OULUTION LEGAL

OULUTION ACCEPTABLE USE POLICY

Oulution Holdings Limited · Business Registration Number 72443593

Registered office: Room D07, 8/F, Kai Tak Fty Building, No. 99 King Fuk Street, Sanpokong, Kowloon, Hong Kong

Last updated: 1 May 2026 Effective date: 1 May 2026

ON THIS PAGE

This Acceptable Use Policy (“AUP”) is issued by Oulution Holdings Limited, a company incorporated in Hong Kong with Business Registration Number 72443593 and registered office at Room D07, 8/F, Kai Tak Fty Building, No. 99 King Fuk Street, Sanpokong, Kowloon, Hong Kong (“Oulution”, “we”).

1. Purpose and application

1.1 This AUP governs your use of the Oulution website at oulution.ai, the Oulution mobile applications, application programming interfaces, and related services (the “Services”).

1.2 This AUP is incorporated by reference into:

(a) the Consumer Terms of Service;

(b) the Enterprise Terms of Service;

(c) the Master Subscription Agreement; and

(d) any other contract under which you access the Services.

1.3 A breach of this AUP is a material breach of your contract with Oulution.

1.4 Oulution provides legal information and analysis. The Services are not a substitute for advice from a qualified lawyer. Any use of the Services that assumes otherwise, or that holds out Oulution’s Outputs as legal advice to a third party, is a breach of this AUP.

1.5 We may update this AUP from time to time by publishing a revised version at oulution.ai/aup. Continued use of the Services after publication constitutes acceptance of the updated AUP.

2.1 You must not:

(a) hold yourself out, or hold Oulution out, as authorised to practise law in any jurisdiction where such conduct would constitute the unauthorised practice of law, including under:

(i) the Hong Kong Legal Practitioners Ordinance (Cap 159);

(ii) the England & Wales Legal Services Act 2007 (reserved legal activities);

(iii) US state bar rules governing unauthorised practice of law in the relevant state;

(iv) the Bundesrechtsanwaltsordnung and the Rechtsdienstleistungsgesetz in Germany;

(v) equivalent laws or professional-conduct rules in any other jurisdiction;

(b) present Oulution Outputs to a third party as though they were legal advice given by you, unless you are a qualified lawyer taking full professional responsibility for that advice;

(c) use the Services to draft, file, or submit documents to a court, tribunal, regulator, arbitral body, or counterparty without independent qualified-lawyer review, where such review is required by law or professional-conduct rules;

(d) use the Services in any manner that would breach your own professional-conduct obligations, including obligations to the Solicitors Regulation Authority, the Bar Council, the Law Society of Hong Kong, a US State Bar, the Cámara de Diputados, or equivalent bodies;

(e) rely on Outputs for time-sensitive filings without independent verification against primary sources.

3. Prohibited uses — content, security, and integrity

3.1 You must not use the Services to:

(a) generate, upload, transmit, or store content that is unlawful, defamatory, obscene, pornographic, harassing, discriminatory, threatening, hateful, or that incites violence;

(b) infringe any intellectual-property right, privacy right, publicity right, confidentiality obligation, or contractual right of a third party;

(c) upload malicious code, viruses, worms, ransomware, or content designed to disrupt, damage, or gain unauthorised access to the Services, any user’s device, or any third-party system;

(d) impersonate another person, or misrepresent your affiliation with any person, organisation, professional body, or government;

(e) upload personal data of third parties without a valid legal basis and, where required by applicable law, without appropriate notice to those individuals;

(f) upload information subject to legal professional privilege (or its jurisdictional equivalent) that belongs to a third party — including your employer’s or your firm’s clients — without authority to do so;

(g) upload special-category personal data within the meaning of GDPR Article 9, sensitive personal information within the meaning of the CCPA, sensitive personal information within the meaning of PIPL Article 28, or equivalent categories under other laws, except where you have a valid legal basis and any additional condition required by applicable law is satisfied;

(h) upload personal data of children below the age of digital consent in the relevant jurisdiction;

(i) upload classified, export-controlled, or otherwise restricted government information in breach of applicable law;

(j) upload content designed or likely to cause the Services to generate output that would breach paragraphs (a) to (i) above.

