1. Status, scope, and amendment
1.1 This ORamaVR Acceptable Use Policy (the "AUP") is an ORamaVR Standard-Form Document, identified as OVR-POL-004, and is published at oramavr.com/legal/aup. It is incorporated by reference into every ORamaVR product agreement that involves access to ORamaVR products, services, or infrastructure, including the VTC End Customer Terms (Exhibit B), the Creator Pro End-User Licence Agreement, the Creator Solo Terms, the SIM Library End User Licence Agreement, the JARIA Terms of Use, the Master Distribution Agreement (OVR-MDA-001), the OEM Master Agreement (OVR-MSA-001), the Direct MSA (OVR-MSA-002), and the SIM Library Publisher Agreement (OVR-PUB-001).
1.2 ORamaVR may amend the AUP unilaterally in accordance with the Standard-Form Document Amendments mechanism in the relevant Principal Agreement.
1.3 In this AUP, "User" means any natural or legal person who accesses or uses an ORamaVR product, service, or infrastructure under or through any ORamaVR agreement, including Authorised Users, End Customers, Authorised Channel Partner personnel, Publisher personnel, and end users of any Derivative Work.
Where a User is a legal entity, “User” includes any Affiliate of that entity that accesses ORamaVR products through the User’s account or licence.
1.4 This AUP applies to all use of ORamaVR products and services regardless of the contracting path (the Direct MSA, the OEM Master Agreement, the Master Distribution Agreement, or the Publisher Agreement).
2. Permitted use
Users may use ORamaVR products and services for their intended purposes as set out in the applicable product agreement, namely: development of XR training simulations and Derivative Works (Creator); delivery of XR training simulations to learners (VTC, SIM Library, Custom SIM Service); access to AI co-pilot and AI assistant features in accordance with their respective terms (OMEN within Creator; JARIA within VTC).
3. Prohibited content
Users shall not develop, deploy, distribute, store, or transmit through any ORamaVR product or service any content that:
(a) is unlawful, defamatory, obscene, pornographic, or harmful to minors;
(b) incites violence, terrorism, or hatred against any person or group;
(c) infringes any third party's intellectual property rights, including copyright, trademark, patent, trade secret, or moral rights;
(d) violates any third party's privacy or publicity rights, including unauthorised use of personal data;
(e) contains malware, viruses, worms, Trojan horses, ransomware, or any other malicious code;
(f) contains content designed to deceive learners or end users in a manner that could result in physical harm, including the deliberate misrepresentation of clinical procedures, drug dosages, or surgical techniques;
(g) contains content that breaches medical-ethics standards applicable in the jurisdiction of the User or the intended end users.
4. Prohibited behaviours
Users shall not:
(a) reverse-engineer, decompile, or disassemble any ORamaVR product, except to the extent expressly permitted by mandatory applicable law;
(b) use ORamaVR products, or any knowledge, output, or insight derived from use of ORamaVR products, to develop, train, fine-tune, evaluate, or improve any product or service that competes with any ORamaVR product — including any medical XR training platform, XR simulation authoring tool, medical 3D simulation library, or AI virtual assistant for XR training — whether or not such use involves copying any ORamaVR file or content. For the avoidance of doubt, this prohibition applies whether the User is itself a Competing Business or is acting on behalf of, or sharing outputs with, a Competing Business. “Competing Business” means any entity that directly competes with ORamaVR or whose primary business includes the development, sale, or operation of a medical XR training platform, XR simulation authoring tool, or medical 3D simulation library;
(c) probe, scan, or test the vulnerability of any ORamaVR system, or attempt to bypass or circumvent any security mechanism, except under an authorised security-testing engagement with ORamaVR's prior written consent;
(d) use ORamaVR products in a manner that overwhelms or attempts to overwhelm the capacity of ORamaVR systems (denial-of-service, distributed denial-of-service, abusive automation);
(e) share, sell, lease, or transfer User credentials or licences to any third party not entitled to use them under the applicable product agreement;
(f) use any automated mechanism (scripts, bots, scrapers) to access ORamaVR products or services without ORamaVR's prior written consent;
(g) use ORamaVR products to send unsolicited commercial communications (spam);
(h) misrepresent the identity, authorisation, or organisational affiliation of the User;
(i) use ORamaVR products in any manner contrary to applicable law, including export-control law, sanctions regimes, and data-protection law.
(j) conduct, or permit any person to conduct, competitive benchmarking, feature mapping, architecture analysis, or performance comparison of any ORamaVR product for the purpose of designing, developing, or improving a competing product or service, whether or not the results are published or shared. For the avoidance of doubt, this prohibition does not apply to a User conducting a bona fide internal procurement evaluation comparing ORamaVR products against competing products solely for the User’s own purchasing decision, provided that: (i) no technical findings, feature maps, or architectural observations derived from such evaluation are shared with any Competing Business or used to inform the development of any competing product; and (ii) the evaluation does not involve any form of technology transfer, API inspection, prompt analysis, or source-material extraction;
(k) use any API logging, network traffic interception, proxy tool, or other mechanism to observe, record, or analyse OMEN prompt structures, system instructions, agent-orchestration logic, or inter-component API calls for any purpose other than the User’s own authorised debugging of its Derivative Work, performed within the User’s own development environment and not shared with any third party.
