Data efetiva: 19 de janeiro de 2024.

Last policy update: 24th July 2026.

1. Purpose and scope

This Acceptable Use Policy, referred to as the “AUP,” sets out the permitted and prohibited uses of Prime AI websites, software, APIs, applications, scripts, dashboards, documentation, artificial intelligence systems and related services.

This AUP applies to all Prime AI services, including:

• Persistent Device ID and Risk Signals API;

• device intelligence services;

• refund and return-abuse prevention services;

• Clothing Size Finder;

• Shoe Size Finder;

• Bra Size Finder;

• Visual Search;

• Virtual Try-On;

• AI Photoshoot and visualisation services;

• Shopify and other e-commerce applications;

• custom artificial intelligence and software-development services;

• demonstrations, trials and sandbox environments;

• customer dashboards and APIs;

• technical support and professional services; and

• Prime AI websites and online resources.

Together, these are referred to as the “Services.”

This AUP applies to:

• Prime AI customers and subscribers;

• authorised users;

• employees and contractors of customers;

• developers and integration partners;

• resellers and agencies where authorised;

• persons using a free trial or sandbox;

• users submitting information, images or other content through a Service; and

• any person accessing or attempting to access the Services.

In this AUP, “Customer” means the person or legal entity that has entered into an agreement with Prime AI or has been granted access to a Service.

“User” means any person who accesses or uses a Service through or on behalf of a Customer.

2. Relationship with other agreements

This AUP forms part of:

• the Prime AI Persistent Device ID API Terms of Service;

• any enterprise services agreement;

• any subscription agreement;

• any order form or service order;

• any trial or sandbox agreement; and

• any other agreement that incorporates this AUP.

Customers are responsible for ensuring that their Users comply with this AUP.

If a separately signed agreement contains a specific acceptable-use provision that conflicts with this AUP, the separately signed agreement takes precedence to the extent of that conflict.

This AUP does not grant any right to access or use a Service. Access rights are granted only under the applicable agreement with Prime AI.

3. General acceptable-use requirement

Customers and Users may use the Services only:

• for legitimate business purposes;

• in accordance with the applicable agreement;

• within the purchased or approved scope;

• in accordance with Prime AI’s documentation and technical instructions;

• in compliance with applicable law; and

• in a manner that does not harm Prime AI, its customers, Users, infrastructure or third parties.

Customers must take reasonable steps to prevent unauthorised access, unlawful use and misuse of the Services.

4. Illegal, fraudulent and harmful activities

The Services must not be used to:

• violate any applicable law or regulation;

• commit, facilitate, encourage or conceal fraud;

• facilitate theft, deception or misrepresentation;

• obtain unauthorised access to an account, system, device or data;

• distribute malware, ransomware, spyware or malicious code;

• conduct phishing, credential theft or account takeover;

• facilitate money laundering or terrorist financing;

• evade sanctions, export controls or trade restrictions;

• harass, intimidate, threaten or stalk another person;

• facilitate violence or credible threats of violence;

• infringe the legal rights of another person;

• obstruct a lawful investigation;

• impersonate another person or organisation;

• misrepresent a User’s identity, authority or affiliation;

• conceal the source of unlawful activity; or

• assist another person in carrying out prohibited activity.

A Customer must not knowingly permit the Services to be used for unlawful or fraudulent purposes.

5. Security and infrastructure misuse

Customers and Users must not:

• compromise or attempt to compromise the security of a Prime AI system;

• access or attempt to access an account, API, endpoint, environment or system without authorisation;

• discover, scan or test a vulnerability without Prime AI’s prior written approval;

• conduct penetration testing without Prime AI’s prior written approval;

• conduct denial-of-service or distributed denial-of-service testing;

• introduce malware, malicious scripts or harmful payloads;

• bypass authentication, authorisation or access controls;

• defeat or circumvent rate limits;

• bypass usage restrictions or Plan limitations;

• interfere with security monitoring or request logging;

• conceal the true origin of API requests;

• falsify API traffic, account or usage information;

• disrupt or degrade the Services;

• consume unreasonable infrastructure capacity;

• generate abnormal traffic that affects other customers;

• use automated requests in a manner inconsistent with the Documentation;

• use the Services to attack or test a third party system without proper authority; or

• use Prime AI infrastructure as a relay for unlawful or abusive activity.

