds.

Who this binds
This Usage Policy binds the Customer that contracts with Terralyn and every person the Customer allows to access or use the Service under its account, including employees, contractors, agents, and any client or other end user to whom the Customer provides access or Outputs ("Authorized Users"). The Customer is responsible for making its Authorized Users aware of this Usage Policy and for their compliance with it. A reference to "you" means the Customer and its Authorized Users together. Terralyn's own consultants and contractors are bound by this Usage Policy through their agreements with Terralyn when they use the Service on a client's behalf.

Outputs are drafts and decision-support
Outputs are not audited, assured, verified, or professional advice. This point runs through the whole policy and is stated in full in Sections 4 and 5.

2. Permitted Use, Tied to Your Tier

You may use the Service for any lawful sustainability purpose the Service is built to support, within the entitlements you hold. We do not confine permitted use to a fixed list of tasks. The boundaries are three: your entitlements, the prohibited uses in Section 3, and applicable law. Within them, how you put Terralyn to work across sustainability analysis, reporting, disclosures, compliance, strategy, and advisory work is your decision.

Access and entitlements
Access to the Service is granted as part of a client engagement under a services agreement, statement of work, or order form, as described in Section 4 of the Terms, or as a legacy free account under that Section. The features, entitlements, and usage allowances that apply to you are set out in that document, and they are incorporated into the Terms. You may use only the features and volume your engagement grants. Using features or volume beyond your entitlement is a violation of this Usage Policy.

Client workspaces are bundled
On the Enterprise tier, the workspaces you create for your own clients are part of your engagement. They are governed by your agreement with us, and you remain responsible for the activity in each one and for your authority to process the data you place in them.

3. Prohibited Uses

You may not do any of the following, and you may not let any Authorized User or third party do them.

3.1 Illegal and harmful use

• Use the Service for any unlawful purpose or in violation of applicable law, including data protection law, export control and sanctions law, and AI-specific law such as the EU AI Act and the Texas Responsible Artificial Intelligence Governance Act.
• Use the Service to plan, promote, or carry out activity that harms people, including violence, terrorism, human trafficking, or the exploitation or endangerment of minors.
• Use the Service to generate or distribute unlawful, defamatory, harassing, or fraudulent content, or content that facilitates a crime.

3.2 Objectionable and prohibited content

You may not upload, submit, or generate:

• Content that sexually exploits or endangers minors, or non-consensual intimate imagery.
• Content that promotes or incites violence, terrorism, self-harm, or hatred or discrimination against people based on a protected characteristic.
• Malware, exploit code, or files designed to disrupt, damage, or gain unauthorized access to systems.
• Protected Health Information regulated under HIPAA or equivalent law, payment card data, government-issued identification numbers, or financial account credentials, unless your Enterprise agreement expressly covers that processing.

3.3 Intellectual property

• Upload or submit content that infringes another party's intellectual property or other rights, including copyrighted standards, databases, or reports you are not licensed to provide.
• Represent Outputs as audited, assured, verified, or solely human-authored where disclosure of AI involvement is required by law, professional rule, assurance standard, contract, or customer expectation (see Section 4).
• Use Outputs or knowledge base content to develop, train, fine-tune, evaluate, benchmark, or build a competing AI model, emission factor library, or sustainability platform.
• Resell, sublicense, or redistribute the Service, its Outputs, or its knowledge base content as a standalone product, data feed, or database.

3.4 Security and system integrity

• Reverse engineer, decompile, probe, or attempt to extract the underlying software, models, weights, system prompts, agent instructions, indexing metadata, or knowledge base.
• Attempt model extraction or distillation, jailbreak or prompt-injection attacks, or any technique meant to defeat the Service's safety controls or make it act outside this Usage Policy or the Terms.
• Circumvent or attempt to circumvent authentication, access controls, tenant isolation, or security measures.
• Probe, scan, or test the vulnerability of the Service or its supporting infrastructure without our prior written consent, or breach or attempt to breach any security or authentication measure.

