Fair use policy

Effective date: 1 May 2025 · Last updated: 17 May 2026 · Version 1.1

This Fair Use Policy ("Policy") applies to all users of the GRAFTIX platform, operated by Echo Thirteen Capital Ltd (trading as GRAFTIX), registered in England and Wales (company number 15053443) at 128 City Road, London, EC1V 2NX. It supplements our Terms and Conditions and Privacy Notice.

1. Purpose of this Policy

GRAFTIX is a shared platform used by many organisations simultaneously. This Policy exists to ensure that no individual user or organisation uses the platform in a way that degrades the experience for other users, impairs system performance or circumvents the platform's intended purpose.

2. File storage

Your subscription includes generous file storage for project drawings, RAMS documents, photographs, eForms and other construction records. We expect typical storage usage per organisation to remain proportionate to the number of active projects and team members.

If your organisation's storage usage grows significantly beyond what would be expected for your team size and activity level (e.g. storing large quantities of files unrelated to your active projects), we may contact you to discuss your requirements. We will not delete your data without giving you reasonable notice and an opportunity to reduce your usage or discuss an appropriate arrangement.

3. AI and smart features

GRAFTIX provides AI-powered features including the Dave AI Assistant and AI Symbol Takeoff. These features are provided for reasonable use in the context of your construction project management activities.

The following constitute unreasonable or abusive use of AI features:

• Submitting automated or scripted requests in high volume to AI features.
• Using AI features as a general-purpose AI chatbot for purposes unrelated to your projects.
• Attempting to extract, copy or reverse-engineer AI outputs for resale or redistribution.
• Deliberately crafting prompts intended to circumvent AI safety guidelines or extract confidential system information.

Where AI feature usage is materially excessive, we may apply rate limiting (throttling) to your organisation without prior notice, or contact you to discuss usage. Persistent abuse may result in AI feature access being suspended.

4. User accounts

Each active member of your organisation requires their own named user account. Account sharing between multiple individuals is not permitted. If we detect evidence of account sharing, we may suspend the account pending investigation.

5. Programmatic access, APIs and MCP

GRAFTIX does not offer an open public REST API. Except by the sanctioned routes described below, automated or programmatic access to the platform — for example, using scripts or bots to scrape data, submit forms or simulate user actions — is strictly prohibited. Such activity may be detected and will result in the suspension or termination of the relevant account and/or Organisation.

Sanctioned programmatic access (MCP)

GRAFTIX provides an authenticated Model Context Protocol (MCP) endpoint which allows an AI assistant to access your own Organisation's data on your behalf. Use of this endpoint is permitted, and is not a breach of this clause, where all of the following apply:

• Access is authenticated as a named user of your Organisation, in accordance with clause 4.
• Requests are scoped to the data and permissions that user already holds within the platform.
• It is used for the management of your own Organisation's projects, and not as a general-purpose data feed.
• Any third-party AI provider key configured for the connection is your own, and is billed to you by that provider.

Write operations performed over MCP are recorded in the platform's audit history in the same way as any other change made by that user. The fair use provisions at clause 3 apply to MCP requests, and we may apply rate limiting where volume is materially excessive.

6. Prohibited activities

In addition to the prohibited uses set out in our Terms and Conditions, the following specific activities are prohibited under this Policy:

• Data scraping — extracting data from the platform in bulk using automated means.
• Reselling access — granting access to the platform to third parties not covered by your subscription, or reselling GRAFTIX features as part of your own product or service.
• Uploading illegal content — uploading any content that is unlawful, infringes third-party rights or is prohibited under applicable law.
• Unsolicited communications — using the in-app chat or eForm features to send unsolicited commercial messages (spam).
• Stress testing or security scanning — deliberately attempting to overload, probe or test the security of the platform without our prior written consent.

7. Enforcement

We will respond to violations of this Policy as follows:

• First instance — we will contact the organisation's admin by email to explain the concern and request corrective action. We will provide a reasonable timeframe for compliance.
• Persistent or serious violations — where a violation continues after notice, or where the original violation is sufficiently serious (e.g. data scraping, uploading illegal content), we may immediately suspend access pending investigation.
• Termination — where violations are egregious, persistent or involve illegal activity, we may terminate the organisation's subscription and access permanently, without refund, in accordance with our Terms and Conditions.

We will always seek to act proportionately and will communicate clearly before taking enforcement action, except where immediate action is required to protect other users or the platform.

8. Changes to this Policy

We may update this Policy from time to time. We will provide reasonable notice of any material changes by email to your organisation's registered admin.

9. Questions and contact

If you have questions about this Policy or believe a concern has been raised in error, please contact us:

Echo Thirteen Capital Ltd t/a GRAFTIX
128 City Road, London, EC1V 2NX
Email: support@graftix.io