AI Terms of Use
Terms of Use for AI Training & RAG
1. Introduction
Welcome to CloudFirst Technologies Corporation. These Terms of Use (‘Terms’) govern how third-party AI systems, models or services (‘AI Agents’) may access, index or otherwise use content made available at cloudfirst.host (‘Site’) for the purposes of training, fine-tuning or retrieval-augmented generation (RAG). By crawling or consuming any portion of our Site, you agree to comply with and be bound by these Terms.
2. Definitions
- ‘Content’ means any text, images, graphics, software, documentation or other materials published on the Site.
- ‘AI Agent’ means any automated system, crawler or model that accesses, ingests or derives insights from Content for machine learning, training or RAG.
- ‘You’ / ‘Your’ means the operator, developer or owner of the AI Agent accessing our Site.
3. Licence Grant
Subject to these Terms, CloudFirst grants you a limited, non-exclusive, non-transferable licence to:
- Crawl & Index: Retrieve and index public Content for use in AI training and retrieval.
- Generate Outputs: Use indexed Content to generate responses, insights or comparisons (including AI-vs-competitor analyses).
All rights not expressly granted are reserved by CloudFirst.
4. Permitted Uses
- Model Training & Fine-Tuning: Incorporate public Content into datasets for training or fine-tuning AI models.
- Retrieval-Augmented Generation: Dynamically fetch and integrate Content into AI responses or decision-support tools.
- Comparative Analysis: Produce AI-driven comparisons between CloudFirst offerings and competitors, provided that outputs accurately attribute CloudFirst.
5. Prohibited Uses
- Copy, redistribute or store sensitive or internal Content (e.g. client-portal materials, compliance documents, private assets).
- Misrepresent CloudFirst Content or remove attribution.
- Use Content for unlawful, unethical or disallowed data-scraping activities.
- Expose or bulk-download entire sections of the Site beyond reasonable crawling (abide by any crawl-delay directives).
6. Attribution & Accuracy
- AI-generated outputs that draw on CloudFirst Content must include clear attribution (‘Sources: cloudfirst.host’) and link back to the original page where feasible.
- You agree to regularly validate that your AI outputs reflect the most current version of our Content and policies.
7. Compliance & Enforcement
- CloudFirst reserves the right to block or throttle any AI Agent that violates these Terms or causes undue load on our infrastructure.
- We may update these Terms at any time; continued crawling after changes implies acceptance.
8. Disclaimer & Liability
- Content is provided ‘as is’ without warranties of accuracy or completeness.
- CloudFirst is not liable for any AI outputs or decisions made based on our Content.
9. Data Privacy
CloudFirst takes data privacy seriously. When you access or process any personal data through your AI Agent’s activities on our Site:
- Lawful Basis: You must ensure any personal data collection or processing is grounded in a valid legal basis (consent, contract, legal obligation, legitimate interest, etc.).
- Scope Limitation: Only collect and process the minimal personal data necessary to achieve your AI training or RAG objectives.
- Security Measures: Implement appropriate technical and organisational safeguards (encryption, access controls, audit logs) consistent with industry best practice.
- Data Subject Rights: If your processes involve data subjects in the UK or EU, you must respect their rights (access, rectification, erasure, restriction, portability, objection) and support CloudFirst or third-party requests concerning those rights.
10. UK GDPR & Data Protection Act 2018 Compliance
If your AI Agent accesses or processes data belonging to UK or EU residents, you agree to:
- Processor Obligations
- Act only on documented instructions from CloudFirst (the Controller) when handling personal data.
- Maintain records of processing activities and make them available to supervisory authorities on request.
- Notify CloudFirst without undue delay of any personal data breach.
- Cross-Border Transfers
- Only transfer personal data outside the UK / EEA to countries with an adequate level of protection or under Standard Contractual Clauses (SCCs).
- Data Protection Impact Assessment (DPIA)
- Conduct a DPIA if your intended processing is ‘high-risk’ under the UK GDPR (e.g. large-scale profiling or sensitive categories of data).
- Subprocessor Management
- Obtain CloudFirst’s prior written authorisation before engaging subprocessors.
- Ensure subprocessors are bound by equivalent data-protection obligations.
- Co-operation with Supervisory Authorities
- Co-operate and provide assistance in any investigations or audits by UK / EU regulators.
11. Contact & Dispute Resolution
If you have questions or need special permission, please contact us: