1. Introduction
This Usage Policy explains what is and is not permitted when using Xyris, including Xyris AI, text generation, image generation, multimodal systems, APIs, developer tools, models, websites, applications, and related products and services (collectively, the “Services”).
This Usage Policy forms part of the rules governing use of Xyris and should be read together with the Xyris Terms of Service and Xyris Privacy Policy.
Xyris is designed around a simple principle:
Users should have broad freedom to use artificial intelligence for lawful purposes.
Xyris does not require users to justify or explain ordinary lawful requests.
At the same time, use of Xyris must comply with applicable law, respect the rights of others, and not materially compromise Xyris infrastructure or other users.
2. 1. Core Usage Standard
You may use Xyris for any purpose that is lawful in the jurisdiction applicable to you and the Services.
This includes personal, educational, research, creative, technical, commercial, professional, experimental, and development use, subject to applicable law and these policies.
You are responsible for determining whether your use of Xyris is lawful.
You are responsible for your:
- prompts;
- instructions;
- uploaded files;
- images;
- generated outputs;
- API requests;
- API responses;
- generated code;
- generated media;
- downloads;
- storage;
- publication;
- distribution;
- execution;
- sharing;
- commercial use.
Xyris does not guarantee that an AI-generated response is lawful, accurate, safe, appropriate, or suitable for your intended use.
You remain responsible for how you use generated content.
3. 2. Broad Freedom for Lawful Use
Xyris is intended to provide broad access to artificial intelligence.
Xyris does not prohibit a request merely because it is:
- controversial;
- offensive;
- politically sensitive;
- unconventional;
- technical;
- security-related;
- privacy-related;
- critical of a person, organisation, government, or company;
- related to a sensitive topic;
- unpopular;
- unusual.
A topic being sensitive or controversial does not by itself make it prohibited.
Descriptions of Xyris as “uncensored,” “open,” “private,” “unrestricted,” or similar terms refer to Xyris's goal of allowing broad lawful use.
They do not mean that Xyris is required to violate applicable law, compromise its infrastructure, interfere with another person's systems or rights, or provide every requested output.
4. 3. Prohibited Uses
You may not use Xyris to directly engage in conduct prohibited by applicable law.
Xyris may restrict access, generation, distribution, storage, or other use where it is legally required to do so.
Prohibited uses include, where applicable:
Child Sexual Abuse or Exploitation
You may not use Xyris to create, obtain, distribute, facilitate, promote, or knowingly possess unlawful child sexual abuse or exploitation material.
You may not use Xyris to generate sexual content involving minors.
Non-Consensual Intimate Content
You may not use Xyris to create or distribute unlawful non-consensual intimate imagery or equivalent exploitative sexual content.
Human Trafficking and Exploitation
You may not use Xyris to facilitate unlawful human trafficking, forced exploitation, or comparable criminal activity.
Credible Threats of Violence
You may not use Xyris to make, coordinate, or facilitate credible unlawful threats of violence against identifiable individuals or groups.
Unlawful Stalking
You may not use Xyris to conduct or facilitate stalking where the activity violates applicable law.
Fraud
You may not use Xyris to directly carry out unlawful fraud, deliberate financial deception, or similar criminal conduct.
Credential Theft
You may not use Xyris to deliberately steal passwords, authentication tokens, private keys, session credentials, payment credentials, or other authentication information.
Unauthorised Access
You may not use Xyris to unlawfully gain access to computer systems, accounts, networks, devices, infrastructure, or data without authorisation.
Other Legally Prohibited Conduct
You may not use Xyris for other activity that Xyris is legally required to restrict.
5. 4. Cybersecurity and Technical Use
Xyris may be used for legitimate cybersecurity, software development, system administration, reverse engineering, vulnerability research, education, testing, automation, debugging, and related technical purposes where permitted by applicable law.
Users are responsible for obtaining any authorisation required to test or access systems that they do not own.
The existence of cybersecurity, hacking, malware, exploit, vulnerability, network, or reverse-engineering terminology does not automatically make a request prohibited.
Xyris may, however, restrict activity that directly facilitates:
- unlawful access to systems;
- deliberate credential theft;
- unauthorised compromise of third-party accounts;
- unlawful interference with third-party infrastructure;
- other activity that Xyris is legally obligated to restrict.