Prime AI may apply reasonable technical restrictions, rate limits or traffic controls to protect the Services.

6. Account and credential security

Customers and Users must:

• keep usernames, passwords, API keys, tokens and secrets confidential;

• limit credentials to authorised persons;

• use appropriate access management procedures;

• remove access when no longer required;

• use API credentials only in approved environments;

• follow Prime AI’s instructions concerning client-side and server-side credentials;

• promptly rotate compromised credentials; and

• notify Prime AI promptly of suspected unauthorised access.

Customers and Users must not:

• publish API credentials in public code repositories;

• include secret credentials in publicly accessible source code;

• share credentials with an unauthorised third party;

• sell or transfer credentials;

• use another customer’s credentials;

• create multiple accounts to avoid limits or charges; or

• allow access by a person whose access Prime AI has suspended or terminated.

The Customer is responsible for activity carried out through credentials issued to it, subject to the applicable agreement.

7. Reverse engineering and protection of Prime AI technology

Except where expressly authorised by Prime AI or where a restriction cannot lawfully be enforced, Customers and Users must not:

• reverse engineer the Services;

• decompile or disassemble Prime AI software;

• attempt to discover source code;

• derive or reconstruct Prime AI algorithms;

• infer signal weightings, thresholds or methodologies;

• extract or recreate device-identification methods;

• reconstruct risk-scoring logic;

• reproduce Prime AI’s model architecture;

• copy or create derivative works from Prime AI technology;

• use repeated controlled requests to map how signals are generated;

• use automated probing to reproduce API functionality;

• extract non-public data structures;

• remove copyright, trade mark or proprietary notices;

• obscure the origin of Prime AI Output; or

• represent Prime AI technology as the Customer’s own technology.

Customers must not use the Services, Documentation, Output or access to Prime AI systems to develop, operate, train, validate or improve a competing:

• persistent device identification product;

• browser or device fingerprinting product;

• device intelligence service;

• risk-signal API;

• sizing recommendation product;

• visual-search product;

• virtual try-on product;

• AI image-generation service; or

• other materially competing service.

8. Benchmarking and publication

Customers and Users may conduct reasonable internal testing to determine whether a Service meets their requirements.

Without Prime AI’s prior written approval, Customers and Users must not publicly disclose or publish:

• benchmark results;

• performance comparisons;

• accuracy comparisons;

• latency tests;

• security test results;

• vulnerability information;

• technical evaluations;

• reverse-engineering findings;

• model comparisons;

• signal-generation analysis; or

• information that could reasonably facilitate an attack on the Services.

This restriction does not prevent a Customer from providing confidential internal information to its professional advisers, auditors or regulators where reasonably necessary and subject to appropriate confidentiality protections.

9. Resale, sublicensing and unauthorised access

Unless expressly permitted under a written agreement with Prime AI, Customers and Users must not:

• resell the Services;

• sublicense the Services;

• rent, lease or time-share the Services;

• provide raw API access to another person;

• redistribute Prime AI scripts or SDKs;

• provide access to an affiliate not covered by the agreement;

• use one subscription for multiple unrelated legal entities;

• operate the Service as a bureau service;

• white-label the Services;

• make the Services available through another commercial product;

• redistribute raw Output as a standalone product; or

• allow a third party to access non-public Documentation.

An agency, platform, software provider or integrator using a Prime AI Service for its customers must obtain Prime AI’s written approval and an appropriate commercial licence.

10. Data protection and privacy

Customers and Users must process Personal Data through the Services only where they have:

• an appropriate lawful basis;

• provided required privacy information;

• obtained any required consent;

• implemented any required objection or preference mechanism;

• carried out any required legitimate interests assessment;

• carried out any required data protection impact assessment;

• established appropriate retention periods; and

• complied with applicable data protection and electronic-communications laws.

