Acceptable use policy

Use the API to transcribe audio that you have the right to process. Do not use it to break the law, to harm people, to attack our systems, or to resell it as it is.

You may send audio only if all of these are true:

• you have the right to process it
• you have a lawful basis under data protection law for any personal data in it
• you have given the people in it any notice or asked for any consent that the law requires
• you do not break a confidentiality duty by sending it to us

Audio can contain health data or other special categories of personal data. You may send it only if you accept the data processing agreement and have a legal basis for it. Send only what you need. Choose the shortest data retention time that works for you.

• Record or transcribe people in secret, or in a way that breaks wiretapping, privacy or employment law.
• Use the API for illegal surveillance, stalking, harassment, blackmail or fraud.
• Use the API to identify a person from their voice, or to build voice profiles, without a valid legal basis.
• Send content that is illegal in Austria, in the EU or in your country, including sexual content that involves children.
• Make decisions that have legal or similarly serious effects on a person from the results alone, without human review.
• Use the results as the only basis for a medical diagnosis or treatment.
• Say that the results are perfect, or hide from users that a machine made them where the law requires you to say so.
• Use the service or its results to train, build or improve a competing speech recognition model.
• Resell or give access to the API as a standalone transcription service, unless we agree in writing.
• Break the law on export control or sanctions, or use the API from a person or company on a sanctions list.

• Do not try to break, probe or overload the API, the dashboard or our infrastructure.
• Do not get around rate limits, size limits, billing or access controls. This includes creating many organizations to avoid a limit.
• Do not look for weaknesses without our written permission. If you find one, tell us at the email address below. We will not take action against good-faith research that follows the law, avoids other customers' data and gives us time to fix the issue.
• Do not reverse engineer the models, or try to extract model weights or training data from the responses.
• Do not share an API key outside your organization. Keep keys out of public code and client apps.
• Tell us at once if a key leaks or you see unauthorized use.

• Give correct information about your organization.
• Use only payment methods that you may use.
• Do not use stolen cards or take part in chargeback fraud.

We may take one or more of these steps, depending on how serious the case is:

• ask you to fix the problem
• limit the request rate of a key or an organization
• disable API keys
• suspend the organization, with or without notice if the risk is high
• end the contract, as the terms of service describe
• delete content that is illegal
• report the case to the authorities, where the law requires or allows it

If we suspend your account, we tell you why when we can. You can reply and ask us to review our decision. A suspension does not remove your duty to pay what you owe.

To report misuse, a leaked key or a security problem, write to info@nyra.health. Please include the request ID (the x-request-id header) if you have one.

We may update this policy as the service or the law changes. We give you notice of material changes as the terms of service describe.