Authorised security research, defensive testing, education, and legitimate technical analysis are not prohibited merely because similar techniques could also be misused.
6. 5. Generated Code
Xyris may generate software, scripts, commands, configuration files, automation, infrastructure code, security-related code, and other technical material.
Generated code may contain:
- bugs;
- vulnerabilities;
- destructive behaviour;
- insecure configurations;
- compatibility issues;
- incorrect assumptions;
- unintended consequences.
You are responsible for reviewing and testing code before executing or deploying it.
Xyris does not guarantee that generated code is secure, correct, production-ready, non-destructive, or appropriate for your environment.
You should not execute unfamiliar commands or code on important systems without understanding the possible consequences.
7. 6. Generated Content
Xyris may generate text, images, code, media, analysis, and other content.
Generated content may be:
- inaccurate;
- incomplete;
- offensive;
- unexpected;
- outdated;
- misleading;
- non-unique;
- similar to content produced for other users.
Xyris does not guarantee originality or exclusivity.
You are responsible for determining whether your use of generated content violates:
- copyright;
- trademark rights;
- privacy rights;
- publicity rights;
- contractual obligations;
- confidentiality obligations;
- other applicable rights or laws.
To the maximum extent permitted under applicable law and the Xyris Terms of Service, users may use generated outputs for personal or commercial purposes.
9. 8. Privacy of User Content
Xyris treats private prompts, conversations, uploaded files, images, generated outputs, and similar User Content as private user data in accordance with the Xyris Privacy Policy.
Xyris does not sell private User Content.
Xyris does not rent private User Content.
Xyris does not use private User Content to create targeted advertising profiles.
Xyris does not use private prompts, conversations, files, images, or generated outputs to train shared or public AI models unless the user affirmatively opts in.
10. 9. Encryption and Limited Knowledge
Where a Xyris feature uses client-side encryption, end-to-end encryption, or another encryption method that technically prevents Xyris from accessing plaintext content, Xyris cannot read, inspect, understand, recover, or disclose the plaintext substance of that content.
In those circumstances:
- Xyris may not know what the encrypted content contains;
- Xyris personnel may be unable to inspect it;
- Xyris cannot provide plaintext that it does not possess;
- Xyris cannot decrypt information where it does not possess the necessary cryptographic information.
Encryption does not mean that Xyris necessarily possesses no information about an account.
Limited operational information may still exist, including:
- account identifiers;
- timestamps;
- request identifiers;
- billing information;
- authentication events;
- security events;
- usage information;
- routing information;
- infrastructure information.
Where Xyris retains technical ability to access plaintext content, Xyris does not represent that content as being technically inaccessible to Xyris.
11. 10. No General Proactive Monitoring Obligation
Xyris does not assume a general obligation to proactively inspect, read, classify, or monitor every:
- prompt;
- conversation;
- file;
- image;
- output;
- API request;
- API response;
- generation.
Xyris may nevertheless use technical systems, security controls, abuse-prevention mechanisms, or limited investigation where reasonably necessary to:
- operate the Services;
- protect infrastructure;
- investigate security incidents;
- address credible abuse;
- comply with applicable law;
- respond to valid legal obligations;
- enforce the Terms of Service or this Usage Policy.
Where content is encrypted in a manner that prevents Xyris from accessing plaintext, such content may be technically unavailable to Xyris for inspection.
12. 11. Infrastructure Abuse
You may not intentionally interfere with the normal operation of Xyris.
Xyris may restrict activity that materially threatens or compromises the security, reliability, or availability of the Services.
This may include deliberate attempts to:
- compromise Xyris servers;
- compromise Xyris accounts;
- access Xyris internal systems without authorisation;
- obtain internal credentials without authorisation;
- bypass authentication controls unlawfully;
- materially disrupt service availability;
- deliberately exhaust shared infrastructure;
- exploit Xyris infrastructure in a manner creating substantial risk to other users.
Nothing in this section prevents legitimate security reports, responsible vulnerability research, or authorised testing.
13. 12. APIs and Automated Usage
Users may access Xyris through APIs, developer tools, software integrations, agents, automation, or other supported methods.
Automated use remains subject to this Usage Policy.
