HAPIO Acceptable Use Policy
CR8TEK (UEN 53531114A) is a sole proprietorship registered in Singapore at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051. CR8TEK operates HAPIO. "CR8TEK" means CR8TEK. Contact: admin@cr8tek.com
1. Purpose
This document states the conditions under which a Customer may use Hapio. It exists because CR8TEK has no server in the data path of a Deployment and cannot police use directly. These are licence conditions the Customer warrants it meets, not rules CR8TEK enforces by technical means.
2. Scope
This document applies to every Hapio deployment, whether run under a Pilot agreement or, once available, under a purchased licence. It forms part of the Terms of Use.
3. Definitions
| Term | Definition |
|---|---|
| CR8TEK | The operator of HAPIO, as identified above. |
| Customer | The named person or organisation participating in a Hapio Pilot or holding a Hapio licence, and running a Hapio deployment. |
| End User | A person who interacts with a Customer's Deployment, whether the Customer's own staff or the Customer's own customers. |
4. Policy Statement
Hapio is software the Customer runs entirely on its own infrastructure. CR8TEK has no server in the data path, no telemetry and no remote access to the Deployment, and therefore cannot see how the Customer uses the software. By installing and running it, the Customer warrants that its use meets the conditions in this document and that it will keep it that way. A breach of this document is a breach of the Customer's agreement with CR8TEK, but the practical enforcement of this policy is the Customer's, not CR8TEK's.
5. Roles and Responsibilities
| Role | Responsibility |
|---|---|
| Customer | Decides what documents go into the system and who may ask it questions. Responsible for the acts of its staff, contractors and End Users. |
| End User | Bound by whatever notice and terms the Customer gives them; is not a party to this document. |
| CR8TEK | Cannot monitor, meter or disable a Deployment; may end a Pilot or terminate a licence for an unremedied material breach. |
6. Requirements
6.1 Lawful Use
The Customer must not use the software:
- to break any law that applies to it, its users, or the people its documents are about;
- to process personal data without the consent or legal basis required, under Singapore's Personal Data Protection Act, or the equivalent law where the Customer and its users are;
- to ingest, index or distribute material it does not have the right to use, including material that infringes copyright, trade secrets or confidentiality obligations;
- to publish content that is defamatory, harassing, obscene, or that sexually exploits children;
- to plan, build or carry out an attack on any computer system, including producing malware, exploits or phishing content.
6.2 No Third Party Provider
Hapio indexes documents and answers questions entirely with models that run inside the Customer's own Deployment (the Privacy Policy, Requirements 6.2). There is no AI provider, no external account and no API key involved. This Requirement records that plainly because it is the claim a compliance reviewer will check first.
6.3 End Users
If Hapio answers questions from people outside the Customer's organisation, the Customer must:
- tell those users, clearly, that they are talking to an automated system, wherever the law where they are requires that disclosure;
- not present the answers as advice from a qualified professional.
6.4 Accuracy, Reliance, and Human Review
The software retrieves passages from the Customer's documents and asks a language model to answer from them, citing the source. That is grounding, and grounding is not a guarantee of accuracy. A language model can still be wrong about text put directly in front of it, including confidently and in fluent prose.
The software is not a substitute for professional judgement. The Customer must not use its output, unreviewed, as the sole basis for:
- medical, legal, financial, tax or immigration advice to any person;
- a decision that materially affects someone's rights, employment, credit, insurance, housing or access to a service;
- the operation of anything where a wrong answer can injure someone or damage property: vehicles, industrial control, medical devices, emergency response, critical infrastructure.
If the Customer's use case is close to one of these, it must keep a qualified human between the answer and the person acting on it, and say so in the interface. The obligation is the Customer's: CR8TEK cannot see the answers a Deployment gives, and has no way to intervene in them.
6.5 Licensing and Integrity
The Customer must not:
- remove, disable, alter or work around any licence verification, or the copyright and attribution notices, in the software;
- share its licence file, its download link, or the software bundle with anyone outside its organisation;
- redistribute the software, or build a derivative product from it, without CR8TEK's written agreement.
The details of copying, inspection and modification are in the Software and Distribution Terms.
7. Procedures
7.1 Reporting a Problem
If the Customer believes someone is using HAPIO software in breach of this policy, or has found a security vulnerability in it, it should email admin@cr8tek.com. For a vulnerability, CR8TEK asks for a reasonable opportunity to fix it before publication. CR8TEK does not offer a paid vulnerability disclosure reward.
8. Exceptions
None. This policy applies to every Pilot and every licensed Deployment without exception.
9. Compliance and Enforcement
CR8TEK can end a Pilot or terminate a licence for a material breach that the Customer does not fix, as set out in the Terms of Use. CR8TEK cannot monitor a Deployment, meter its use, or switch it off remotely, and will not represent otherwise: there is no kill switch, no licence server, no usage counter and no back door in a product whose whole promise is that it makes no automatic contact with CR8TEK.
The same absence of access applies in both directions. Nothing CR8TEK runs can interrupt a Deployment, and nothing CR8TEK runs can verify a Customer's compliance with this policy. Compliance therefore rests on the warranty the Customer gives under the Policy Statement (Section 4).
10. Review and Maintenance
CR8TEK reviews this document at least once every 12 months, and sooner on any material change to the product.
11. References
- Terms of Use: the agreement this document forms part of.
- Privacy Policy: what CR8TEK holds, and what a Hapio deployment does and does not send anywhere.
- Software and Distribution Terms: copying, inspection and modification terms.
- Personal Data Protection Act 2012 (Singapore).
12. Governing Law
This policy is governed by the laws of Singapore.