Customers must not use the Services to:

• conduct unlawful surveillance;

• secretly monitor individuals where notice is legally required;

• track individuals for an undisclosed purpose;

• combine datasets in an unlawful or unfair manner;

• circumvent an individual’s lawful privacy choices;

• collect unnecessary Personal Data;

• use Personal Data for a purpose incompatible with the disclosed purpose;

• sell Personal Data processed by Prime AI on the Customer’s behalf;

• identify an anonymous individual unlawfully;

• discriminate unlawfully against a person; or

• interfere with the exercise of data-protection rights.

Customers are responsible for the privacy notices, lawful basis, retention periods and decisions associated with their implementation of Prime AI Services.

11. Persistent Device ID and Risk Signals API

The Persistent Device ID and Risk Signals API may be used for legitimate purposes such as:

• account and website security;

• fraud prevention;

• abuse prevention;

• trial-abuse prevention;

• account-recreation detection;

• multi-account detection;

• promotion and referral abuse prevention;

• suspicious session review;

• bot and automation detection;

• payment and checkout risk enrichment;

• serial return and refund-abuse prevention;

• authentication support;

• paywall enforcement; and

• access control risk assessment.

The Service must not be used for:

• unlawful surveillance;

• stalking or monitoring a particular person without lawful authority;

• unrelated advertising profiling;

• cross-context behavioural advertising;

• tracking individuals across unrelated businesses for marketing purposes;

• creating or selling personal advertising profiles;

• unlawful employee monitoring;

• unlawful location tracking;

• identifying political, religious or other sensitive affiliations;

• identifying protestors, activists or journalists for oppressive purposes;

• suppressing lawful speech;

• evading data-protection rights; or

• building an unlawful identity database.

Customers must not treat a device identifier, confidence score or risk signal as conclusive proof of:

• a person’s identity;

• account ownership;

• fraud;

• dishonesty;

• criminal conduct;

• malicious intent; or

• breach of a law or policy.

Signals such as private browsing, VPN use, developer-tools activity, browser tampering or timezone mismatch must be interpreted in context.

Customers are responsible for:

• setting their own rules and thresholds;

• combining signals with other appropriate information;

• assessing false-positive risks;

• deciding what action to take;

• providing human review where required; and

• providing an appeal or reconsideration mechanism where appropriate.

12. Automated and significant decisions

Without Prime AI’s prior written approval, Customers must not use a Prime AI Service as the sole or determinative basis for a decision concerning:

• employment or recruitment;

• credit or lending;

• housing;

• insurance eligibility or pricing;

• healthcare;

• education;

• government benefits;

• immigration;

• law enforcement;

• criminal investigation;

• access to essential public services; or

• another decision producing legal or similarly significant effects.

Where a Prime AI Output contributes to a material decision, the Customer must:

• assess whether automated decision-making laws apply;

• use appropriate supplementary information;

• test for unfair outcomes;

• maintain appropriate human oversight;

• provide required information to affected individuals;

• provide an appropriate review mechanism; and

• avoid treating a technical signal as conclusive.

Prime AI Services must not be used to make unlawful discriminatory decisions.

13. Special Category and sensitive information

Unless expressly approved in writing by Prime AI and permitted by law, Customers and Users must not submit or use the Services to process:

• racial or ethnic origin;

• political opinions;

• religious or philosophical beliefs;

• trade-union membership;

• genetic data;

• biometric data used to uniquely identify a person;

• health information;

• sex-life information;

• sexual-orientation information;

• criminal-conviction or offence information;

• government identification numbers;

• complete payment-card information;

• bank-account credentials;

• passwords;

• authentication secrets; or

• other highly sensitive credentials.

Customers must not use Prime AI Outputs to infer protected characteristics.

14. Children and vulnerable persons

Prime AI Services are primarily designed for business use and are not directed at children.

