What policies are a must for an OpenAI app?

I am creating an app using OpenAI API. I am aware of the BYOK policy. What are the other policies (if any) that I need to be aware of?