3.5 Automated access and resource abuse

• Scrape, crawl, spider, or systematically extract Outputs, emission factors, or knowledge base content.
• Access the Service through automated means, bots, or scripts except through interfaces we expressly provide for that purpose and within their documented limits.
• Impose an unreasonable or disproportionate load on the Service, or interfere with its normal operation or with any other customer's use of it.
• Circumvent, or attempt to circumvent, rate limits, usage limits, or fair-use controls (see Section 6).

3.6 Anti-spam

• Use the Service, or any communications feature or email it supports, to send spam, bulk unsolicited messages, or deceptive, misleading, or phishing content.
• Use the Service to harvest or scrape contact information for unsolicited outreach.

3.7 AI-specific misuse

• Use the Service in any way that would breach the acceptable use, usage, or safety policies of our AI providers (see Section 5).
• Impersonate another person or organization, or misrepresent your affiliation, through Outputs.
• Feed third-party personal data into the Service that you are not authorized to process (see Section 4.6).
• Use the Service for any high-risk purpose without the human oversight required by Section 4.

4. AI Pass-Through Obligations and High-Stakes Use

Terralyn runs on models supplied by more than one AI provider. Their terms and usage policies impose obligations that pass through to you. Where their requirements differ, this Usage Policy applies the strictest applicable requirement, and you agree to use the Service on terms at least as strict as each provider's terms as applied to your and your Authorized Users' use. The following rules apply in addition to the rest of this Usage Policy.

4.1 Human oversight for high-risk uses

A qualified human must exercise meaningful oversight before any Output is relied upon in a high-risk context. High-risk contexts include finance and credit, insurance, legal matters, employment, housing, education, access to government services or benefits, medical or health decisions, and critical infrastructure. For any advice or analysis that will affect an individual in one of these contexts, a professional who is licensed, certified, or otherwise competent in the relevant domain and jurisdiction must review the Output, validate the inputs and methodology, and approve it before it is finalized, filed, published, or acted on.

4.2 No sole-source decisions

You may not use an Output as the sole basis for a regulatory filing, disclosure, or public statement; an assurance engagement; a public "net zero," "carbon neutral," science-based target, or similar climate claim; a representation to investors, lenders, auditors, rating agencies, or customers; a contractual deliverable; or an automated decision that produces a legal or similarly significant effect on a natural person. A qualified human must review and sign off first, consistent with Section 4.1.

4.3 Disclose AI involvement

Where an Output is shown to, or relied on by, an individual, you are responsible for disclosing that the content is AI-generated or AI-assisted where such disclosure is required by law (for example, EU AI Act Article 50), professional rule, or contract. You may not present Outputs as solely human-created where that disclosure is required.

4.4 No unlicensed regulated advice

The Service is decision-support software. It does not provide, and you may not use it to provide to others, licensed legal, financial, investment, tax, accounting, audit, assurance, or medical advice. Where regulated professional advice is needed, a qualified professional must provide it.

4.5 Output reliability

Outputs are produced probabilistically by large language models and retrieval. They may be wrong. They may contain factual errors, fabricated values, outdated regulatory references, incorrect emission factors, or mismatched methodologies. You must independently verify Outputs before relying on them. This is material for emissions figures and for compliance and "net zero" or similar claims, where an unverified error can create legal, regulatory, or reputational exposure. Citations that the Service provides support traceability and are not assurance that a cited source is current, complete, or appropriate for your scope, boundary, methodology, or jurisdiction. Similar inputs may produce similar Outputs; similarity is not accuracy.

4.6 No unauthorized third-party personal data

You may not feed personal data of any third party into the Service unless you are authorized to process it for the purpose and have any required notices and consents in place. This includes personal data of your employees, customers, suppliers, and your own clients' data subjects.

4.7 No competing-model training

You may not use Outputs, or access to the Service, to train, fine-tune, evaluate, benchmark, or build a competing AI model or to otherwise develop a product that competes with the Service.

4.8 No model extraction or manipulation

You may not attempt model extraction, reverse engineering, distillation, jailbreaking, or prompt injection, or otherwise attempt to discover, copy, or manipulate the models or their safety controls.

