Acceptable Use Policy

Last updated: August 24, 2026

This Acceptable Use Policy ("Policy") governs all use of Osera, including browser activity, connected services, background goals, proactive heartbeats, automations, and actions taken under standing permissions. It is incorporated into the Terms of Service. A violation of this Policy is a violation of the Terms. If this Policy conflicts with the Terms, the Terms control.

Examples in this Policy are illustrative, not exhaustive. Conduct presenting materially similar legal, safety, privacy, security, fraud, or abuse risks is also prohibited.

1. Scope, Authority, and Responsibility

You may use only accounts, systems, data, funds, identities, permissions, and authority you are legally entitled to use. If you act for an organization, you must have authority to bind and act for that organization.

You remain responsible for your instructions, configured automations, standing permissions, connected services, and the consequences of actions taken for you. Approval controls, trust settings, and standing permissions do not transfer responsibility away from you. Osera's willingness to execute or suggest an action does not establish that the action is lawful, authorized, accurate, or permitted. A successful action, missing warning, absent block, or prior non-enforcement does not establish permission.

This Policy covers attempted, facilitated, planned, concealed, or materially assisted conduct, whether or not it succeeds and whether it occurs directly, through browser automation, through a connected service, or through another person or system.

2. Illegal Activity, Security Abuse, and Browser Access

You may not use Osera to:

• violate law or another person's rights;
• access, search, modify, delete, transfer, or control accounts, devices, networks, systems, or data without authorization;
• exploit vulnerabilities without authorization or harmfully; distribute malware or ransomware; conduct denial-of-service activity, credential stuffing, phishing, session theft, or social engineering; or evade security controls;
• discover, obtain, test, validate, or use credentials, tokens, cookies, authentication codes, payment information, or personal data without authority;
• bypass or defeat CAPTCHAs, paywalls, access controls, rate limits, robots restrictions, anti-bot systems, geographic restrictions, moderation, or platform enforcement;
• continue access after authorization is revoked, access is blocked, or an operator instructs you to stop;
• conduct bulk scraping, harvesting, indexing, or extraction that violates law, third-party rights, contractual restrictions, or explicit service rules;
• collect personal data for surveillance, profiling, spam, harassment, discrimination, or sale, or interfere with or degrade websites, services, networks, devices, or users; or
• disrupt, damage, or obtain unauthorized access to critical infrastructure, including healthcare, communications, energy, water, transportation, financial-market, election, or emergency systems.

Normal browsing, research, comparison, accessibility use, and user-directed extraction remain allowed when authorized and compliant with applicable restrictions.

Possession of credentials, an active session, a public URL, or technical ability to access a resource does not by itself establish authorization.

3. Deception, Communications, Privacy, and Manipulation

You may not use Osera for fraud, scams, phishing, identity theft, fabricated evidence, fake documents, deceptive transactions, or concealment of material facts. You may not impersonate or misrepresent identity, authority, affiliation, origin, approval, or human involvement when that fact is material.

You may not engage in spam, mass unsolicited outreach, fake reviews, fake engagement, astroturfing, coordinated inauthentic behavior, or manipulation of rankings, markets, polls, civic processes, or public opinion. You may not evade blocks, unsubscribe requests, consent withdrawals, moderation decisions, or communication limits.

You may not engage in harassment, stalking, threats, intimidation, doxxing, blackmail, coercion, defamation, non-consensual intimate content, mass surveillance, and tracking without lawful authority and valid consent. You may not obtain, expose, sell, or use highly sensitive personal information to harm, exploit, discriminate against, or manipulate someone.

Ordinary authorized communications need not always announce that automation was involved. You may not conceal automation or misrepresent human involvement when disclosure is required by law, platform rules, professional duties, or the circumstances necessary to avoid deception.

4. Transactions, Regulated Activity, and High-Impact Decisions

This Policy does not itself prohibit ordinary authorized purchases, bookings, subscriptions, returns, bill payments, and account administration, but it does not make those capabilities available or guarantee Osera will perform them.

You may not use Osera for fraudulent or unauthorized transactions, money laundering, sanctions evasion, tax evasion, market manipulation, or concealment of beneficial ownership; or to buy, sell, facilitate, or arrange weapons, explosives, illegal or unauthorized controlled substances, stolen property, counterfeit goods, sexual services, gambling, or other goods or services prohibited by law, the applicable platform, or Osera.