4. Prohibited uses — model integrity and technical measures

4.1 You must not:

(a) attempt to reverse-engineer, decompile, disassemble, or extract the underlying models, model weights, prompts, system instructions, or training data of the Services;

(b) use the Services, or Outputs generated by the Services, to develop, train, improve, evaluate, or benchmark any AI model or product that competes with the Services;

(c) use automated means (including scraping, crawling, spidering, or bots) to access the Services, other than via a published API operated by Oulution and used in accordance with its documented terms and rate limits;

(d) circumvent, disable, or interfere with access controls, rate limits, quota mechanisms, authentication, or other usage restrictions;

(e) share, resell, sublicense, rent, or otherwise transfer your account credentials or access to the Services, except as expressly permitted by your contract with Oulution;

(f) probe, scan, test, or attempt to breach the security or integrity of the Services or any related infrastructure, except pursuant to a coordinated vulnerability-disclosure programme published by Oulution;

(g) use adversarial prompting, prompt injection, jailbreaks, or similar techniques designed to cause the Services to produce Outputs that would breach this AUP;

(h) input into the Services synthetic content designed to poison, degrade, or bias Oulution’s models.

5. Prohibited uses — trade, sanctions, and export control

5.1 You must not use the Services:

(a) in breach of applicable sanctions administered by the United Nations, the European Union, the United Kingdom (Office of Financial Sanctions Implementation), the United States (Office of Foreign Assets Control), Hong Kong (implementing UN sanctions), or other competent authority in a jurisdiction relevant to you or Oulution;

(b) if you are located in, ordinarily resident in, or organised under the laws of a comprehensively sanctioned jurisdiction (at the date of this AUP, including Cuba, Iran, North Korea, Syria, and the Crimea, so-called Donetsk People’s Republic, and so-called Luhansk People’s Republic regions of Ukraine);

(c) if you are listed on any restricted-party list of a competent authority (including the OFAC SDN List, the EU Consolidated Financial Sanctions List, the UK Consolidated List, the BIS Entity List and Denied Persons List, and equivalent lists);

(d) if you are 50% or more owned or controlled by any person referred to in paragraphs (b) or (c);

(e) in breach of applicable export-control laws (including the US Export Administration Regulations at 15 CFR Parts 730–774, the US International Traffic in Arms Regulations, the EU Dual-Use Regulation (EU) 2021/821, and equivalent laws).

6. Prohibited uses — anti-money-laundering and financial crime

6.1 You must not use the Services to facilitate, plan, or conceal money laundering, terrorist financing, proliferation financing, bribery, corruption, tax evasion, market abuse, or fraud.

7. Prohibited uses — high-risk applications

7.1 The Services are not designed, tested, or intended for use in any application where failure of the Services could lead to death, personal injury, or severe environmental or property damage. You must not use the Services in such applications, including in the operation of nuclear facilities, aircraft navigation or communications systems, air traffic control, life-support systems, or weapons systems.

7.2 You must not use the Services to make legal, credit, employment, housing, insurance, or other decisions that produce legal effects or similarly significant effects concerning natural persons without appropriate human oversight and independent qualified review.

8. Enforcement

8.1 We may investigate suspected breaches of this AUP. We may take proportionate action including:

(a) requesting information from you;

(b) removing, quarantining, or restricting access to Inputs, Outputs, or account content;

(c) suspending features, functionality, or your account;

(d) terminating your contract with Oulution;

(e) preserving evidence and cooperating with law-enforcement or regulator investigations;

(f) reporting conduct to competent authorities where required or where we consider it appropriate.

8.2 Our failure to enforce this AUP in any instance is not a waiver of the right to do so subsequently. We reserve all rights and remedies at law and in equity.

9. Reporting

Suspected breaches of this AUP, or concerns about content or conduct on the Services, should be reported to info@oulution.ai. Please provide sufficient detail to enable investigation.