Unless expressly approved by Prime AI in writing, Customers and Users must not:

• knowingly collect Personal Data specifically relating to children through the Services;

• create persistent profiles of children;

• use device intelligence to monitor children;

• target children with advertising;

• exploit a child’s inexperience or vulnerability;

• submit inappropriate images of children;

• make significant decisions about children using Prime AI Outputs; or

• use the Services in a way likely to cause harm to children.

Where a Customer is authorised to use a Service involving children, it must implement:

• an appropriate lawful basis;

• age-appropriate privacy information;

• required parental or guardian permissions;

• data-minimisation measures;

• appropriate retention limits;

• enhanced security; and

• any legally required risk assessments.

Customers must also take appropriate precautions when processing information relating to vulnerable adults.

15. Sizing and fit recommendation services

Sizing and fit-recommendation Services may be used to provide consumers with product-size and fit recommendations.

Customers and Users must not use these Services:

• to diagnose a medical or health condition;

• as a substitute for medical advice;

• to infer a person’s health status;

• to shame or harass an individual based on body characteristics;

• to discriminate unlawfully;

• to make employment, insurance, healthcare or credit decisions;

• to create harmful or misleading health claims;

• to process information beyond what is necessary for product sizing; or

• to represent a recommendation as a guarantee of fit.

Customers must clearly communicate that recommendations are estimates and may be affected by:

• product measurements;

• brand sizing;

• customer-provided information;

• material characteristics;

• fit preferences; and

• other factors.

Customers must ensure that product, garment and sizing information supplied to Prime AI is accurate and lawfully provided.

16. Visual Search and uploaded images

Customers and Users submitting images to Visual Search or another image-processing Service must ensure that:

• they own the image or have permission to use it;

• submission does not infringe copyright or another intellectual-property right;

• any identifiable person has received required privacy information;

• any legally required consent has been obtained;

• the image is relevant to the intended Service; and

• the image does not contain prohibited content.

Customers and Users must not submit images that:

• were obtained unlawfully;

• violate another person’s privacy;

• contain malicious code;

• are intended to deceive or defraud;

• infringe copyright, trade mark or publicity rights;

• reveal highly sensitive information unnecessarily;

• include confidential documents unrelated to the Service; or

• are submitted to identify a person without lawful authority.

Visual Search must not be used for unlawful facial recognition or biometric identification.

17. Virtual Try-On, AI Photoshoot and image-generation services

Customers and Users must not use Virtual Try-On, AI Photoshoot or another image-generation or image-transformation Service to create, upload or distribute content that:

• is unlawful;

• depicts child sexual abuse or exploitation;

• sexualises a child;

• contains non-consensual intimate imagery;

• places a person into sexual or explicit content without consent;

• is intended to facilitate harassment, blackmail or abuse;

• impersonates a person for fraud;

• misleadingly represents a generated image as verified evidence;

• infringes intellectual-property rights;

• violates privacy or publicity rights;

• promotes terrorism or violent extremism;

• contains credible threats of violence;

• facilitates illegal activity;

• is defamatory;

• is intended to deceive consumers materially;

• is discriminatory or hateful;

• exploits a vulnerable person; or

• otherwise creates a material risk of harm.

Customers and Users must not use Prime AI image Services to generate misleading:

• identification documents;

• evidence;

• medical images;

• legal documents;

• financial documents;

• product certifications; or

• safety certifications.

Where applicable law or platform rules require generated or materially altered content to be labelled as artificial or synthetic, the Customer is responsible for applying the required label.

Customers must obtain all necessary rights and permissions for:

• models;

• photographers;

• clothing and product images;

• trade marks;

• copyrighted content;

• locations;

• uploaded photographs; and

• generated commercial outputs.

Prime AI may refuse to process or may remove access to images reasonably suspected of violating this AUP.

