Code of Conduct

You must use Coaray only for lawful purposes, within the authority granted to you, and in accordance with applicable professional, regulatory, contractual, and data-protection obligations.

You must not use the Services for fraudulent, deceptive, discriminatory, abusive, exploitative, violent, sexually explicit, harmful, or otherwise unlawful activity.

You must respect intellectual-property rights, privacy rights, confidentiality duties, legal privilege, and the rights of clients, prospective clients, employees, counterparties, and other persons.

Do not upload, generate, store, or transmit information that you do not have the right or authority to process. Provide all notices and obtain all permissions and consents required for your use of the Services.

Keep usernames, passwords, access keys, connected credentials, devices, and invitations secure. Do not share individual accounts or permit unauthorised access.

Tell Coaray promptly if you become aware of suspected misuse, credential compromise, unauthorised access, or another security incident affecting the Services or connected systems.

You must not:

• attempt to access systems, accounts, networks, or information without permission;
• probe, scan, test, attack, or disrupt the Services without prior written authorisation;
• introduce malicious code or conduct denial-of-service activity;
• circumvent authentication, approval gates, rate limits, safeguards, or access controls;
• use automated extraction in a manner inconsistent with authorised use; or
• reverse engineer or attempt to derive source code except where applicable law expressly permits it.

You are responsible for the assistants, prompts, instructions, workflows, permissions, approval paths, and connected actions configured for your organisation.

Configure and supervise assistants so they act only within your authority and intended business purpose. Do not allow an assistant to take an action that a person acting for your organisation would not be authorised to take.

Coaray supports legal work but does not replace the professional duties owed by a lawyer, paralegal, or other qualified person. Your organisation remains responsible for legal advice, filings, deadlines, conflicts, client funds, undertakings, representations, and professional judgment.

Do not present automated output as reviewed legal advice when the required qualified review has not occurred. Matters involving rights, deadlines, risk, or legal strategy must receive appropriate human oversight.

If you connect email, calendars, document stores, messaging services, practice-management software, AI providers, or other third-party systems, you must have the rights and authority required to do so.

Your use of a connected service must comply with that provider’s terms. Use the minimum permissions appropriate to the work and remove access that is no longer required.

You are responsible for the legality, integrity, accuracy, and quality of information, instructions, templates, and configurations supplied to Coaray.

Client-facing messages must be accurate, appropriately authorised, and suitable for their context. Do not use the Services to impersonate another person, conceal material facts, or make misleading claims about who reviewed or sent a communication.

AI output can be inaccurate, incomplete, unexpected, biased, or unsuitable. Review and validate output in proportion to the consequences of relying on it.

Use independent judgment before relying on output or allowing an assistant or workflow to act on it. Escalate uncertainty, exceptions, and sensitive decisions to an appropriately qualified person.

Protect confidential, privileged, and sensitive information. Access and use matter information only for an authorised purpose and only to the extent necessary for that purpose.

Do not disclose confidential information except where authorised, legally required, or otherwise permitted by the agreement governing your use of Coaray.

Do not use the Services in a way that unreasonably consumes resources, degrades service quality, disrupts other customers, or threatens the security, availability, or integrity of Coaray.

Coaray may apply reasonable safeguards, technical limits, rate limits, restrictions, suspension, or termination where necessary to protect customers, affected persons, connected services, or the Services.

Report suspected misuse, fraud, security threats, unlawful activity, or violations of this Code promptly to hello@coaray.com.

Coaray may investigate suspected violations. Where a violation is reasonably believed to have occurred, Coaray may restrict functionality, suspend or terminate access, disable offending configurations, notify affected parties or authorities where appropriate, and pursue other remedies available under the applicable agreement or law.