AIFLOW Safety Rules

These Safety Rules establish the mandatory operational principles governing the use of AIFLOW and all present and future Services provided by ORCA AI LLC.

These Safety Rules complement the AIFLOW Terms of Sale & Terms of Use and the AIFLOW Privacy Policy and form part of the contractual framework accepted by every Customer.

Customers must use AIFLOW only for lawful business purposes and in compliance with all applicable laws, regulations, contractual obligations, and platform policies.

Customers remain solely responsible for verifying that every instruction, workflow, publication, campaign, automation, and generated content complies with applicable legal and professional requirements.

Customers must not intentionally attempt to compromise, misuse, bypass, disrupt, reverse engineer, overload, or interfere with the integrity, security, availability, or operation of the AIFLOW platform.

Any identified vulnerability should be reported responsibly to ORCA AI LLC and must never be exploited.

The Customer retains full authority, decision-making power, and responsibility for every action performed through AIFLOW.

AIFLOW assists business operations but never replaces the Customer's judgment, legal obligations, or business decisions.

Customer responsibility applies to every action executed through AIFLOW, whether manual, scheduled, automated, AI-assisted, or triggered by an authorized workflow.

• Creation of marketing content.
• Generation of AI content.
• Uploading documents, images, videos, audio, or other files.
• Planning and scheduling publications.
• Publishing content on connected platforms.
• Launching Meta advertising campaigns.
• AI recommendations and business decisions based on them.
• Automated workflows and automation rules.
• Email campaigns.
• Automated customer responses.
• CRM activities.
• Future services made available by AIFLOW.

Every publication originates from a Customer instruction, approval, scheduling decision, or previously authorized automation.

ORCA AI LLC never independently decides to publish Customer Content.

Before any publication, advertisement, communication, automation, or business action, the Customer must verify the legality, accuracy, ownership, permissions, and compliance of the content.

The Customer remains solely responsible for the consequences of using any content or recommendation generated through AIFLOW.

Use of AIFLOW does not transfer legal responsibility to ORCA AI LLC for Customer Content, publications, campaigns, communications, advertising, automations, or business activities.

The Customer acknowledges that ORCA AI LLC cannot be held responsible for decisions, publications, or actions initiated, approved, configured, or maintained by the Customer.

The Customer must not use AIFLOW to create, generate, upload, transform, store, schedule, automate, advertise, transmit, distribute, or publish content that is unlawful, harmful, abusive, deceptive, infringing, exploitative, or otherwise prohibited by these Safety Rules.

These restrictions apply to Customer Content, AI Generated Content, prompts, uploaded files, publications, advertisements, campaigns, emails, automated responses, workflows, and every other action performed through the Services.

• Animal cruelty, deliberate animal abuse, or content that glorifies severe harm to animals.
• Extreme violence, torture, mutilation, graphic brutality, or content that promotes serious physical harm.
• Human exploitation, slavery, trafficking, coercion, forced labor, or the commercial exploitation of vulnerable persons.
• Terrorism, terrorist recruitment, terrorist propaganda, operational support, glorification, financing, or promotion of terrorist organizations or acts.
• Child sexual abuse material, sexual exploitation of minors, grooming, trafficking of minors, or any content that endangers children.
• Pornography, prohibited sexually explicit content, non-consensual intimate content, sexual exploitation, or sexual content involving minors.
• Hate speech, discrimination, dehumanization, harassment, threats, or incitement to violence against a person or protected group.
• Illegal goods, illegal services, criminal instructions, or content intended to facilitate unlawful conduct.
• Fraud, scams, deceptive commercial practices, false representations, financial manipulation, or intentionally misleading communications.
• Identity theft, impersonation, unauthorized use of another person’s identity, or deceptive representation of an organization.
• Copyright infringement, trademark infringement, unauthorized use of protected works, or violation of any third-party intellectual property right.
• Malware, phishing, credential theft, unauthorized surveillance, malicious code, or attempts to compromise accounts, devices, networks, or systems.
• Spam, abusive bulk communications, platform manipulation, fake engagement, coordinated inauthentic behavior, or circumvention of platform restrictions.
• Content that violates applicable laws, regulations, court orders, sanctions, export controls, professional obligations, or Third-Party Platform policies.

The Customer must not attempt to bypass, disable, manipulate, evade, or interfere with AIFLOW security controls, content filters, moderation systems, account restrictions, technical safeguards, usage limits, or enforcement measures.

The Customer must not alter prompts, files, workflows, account configurations, or technical requests for the purpose of concealing prohibited activity or avoiding detection.