18. Customer content and intellectual property rights

Customers and Users must not upload, transmit or process content that:

• infringes copyright;

• infringes trade marks;

• misappropriates trade secrets;

• violates database rights;

• violates privacy or publicity rights;

• breaches confidentiality;

• was obtained through unauthorised access;

• is defamatory or unlawful;

• contains malicious code; or

• the Customer is not authorised to use.

Customers are responsible for verifying that they have the necessary:

• ownership;

• licences;

• consents;

• notices;

• permissions; and

• other legal rights

to submit content and instruct Prime AI to process it.

Prime AI may request evidence that the Customer has the necessary rights.

19. Spam and abusive communications

Customers and Users must not use the Services to:

• send unsolicited bulk communications;

• send spam;

• facilitate phishing;

• distribute deceptive commercial messages;

• send unlawful direct marketing;

• harvest contact details unlawfully;

• automate abusive form submissions;

• operate fraudulent referral campaigns;

• manipulate engagement metrics; or

• evade unsubscribe or suppression requests.

This does not prohibit lawful and appropriately targeted business communications conducted in compliance with applicable laws.

20. Manipulative, deceptive and misleading use

Customers and Users must not use the Services to:

• deceive individuals about the nature of a decision;

• falsely claim that a Prime AI Output proves fraud;

• create misleading consumer interfaces;

• conceal a material use of artificial intelligence where disclosure is required;

• generate false customer reviews;

• manipulate ratings or rankings;

• simulate unauthorised endorsements;

• impersonate Prime AI;

• misrepresent an association with Prime AI;

• create false records or evidence;

• deceive payment providers or regulators; or

• circumvent another platform’s policies unlawfully.

Customers must not describe the Services in a way that materially misrepresents their capabilities, accuracy or intended purpose.

21. High-risk and prohibited industries or uses

Prime AI may refuse, restrict or require enhanced contractual controls for use involving:

• weapons;

• military targeting;

• surveillance by state authorities;

• intelligence operations;

• law enforcement;

• biometric identification;

• critical infrastructure;

• healthcare decisions;

• credit decisions;

• employment screening;

• gambling or betting;

• adult content;

• controlled substances;

• political campaigning;

• sanctions-sensitive jurisdictions;

• children;

• highly sensitive Personal Data; or

• another use presenting an elevated legal, ethical, security or reputational risk.

Access to a Service does not constitute approval of a high-risk use case.

Customers must disclose their intended use accurately and notify Prime AI before materially changing it.

22. Usage limits and technical restrictions

Customers and Users must remain within:

• purchased API allowances;

• account limits;

• storage limits;

• request-rate limits;

• concurrency limits;

• approved domains;

• approved applications;

• geographic restrictions;

• user limits; and

• other limits communicated by Prime AI.

Customers and Users must not:

• create duplicate accounts to obtain additional free usage;

• repeatedly request trials under different identities;

• divide one business’s usage across accounts to avoid Fees;

• manipulate usage reporting;

• use automated methods to exhaust free allowances;

• use a Sandbox as a permanent production environment; or

• use higher-tier functionality without the applicable subscription.

Prime AI may restrict, rate-limit or suspend usage that exceeds applicable limits or threatens Service stability.

23. Compliance with platform rules

Where a Prime AI Service is used through Shopify or another third-party platform, the Customer and User must also comply with:

• that platform’s terms;

• application policies;

• privacy requirements;

• technical requirements;

• billing rules; and

• content standards.

Prime AI may suspend or modify an integration where reasonably necessary to maintain compliance with a platform requirement.

24. Reporting vulnerabilities

A person who believes they have identified a security vulnerability must:

• stop testing before accessing Customer Data or causing harm;

• avoid disrupting the Services;

• avoid downloading or altering data;

• avoid public disclosure before Prime AI has had a reasonable opportunity to investigate;

• provide sufficient technical information to reproduce the issue; and

• report the issue to [email protected].

A vulnerability report does not grant permission to conduct further testing.

Prime AI may provide separate authorised security testing instructions.