You may not open accounts, apply for credit, move funds, trade securities, or enter binding commitments using another person's identity or without authority. You may not use Osera to act as an unlicensed medical, legal, financial, tax, insurance, or other regulated professional.

You may not make, recommend, rank, or implement high-impact decisions about another person's employment, housing, education, credit, insurance, healthcare, legal services, government benefits, or access to essential services, automatically or with nominal human involvement. You may not make criminal-justice, law-enforcement, bail, sentencing, parole, policing, detention, immigration, asylum, or voting-eligibility decisions about another person. You may not use biometric identification or categorization, emotion inference, or social scoring for surveillance, eligibility, enforcement, or another consequential decision.

You may not make discriminatory or eligibility decisions based on unlawfully obtained data, sensitive traits, or protected characteristics. Informational, organizational, drafting, and clerical assistance is permitted only when it does not replace qualified professional judgment, recommend or rank people, or make consequential decisions about another person. Meaningful review by a qualified, authorized human does not make prohibited ranking or decision generation permissible.

This Policy does not itself make any transaction feature available or authorize Osera to complete it. Availability varies, and Osera may require you to complete an action directly. Bloom Street may require fresh transaction-specific authorization, prohibit standing or autonomous permission, impose safeguards or limits, or refuse a transaction even when otherwise lawful.

5. Severe Harm and Categorical Prohibitions

You may not use Osera to create, obtain, arrange, promote, facilitate, or conceal:

• child sexual abuse material, grooming, exploitation or sexualization of minors, or conduct that endangers a child;
• human trafficking, sexual violence, non-consensual sexual content, or commercial sexual services;
• terrorism, violent extremism, targeted violence, assassination, kidnapping, torture, or credible threats of physical harm;
• weapons, explosives, dangerous materials, or instructions materially enabling their construction, acquisition, concealment, or use;
• illegal or unauthorized acquisition or distribution of drugs or controlled substances, or evasion of prescription or controlled-substance safeguards;
• encouragement, instruction, coordination, or procurement for suicide or self-harm;
• animal cruelty or organized violent abuse;
• gambling, wagering, betting, or circumvention of gambling restrictions; or
• hate-based violence, persecution, or targeted abuse based on protected characteristics.

No exception permits creating, obtaining, possessing, or distributing child sexual abuse material; grooming or exploiting a minor; trafficking; sexual violence; or procuring or coordinating violence or self-harm. Bounded analysis for legitimate prevention, reporting, education, journalism, research, or recovery may be permitted for other categories only when it does not generate illegal material, provide operational instructions, or materially enable harm.

Osera does not promise to report emergencies or intervene. Do not rely on Osera for emergency assistance.

6. Platform Integrity

You may not use Osera for circumventing Osera safeguards, action gates, trust limits, rate limits, account restrictions, payment controls, or enforcement decisions. You may not engage in reverse engineering or interference to the extent permitted by law, resale or unauthorized commercial exploitation, abusive account creation, or resource exhaustion. You may not use another account, integration, device, or person to evade a restriction.

7. Enforcement and Remedies

Bloom Street reserves the right, but not an obligation, to monitor or investigate suspected violations. We may:

• refuse, pause, limit, cancel, or require confirmation for actions;
• restrict tools, integrations, websites, transactions, or action categories;
• reduce or revoke standing permissions or autonomous access;
• preserve relevant records and investigate suspected abuse;
• temporarily suspend access during an investigation;
• suspend or terminate browser or account access, with or without prior notice when reasonably necessary;
• prevent enforcement evasion through another account, device, integration, or person;
• report conduct or disclose information only as permitted by the Privacy Policy and applicable law;
• cooperate with service providers, affected platforms, rights holders, and lawful authorities; and
• modify this Policy as capabilities, threats, and legal obligations evolve.

Bloom Street may apply safeguards stricter than this Policy. A safeguard failure, completed action, missing warning, or failure to enforce in one instance does not waive this Policy or establish that similar conduct is permitted.

Enforcement may consider intent, severity, recurrence, actual or potential harm, cooperation, remediation, and attempts to evade safeguards. You may report a suspected violation or request review at legal@osera.io. We do not guarantee restoration or a formal appeal.

8. Contact

Questions about this Policy? Contact Bloom Street LLC at legal@osera.io.

This Acceptable Use Policy is effective as of August 24, 2026.