Casola
Dashboard

Acceptable Use Policy

Last updated: June 17, 2026

This Acceptable Use Policy (“AUP”) governs use of the Service by you (the Customer) and, through your flow-down obligations, by your End Users. Casola API is a non-explicit service; sexual or pornographic generation is not permitted. Violations may result in suspension, termination, and reporting to authorities where required.

1. Absolute Prohibitions

You must not use the Service, and you must contractually prohibit and technically prevent your End Users from using your product, to create, request, solicit, store, or distribute:

  • Any sexual or sexualized content depicting a minor (real or AI-generated), including age-regression, “child-coded” characters, or any avatar configured to appear underage in a sexual context. This applies to synthetic output, which is unlawful in most jurisdictions even when fully generated.
  • Any sexualization of minors, or content that facilitates the grooming, secrecy, or isolation of a minor.
  • Non-consensual intimate imagery (NCII) or sexual deepfakes of a real, identifiable person.

This content is never permitted under any framing. We scan for it, block it, preserve evidence, and report it to NCMEC and/or other authorities (see Section 5). Detected use leads to immediate termination, and we report regardless of any contrary instruction from you.

2. Other Prohibited Uses

You and your End Users must not use the Service to:

  • Generate sexual, pornographic, or sexually explicit content. Casola API is non-explicit.
  • Create the likeness of a real, identifiable person without consent, or any deceptive or defamatory likeness.
  • Produce or promote violent-extremist or terrorist content, or incitement to violence.
  • Harass, stalk, threaten, defame, or impersonate any individual.
  • Generate content that encourages self-harm, suicide, or disordered eating.
  • Develop or deploy weapons (biological, chemical, nuclear, radiological) or other instruments designed to cause serious harm.
  • Create malware, exploits, or phishing material, or conduct unauthorized access or fraud.
  • Infringe IP or privacy rights, or otherwise violate applicable law.

3. Avatar and Character Rules

  • No character configured with childlike features, ages, or descriptors in a sexualized context.
  • No avatar depicting a real, identifiable person without that person’s verified consent.

4. Customer Deployment Requirements

Because you operate the consumer experience, you must, as a condition of use:

  • Bind your End Users to terms and an acceptable-use policy at least as strict as this AUP, with rights to suspend and report.
  • Provide a clear, conspicuous “you are interacting with AI” disclosure and any required extended-session reminders.
  • Maintain a self-harm / crisis protocol that refers at-risk End Users to crisis resources (e.g., 988 in the US) and prevents self-harm-encouraging content.
  • Perform End-User age assurance appropriate to the risk (not a self-attested checkbox alone). As a default you must exclude End Users under 18; if your lawful, documented use case serves minors, you must first notify us and implement minor-specific safeguards (age-appropriate experience, the disclosures and reminders above, and stricter content limits) and comply with COPPA, GDPR Art. 8, SB 243 / NY §1700, and other applicable child-protection law. You may not rely on Casola to age-gate your End Users.
  • Not market the avatars as a substitute for therapy, professional care, or human relationships.

5. How We Enforce Safety (Provider Layer)

Independent of your controls, we apply layered controls to what the Service generates and a documented reporting pipeline. By using the Service you acknowledge:

  1. Input screening — prompts seeking prohibited content (including minor depiction and known euphemisms) are classified, blocked, logged, and counted toward enforcement.
  2. Generation guardrails — the engine refuses prohibited depictions, including any sexual depiction of a youthful or minor-coded character.
  3. Output screening — generated and uploaded images are hash-matched against known-CSAM sets and run through CSAM and age-estimation classifiers; flagged results are blocked or reviewed.
  4. Human review — a trained trust & safety team reviews escalations in a secure environment.
  5. Reporting and preservation — suspected child sexual abuse material is reported to the NCMEC CyberTipline (US-based reporting under 18 U.S.C. §2258A) and/or the relevant authority, with evidence preserved. We do not “moderate away” reportable material without reporting.

These are our own provider obligations and do not replace the controls you must run at your layer (Section 4).

6. KYC, Monitoring, and Enforcement

We may verify your identity/business, monitor usage, and at our discretion warn, suspend, or terminate access, apply key-level blocks, and report to authorities. Section 1 violations skip any warning ladder and result in termination and reporting. You must cooperate with our investigations and provide End-User information where lawfully required for a safety matter.

7. Reporting

Report suspected violations to safety@casola.ai. Suspected child sexual abuse material may also be reported to the NCMEC CyberTipline at report.cybertip.org (US) or your national hotline.