Acceptable Use Policy

1. Purpose and scope

This Acceptable Use Policy explains the responsibilities and restrictions that apply when using Lurny services or contributing content. It covers authorised users, administrators and organisations using learning, authoring, knowledge, practice, conversation analysis, capability and related services, including enabled integrations, APIs and shared spaces.

This policy forms part of a service agreement only where that agreement incorporates it or it is otherwise validly accepted. The applicable service agreement governs commercial terms, service levels, data processing, liability and termination. In a conflict, that agreement prevails unless it expressly states otherwise. This policy does not transfer ownership of customer content or expand Lurny’s rights to process it.

2. Customer and user responsibilities

Use Lurny only for lawful, authorised purposes and within your assigned role, subscription and agreed service limits. Follow reasonable security instructions and your organisation’s applicable rules. Do not impersonate another person or misrepresent your authority, qualifications or affiliation.

Customers are responsible for authorising users, assigning appropriate permissions, approving integrations and communicating relevant rules. They must review access when roles change or people leave, establish lawful purposes for processing personal information and give users and other affected people the required notices.

Individual users must protect passwords, one-time codes, API keys and other credentials; use required authentication controls; and promptly report suspected compromise. Do not share accounts to evade licence limits or allow unauthorised access. Keep exports and downloaded reports secure and share them only with authorised recipients.

3. Content you contribute

Upload, import, record or share only material you are entitled to use for the intended purpose. This applies to documents, webpages, videos, images, voices, presentations, customer conversations and other source material, including material used to create learning content. A publicly accessible source is not automatically licensed for copying or redistribution.

Respect copyright, confidentiality, privacy and other rights. Do not remove ownership notices or misrepresent the origin of content. Obtain the permissions needed for use of a person’s image, voice or likeness, including synthetic avatars and cloned voices. Do not create deceptive impersonations or fabricated endorsements.

Do not contribute unlawful material, threats, targeted harassment, discriminatory abuse, sexual exploitation, child sexual abuse material, fraud or content intended to facilitate serious harm. Legitimate training about sensitive subjects must have an appropriate educational purpose, audience and access controls; that purpose does not permit illegal content.

4. Personal and confidential information

Limit personal information to what is needed for the authorised activity. Do not upload credentials, payment-card security codes, government identifiers, health records or other sensitive data unless the use is specifically authorised, necessary and supported by the agreed service and appropriate safeguards.

Do not use Lurny to expose private information, stalk people, conduct covert surveillance or combine records for an undisclosed purpose. Confirm the intended audience before publishing content, exporting reports or enabling sharing. Do not move customer information into a public demo, personal workspace or unapproved external tool.

5. Recordings and conversation analysis

Before recording, uploading or analysing a conversation, the customer and the person initiating the activity must ensure it is authorised, has a lawful basis and is covered by the required participant notices and consent where applicable. This includes customers, employees and other participants who may not have Lurny accounts. Microphone permission alone is not participant consent.

Use recording and analysis only for the disclosed purpose. Respect applicable requests to stop recording and use an approved alternative where required. Do not record unrelated private conversations or bypass recording indicators or consent controls. Restrict access to recordings, transcripts and feedback according to business need and approved retention rules.

6. Responsible use of AI

Review AI-generated content before publishing it, distributing it or relying on it. Check accuracy, context, source permissions and the possibility of biased or misleading results. Do not present AI output as a verified fact, professional judgement or authorised company commitment without appropriate review.

Do not use AI features to generate scams, malicious code for abuse, deceptive impersonations or other prohibited content. Do not attempt to defeat safeguards, extract another customer’s information or hidden credentials, or manipulate prompts and integrations to obtain information outside your permissions. Authorised security evaluation requires the agreed testing process.

Capability ratings, conversation scores and recommendations support human judgement. Do not use them as the sole basis for hiring, dismissal, promotion, credit or another consequential decision about a person. The organisation must provide suitable human review, context and a way to challenge inaccurate information, and meet any additional requirements applicable to its use.

7. Learning and assessment integrity

Complete assessments, practice activities and declarations honestly. Do not impersonate another learner, fabricate completion evidence, falsify certificates, manipulate scores or share restricted assessment answers. Use AI assistance only where the activity’s rules permit it.