Users are responsible for activity performed through their:
- API keys;
- credentials;
- applications;
- bots;
- integrations;
- agents;
- automated systems.
Xyris may apply:
- rate limits;
- quotas;
- request limits;
- compute limits;
- bandwidth limits;
- security restrictions;
- temporary capacity controls.
Attempts to materially disrupt Xyris infrastructure or unlawfully defeat security controls may result in restrictions.
14. 13. Account Responsibility
You are responsible for maintaining reasonable security over your Xyris account and credentials.
You should promptly contact Xyris if you believe your account has been compromised.
Xyris may temporarily restrict access, terminate active sessions, require additional authentication, reset credentials, or lock an account where reasonably necessary to protect the account or the Services.
15. 14. Enforcement
Xyris aims to apply this Usage Policy proportionately.
Depending on the nature and seriousness of an issue, Xyris may:
- take no action;
- provide a warning;
- limit a feature;
- restrict a specific request;
- temporarily rate-limit usage;
- temporarily suspend an account;
- restrict API access;
- terminate access to the Services.
Relevant factors may include:
- severity;
- intent;
- repeated conduct;
- legal requirements;
- risk to other users;
- risk to Xyris infrastructure;
- payment abuse;
- fraud;
- security threats;
- previous violations.
Where practical, Xyris may allow a user to address a violation before permanent termination.
Xyris is not required to continue providing a Service where doing so would violate applicable law or create substantial security or infrastructure risk.
16. 15. Legal Requests and User Information
Xyris does not voluntarily provide private user information to governments, law-enforcement agencies, regulators, investigators, or other authorities merely because an informal request is made.
Where legally permitted, Xyris requires valid, binding, properly issued, and appropriately scoped legal process before disclosing private user information.
Where legally permissible, Xyris may:
- reject defective requests;
- challenge invalid requests;
- object to excessively broad requests;
- request clarification;
- seek to narrow requests;
- disclose only information legally required.
Xyris cannot provide information that it does not possess.
Where encrypted User Content is technically inaccessible to Xyris, Xyris cannot provide readable plaintext that it cannot decrypt.
Nothing in this Usage Policy requires Xyris to violate applicable law, obstruct lawful legal process, destroy information subject to a valid preservation requirement, or make false statements to authorities.
17. 16. Third-Party Services
Some Xyris functionality may rely on third-party:
- infrastructure;
- hosting;
- networking;
- model providers;
- APIs;
- payment processors;
- storage providers;
- security services.
Use of third-party services may be subject to technical or legal restrictions outside Xyris's direct control.
Where an external provider receives User Content, Xyris will not represent that processing as entirely first-party.
Additional information regarding third-party processing is described in the Xyris Privacy Policy.
18. 17. Reporting Abuse or Security Issues
If you believe Xyris is being used in violation of this Usage Policy, or if you discover a security issue affecting Xyris, you may contact:
xyris@xyris.in
Reports should contain enough information for Xyris to reasonably understand and investigate the issue.
Submitting a report does not guarantee that Xyris will take a particular enforcement action.
19. 18. Changes to this Usage Policy
Xyris may update this Usage Policy as:
- the Services change;
- laws change;
- security requirements change;
- infrastructure changes;
- new features are introduced;
- operational requirements evolve.
Material changes will be communicated where reasonably appropriate or legally required.
Changes apply prospectively from their stated effective date unless applicable law requires otherwise.
20. 19. Relationship to Other Xyris Policies
This Usage Policy should be read together with:
- the Xyris Terms of Service;
- the Xyris Privacy Policy;
- any additional product-specific terms that expressly apply to a particular Xyris Service.
If this Usage Policy conflicts with mandatory applicable law, applicable law controls.
If product-specific terms impose additional restrictions for a particular product, those restrictions apply only to that product to the extent stated.
21. 20. Contact
Questions regarding this Usage Policy may be sent to:
Xyris
Email: xyris@xyris.in
Xyris is built for broad lawful access to artificial intelligence. We do not believe sensitive, controversial, technical, or unconventional subjects should automatically be prohibited. Users are responsible for using the Services lawfully, while Xyris reserves the ability to act where required by law or where use materially threatens its infrastructure, its users, or the operation of the Services.