The Customer remains responsible for reviewing all content before publication, transmission, advertising, scheduling, or automated execution.

The availability of a feature, the generation of an output, or the absence of an automated warning does not mean that the content is lawful, accurate, authorized, safe, or permitted by a Third-Party Platform.

AIFLOW may use automated systems, artificial intelligence, technical controls, and human review to detect, restrict, refuse, delay, or escalate content or activity that may violate these Safety Rules.

No automated, artificial intelligence, or human moderation system is infallible. The Customer therefore retains full responsibility for the final verification and use of all content and actions.

Where ORCA AI LLC reasonably identifies prohibited content, unlawful activity, a security risk, or a material violation, it may block, refuse, remove, suspend, restrict, or preserve relevant content or access as reasonably necessary to protect users, Third-Party Platforms, ORCA AI LLC, and the public.

ORCA AI LLC may also cooperate with competent authorities or Third-Party Platforms where required by law, a valid legal request, or an applicable platform obligation.

Artificial intelligence features available within AIFLOW are designed to assist the Customer in business activities by generating suggestions, analyses, recommendations, automations, and content.

Artificial intelligence is an assistance technology and must never be considered a substitute for human judgment, professional expertise, or business decision-making.

Artificial intelligence outputs may contain inaccuracies, omissions, outdated information, unexpected results, hallucinations, bias, formatting errors, or content that is inappropriate for the Customer's intended purpose.

Artificial intelligence systems are probabilistic technologies and cannot guarantee accuracy, completeness, originality, legality, reliability, or suitability for any particular use.

The Customer must review, validate, and approve every AI-generated output before using, publishing, scheduling, advertising, transmitting, or relying upon it.

No AI-generated output should be considered final without appropriate human verification.

Artificial intelligence outputs do not constitute legal, financial, accounting, tax, investment, regulatory, medical, employment, engineering, cybersecurity, or other professional advice.

The Customer remains responsible for consulting qualified professionals whenever required.

The Customer remains solely responsible for every decision, publication, campaign, automation, communication, advertisement, workflow, or business action based on AI-generated content.

The use of Artificial Intelligence within AIFLOW does not transfer legal responsibility from the Customer to ORCA AI LLC.

Artificial intelligence technologies evolve continuously. ORCA AI LLC may improve, replace, suspend, update, or remove AI models, providers, capabilities, or safety mechanisms without prior notice when reasonably necessary for security, legal compliance, operational integrity, or product evolution.

The Customer may only upload content for which it owns or has obtained all necessary intellectual property rights, licenses, permissions, authorizations, and legal consents.

The Customer represents and warrants that every uploaded file may lawfully be processed through AIFLOW.

These rules apply to every file, document, image, photograph, logo, illustration, audio recording, music, video, presentation, spreadsheet, database, prompt, marketing asset, and every other digital resource uploaded or imported into AIFLOW.

Before uploading any material, the Customer must ensure that it has all legal rights required to store, process, transform, publish, distribute, advertise, or otherwise use that material.

• Copyright ownership or valid license.
• Trademark authorization where applicable.
• Permission to use photographs or videos.
• Permission to use voices or audio recordings.
• Authorization to process personal data when required.
• Compliance with applicable laws and regulations.
• Compliance with Third-Party Platform policies.

The Customer must not upload malware, ransomware, viruses, malicious scripts, credential theft tools, phishing material, unauthorized surveillance software, or any file intended to compromise AIFLOW, its infrastructure, other users, or Third-Party Platforms.

Where uploaded material contains personal data, the Customer remains solely responsible for ensuring that the collection, processing, storage, publication, and use of that data comply with applicable privacy and data protection laws.

ORCA AI LLC may refuse, block, quarantine, restrict, remove, or permanently delete uploaded material that reasonably appears to present a legal, security, operational, or policy risk.

Such protective measures may be taken without creating any obligation for ORCA AI LLC to review every uploaded file or to guarantee that prohibited content will always be detected.

AIFLOW provides marketing assistance tools, artificial intelligence recommendations, planning capabilities, publishing workflows, analytics, and Meta advertising features intended to support professional business activities.

All marketing and advertising decisions remain under the exclusive authority and responsibility of the Customer.

The Customer remains solely responsible for every campaign, advertisement, audience, objective, budget, schedule, placement, creative asset, landing page, offer, and business decision executed through AIFLOW.

Launching a campaign through AIFLOW constitutes a Customer decision, whether initiated manually or through an authorized automation.