Do not alter or suppress audit records to conceal misconduct or falsely demonstrate compliance. Administrators may correct errors through authorised procedures that preserve the appropriate record of the change. A course completion or platform-generated readiness score must not be represented as an external accreditation or certification unless that claim is independently valid.

8. Security and service integrity

Do not access another account, organisation or restricted system without authorisation. Do not introduce malware, exploit vulnerabilities, intercept traffic, evade authentication, disrupt availability or interfere with logs and security controls. Do not probe or test Lurny systems without prior written authorisation and an agreed scope.

If you discover a suspected vulnerability or unintended access, stop the activity and report it promptly. Do not explore further, copy exposed information or share exploit details publicly before coordinating responsible handling. Authorised tests must use the agreed environment, methods and reporting channel.

Use APIs and integrations through approved methods. Do not bypass rate limits, create accounts to evade quotas, conduct unauthorised bulk extraction or impose excessive automated load. Do not use the service to send spam, phishing messages or unsolicited bulk communications. Agreed capacity and licence limits remain those in the applicable agreement.

9. Sharing and third party services

Share content only with audiences you are authorised to reach. In discussions and shared learning spaces, treat others respectfully, keep contributions relevant and do not disclose private customer or employee information. Do not upload promotional material or solicitations where the space does not permit them.

Before enabling an external integration, confirm the organisation’s approval, the information it can access and the provider’s applicable terms. Do not use an integration to bypass Lurny access restrictions or export data to an unauthorised recipient. Permission to use Lurny does not itself authorise every connected third-party service.

10. Reporting concerns

Report suspected misuse, harmful content, rights infringements or security concerns to your organisation’s administrator and, where appropriate, the Lurny contact below. Include the affected service, relevant content link or record identifier, approximate time, a description of the concern and a safe way to contact you.

Provide only the information needed to investigate. Do not send passwords, full sensitive records or unnecessary copies of harmful material. For an infringement report, identify the work or right involved, the disputed content and your authority to report it. Good-faith reports and requests for review must not be met with retaliation. Deliberately false or abusive reports are prohibited.

11. Review and enforcement

Lurny may investigate credible reports and suspected violations using information it is authorised to access under the service agreement, data processing terms and applicable law. This policy does not grant unrestricted access to customer content or promise that all content will be monitored or reviewed in advance.

Depending on severity, evidence and risk, action may include a warning, a request to correct conduct, restricting a feature, disabling an integration, limiting access to specific content or suspending an affected account. Actions should be proportionate and, where feasible, limited to the affected user, content or function.

Where appropriate, we will notify the customer or user of the reason and allow a reasonable opportunity to remedy the issue. Immediate restriction may be necessary for an urgent security risk, serious harm, unlawful activity or a legal requirement. Notice may be limited where law or the protection of an investigation requires it. Account termination and contractual remedies remain subject to the applicable agreement and law.

We may preserve relevant evidence and make disclosures where legally required or permitted, consistent with our contractual and privacy obligations. Removing access to content does not automatically require its permanent deletion. Retention, return and deletion of customer data remain governed by the applicable agreement and law.

12. Requests for review and restoration

A customer or affected user may request review through the contact below, stating the action disputed, the relevant facts and any corrective steps. We will assess the information and explain the outcome to the extent permitted. Where the issue is resolved and restoration is appropriate, we will coordinate restoration of the affected access. Contractual and statutory rights remain unaffected.

13. Updates and contact

We may update this policy to reflect changes in services, risks or applicable requirements. We will identify the effective date and provide notice of material changes in accordance with the applicable agreement, obtaining acceptance where required. Changes do not retrospectively change accrued rights or override negotiated terms.

Lurny Innovative Labs Pvt. Ltd. Policy enquiries and misuse reports: [Insert monitored contact email]. Security reports: [Insert monitored security contact or reporting link]. Privacy requests: Use the contact in the published Privacy Policy. Postal address: D702, Mantri Tranquil, Gubbala Main Road, Subramanyapura, Bangalore 560061, Karnataka, India.