5. Special rules for AI components (OMEN and JARIA)
5.1 Users shall not submit to OMEN or JARIA, as input prompts, parameters, or context: (a) sensitive personal data of identifiable individuals without lawful basis under applicable data-protection law; (b) confidential information of third parties without authority to share it; (c) content designed to extract, mimic, reproduce, or reverse-engineer ORamaVR’s underlying AI models, training data, system prompts, prompt engineering, or agent-orchestration logic; or (d) adversarial inputs or systematic probe sequences designed to map the behavioural boundaries or internal logic of JARIA or OMEN.
5.2 Users shall apply appropriate human judgement before relying on AI-generated outputs in any clinical, educational, or professional decision. AI-generated content is provided on an as-is basis under the disclaimers in the applicable product agreements.
5.3 Users shall not represent AI-generated content as having been produced by a human, where the context of use would mislead a reasonable recipient.
6. Fair-usage limits
6.1 Published fair-usage limits
Specific fair-usage limits for the VTC Platform, the SIM Library, and Creator Pro — including concurrent-user, storage, OMEN generation, and download parameters — are published in the ORamaVR Fair-Use Policy (OVR-POL-006) at oramavr.com/legal/fair-use, which is read together with, and forms part of, this AUP. ORamaVR may update those limits from time to time by publishing a revised Fair-Use Policy: a change that materially reduces a limit takes effect on not less than thirty (30) days’ notice, and any other change on not less than ten (10) days’ notice, in each case under the Standard-Form Document Amendments mechanism. Contractual entitlement (such as the licensed CCU count in the applicable Order Form or Schedule) prevails over the Fair-Use Policy where both address the same quantity.
6.2 Educational discount
The Educational discount is a discretionary, non-client-facing pricing arrangement offered at ORamaVR’s discretion to accredited academic institutions for non-commercial research and teaching. It is not a separate product tier or contracting channel, and this AUP imposes no contractual anti-arbitrage restriction on its use; eligibility is managed operationally.
Creator Solo (free) tier — usage at this tier by entities with annual revenue exceeding the threshold, measured over the measurement period, set out in the Fair-Use Policy (OVR-POL-006) §5.2 (currently EUR 150,000 over a rolling twelve-month period) is prohibited; such entities must upgrade to Creator Pro.
6.3 General anti-abuse threshold
ORamaVR reserves the right to investigate and remediate usage patterns that are materially inconsistent with the size, stated purpose, or permitted use of the Licensee’s subscription, in accordance with the tiered enforcement mechanism in §8.
7. Data protection and security obligations of Users
7.1 Users shall comply with applicable data-protection law (GDPR in the EEA; revFADP in Switzerland; equivalent applicable legislation in other jurisdictions) when collecting, using, or transmitting personal data through ORamaVR products and services.
7.2 Users shall maintain reasonable security of their credentials, including strong passwords, multi-factor authentication where supported by ORamaVR products, and prompt revocation of credentials of departing personnel.
7.3 Users shall not knowingly upload to ORamaVR products: special-category personal data (Article 9 GDPR), data of children, or other categories of sensitive personal data, except where the data subject has provided lawful consent and the upload is for a lawful purpose within the scope of the applicable product agreement.
7.4 Users shall notify ORamaVR promptly (within 24 hours of becoming aware) of any actual or suspected security incident involving ORamaVR products or User credentials at security@oramavr.com.
8. Compliance and enforcement
8.1 Investigation
ORamaVR may investigate suspected violations of this AUP. Investigation may include log review, telemetry analysis, and (subject to applicable confidentiality protections) review of content stored within the User's tenant on the VTC Platform. ORamaVR shall conduct any investigation proportionately and with respect for User privacy, and shall not exceed what is reasonably necessary to confirm or refute the suspected violation.
8.2 Tiered enforcement response
ORamaVR's enforcement response is graduated to the severity of the violation:
(a) Minor or first-time violations: written warning to the User and Licensee, with a request to remediate within a stated period (typically 7–30 days).
(b) Repeated or material violations: temporary suspension of access to the affected product or feature, in addition to a written warning.
(c) Serious violations (including unlawful conduct, security breaches, malware deployment, deliberate misrepresentation, or abuse of AI components): immediate suspension of access without prior warning, pending investigation; potentially leading to termination of the underlying agreement under its terms.
(d) Violations that constitute a criminal offence or that have caused material harm to ORamaVR, other Users, or third parties: termination of the underlying agreement, reservation of all civil and criminal remedies, and (where appropriate) notification of competent authorities.
8.3 Suspension and termination
Suspension or termination under this §8 is in addition to, and not in lieu of, any other remedy available to ORamaVR under the relevant product agreement or applicable law.
9. Reporting violations
Suspected AUP violations may be reported to ORamaVR at abuse@oramavr.com. ORamaVR shall acknowledge a credible report within five (5) business days and shall investigate proportionately.