25. Monitoring and investigation

Prime AI may monitor use of the Services to the extent reasonably necessary to:

• operate the Services;

• measure usage;

• enforce applicable limits;

• protect security;

• prevent abuse;

• investigate suspected violations;

• comply with law; and

• protect Prime AI, its customers and third parties.

Prime AI may investigate suspected violations of this AUP.

The Customer shall provide reasonable cooperation, information and access to relevant records where reasonably required to investigate:

• misuse;

• a security incident;

• a legal complaint;

• prohibited content;

• unauthorised access; or

• another material AUP concern.

Prime AI’s monitoring does not relieve Customers of responsibility for their Users or use of the Services.

26. Enforcement

Where Prime AI reasonably believes that this AUP has been or is likely to be violated, Prime AI may:

• issue a warning;

• request additional information;

• require removal or correction of content;

• require modification of an integration;

• limit functionality;

• rate-limit API calls;

• disable credentials;

• restrict particular domains or Users;

• suspend access;

• terminate access;

• preserve relevant records;

• notify an affected customer;

• notify a platform provider;

• notify a competent authority where required or appropriate; or

• take another reasonable protective action.

Prime AI may act immediately and without prior notice where reasonably necessary to:

• prevent harm;

• protect Personal Data;

• secure the Services;

• address unlawful activity;

• comply with law;

• prevent further abuse; or

• protect another customer or third party.

Where reasonably practicable, Prime AI will explain:

• the nature of the concern;

• the action taken;

• any corrective action required; and

• whether access may be restored.

Prime AI is not required to disclose information where doing so would:

• compromise security;

• reveal another person’s confidential information;

• prejudice an investigation; or

• breach applicable law.

27. Responsibility for Users

The Customer is responsible for:

• selecting its Users;

• managing their access;

• ensuring they understand this AUP;

• supervising use of the Services;

• responding to misuse;

• terminating inappropriate access; and

• breaches committed by Users acting through the Customer’s Account.

A Customer must promptly notify Prime AI if it becomes aware of a material breach of this AUP.

28. Reporting suspected abuse

Suspected violations of this AUP may be reported to: [email protected]

A report should include, where available:

• the reporting person’s name and contact information;

• the relevant Customer, website, Account or domain;

• the Service involved;

• a description of the suspected violation;

• relevant dates and times;

• relevant request or transaction identifiers;

• supporting evidence;

• the impact of the alleged violation; and

• any urgent safety or security concern.

A person making a report must not submit unnecessary Personal Data or confidential information.

Prime AI may:

• acknowledge the report;

• request additional information;

• forward relevant details to the affected Customer;

• investigate the matter;

• preserve evidence;

• take appropriate enforcement action; or

• refer the matter to a competent authority.

Prime AI may not be able to disclose the outcome of an investigation because of privacy, confidentiality, legal or security restrictions.

29. Emergency and legal requests

Where there is an immediate risk of death, serious physical harm or another emergency, contact the appropriate emergency service or law enforcement authority first.

Requests from public authorities must be sent through Prime AI’s designated legal contact and must:

• identify the requesting authority;

• state the legal basis;

• specify the information requested;

• describe the relevant timeframe; and

• provide appropriate official contact details.

Prime AI may require formal legal process before disclosing information.

30. Changes to this AUP

Prime AI may update this AUP to reflect:

• changes to the Services;

• new products or functionality;

• emerging abuse patterns;

• changes in law or regulation;

• updated platform requirements;

• security developments; or

• improvements to clarity.

Prime AI will publish the current version and effective date on this page.

Where a change materially affects an active customer’s permitted use, Prime AI will provide reasonable notice where practicable, unless immediate implementation is required for legal, regulatory or security reasons.

Continued use after an updated AUP takes effect constitutes acceptance where the applicable agreement provides for acceptance in this manner.

31. Contact information

Prime AI Limited

Registered in England and Wales under company number 11599467

Oakwood Lodge
Thornden Wood Road
Herne Bay
CT6 7NX
Reino Unido

Abuse, security and support: [email protected]

Customers may also contact Prime AI through the Contact Us page.