The rules for what you can and cannot do with Knacto (https://knacto.com), operated by NAVORETA UAB. This policy forms part of the Terms of Service and covers Crews, agents, tool calls, API traffic and everything else your account can trigger through the Service.
1. General duty of care
You are responsible for what your Crews do, what they access and what they send back. Design them so they meet the law where you and the affected people are, and so they respect the rights of those people. When a Crew acts on external systems — writing to a CRM, posting to a Slack workspace, calling a third-party API — the actions land with your identity, and the responsibility lands with you too.
2. Illegal or harmful content and conduct
Do not use Knacto to plan, prepare, promote, execute or help others carry out anything unlawful. Do not generate or distribute child sexual abuse material or content sexualising minors, incitement to violence or terrorism, targeted harassment, threats, doxxing, content that promotes self-harm, or non-consensual intimate imagery. Do not produce material that infringes copyright, trademark or database rights, that leaks trade secrets, or that discloses personal data you have no right to share.
3. Deception and impersonation
Do not build Crews that impersonate a real person, brand or institution without their authorisation, that fabricate credentials or attributions, that flood a service with synthetic reviews or comments, that manufacture social-engineering pretexts (phishing, vishing, romance or investment scams), or that interfere with elections and democratic processes.
4. Malicious technical activity
No malware, exploit or ransomware development. No unauthorised scanning, probing or intrusion of systems you do not have written permission to test. No credential stuffing, brute forcing, denial-of-service or coordinated abuse. No scraping in ways that violate the target’s terms or the law. No abuse of Knacto’s own controls — no attempts to bypass safety filters, extract another workspace’s data, or manipulate the ledger.
5. Sensitive use cases
Take extra care where an output could shape a life-affecting decision — medical, legal, financial, employment, insurance, education, immigration, criminal justice, welfare eligibility. Keep a competent human reviewer in the loop, disclose the AI’s involvement where the law requires it, and follow the domain-specific rules that apply to you.
6. Personal and sensitive data
Only put personal data into a Crew if you have a lawful basis and the data subjects have been informed. Do not send special-category data (health, race, political opinion, sexual orientation, biometric identifiers, etc.) or children’s data through the Service unless you have all the legal grounding you need and have taken appropriate protective measures.
7. Tools, connections and outbound traffic
When a Crew uses a built-in tool (web search, code execution, file reading) or connects to a service you have set up (webhook, database, CRM), respect the rules of the target — robots directives, rate limits, API terms of use, no-scrape signals. Do not point Knacto’s tools at systems as a way of camouflaging your own outbound traffic to evade blocks or attribution.
8. Fair use and abuse of the model
Do not resell raw Knacto capacity as if it were your own AI API. Do not run bulk automated tasks solely to exhaust promotional tokens or to farm bonuses. Do not create multiple accounts to bypass suspensions, rate limits or fraud controls.
9. Enforcement
We may investigate suspected breaches, ask you for information, restrict features, throttle Crews, quarantine outputs, suspend a Crew or an account, or terminate access. In serious cases we may act immediately and without warning. Where an incident involves child safety, credible threats to life, or activity that is clearly criminal, we may preserve evidence and cooperate with the relevant authorities.
10. Reporting
To report a suspected breach of this policy by another user or by a Crew you have encountered, write to [email protected] with as much detail as you can (identifiers, timestamps, outputs). We treat reports confidentially so far as we can, and we do not tolerate retaliation for a good-faith report.
Contact
NAVORETA UAB · Company code 308066959 · Laisvės pr. 60, LT-05120 Vilnius, Lithuania · +370 666 54187 · [email protected]