4.9 Prohibited AI applications

You may not use the Service, or any Output, to build or operate any of the following:

• A facial-recognition database built by untargeted scraping of facial images from the internet, CCTV, or other sources without the consent of the individuals.
• Real-time remote biometric identification of individuals in publicly accessible spaces.
• Social scoring of individuals based on behavior or personal characteristics.
• Inference of individuals' emotions in the workplace or in education settings.
• Profiling to assess or predict an individual's risk of committing a criminal offense.

These prohibitions apply regardless of whether local law would otherwise permit the activity.

5. Compliance with AI Provider Policies

Your use of the Service must comply with the current usage and acceptable use policies of the AI providers whose models power the Service. Because we apply the strictest applicable provider requirement, a use that is prohibited by any provider is prohibited on the Service. We may update the set of AI providers and the pass-through requirements as our model stack changes, and we will reflect material changes in this Usage Policy under Section 10.

6. Rate Limits and Fair Use

The Service is subject to rate limits, usage allowances, and fair-use controls that vary by engagement and that we may set and adjust based on your entitlements and on system load. The specific numeric limits and allowances that apply to you are set out in your services agreement, statement of work, or order form; they are not restated in this Usage Policy so that they stay current in one place.

You may not circumvent or attempt to circumvent these limits, including by:

• Creating or using multiple accounts to exceed the allowance of a single account.
• Sharing, pooling, or reselling access, credentials, or capacity across separate customers or tenants to evade a limit.
• Using automated means to inflate usage or to defeat a rate or volume control.

Legitimate use of Enterprise per-client workspaces within your own engagement is not circumvention. Using separate accounts or tenants to defeat a limit that applies to you is.

We may throttle, queue, or temporarily limit activity to protect the stability and security of the Service and the experience of other customers.

7. Monitoring and Enforcement

We may, at our discretion and to the extent permitted by law, monitor use of the Service to operate it, secure it, and check compliance with this Usage Policy and the Terms. Monitoring is subject to the Privacy Policy and, where it applies, the Data Processing Addendum; we do not use Customer Data to train AI models.

Where we reasonably believe a use violates this Usage Policy or the Terms, or presents a security, legal, or integrity risk, we may throttle, suspend, or terminate access, in whole or in part, and remove or disable violating content, with or without prior notice depending on the severity and the risk, and without liability for doing so. We will give notice and a reasonable opportunity to cure where practical, consistent with Section 17 of the Terms.

8. Reporting and Abuse Channel

To report a suspected violation of this Usage Policy, abuse of the Service, or a security concern, contact us at security@terralyn.ai. We review reports and take the action we consider appropriate. Reporting a concern does not create any obligation on us to a third party, and it does not waive any of our rights.

9. Consequences

Consequences of a violation may include a warning, throttling, suspension or termination of access, removal or deletion of violating content, forfeiture of fees as permitted by the Terms, referral to law enforcement or regulators, disclosure required by law, and any other remedy available under the Terms or applicable law. You are responsible for a violation by any of your Authorized Users as if it were your own. Nothing in this section limits the indemnification, suspension, or termination provisions of the Terms.

10. Changes and Notice

We may update this Usage Policy prospectively as laws, AI capabilities, AI provider requirements, and misuse patterns evolve. For material changes, we will give notice by email or in-product notification at least 30 days before the changes take effect, unless a shorter period is required by law or to address a security or legal risk. Non-material changes take effect when posted with a new "Last Updated" date. Each published version is dated and versioned, and prior versions are available on request at legal@terralyn.ai. Continued use of the Service after a change takes effect constitutes acceptance. If you do not accept a change, stop using the Service before it takes effect.

11. Contact

Climate Data Inc. (DBA Terralyn)

• Address: 3001 Bishop Dr., Suite 300, San Ramon, CA 94583 US
• Abuse and security reports: security@terralyn.ai
• Legal: legal@terralyn.ai
• Privacy: privacy@terralyn.ai
• Website: https://terralyn.ai