Acceptable Use Policy
What is and is not permitted on the KAINDIS platform.
Last updated: 27 May 2026
This Acceptable Use Policy ("AUP") governs use of the KAINDIS platform and services ("Service") provided by Kings AI Automation Pty Ltd (ACN 697 368 282, ABN 31 697 368 282). It is incorporated by reference into the KAINDIS Terms of Service and Data Processing Addendum. By accessing or using the Service, you (the Customer) agree to this AUP and will ensure that all of your users comply with it.
1. Prohibited use
You must not use the Service to, and must not permit any third party to:
- engage in any activity that is unlawful in Australia or in any jurisdiction from which the Service is accessed, including any breach of the Privacy Act 1988 (Cth), the Health Records Act 2001 (Vic), the NDIS Act 2013 (Cth), the NDIS Code of Conduct, the NDIS Practice Standards, the Spam Act 2003 (Cth) or the Australian Consumer Law;
- upload, store or transmit Personal Information (including health, disability or other sensitive information) for which you do not have a lawful basis under the Australian Privacy Principles or the Health Privacy Principles;
- upload content that is unlawful, defamatory, obscene, harassing, discriminatory, threatening, or that infringes the intellectual property, confidentiality or privacy rights of any person;
- attempt to gain unauthorised access to any part of the Service, other customers' tenants, our underlying infrastructure, or any account other than your own;
- reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code or underlying ideas of the Service, except to the limited extent expressly permitted by applicable law (including section 47D of the Copyright Act 1968 (Cth) for interoperability purposes only and only after we have failed to provide requested interoperability information on reasonable commercial terms);
- scrape, harvest, or extract data from the Service through automated means other than the documented API, or at a rate inconsistent with normal use;
- abuse the API — including exceeding documented rate limits, bypassing authentication, generating excessive error rates, or issuing requests designed to degrade service for other customers;
- introduce malware, ransomware, viruses, worms, or any code intended to disrupt, damage, or gain unauthorised access to the Service or any system connected to it;
- send unsolicited commercial electronic messages ("spam") in contravention of the Spam Act 2003 (Cth);
- use the Service for any purpose other than the operation of an NDIS service business or an ancillary administrative purpose;
- impersonate any person, or misrepresent your affiliation with any person or entity, including falsely representing yourself as an NDIS participant, nominee, or registered provider;
- use the Service in a manner that creates an unreasonable risk of harm to an NDIS participant, including by circumventing safeguards, audit logging or escalation features;
- use the AI/chatbot or transcription features to generate, store, or distribute content that is deceptive, defamatory or discriminatory, or that purports to provide medical, legal, or financial advice to a participant beyond your professional scope of practice;
- rely on any AI feature of the Service to make a fully automated decision (that is, a decision made without meaningful human review) that has a legal, clinical, financial or similarly significant effect on an NDIS participant, a staff member, or any other individual. Examples include but are not limited to: support-eligibility decisions, clinical escalation decisions, hiring, performance management, and worker-screening determinations. AI output may inform such decisions but must not be the sole basis for them; or
- use the Service to develop or train any competing machine-learning or AI model, or to benchmark the Service for a competing product, without our prior written consent.
2. Security obligations
- Keep account credentials confidential and enforce multi-factor authentication for every administrative user.
- Promptly disable user accounts when staff leave your organisation.
- Report any suspected unauthorised access, security incident, or credential compromise to kaindis@kai-auto.com without undue delay and in any case within 24 hours of becoming aware.
- Do not perform security testing, vulnerability scanning, or penetration testing against the Service without our prior written consent (which we will not unreasonably refuse for enterprise customers under a written test plan).
3. Suspension
We may suspend your access to the Service, in whole or in part, where we reasonably believe that:
- you have materially breached this AUP and have failed to cure within 7 days of written notice (or immediately, where the breach is not capable of cure or where continued access poses an imminent risk of harm to the Service, to other customers, or to an NDIS participant); or
- continued use poses an imminent risk to the security, integrity or lawful operation of the Service.
Where practicable, we will give you written notice of the suspension, the reason, and the steps required to restore access. Suspension does not relieve you of your payment obligations for the suspended period unless we have terminated the subscription in accordance with the Terms of Service. If a suspension is later found to have been unjustified, we will credit or refund the Customer for the days of suspension.
4. Consequences of breach
A material breach of this AUP is a material breach of the Terms of Service. Remedies include suspension, termination, forfeiture of access to the suspended tenant after the post-termination retention period set out in the DPA, and referral to law enforcement or to the NDIS Quality and Safeguards Commission where required by law. Termination of a subscription does not entitle you to a refund of the unused portion of any prepaid period unless required by law (including the Australian Consumer Law) or by the Refund and Cancellation Policy.
5. Reporting abuse
Suspected breaches of this AUP — by any party, including other KAINDIS customers — should be reported to kaindis@kai-auto.com. We will acknowledge reports within two business days and treat the reporter's identity confidentially to the extent possible.
6. Changes
We may update this AUP from time to time. We will notify registered customers at least 14 days before any material change takes effect, and publish the revised policy on this page. If a material change is unacceptable to the Customer, the Customer may terminate the affected subscription effective immediately before the change takes effect, as set out in the Terms of Service.