Acceptable Use Policy

1. Lawful and Authorized Use

• Use the Service only for lawful purposes within Customer's authority and documented business need;
• Provide required notices, obtain required consents, and honor privacy and communication choices;
• Use reasonable security, least privilege access, and human oversight; and
• Comply with the Terms, DPA, AI Disclosure, third-party terms, and applicable laws.

2. Illegal, Fraudulent, or Harmful Conduct

Prohibited conduct includes:

• Fraud, phishing, identity theft, scams, money laundering, sanctions evasion, or deceptive commercial practices;
• Threats, stalking, harassment, extortion, exploitation, abuse, or encouragement of violence or self-harm;
• Unlawful discrimination or denial of rights, services, or opportunities;
• Creation, distribution, or facilitation of illegal goods, services, instructions, or content; and
• Conduct that materially endangers a person, property, system, or public safety.

3. Calling, Texting, Email, and Messaging

Customer must not:

• Initiate unlawful robocalls, robotexts, artificial-voice calls, prerecorded calls, telemarketing, spam, or bulk messaging;
• Contact a person without required consent or after revocation, unsubscribe, STOP, suppression, or do-not-contact status;
• Use misleading caller identification, sender information, subject lines, routing information, or affiliation claims;
• Evade calling-time, frequency, geographic, carrier, platform, or industry restrictions; or
• Record or transcribe a communication without required notice, consent, or legal authority.

4. Impersonation, Avatars, and Synthetic Media

Customer must not:

• Impersonate a real person, government body, company, professional, or trusted source in a deceptive manner;
• Use another person's voice, face, likeness, performance, or biometric information without necessary rights and consent;
• Create undisclosed deepfakes or materially altered media where disclosure is required to avoid deception;
• Represent an AI agent as a licensed professional or human employee when that representation is false or misleading; or
• Use an avatar or output to manipulate, defraud, shame, exploit, or unlawfully influence a person.

5. Employment and Consequential Decisions

Customer must not use the Service as the sole or final decision-maker for employment, housing, credit, insurance, health care, education, legal services, public benefits, or another consequential decision. Any authorized assistive use requires lawful authority, testing, transparency, accessibility, meaningful human review, nondiscrimination controls, recordkeeping, and an appeal or reconsideration path.

6. Privacy, Surveillance, and Sensitive Data

Customer must not:

• Collect, infer, monitor, enrich, disclose, or use personal information without a lawful basis and required notice;
• Conduct covert, indiscriminate, off-hours, domestic, political, retaliatory, or oppressive surveillance;
• Submit payment-card data, government identifiers, medical records, precise geolocation, biometric templates, or children's data unless expressly supported and contractually authorized;
• Attempt to identify a person from de-identified data or combine data to evade privacy restrictions; or
• Sell, share, or target advertising with personal information in violation of law or Customer representations.

7. Security and Platform Integrity

Customer must not:

• Upload malware, malicious code, ransomware, spyware, or destructive instructions;
• Probe, scan, exploit, attack, interfere with, overload, or bypass security, rate limits, authentication, or access controls;
• Access another account, tenant, system, model, prompt, data set, or output without authorization;
• Reverse engineer, decompile, disassemble, scrape, or copy the Service except where law expressly permits and rights cannot be waived;
• Disclose credentials or API keys, use shared accounts improperly, or conceal the source of abusive activity; or
• Use automated means that impose unreasonable load or degrade the Service for others.

8. Content and Intellectual Property

Customer must not submit or generate content that infringes intellectual property, privacy, publicity, confidentiality, or contractual rights; contains sexual exploitation material; unlawfully targets protected classes; or is otherwise prohibited by law. Customer must have rights to every uploaded document, resume, knowledge base, image, recording, and reference asset.

9. Model Extraction and Competitive Misuse

Customer must not use the Service or outputs to extract model weights, system prompts, proprietary data, or security controls; conduct unauthorized model inversion or membership inference; build or benchmark a competing service using nonpublic Service behavior; or misrepresent output provenance.

10. Regulated and Safety-Critical Uses

The Service is not authorized for weapons, emergency dispatch, life-support, autonomous physical control, diagnosis or treatment, legal representation, financial trading, or other safety-critical or regulated activity unless a signed Order Form expressly authorizes the use and specifies required controls.

11. Customer Controls and Human Oversight

• Configure clear agent identity, scope, escalation, and fallback behavior;
• Test prompts, knowledge bases, integrations, and workflows before production use;
• Monitor outputs and investigate complaints, anomalies, bias, and security signals;
• Maintain a qualified human contact for correction, escalation, and consequential matters; and
• Stop or modify an agent promptly when continued use creates an unreasonable risk.

12. Enforcement

Provider may investigate suspected violations, preserve relevant evidence, remove or block content, limit functions, suspend agents or accounts, and report conduct to authorities where required or reasonably necessary. Provider will consider severity, recurrence, intent, risk, cooperation, and available remediation.

13. Reporting and Appeals

Report suspected abuse, unlawful content, security issues, or an enforcement error using the contact information below. Include enough information to identify the account, agent, content, dates, and concern. Provider may request verification and may restore access when risk is adequately resolved.

14. Changes

Provider may update this AUP to address new technologies, threats, legal requirements, or misuse patterns. Material changes will be posted or communicated as required.