1. Purpose
This Acceptable Use Policy protects Clasp’s platform, infrastructure, and users. All Customers and Users must comply with this Policy as a condition of accessing the Service. This Policy is part of the Clasp Master Services Agreement (MSA).
2. Prohibited Conduct
Users may not use the Service to:
- violate any law or court order;
- upload, store, or transmit infringing, stolen, or unauthorized content;
- upload malware, viruses, worms, trojans, or any harmful code;
- attempt to probe, scan, or test system vulnerabilities;
- bypass, disable, or interfere with security controls;
- scrape, crawl, or harvest data from the Service;
- use bots, automation, or scripts without Clasp’s written permission, other than Clasp-provided APIs, Connectors, and integrations used in accordance with the Agreement;
- reverse engineer, decompile, or attempt to access source code;
- impersonate any person or misrepresent identity;
- send spam, phishing messages, or unsolicited communications; or
- overload or disrupt the Service, including denial-of-service activity.
3. Prohibited and Restricted Content
3.1 Prohibited Content
Users may not upload, store, or transmit:
- defamatory, harassing, threatening, or abusive content;
- hate speech or discriminatory content;
- sexually explicit, violent, or graphic content unrelated to legitimate case materials;
- protected health information (PHI) that Customer maintains as a business associate under HIPAA;
- payment card data (PCI), other than card details entered directly into a Payment Processor’s hosted payment fields;
- export-controlled or government-classified data;
- biometric identifiers; or
- Clasp’s Service outputs, or other customers’ data, for the purpose of training, improving, or benchmarking external AI systems or competing products. This does not restrict a Customer’s use of a Connector to work with its own Customer Data.
3.2 Minors’ Data and Other Sensitive Personal Information
The Service is not designed to store or process data relating to minors, Social Security numbers, health or medical information, or other sensitive personal information, and Clasp does not represent or warrant that the Service complies with any law that applies to such data. Customers may include such data where it is contained in, or reasonably incidental to, legitimate legal matter materials, but do so at their sole risk and responsibility. Customers are solely responsible for determining that doing so is lawful and for any resulting claim, obligation, or liability, as described in Section 3.6 of the MSA.
4. System Integrity
Users may not:
- interfere with system performance or degrade service for others;
- attempt to consume excessive bandwidth, storage, or computer resources to the detriment of others;
- attempt to manipulate or poison metadata, embeddings, or search relevance; or
- misuse public sharing links or attempt unauthorized access to shared content.
5. Account Security
Users must:
- maintain secure credentials and protect the email and Google accounts used to sign in;
- avoid credential sharing under all circumstances;
- promptly report any suspected unauthorized access; and
- use supported browsers and maintain secure devices and networks.
Clasp may suspend accounts involved in credential misuse or compromise.
6. AI-Assisted Functionality and Connectors
Users may not:
- attempt to extract, reconstruct, or infer document text from metadata or embeddings;
- submit prompts or content designed to circumvent Clasp’s AI boundaries or safeguards; or
- use the Service’s AI-Assisted Functionality to make automated decisions that produce legal, financial, or similarly significant effects.
Clasp does not transmit document text to external large language models (LLMs). For the optional Time Capture module, and only when Customer elects to enable AI processing, Clasp transmits system-generated internal metadata to OpenAI solely to generate draft time-capture descriptions.
Clasp may make available a Connector (such as an MCP connector) that Customers may use to connect the AI services they choose. Connectors contain no native AI. Customers decide whether to use a Connector and which AI service to connect, and are solely responsible for that choice, for the access they grant, and for the outputs and actions of those services, as described in Section 7.7 of the MSA. Users may not use a Connector to violate this Policy, exceed the permissions granted to them, or circumvent security controls.
7. E-Signature Use
Users may not:
- use Clasp’s e-signature features for high-risk or regulated transactions;
- attempt to alter or tamper with signed documents; or
- rely on Clasp’s e-signature features as a substitute for a legally required signature process.
8. Enforcement
Clasp may, at its sole discretion:
- investigate suspected violations;
- suspend or terminate accounts;
- throttle or block access;
- remove or disable non-compliant content;
- report illegal activity to law enforcement; and
- cooperate with investigations.
Except as stated in Section 10, Clasp is not required to provide notice before taking protective action.
9. Monitoring
Clasp may monitor system logs, metadata, and usage patterns to maintain security and integrity. Clasp does not monitor document content except as required for OCR and search indexing.
10. Document and Media Storage Use
The Service includes unlimited document and media storage subject to reasonable use. Clasp determines what is reasonable in its sole discretion. Clasp may review storage use that exceeds 100 GB per User per workspace and work with Customer to understand it. Clasp will notify Customer before limiting storage or taking other corrective action under this Section.
11. Updates
Clasp may update this Policy at any time and without prior notice. If an update is material, Clasp will take reasonable steps to inform Users, such as by email, an in-product notice, or posting the updated Policy on its website. Continued use of the Service constitutes acceptance of the updated Policy.