Where Meta advertising features are available, the Customer must comply with all applicable Meta policies, advertising standards, eligibility requirements, community standards, and technical requirements.

ORCA AI LLC does not control Meta's review process, delivery systems, advertising algorithms, account restrictions, campaign approvals, billing decisions, or enforcement actions.

Victoria and other AIFLOW artificial intelligence systems may recommend audiences, budgets, creatives, schedules, bidding strategies, or optimization opportunities.

Such recommendations are informational only and do not constitute guarantees of advertising performance, profitability, compliance, conversions, reach, impressions, engagement, or business success.

The Customer remains responsible for monitoring campaign performance, advertising spend, budget consumption, approvals, delivery status, compliance, and ongoing business suitability throughout the lifetime of each campaign.

ORCA AI LLC may refuse, suspend, restrict, delay, or prevent the launch of marketing or advertising activities that reasonably appear to violate these Safety Rules, applicable law, contractual obligations, or Third-Party Platform policies.

Such protective actions are intended to preserve the security, integrity, legal compliance, and reputation of AIFLOW, its Customers, and connected Third-Party Platforms.

AIFLOW automation features are designed to execute Customer-defined workflows, scheduled actions, business rules, and artificial intelligence assisted processes.

Automations execute only because they have been configured, approved, enabled, or otherwise authorized by the Customer.

The Customer remains solely responsible for every automation, workflow, trigger, condition, recipient, destination, approval rule, generated content, publication, communication, or business process executed through AIFLOW.

The Customer is responsible for periodically reviewing active automations to ensure they remain accurate, lawful, secure, and appropriate for the Customer's business.

Automations may depend on Third-Party Platforms, cloud providers, artificial intelligence providers, payment providers, communication services, APIs, or external systems that are outside the control of ORCA AI LLC.

Interruptions, delays, failures, maintenance, API changes, service limitations, account restrictions, or technical issues affecting Third-Party Services may interrupt or prevent the execution of automations.

ORCA AI LLC does not guarantee uninterrupted execution, exact execution times, continuous availability, or successful completion of every automation.

Business-critical operations should always be supervised by the Customer through appropriate monitoring and verification procedures.

ORCA AI LLC may suspend, pause, delay, refuse, restrict, or terminate an automation when reasonably necessary to protect security, legal compliance, platform integrity, Customer accounts, Third-Party Platforms, or the public interest.

Protective actions may be taken following the detection of fraud, prohibited content, abusive activity, compromised accounts, security incidents, technical failures, legal obligations, or significant operational risks.

These Automation Rules apply to all present and future automation capabilities offered by AIFLOW, including Victoria Automation Engines, AI Agents, workflow orchestration services, business process automation, and any successor technologies introduced by ORCA AI LLC.

Where supported, AIFLOW connects to Third-Party Platforms using their official authorization mechanisms, APIs, or authentication services.

Customers should connect only accounts they are authorized to use and manage.

The Customer remains solely responsible for every account connected to AIFLOW, including all permissions, authorizations, users, administrators, content, advertising accounts, pages, business assets, and related activities.

The Customer must immediately revoke access to accounts that are no longer authorized or that may have been compromised.

AIFLOW does not request, collect, or permanently store the Customer's passwords for connected Third-Party Platforms.

Where technically required, AIFLOW may securely store authorization tokens or similar technical credentials solely for the purpose of providing the requested Services.

Third-Party Platforms operate independently from ORCA AI LLC. Their services, APIs, pricing, security requirements, availability, policies, and technical behavior may change without notice.

ORCA AI LLC is not responsible for outages, API modifications, account restrictions, suspensions, billing decisions, policy enforcement, or other actions taken by Third-Party Platforms.

Expired authorizations, revoked permissions, security events, platform maintenance, API changes, or technical failures may interrupt or disable certain AIFLOW features.

The Customer remains responsible for maintaining valid authorizations required for connected services.

ORCA AI LLC may suspend, disconnect, restrict, or require reauthorization of any Third-Party Platform integration when reasonably necessary to protect security, legal compliance, Customer accounts, or the integrity of the Services.

Account security is a shared responsibility between ORCA AI LLC and the Customer. ORCA AI LLC implements commercially reasonable technical and organizational safeguards, while the Customer remains responsible for protecting access to its own devices, accounts, credentials, and authentication methods.

Security features provided by AIFLOW assist in protecting Customer accounts but cannot eliminate every possible risk.

The Customer must maintain appropriate security practices for every person authorized to access AIFLOW.

• Protect trusted devices.
• Protect biometric authentication methods.
• Protect passkeys and authentication credentials.
• Protect email accounts used for authentication or recovery.
• Limit account access to authorized personnel only.
• Remove access immediately when an authorization is no longer required.
• Maintain appropriate internal security procedures.

The Customer must promptly notify ORCA AI LLC if it reasonably believes that an AIFLOW account, authentication method, trusted device, connected platform, or related credential has been compromised or accessed without authorization.

The Customer should immediately revoke affected credentials, disconnect compromised integrations where possible, and implement appropriate remediation measures.

No security system, authentication technology, artificial intelligence system, biometric mechanism, network, cloud infrastructure, or human review process can guarantee complete protection against every threat or unauthorized activity.

The absence of a detected security alert does not guarantee that no security incident has occurred.

Where ORCA AI LLC reasonably detects suspicious activity, unauthorized access, security threats, compromised accounts, fraud, or significant operational risk, it may temporarily suspend, restrict, re-authenticate, revoke trusted devices, invalidate sessions, or otherwise protect Customer accounts.

Such protective measures are implemented to preserve the security, integrity, and availability of AIFLOW and connected services.

These Security Rules apply to all current and future authentication, identity verification, secure access, trusted device, biometric, passkey, fraud detection, and account protection technologies made available by ORCA AI LLC.

AIFLOW uses technical safeguards, automated systems, artificial intelligence, and, where appropriate, human review to help detect activity that may violate these Safety Rules, applicable law, or Third-Party Platform policies.

Moderation is intended to improve platform safety and integrity and does not constitute continuous monitoring of all Customer activity.

Moderation may apply to uploaded files, AI-generated content, publications, advertising campaigns, automation workflows, communications, account activity, and other Services where reasonably necessary.

No moderation system, whether automated, AI-assisted, or human, can detect every violation or guarantee that prohibited activity will always be identified.

The Customer remains responsible for verifying compliance before using or publishing any content or executing any action through AIFLOW.

ORCA AI LLC may request additional information, delay execution, or perform further review when reasonably necessary to assess potential legal, security, fraud, or policy risks.

Customers, authorized users, and other affected parties may report suspected violations of these Safety Rules, applicable law, or Third-Party Platform policies to ORCA AI LLC.

Reports should be made in good faith and should contain sufficient information to permit reasonable review.

Where reasonably requested, the Customer agrees to cooperate with ORCA AI LLC during the review of reported violations by providing relevant information, documentation, or explanations.

Reporting mechanisms must not be used to harass, intimidate, defame, interfere with competitors, or intentionally submit false, misleading, or abusive reports.

Where required by applicable law, valid legal process, regulatory obligation, or binding request from a competent authority, ORCA AI LLC may cooperate with public authorities or Third-Party Platforms in accordance with applicable legal requirements.

Any such cooperation will be limited to what is reasonably necessary and legally required.

ORCA AI LLC may take enforcement measures whenever reasonably necessary to protect the security, integrity, availability, legal compliance, or reputation of AIFLOW, its Customers, Third-Party Platforms, or the public.

Depending on the nature, severity, frequency, and urgency of the situation, ORCA AI LLC may apply one or more enforcement measures.

• Educational warning.
• Request for corrective action.
• Temporary restriction of features.
• Temporary suspension of Services.
• Removal or blocking of content.
• Disconnection of Third-Party integrations.
• Re-authentication requirements.
• Termination of Customer access.
• Other reasonable protective measures permitted by applicable law.

ORCA AI LLC will generally seek to apply measures that are proportionate to the identified risk, while reserving the right to take immediate protective action where reasonably necessary.

The decision not to enforce a particular provision on one occasion does not constitute a waiver of the right to enforce these Safety Rules in the future.

Questions, notices, safety reports, legal communications, and requests relating to these Safety Rules may be submitted to ORCA AI LLC at Victoria@aiflow.business.

ORCA AI LLC may update its contact information from time to time. The most recent contact information published by AIFLOW shall prevail.

The current draft version of these Safety Rules is AIFLOW-SAFETY-2026-07.

This document is subject to external legal review before production release. The Effective Date will be assigned only after formal legal approval.

ORCA AI LLC may revise these Safety Rules to reflect changes in the Services, applicable laws, security requirements, artificial intelligence technologies, Third-Party Platforms, or operational practices.

Each published revision will receive a unique version identifier and may include an updated Effective Date where appropriate.

English is the official reference language of these Safety Rules. French and Spanish translations may be provided for convenience, subject to applicable mandatory law.